Re: Firefox on testing hijacked by http://www.megago.com/l/?

2006-09-08 Thread Torsten Sadowski
Am Donnerstag, 7. September 2006 21:30 schrieben Sie:
 * Torsten Sadowski:
  I did a grep over ~/.firefox and voila, there is the culprit:
 
  default/8nfma0b5.slt/prefs.js:user_pref(sessionsaver.windows.session2,
  session2 997  901  1280  59  11  0  1
  s0,,:0,,:0,,:0,,:0,,:0,,:-1,,:-1,,:-1,,:-1,,:-1,,:-1,, |i,,vvT |z1 |0
  |0,0| http://www.megago.com/l/?  0);

 This is probably related to an extension called Session Saver.  Have
 you instructed Firefox to install it?

Yes, Session Saver is definitely wanted. I just don't know how the megago 
entry got into it. I will look into it a bit more but if Session Saver is a 
security risk I will have to live without it.

Torsten


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Firefox on testing hijacked by http://www.megago.com/l/?

2006-09-07 Thread Torsten Sadowski
Hallo Florian,

I did a grep over ~/.firefox and voila, there is the culprit:

default/8nfma0b5.slt/prefs.js:user_pref(sessionsaver.windows.session2, 
session2  
997  901  1280  59  11  0  1  
s0,,:0,,:0,,:0,,:0,,:0,,:-1,,:-1,,:-1,,:-1,,:-1,,:-1,, |i,,vvT |z1 |0 |0,0| 
http://www.megago.com/l/?  0);

I just don't know how it did get there.

Thank you, Torsten


 In this case, I'd need a tar.gz of your ~/.mozilla directory to
 investigate this further, but I can understand if you don't want to
 share it.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Firefox on testing hijacked by http://www.megago.com/l/?

2006-09-07 Thread Florian Weimer
* Torsten Sadowski:

 I did a grep over ~/.firefox and voila, there is the culprit:

 default/8nfma0b5.slt/prefs.js:user_pref(sessionsaver.windows.session2, 
 session2  
 997  901  1280  59  11  0  1  
 s0,,:0,,:0,,:0,,:0,,:0,,:-1,,:-1,,:-1,,:-1,,:-1,,:-1,, |i,,vvT |z1 |0 |0,0| 
 http://www.megago.com/l/?  0);

This is probably related to an extension called Session Saver.  Have
you instructed Firefox to install it?


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Firefox on testing hijacked by http://www.megago.com/l/?

2006-09-06 Thread Torsten Sadowski
Am Dienstag, 5. September 2006 21:17 schrieben Sie:

 Which site?

www.heise.de  Should be innocent enough.

Torsten


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Firefox on testing hijacked by http://www.megago.com/l/?

2006-09-06 Thread Florian Weimer
* Torsten Sadowski:

 Am Dienstag, 5. September 2006 21:17 schrieben Sie:

 Which site?

 www.heise.de  Should be innocent enough.

In this case, I'd need a tar.gz of your ~/.mozilla directory to
investigate this further, but I can understand if you don't want to
share it.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Firefox on testing hijacked by http://www.megago.com/l/?

2006-09-05 Thread Florian Weimer
* Torsten Sadowski:

 Unluckily its not that easy. The homepage preference is not altered and 
 points 
 to the right site.

Which site?


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Firefox on testing hijacked by http://www.megago.com/l/?

2006-09-04 Thread Torsten Sadowski
Hi,

my Firefox suddenly opens a strange url as the first page. Could anyone give 
me a hint how to clean it up?

Cheers, Torsten


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Firefox on testing hijacked by http://www.megago.com/l/?

2006-09-04 Thread Pawel Krzywicki

Torsten Sadowski wrote:

Hi,

my Firefox suddenly opens a strange url as the first page. Could anyone give 
me a hint how to clean it up?


Cheers, Torsten


  

edit-preferences-main-home page -choose one :) save and that's all

pawel

--
Etch Debian User: PawelatWartandotorg
kadu:3735326 Registered Linux User : 406139 |PLUG :1966491030
GnuPG | pub 1024D/2AAB159B


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Firefox on testing hijacked by http://www.megago.com/l/?

2006-09-04 Thread Henri Salo

Torsten Sadowski wrote:

Hi,

my Firefox suddenly opens a strange url as the first page. Could anyone give 
me a hint how to clean it up?


Cheers, Torsten

  
At least you should try to change your homepage. After that search 
information about megago from internet and if you find something about 
hoaxes or virii you can delete and clean it with help. After all it can 
be someone from your family and this isn't actual debian security 
-related problem.


--
Henri Salo | [EMAIL PROTECTED]


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Firefox on testing hijacked by http://www.megago.com/l/?

2006-09-04 Thread Andrew McGlashan

Pawel Krzywicki wrote:

edit-preferences-main-home page -choose one :) save and that's all


Tools-options [general tab] - home page - locations..

Or better still open a bunch of pages that you like to visit regularly and 
make the set 'use current pages'...
- the caveat to this is that the tabs should all be of the one wndow and not 
encompass multiple windows


Kind Regards

AndrewM

Andrew McGlashan
Broadband Solutions now including VoIP 1300 85 3804

Mobile: 04 2574 1827 Fax: 03 8790 1224

Affinity Vision Australia Pty Ltd
www.affinityvision.com.au
www.affinityvision.net/adsl/

In Case of Emergency --  http://www.affinityvision.com.au/ice.html 



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Firefox on testing hijacked by http://www.megago.com/l/?

2006-09-04 Thread Torsten Sadowski
Unluckily its not that easy. The homepage preference is not altered and points 
to the right site.

Cheers, Torsten

Torsten Sadowski wrote:
 Hi,

 my Firefox suddenly opens a strange url as the first page. Could anyone give 
 me a hint how to clean it up?

 Cheers, Torsten


   
edit-preferences-main-home page -choose one :) save and that's all

pawel

-- 
Etch Debian User: PawelatWartandotorg
kadu:3735326 Registered Linux User : 406139 |PLUG :1966491030
GnuPG | pub 1024D/2AAB159B


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Firefox on testing hijacked by http://www.megago.com/l/?

2006-09-04 Thread Davide Prina

ahi, ahi, ahi ... top quoting! This is bad! ;-)

http://en.wikipedia.org/wiki/Netiquette

Torsten Sadowski wrote:
Unluckily its not that easy. The homepage preference is not altered and points 
to the right site.


It seem to be a search service ... probably have you a Firefox extension 
of it?


else search here
$ less /usr/bin/firefox

else try that
# apt-get install rkhunter
# rkhunter --update
# rkhunter -c

Ciao
Davide

--
Dizionari: http://linguistico.sourceforge.net/wiki
Client di posta: http://www.mozilla.org/products/thunderbird
GNU/Linux User: 302090: http://counter.li.org
Non autorizzo la memorizzazione del mio indirizzo su outlook


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Firefox on testing hijacked by http://www.megago.com/l/?

2006-09-04 Thread James Tappin
On Monday 04 September 2006 18:22, Torsten Sadowski wrote:
TS Unluckily its not that easy. The homepage preference is not altered and
 points TS to the right site.
TS

Possibly a DNS screw up by the host of your preferred homepage. I have seen 
cases where a mistake of that kind on a server that hosts many different 
domains, causes one to be displayed when any is requested.

James

-- 
James Tappin, O__  I forget the punishment for using
[EMAIL PROTECTED]   --  \/`Microsoft --- Something lingering
http://www.tappin.me.uk/with data loss in it I fancy  


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Firefox on testing hijacked by http://www.megago.com/l/?

2006-09-04 Thread Johannes Wiedersich

Torsten Sadowski wrote:
Unluckily its not that easy. The homepage preference is not altered and points 
to the right site.


Add a new user to your system and check, where his homepage points to. 
Set it to a site that you know that works (maybe google.com).


If this works, the problem might be your mozilla preferences.

HTH,
Johannes


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]