LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 12-16-2005, 05:13 PM   #1
Dimitriy
Member
 
Registered: Oct 2005
Distribution: Ubuntu Dapper (6.06)
Posts: 92

Rep: Reputation: 15
First Signs of Adware on Linux? It looks like it...


Ok so I am a new linux user. I have been using Windows for the past 8 years and only recently I have decided to swtich to linux. Ironicly my father works for Microsoft as a help desk guy. Anyways back to the story. So several months ago I decided to download debian and give it a spin. To make a long story short I went from debain to Mandriva to Suse and as I speak downloading Fedora Core 4 because I want to taste everything. So now to the point...

I run Firefox on my Suse 10.0 system. Now Linux is reknown for its lack of spyware. So how do you explain today (12/16/05) when browsing slashdot.com I am sent off to Yahoo mesesnger page????? You are probably thinking that I am just not experienced and accidently clicked on some link. Now here is a problem: opening the slasdot source I found no mention whatsoever to Yahoo messenger.

Now here is the big kicker: Browseing various sites I have had this occur to me approx. 5-8 times in last week or so. Every single time it happened I am like whoa whats going on?? then I click back and search for the link and dont find it anywhere. After the first 3 times I realized this is no accident and this is some sort of malware. So for kicks I decided to reinstall the system. What do you know? Its happened again. The average user would never notice anything. However I spend most of my day learning what I can about linux. Indeed one of the reason I am downloading Fedora Core is that I can experience what it has to offer and to see whats going on with this SuSE linux.

As a side note: I used Firefox in every distro I tried. Never have I seen something like this in Linux. Can anyone shed some light on this?? Perhaps I am over reacting but I feel this is enough. I could very well see this being some Firefox problem but who knows? Better hear about it now then later.

Thanks in Advance,
Dimitriy
 
Old 12-16-2005, 05:51 PM   #2
Dimitriy
Member
 
Registered: Oct 2005
Distribution: Ubuntu Dapper (6.06)
Posts: 92

Original Poster
Rep: Reputation: 15
Something else to note: Whenever I click the center mouse wheel button I get taken to a site called allstocks.com. Is this normal behavior?

EDIT: When I go to this thread and click the center button it says link not avaviable. Custom links for the center button??

Last edited by Dimitriy; 12-16-2005 at 05:55 PM.
 
Old 12-16-2005, 05:59 PM   #3
PTrenholme
Senior Member
 
Registered: Dec 2004
Location: Olympia, WA, USA
Distribution: Fedora, (K)Ubuntu
Posts: 4,187

Rep: Reputation: 354Reputation: 354Reputation: 354Reputation: 354
Nope. But I do have the AdBlock extension (the bug-fixed one from the adblock forum) installed.

Do you?

Oh, I just tried /., and got there with no problem. And no ads. At all.

Edit: My center button just starts "autoscroll," an option set in the "Preferences."

Last edited by PTrenholme; 12-16-2005 at 06:02 PM.
 
Old 12-16-2005, 06:17 PM   #4
Dimitriy
Member
 
Registered: Oct 2005
Distribution: Ubuntu Dapper (6.06)
Posts: 92

Original Poster
Rep: Reputation: 15
ARRGGGHH!! What is going on??? I just clicked the cetner button and it takes me to a page http://support.sas.com/techsup/techn...684/ts684.html. What is this???????? Anyone see this ever??

I do have adblock installed.
 
Old 12-16-2005, 06:27 PM   #5
XavierP
Moderator
 
Registered: Nov 2002
Location: Kent, England
Distribution: Debian Testing
Posts: 19,192
Blog Entries: 4

Rep: Reputation: 475Reputation: 475Reputation: 475Reputation: 475Reputation: 475
I have found that clicking the middle button on an area that isn't a URL sends me to the first searched page on Google for that word. That could be it - not adware just a feature.
 
Old 12-16-2005, 10:24 PM   #6
Dimitriy
Member
 
Registered: Oct 2005
Distribution: Ubuntu Dapper (6.06)
Posts: 92

Original Poster
Rep: Reputation: 15
Indeed thats what happens when I select some text. But how do I explain the other sites? Yahoo Messenger was definitely not mentioned today at slashdot so where does google pull that from? I can see it pulling up yahoo.com but never Yahoo Messenger. Also is this middle button "feature" only in SuSe/Slackware and whatever is derived from them??
 
Old 12-16-2005, 11:26 PM   #7
llmmix
Member
 
Registered: Jun 2005
Posts: 73

Rep: Reputation: 15
Here is my case

0. using firewall

1. disable java or javascript

2. If i were you, i will try to ask ff-developer http://www.mozillazine.org/

3. download latest firefox(Deer Park) source, try to compile like this
Quote:
./configure --prefix=/usr \
--with-user-appdir=.firefox \
--with-system-zlib \
--with-system-png \
--enable-application=browser \
--enable-default-toolkit=gtk2 \
--enable-extensions=cookie,gnomevfs \
--enable-crypto \
--enable-xft \
--enable-xinerama \
--enable-optimize \
--enable-reorder \
--enable-strip \
--enable-cpp-rtti \
--enable-single-profile \
--disable-freetype2 \
--disable-accessibility \
--disable-debug \
--disable-tests \
--disable-logging \
--disable-pedantic \
--disable-installer \
--disable-mailnews \
--disable-ldap \
--disable-composer \
--disable-profilesharing

Last edited by llmmix; 12-16-2005 at 11:31 PM.
 
Old 12-17-2005, 02:19 AM   #8
Dimitriy
Member
 
Registered: Oct 2005
Distribution: Ubuntu Dapper (6.06)
Posts: 92

Original Poster
Rep: Reputation: 15
Thanks for advice however I decided to currently ditch Suse 10.0 and give Fedora Core a spin. After going through a bunch of distros you start to notice what went right and what goes wrong. Suse has definetly some of the best features I have seen yet however there is several things lacking that make me want to try something else.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Do you need one of these signs? xpression General 2 09-23-2005 11:59 AM
Boring' Linux shows signs of growing up jamaso General 0 08-06-2004 12:17 PM
A spyware/adware company attempting to lure unsuspecting Linux users? GuestFox Linux - Distributions 0 04-17-2004 11:26 AM
How type "~" and other special signs with linux? Xavius Linux - Newbie 5 03-27-2004 11:04 PM
spyware, adware etc and linux Brother Michael Linux - Newbie 2 12-18-2003 09:58 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 11:50 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration