View Full Version : McDonalds hijacked my browser homepage

18th July 2004, 06:57 AM
Yes. Suddenly Firefox opens at mcdonalds.com, instead of my chosen homepage. It could have happened this way: I had "deny pop-ups" switched off. While I'm using my usual newspaper site (The Guardian, UK - I'm a bit miffed at them if they're punting McDonalds pop-ups!) Up comes Mcdonalds and an invitation to install the Flash Plug-in. I need it anyway, so I install. After that, its big-macs for starters. Can you imagine the indignation! :eek: :eek:

Now, I've been struggliing to get any information on how, when I click a URL (say within the body of an email), it opens up in my browser, but I see that it has something to do with the %s switch placed after the executable (e.g. /home/mydir/firefox/firefox %s).

When I dump the %s from the command line, I also eject mcdonalds from my start-up page. So somthing is hijacking that %s and plugging in the Mcdonalds URL.

Can anyone enlighten me as to what's going on, and if possible point me to somewhere I can educate myself. Found nothing in my O'Reilly's or Fedora Unleashed.


18th July 2004, 11:43 AM
Well for starters I would simply block the IP's with iptables and then work on it.

18th July 2004, 04:21 PM
McDonald's offered to install flash? Strange. The only reason I can think of is that their site requires flash.

I'm suspicious of this install you got. But first, have you tried simply reseting your home page? If it still is McDonald's and you didn't change it we have a problem. I recommend uninstalling this plugin and installing flash yourself (http://fedorafaq.org/#flash). Maybe you need to back up your favorites and other profile data and reinstall. Just trying to get you back to a normal state.

18th July 2004, 09:17 PM
Surely downloading a plugin suggested by the browser isn't going to work though? It kinda makes me a bit skeptical.

18th July 2004, 09:35 PM
unless this happened under windows? which is the only way i see it!

18th July 2004, 11:03 PM
Ok, I still don't like McDonalds burgers, but I have to admit, they're not the principal villain here.

I took the %s off the end of the command line and, as I said, McDonalds disapppeared from my homepage. I reset my normal homepage to something completely new. I also went to /firefox/plugins and cleaned out the Flash plugin files I downloaded (by the way, Jman, thanks for link, but Yum can't find flash-plugin).

All seemed fine for a while, but now the hompage has started diverting to http://amaturevideos.nl/, which is not a porn site as it sounds, but (is/points_to) a search and general shopping site with some respectable names in it (Halifax in UK, LaRedoute in France). At the top of the page it says "Here.com", but I can't find that domain in a search. There's something very fishy going on here. As Imdeemvp says, this is all familiar stuff in Windows, but this is FC2!

19th July 2004, 05:16 AM
Have you tried completely removing Mozilla? And destroying your ~/.Mozilla files?

(If you read a better newspaper like say, The Daily Telegraph it wouldn't have happened ;) )

19th July 2004, 05:29 AM
you got owned

19th July 2004, 11:51 AM
Seems to be resolved.. owned no more. Having jsut lost my profile with bookmarks etc. I'm reluctant to scrub it again. I'll wait and see what happens. Re the Telegraph, pop-ups are not that bad... :p

I don't suppose anyone knows how to resolve the terrible Firefox habit of asking for a new profile when there's a Firefox sessions running, and you click a website link from. say, an email? Why would one user want more than one profile?