LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 01-01-2010, 01:33 PM   #1
MTK358
LQ 5k Club
 
Registered: Sep 2009
Posts: 6,443
Blog Entries: 3

Rep: Reputation: 723Reputation: 723Reputation: 723Reputation: 723Reputation: 723Reputation: 723Reputation: 723
Exclamation Adobe reader took over computer


I wanted to try to install the Midori web browser, I installed it with yum and it did not say that it installed any dependencies with it.

When I first opened it, it came up and in front of it was a window from Adobe Reader (which I never installed and don't want) in sone wierd language. I clicked that I do not agree (the buttons had English text on them, too), and closed Midori. I tried to open Midori again and the same thing happened.

I opened a terminal and typed yum erase midori *adobe*, and it did not list adobe reader again, just Midori. Anyway, I said yes to uninstall it. I thought that was finished.

Later I browse to a web page in Firefox and there is a link to download a PDF. I clicked on it, thinking Firefox will open it in Evince as usual, but that wierd adobe reader window came back!!!

I then tried sudo find / -name adobe -print, and it came up with 4 results. 3 of them were in a fonts folder, and their "last modified" date was a long time ago, so I knew they were not it. The other one was in /opt, and even had "Reader8" in it's pathname. So I ran sudo rm -rf /opt/Adobe, and again thought that I was done with it.

I tried to open that link again and WEIRD LANGUAGE ADOBE READER IS BACK!!!

How do I rid my hard drive of that horrible thing?!?
 
Old 01-01-2010, 01:56 PM   #2
smeezekitty
Senior Member
 
Registered: Sep 2009
Location: Washington U.S.
Distribution: M$ Windows / Debian / Ubuntu / DSL / many others
Posts: 2,339

Rep: Reputation: 231Reputation: 231Reputation: 231
Are you sure it is not some sort of malware?
Code:
ls -R / | grep *reader*; ls -R / | grep *adobe*
that will take a while but should find it all, just look over it before you rm
 
Old 01-01-2010, 02:27 PM   #3
MTK358
LQ 5k Club
 
Registered: Sep 2009
Posts: 6,443

Original Poster
Blog Entries: 3

Rep: Reputation: 723Reputation: 723Reputation: 723Reputation: 723Reputation: 723Reputation: 723Reputation: 723
It didn't show any results.

It seems that now it says "Adobe Reader not found it path variable". Actually now I remember that I was wrong in the original post, it actually said that since I remover /opt/Adobe.

Maybe it is malware, maybe not. It did look very weird, with the buttons having strange language characters, and underscore, and then English. It had a "language" popup that was set to some strange language, though.
 
Old 01-02-2010, 09:47 AM   #4
MTK358
LQ 5k Club
 
Registered: Sep 2009
Posts: 6,443

Original Poster
Blog Entries: 3

Rep: Reputation: 723Reputation: 723Reputation: 723Reputation: 723Reputation: 723Reputation: 723Reputation: 723
I see that there is even an adobe reader icon in the Applications menu.

Please tell me how to get every trace of this off my computer!
 
Old 01-03-2010, 07:20 AM   #5
pixellany
LQ Veteran
 
Registered: Nov 2005
Location: Annapolis, MD
Distribution: Mint
Posts: 17,809

Rep: Reputation: 743Reputation: 743Reputation: 743Reputation: 743Reputation: 743Reputation: 743Reputation: 743
Slightly off-topic, but: I installed Midori on a 64-bit Arch laptop and there was no sign of Adobe Reader. What I did find was a browser that does not quite seem ready for prime time.

As for the main question: Other that searching for files as already suggested, you may need to edit some menus and/or desktop configuration files.
 
Old 01-03-2010, 08:27 AM   #6
MTK358
LQ 5k Club
 
Registered: Sep 2009
Posts: 6,443

Original Poster
Blog Entries: 3

Rep: Reputation: 723Reputation: 723Reputation: 723Reputation: 723Reputation: 723Reputation: 723Reputation: 723
But I don't know which!

What I have noticed so far is that Firefox wants to open PDFs in a nonexistent integrated Adobe Reader instead of the usual Download/Open in Program prompt, and that the GNOME menu (and probably the KDE menu too, but I don't use it) has an Adobe Reader icon that says no such program exists when I click on it.

I don't know where the config files for all this are.
 
Old 01-03-2010, 09:34 AM   #7
lupusarcanus
Senior Member
 
Registered: Mar 2009
Location: USA
Distribution: Arch
Posts: 1,022
Blog Entries: 19

Rep: Reputation: 146Reputation: 146
Try your trusty package manager and search for Adobe, Midori, Flash, Reader. Then uninstall everything that looks like it. Also try rebooting your PC; since that may be remove any trace of it. Did you sudo anything in that was untrusted?

Unrelated: I find your post humorous although I don't want to be mean because it sounds like hell too. You are funny though.

Anyways the GUI package manager should tell if any suspicious thing are going on.

If you do that and all other solutions and you come down to the fact it might be malware, you might want to check what daemons are running and look at all your startup services and see if those show anything suspicious.
 
Old 01-03-2010, 09:47 AM   #8
lupusarcanus
Senior Member
 
Registered: Mar 2009
Location: USA
Distribution: Arch
Posts: 1,022
Blog Entries: 19

Rep: Reputation: 146Reputation: 146
Also; in no particular order:

Have you tried actually deciphering what the Adobe Reader installer says, like with Google Translate?

What is your default PDF viewer?

Could you post a picture attachment of this beast?

Have you checked your Firefox plugins?

Does this happen when you are super user? Normal User?

Malware check: have you ran an nmap port scan of your computer?

Have you tried your home folder (looking at hidden home files and such)?

Have you attempted to delete said files as the Normal User; instead of Sudo?

Try a netstat and look for something?

Do you have Samba connections? Remote viewing and access enabled?

Malware check: Rogue MS Office documents can infect Linux computers. Have any?

Malware check: WINE applications, any unsafe ones?

Try that checklist. That's what I would do, if I were you.
 
1 members found this post helpful.
Old 01-03-2010, 09:49 AM   #9
MTK358
LQ 5k Club
 
Registered: Sep 2009
Posts: 6,443

Original Poster
Blog Entries: 3

Rep: Reputation: 723Reputation: 723Reputation: 723Reputation: 723Reputation: 723Reputation: 723Reputation: 723
I used my package manager before and removed Midori, but it couldn't find *adobe* of *reader*. Erasing /opt/Adobe took care of it, but many of my programs are still set to use Adobe Reader a their PDF viewer, and then complain when they find that it doesn't exist.

I do have Adobe Flash installed, by the instructions on Fedora's wiki (it's a pain but worth being able to view videos online, and again why can't they use <video> tags?), but I haven't noticed any signs of Adobe Reader after installing it.
 
Old 01-03-2010, 09:54 AM   #10
lupusarcanus
Senior Member
 
Registered: Mar 2009
Location: USA
Distribution: Arch
Posts: 1,022
Blog Entries: 19

Rep: Reputation: 146Reputation: 146
I'm just trying to help you narrow it down.
This problem could literally be because of anything, so checking all possibilities is a good way to go, that way we can find out exactly what is causing the problem. I it's a rogue document or file, it might hide itself somewhere legitimate. It's a good idea to check stuff out and is strongly recommended you don't give out any personal info or credit card number until the issue is resolved.

Of course then again it could be just a simple problem that won't do anything at all, so that's why covering everything is smart.

Perhaps a different approach would work just as well, and another LQ'er could help you.

Just giving the best help I can.

And for the record...did you ever install Adobe Reader on this install?

Last edited by lupusarcanus; 01-03-2010 at 09:58 AM.
 
Old 01-03-2010, 09:56 AM   #11
MTK358
LQ 5k Club
 
Registered: Sep 2009
Posts: 6,443

Original Poster
Blog Entries: 3

Rep: Reputation: 723Reputation: 723Reputation: 723Reputation: 723Reputation: 723Reputation: 723Reputation: 723
Quote:
Originally Posted by leopard View Post
Also; in no particular order:

Have you tried actually deciphering what the Adobe Reader installer says, like with Google Translate?
No, I can't anymore because I manually removed it.

Quote:
Originally Posted by leopard View Post
What is your default PDF viewer?
Evince

Quote:
Originally Posted by leopard View Post
Could you post a picture attachment of this beast?
No, I can't anymore because I manually removed it.

Quote:
Originally Posted by leopard View Post
Have you checked your Firefox plugins?
I just did, and I found an Adobe Reader plugin! I disabled it, but how to remove it?

Quote:
Originally Posted by leopard View Post
Does this happen when you are super user? Normal User?
I haven't tried it as super user. I do all my work as a normal user.

Quote:
Originally Posted by leopard View Post
Malware check: have you ran an nmap port scan of your computer?
What does that mean?

Quote:
Originally Posted by leopard View Post
Have you tried your home folder (looking at hidden home files and such)?
I haven't, but I am looking now and found a ".adobe" directory containing directories "Flash_Player" and "Acrobat". I just erased "Acrobat".

Quote:
Originally Posted by leopard View Post
Have you attempted to delete said files as the Normal User; instead of Sudo?
Of course I deleted /opt/Adobe as root.

Quote:
Originally Posted by leopard View Post
Try a netstat and look for something?
What does that mean?

Quote:
Originally Posted by leopard View Post
Do you have Samba connections? Remote viewing and access enabled?
No, I don't even know what Samba is.

Quote:
Originally Posted by leopard View Post
Malware check: Rogue MS Office documents can infect Linux computers. Have any?
No.

Quote:
Originally Posted by leopard View Post
Malware check: WINE applications, any unsafe ones?
I don't even have WINE installed.

Quote:
Originally Posted by leopard View Post
Try that checklist. That's what I would do, if I were you.
 
Old 01-03-2010, 10:01 AM   #12
pixellany
LQ Veteran
 
Registered: Nov 2005
Location: Annapolis, MD
Distribution: Mint
Posts: 17,809

Rep: Reputation: 743Reputation: 743Reputation: 743Reputation: 743Reputation: 743Reputation: 743Reputation: 743
I would not be surprised if the easiest solution turned out to be a fresh install of the OS......
 
0 members found this post helpful.
Old 01-03-2010, 10:01 AM   #13
MTK358
LQ 5k Club
 
Registered: Sep 2009
Posts: 6,443

Original Poster
Blog Entries: 3

Rep: Reputation: 723Reputation: 723Reputation: 723Reputation: 723Reputation: 723Reputation: 723Reputation: 723
Quote:
Originally Posted by leopard View Post
I'm just trying to help you narrow it down.
This problem could literally be because of anything, so checking all possibilities is a good way to go, that way we can find out exactly what is causing the problem. I it's a rogue document or file, it might hide itself somewhere legitimate. It's a good idea to check stuff out and is strongly recommended you don't give out any personal info or credit card number until the issue is resolved.

Of course then again it could be just a simple problem that won't do anything at all, so that's why covering everything is smart.

Perhaps a different approach would work just as well, and another LQ'er could help you.

Just giving the best help I can.

And for the record...did you ever install Adobe Reader on this install?
I didn't install Adobe Reader, at least not that I know of.

It's just you are bombarding me with so many posts that I can't reply in time, and when I finish one there is another post before it!
 
Old 01-03-2010, 10:07 AM   #14
lupusarcanus
Senior Member
 
Registered: Mar 2009
Location: USA
Distribution: Arch
Posts: 1,022
Blog Entries: 19

Rep: Reputation: 146Reputation: 146
Well if it's malware, an nmap scan would show your open ports...useful knowledge against malware and just plain helpful. Nmap is a port scanner that will detect vunerabilities.

For malware again: Netstat is a command that shows you active connections; useful against keyloggers and the like.

Samba helps Linux users communicate with Windows machines on a network.

You should be able to simply disable the FF plugin with the GUI; -> Tools -> Add-ons -> Plugins -> (adobe reader) -> Disable.

The Acrobat in /home is interesting; have a look in usr/share as well.
 
Old 01-03-2010, 10:07 AM   #15
MTK358
LQ 5k Club
 
Registered: Sep 2009
Posts: 6,443

Original Poster
Blog Entries: 3

Rep: Reputation: 723Reputation: 723Reputation: 723Reputation: 723Reputation: 723Reputation: 723Reputation: 723
Quote:
Originally Posted by pixellany View Post
I would not be surprised if the easiest solution turned out to be a fresh install of the OS......
Maybe, but here are 3 things that make it very difficult to set up a new install for me (I use Fedora because there things are a little easier in it):

Because my computer is very far from the router, I must use WiFi. Without it I cannot have internet access. The driver is a huge pain to install, and not open source.

I use two monitors. I don't know how to configure it and Fedora's scheme with no xorg.conf is the only time it ever worked.

I can't watch videos online without Adobe Flash. Enough said.

It would be great if I didn't have to deal with all this..
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
adobe reader download Laura Siersema Linux - Software 7 05-02-2007 03:03 PM
adobe svg reader CrashedAgain Linux - Software 3 12-09-2006 05:24 PM
About Adobe Reader 7.0 shadkong Linux - Software 4 05-17-2006 11:52 AM
adobe acrobat reader dsp_geek Linux - Software 6 11-03-2004 08:37 PM
getting adobe reader to print bohica Mandriva 2 12-29-2003 04:57 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 06:50 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration