[ubuntu-za] ubuntu-za Digest, Vol 27, Issue 1
Gavin van Lelyveld
mdcore at gmail.com
Sat Dec 1 19:30:25 GMT 2007
Don't Panic
No google problems or virus infections for you (hopefully.)
Google must have decided that the pattern of traffic coming from your
ISP's IP range was some kind of automated or scripted request, hence the
message. It could well have been a virus, but because your and everyone
elses requests are coming from that range you get the same message. That
also explains why changing your DNS means you get a successful result:
your traffic is routed differently.
It should come right pretty soon.
Gav
On Sat, 2007-12-01 at 12:00 +0000, ubuntu-za-request at lists.ubuntu.com
wrote:
> Send ubuntu-za mailing list submissions to
> ubuntu-za at lists.ubuntu.com
>
> To subscribe or unsubscribe via the World Wide Web, visit
> https://lists.ubuntu.com/mailman/listinfo/ubuntu-za
> or, via email, send a message with subject or body 'help' to
> ubuntu-za-request at lists.ubuntu.com
>
> You can reach the person managing the list at
> ubuntu-za-owner at lists.ubuntu.com
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of ubuntu-za digest..."
>
>
> Today's Topics:
>
> 1. Re: Google Virus Warning :( (Jean Gruneberg)
> 2. Re: Google Virus Warning :( (Casper)
> 3. Re: Google Virus Warning :( (rdavin at cybersmart.co.za)
> 4. Re: Google Virus Warning :( (rdavin at cybersmart.co.za)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Fri, 30 Nov 2007 14:04:28 +0200
> From: Jean Gruneberg <kaosboss at gmail.com>
> Subject: Re: [ubuntu-za] Google Virus Warning :(
> To: Ubuntu South African Local Community <ubuntu-za at lists.ubuntu.com>
> Message-ID: <474FFC4C.8030505 at gmail.com>
> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
>
> rdavin at cybersmart.co.za wrote:
> >
> > If anyone can help me out with this one I would really appreciate it.
> >
> > Rich
> >
> >
> I was getting the same thing with firefox on a vista laptop (and I run
> through openDNS) Methinks google is having some issues?
>
> JEan
>
>
>
> ------------------------------
>
> Message: 2
> Date: Fri, 30 Nov 2007 14:07:41 +0200
> From: Casper <casper.labuschagne at gmail.com>
> Subject: Re: [ubuntu-za] Google Virus Warning :(
> To: "Ubuntu South African Local Community"
> <ubuntu-za at lists.ubuntu.com>
> Message-ID:
> <162be8580711300407y4639aff1tca7720e035f9cf28 at mail.gmail.com>
> Content-Type: text/plain; charset=ISO-8859-1
>
> Hi Rich,
>
> On Nov 30, 2007 12:11 PM, <rdavin at cybersmart.co.za> wrote:
> > Starting this morning I noticed a strange message when doing searches..
> > Google returns a message that says:
>
> As a Univesal panacea install NoScript Firefox addon. Go to Tools >
> Addons and select "Get Extensions" while searching for the NoScirpt
> addon.
>
> This disables all scripting by default while you can simply enable
> scripting for any page with a simple right-click, either permanently
> or temporary.
>
> I can report that my own Xubuntu Feisty installation became sluggish
> recently. Gkrellm showed the Proc s maxing and the CPU cycles at a
> constant high. The activity on the Internet showed constant traffic.
>
> I disabled all scripts in Firefox, only allowing a few truted sites
> and I disabled all plugins and reloading only a few trusted plugins
> again. This restored my system to a usable state. (Yes my system is
> up to date) I suspect that one specific Firefox plugin for
> StumbleUpon was responsible for the traffic and excess procs and cpu.
>
> The amount of potentially unsafe websites reported by NoScript is frightening.
>
> The Internet is not safe anymore, not even for Linux users.
>
> Casper
>
> --
> ------------------------------------------------------------
> Casper Labuschagne
> +27827054416 ; Skype=krooninfo ;
> Struggling with computer errors, virusses and spyware? Are you forced
> to upgrade all your hardware and software? There is an alternative to
> the Windows madness! Visit http://www.ubuntu.com and install Ubuntu
> Linux!
>
>
>
> ------------------------------
>
> Message: 3
> Date: Sat, 01 Dec 2007 11:36:00 +0200
> From: rdavin at cybersmart.co.za
> Subject: Re: [ubuntu-za] Google Virus Warning :(
> To: Ubuntu South African Local Community <ubuntu-za at lists.ubuntu.com>
> Message-ID: <47512B00.3020005 at cybersmart.co.za>
> Content-Type: text/plain; charset="iso-8859-1"
>
> Very interesting article.
>
> Going to try to replicate the problem again later on this afternoon. If
> the problem can't be replicated then it was a Google issue that's been
> resolved. Otherwise there may be an OpenDNS issue which is what I was
> using before switching over to Telkom's DNS servers.
>
> I'll give more feedback after playing with it this afternoon
>
> Rich
>
> Robert Schumann wrote:
> > According to the BBC
> > (http://news.bbc.co.uk/1/hi/technology/7118452.stm), quote:
> >
> > A huge campaign to poison web searches and trick people into visiting
> > malicious websites has been thwarted. The booby-trapped websites came
> > up in search results for search terms such as "Christmas gifts" and
> > "hospice". Windows users falling for the trick risked having their
> > machine hijacked and personal information plundered. The criminals
> > poisoned search results using thousands of domains set up to convince
> > search index software they were serious sources of information.
> >
> > I suspect your DNS tweak coincided with their restoration of service.
> >
> > Robert.
> >
> >
> > On 11/30/07, * rdavin at cybersmart.co.za
> > <mailto:rdavin at cybersmart.co.za>* <rdavin at cybersmart.co.za
> > <mailto:rdavin at cybersmart.co.za>> wrote:
> >
> > Just an update..
> >
> > Remembering having serious DNS issues in the past.. Not really
> > understanding this stuff and grasping at straws, I started to think
> > maybe this was an ISP problem.
> >
> > Possibly request to Google were being malformed or something..?
> > The next thing I did was change my DNS to 196.25.1.1
> > <http://196.25.1.1> and 196.25.1.11 <http://196.25.1.11>
> >
> > Some how, magically things are back to normal and I'm now longer
> > getting
> > this strange response when doing Google searches.
> >
> > Just out of curiosity... how in the world could the DNS settings munge
> > my Google request??
> > Was is just a strange coincidence that when I changed DNS servers
> > that
> > things just started working properly?
> >
> > Rich
> >
> >
> >
> > rdavin at cybersmart.co.za <mailto:rdavin at cybersmart.co.za> wrote:
> > > Starting this morning I noticed a strange message when doing
> > searches..
> > >
> > > Google returns a message that says:
> > >
> > > [quote]
> > > We're sorry...
> > >
> > > .. but your query looks similar to automated requests from a
> > computer
> > > virus or spyware application. To protect our users, we can't
> > process
> > > your request right now.
> > >
> > > We'll restore your access as quickly as possible, so try again
> > soon. In
> > > the meantime, if you suspect that your computer or network has been
> > > infected, you might want to run a virus checker or spyware
> > remover to
> > > make sure that your systems are free of viruses and other
> > spurious software.
> > >
> > > We apologize for the inconvenience, and hope we'll see you again
> > on Google.
> > > To continue searching, please type the characters you see below:
> > >
> > > (captcha box appears here)
> > > [/quote]
> > >
> > > Now this made me concerned.. Thinking it may have been my browsers
> > > settings I changed my home page from Google.com/ncr
> > <http://Google.com/ncr> (ncr = no country
> > > redirect) to Google.com <http://Google.com>. This didn't
> > solve the problem. I then
> > > cleared my cache, cookies etc.. The problem still didn't go away.
> > >
> > > I was using SeaMonkey.. so I then switched to Firefox browser.. and
> > > still I am receiving the same message and getting more worried.
> > >
> > > Going over to my wifes windows box and using both of these browsers
> > > everything seemed fine.
> > > Thinking that 'maybe' Google is having a technical problem effecting
> > > Linux browsers, I switched my user agent in Firefox to IE.
> > >
> > > This didn't help and Google still returned the spyware/adware
> > message.
> > > So it appears there is a problem with my Linux machine. How can I
> > > check my bunto box as this is starting to freak me out a little?
> > >
> > > If anyone can help me out with this one I would really
> > appreciate it.
> > >
> > > Rich
> > >
> > >
> >
> >
> > --
> > ubuntu-za mailing list
> > ubuntu-za at lists.ubuntu.com <mailto:ubuntu-za at lists.ubuntu.com>
> > https://lists.ubuntu.com/mailman/listinfo/ubuntu-za
> >
> >
>
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: https://lists.ubuntu.com/archives/ubuntu-za/attachments/20071201/d4dd2fa1/attachment-0001.htm
>
> ------------------------------
>
> Message: 4
> Date: Sat, 01 Dec 2007 11:49:02 +0200
> From: rdavin at cybersmart.co.za
> Subject: Re: [ubuntu-za] Google Virus Warning :(
> To: Ubuntu South African Local Community <ubuntu-za at lists.ubuntu.com>
> Message-ID: <47512E0E.1060308 at cybersmart.co.za>
> Content-Type: text/plain; charset="iso-8859-1"
>
> I was also using OpenDNS but problem went away when switching to
> Telecom's DNS servers.
> Just set my router back to OpenDNS and things are working fine now.
>
> Yep, Google had a hiccups ~
>
> Rich
>
>
> Jean Gruneberg wrote:
> > rdavin at cybersmart.co.za wrote:
> >
> >> If anyone can help me out with this one I would really appreciate it.
> >>
> >> Rich
> >>
> >>
> >>
> > I was getting the same thing with firefox on a vista laptop (and I run
> > through openDNS) Methinks google is having some issues?
> >
> > JEan
> >
> >
>
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: https://lists.ubuntu.com/archives/ubuntu-za/attachments/20071201/3d3385b7/attachment-0001.htm
>
> ------------------------------
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.ubuntu.com/archives/ubuntu-za/attachments/20071201/044a5efe/attachment-0001.htm
More information about the ubuntu-za
mailing list