Re: [opensuse] Spyware on my laptop? (hope it's not OT)
- From: G T Smith <grahamsmith@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Sat, 09 Jun 2007 09:20:23 +0100
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Ciro Iriarte wrote:
Well, i really don't know what to thing, this laptop has exclusively
linux (opensuse 10.2) and using firefox from home i get (too) often
redirected to www.city.ws/notfound.asp while trying to access any page
(google.com, local forums, etc), it's intermitent. Initially i blamed
my Linksys WRT54GX4 access point at home, so i bypassed and conected
the radiomodem directly to my laptop. The problem was still there.
Then i blamed the ISP, maybe they were using some proxy or something
alike. So, now i take the laptop to the office and don't longer get
the city.ws redirection, well, it's not the laptop, BUT trying to
access a non existant homepage (http://www.glog.ne/ for example) i get
this:
---------------
Microsoft VBScript runtime error '800a0005'
Invalid procedure call or argument: 'Left'
/includestuff.asp, line 29
---------------
This message also appeared at home. Later i blamed firefox or maybe an
extension with ads or something like that. Trying to access
www.glog.ne with konqueror still gives me the VBScript error, and
between my laptop and internet there's only a cisco router.
So, WTF?!, why am i getting a VBScript error on a linux laptop running
firefox and accessing nonexistant pages?!
Anyone has seen this? or know what is this city.ws thing?
Ciro
VBScript can be encapsulated within MS javascript and has a legitimate
usage within ASP.
Have you checked your DNS and Proxy settings? One possibility is that
you are now being passed to a rogue DNS/Proxy which is directing queries
to a rogue server. There are some exploits in the wild which can changes
these settings though Linux users are not normally vulnerable. BTW If
you access web stuff while root you are leaving yourself a little open
to such attacks. Firefox while better than IE is not perfect.
Test with a non-mozilla based browser like Opera as well.
Clear out cache a disable scripting and see what happens. Have you
acquired any new toolbars/widgets recently?
Who are city.ws? Someone (I think it was Veritas) pulled the stunt of
directing unknown IP enquiries to one of their marketing servers which
caused much irritation a while back. If city.ws are your ISP ask questions?
(If your home modem is on defaults there is a known exploit which can
change the DNS setting of your home modem if your admin password is the
manufacturers default).
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org
iD8DBQFGamLHasN0sSnLmgIRAmVDAKDbHwDCei49V/NKel4GqbIOO5XMfgCg8Bjj
vUsth2GH+v2k2juQv/YoxLw=
=ndh8
-----END PGP SIGNATURE-----
--
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx
- Follow-Ups:
- Re: [opensuse] Spyware on my laptop? (hope it's not OT)
- From: Ciro Iriarte
- Re: [opensuse] Spyware on my laptop? (hope it's not OT)
- References:
- [opensuse] Spyware on my laptop? (hope it's not OT)
- From: Ciro Iriarte
- [opensuse] Spyware on my laptop? (hope it's not OT)
- Prev by Date: [opensuse] Kxkb: using the keyboard to switch between layouts
- Next by Date: Re: [opensuse] Kxkb: using the keyboard to switch between layouts
- Previous by thread: Re: [opensuse] Spyware on my laptop? (hope it's not OT)
- Next by thread: Re: [opensuse] Spyware on my laptop? (hope it's not OT)
- Index(es):
Relevant Pages
|
