Spyware invading my Ubuntu?

[qiepenguin]

My Ubuntu system seems to be encountering spyware, which I thought was impossible.

This morning, I keep getting message boxes asking what I want to do with a file called "xpl.wmf" which is coming from "http://count4all.net". This has happened 3 times in the last hour. The message boxes are the standard form asking whether I want to open or save the file. The filename looks related to the Windows Metafile Exploit, and the domain-name count4all certainly sounds fishy (the domain itself won't load).

The only applications I have running are Firefox (with only ubuntuforums and mail.google.com open), Sound Juicer, Rhythmbox, and network-admin. Where could this possibly be coming from?

Has this happened to anyone else? Does anyone know how to get rid of it?

[kripkenstein]

Perhaps this is because of a website you have open, that keeps sending you that file - in which case, the website would be infected with spyware, not you. But you say you have only safe sites open in FF, so I don't know.

Try having fewer applications open and see if the odd behavior doesn't stop. In particular, does it stop when FF is completely closed?

[aysiu]

It's not Ubuntu that has it--it's the website, and that trojan is designed for Windows, so it couldn't harm you anyway.

http://forums.thetechguys.com/showthread.php?t=30355

[RavenOfOdin]

I wouldn't concern myself with it.

[airtonix]

isnt windows great......symbiotic virus features....but wait theres more....it doubles as a cat de-sexer....

uhhhh wait thats not right...

(tim shaw in the background with that manical salemans grin on his face "but waaaaaaiittttt theres moooorreeee")