Results 1 to 8 of 8

Thread: Possible Infection?

  1. #1
    Join Date
    May 2011
    Beans
    253
    Distro
    Ubuntu 12.04 Precise Pangolin

    Possible Infection?

    A few days ago I hooked up to a client's network. Some of the computers on the network were infected w/ various trojans, malware, and viruses.

    Since then, when I turn on my computer, a couple of blank Chromium tabs launch on their own. Usually they wait for me to type my root pwd into the keyring.

    I have not seen any processes running and nothing new has been added to my startup programs.

    I did not install anything while on the network. What is the likelihood that my Ubuntu 12.10 desktop is infected? What could be causing the Chromium tabs to launch on their own at start up?

    Additional note: I have been unable to install updates since.

    Thanks guys.
    Last edited by CharlesA; June 10th, 2013 at 02:02 AM. Reason: marked as solved
    Kevin Harper
    http://www.kevinharper.com/


    Ubuntu: Because rebooting is ONLY for installing hardware

  2. #2
    Join Date
    Oct 2009
    Beans
    Hidden!
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: Possible Infection?

    What messages do you get when you try to update the machine?
    Come to #ubuntuforums! We have cookies! | Basic Ubuntu Security Guide

    Tomorrow's an illusion and yesterday's a dream, today is a solution...

  3. #3
    Join Date
    Mar 2006
    Location
    Williams Lake
    Beans
    Hidden!
    Distro
    Ubuntu Development Release

    Re: Possible Infection?

    You more than likely are suffering from a browser hijack, I'd suggest you completely delete your chromium profile, located in ~/.config/chromium, and if you let google save your settings, log out, to see if that makes a difference.

  4. #4
    Join Date
    May 2011
    Beans
    253
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: Possible Infection?

    @CharlesA:
    This is the error:
    The installation or removal of a software package failed.


    Details:
    installArchives() failed: (Reading database ...
    (Reading database ... 5%%
    (Reading database ... 10%%
    (Reading database ... 15%%
    (Reading database ... 20%%
    (Reading database ... 25%%
    (Reading database ... 30%%
    (Reading database ... 35%%
    (Reading database ... 40%%
    (Reading database ... 45%%
    (Reading database ... 50%%
    (Reading database ... 55%%
    (Reading database ... 60%%
    (Reading database ... 65%%
    (Reading database ... 70%%
    (Reading database ... 75%%
    (Reading database ... 80%%
    (Reading database ... 85%%
    (Reading database ... 90%%
    (Reading database ... 95%%
    (Reading database ... 100%%
    (Reading database ... 301226 files and directories currently installed.)
    Preparing to replace mac-os-x-icons 3.6~quantal (using .../mac-os-x-icons_3.6.5~quantal~NoobsLab.com_all.deb) ...
    Unpacking replacement mac-os-x-icons ...
    dpkg: error processing /var/cache/apt/archives/mac-os-x-icons_3.6.5~quantal~NoobsLab.com_all.deb (--unpack):
    trying to overwrite '/usr/share/icons/mac-os-snow-icons/actions/gtk/media-playback-start.png', which is also in package mac-os-lion-icons-v2 3.0~quantal~NoobsLab.com
    No apport report written because MaxReports is reached already
    dpkg-deb: error: subprocess paste was killed by signal (Broken pipe)
    Errors were encountered while processing:
    /var/cache/apt/archives/mac-os-x-icons_3.6.5~quantal~NoobsLab.com_all.deb
    Error in function:

    @cariboo907 I do not log into my Google profile. I removed and reinstalled Chromium, but it did not solve the issue: 2 blank Chromium tabs launch as soon as I enter my root password into the keyring.
    Kevin Harper
    http://www.kevinharper.com/


    Ubuntu: Because rebooting is ONLY for installing hardware

  5. #5
    Join Date
    Oct 2009
    Beans
    Hidden!
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: Possible Infection?

    You might have to purge the mac-os-lion-icons-v2 3.0~quantal~NoobsLab.com package and install the newer version. That shouldn't happen, though.
    Come to #ubuntuforums! We have cookies! | Basic Ubuntu Security Guide

    Tomorrow's an illusion and yesterday's a dream, today is a solution...

  6. #6
    Join Date
    May 2011
    Beans
    253
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: Possible Infection?

    @CharlesA Yeah, I thought about that so I decided to simply uninstall 12.10 and install 13.04. Finished configuring this new install a couple of hrs ago.

    Glad to report that it is running slightly faster than before and I am having no issues what-so-ever.

    I kind of wish I hadn't installed the new OS because I really want to know what was going on w/ Chromium.

    Thanks a bunch guys.

    Edit: Sorry guys, not seeing the "Solved" option in "Thread Tools" drop-down; Forced to leave it as is.
    Last edited by kevinharper; June 10th, 2013 at 01:13 AM.
    Kevin Harper
    http://www.kevinharper.com/


    Ubuntu: Because rebooting is ONLY for installing hardware

  7. #7
    Join Date
    Oct 2009
    Beans
    Hidden!
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: Possible Infection?

    Quote Originally Posted by kevinharper View Post
    Edit: Sorry guys, not seeing the "Solved" option in "Thread Tools" drop-down; Forced to leave it as is.
    Marked it as solved for you. You can find out how to mark it as solved from here:
    https://wiki.ubuntu.com/UnansweredPo.../SolvedThreads
    Come to #ubuntuforums! We have cookies! | Basic Ubuntu Security Guide

    Tomorrow's an illusion and yesterday's a dream, today is a solution...

  8. #8
    Join Date
    Jun 2009
    Beans
    75

    Re: Possible Infection?

    Quote Originally Posted by kevinharper View Post
    I decided to simply uninstall 12.10 and install 13.04
    That's no fun!

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •