Don't install the Firefox addin, SaveFrom.net helper. It bundles the PUP malware Offers4U. I went to do a search in Amazon for some things and I got popups from other sites supposedly selling the same product for better offers. Of course, I'm not about to click on or trust those offers. I had installed this plugin as a replacement for Video Download Helper which had quit working. I like being able to download from Youtube.
Googling "Offers4U helper" wasn't helping because all the instructions were for either for Windows or Mac. The Windows instructions said to run Malwarebytes, which, of course, won't run under Linux. Finally, after adding "Ubuntu" to the search term I found a single page that identified SaveFrom.net helper as the culprit. Fortunately, a simple uninstall got rid of it. It's not like in Windows where you go to uninstall a PUP and it finds crafty ways to hang around unless you zap it with a deep level antivirus scan.
I'm marking this as solved because the uninstall zapped that slimy and obnoxious Offers4U. I wanted to post about it to warn others. If it hadn't been for that one site identifying SaveFrom.net helper as the culprit, I still would not have figured this out. I was suspecting a wallpaper site that I recently visited. I could have restored from a Clonezilla ghost image I have, but that's like killing a spider with an axe.
Be careful what addins you install. You can still get PUP malware even in Linux.
Googling "Offers4U helper" wasn't helping because all the instructions were for either for Windows or Mac. The Windows instructions said to run Malwarebytes, which, of course, won't run under Linux. Finally, after adding "Ubuntu" to the search term I found a single page that identified SaveFrom.net helper as the culprit. Fortunately, a simple uninstall got rid of it. It's not like in Windows where you go to uninstall a PUP and it finds crafty ways to hang around unless you zap it with a deep level antivirus scan.
I'm marking this as solved because the uninstall zapped that slimy and obnoxious Offers4U. I wanted to post about it to warn others. If it hadn't been for that one site identifying SaveFrom.net helper as the culprit, I still would not have figured this out. I was suspecting a wallpaper site that I recently visited. I could have restored from a Clonezilla ghost image I have, but that's like killing a spider with an axe.
Be careful what addins you install. You can still get PUP malware even in Linux.
Comment