Path: number1.nntp.dca.giganews.com!border1.nntp.dca.giganews.co   
   !nntp.giganews.com!news-in-01.newsfeed.easynews.com!easynews.com   
   easynews!easynews-local!fe04.news.easynews.com.POSTED!news.gates   
   of-hell.com!not-for-mail   
   Newsgroups: alt.os.linux.ubuntu   
   From: SINNER <99nesorjd@gates_of_hell.invalid>   
   Subject: Re: evil firestarter popup window   
   References:  <12rdcn   
   dcvmaode@corp.supernews.com>   
   Organization: Hell.org   
   X-Face: #sn6gF@jD*I3X;_)M5ymNQ1wG39y^'rxXRA5y-oi7.T/>P.P-40N\&-q   
   Mu+DWRSTF[}`Vtd85KnX\fe1~p-<(9Uw=r"qdVdsY   
   @\.mDg9"ruPsYjX.Bi9M#gF-fG5=obWVG'>0W*w3RC   
   X-NNTP-Proxy: Leafnode-2    
   User-Agent: slrn/0.9.8.1pl1 (Debian)   
   Message-ID: <543j84xii2.ln2@news.gates-of-hell.com>   
   Lines: 36   
   X-Complaints-To: abuse@easynews.com   
   X-Complaints-Info: Please be sure to forward a copy of ALL headers otherwise   
   we will be unable to process your complaint properly.   
   Date: Wed, 24 Jan 2007 04:19:57 GMT   
   Xref: number1.nntp.dca.giganews.com alt.os.linux.ubuntu:8881   
      
   * Frank wrote in alt.os.linux.ubuntu:   
   > On Tue, 23 Jan 2007 12:06:14 -0500, noshellswill wrote:   
      
   >> Gents:   
      
   >> FIRESTARTER misbehaves on my system. I have tried to squash it   
   >> manually, since all auto-remove functions fail to do this. Using    
   >> as a probe I have manually removed all fires containing the string   
   >> '*firestarter*'.    
      
   >> Yet on each login -- immediately after the UBUNTU splashscreen appears ---   
   >> I am presented with a ( transient ) popup window asking me to enable   
   >> FIRESTARTER. If I fail to quickly ( ~ 5 sec ) refuse, then GNOME locks-up   
   >> and I must do a CLI reboot to re-enable the system. WTF ?   
      
   >> I'm guessing FIRESTARTER (code/reference) has insinuated itself into a   
   >> boot-up(?) script. If true I'll need to locate and comment_out the   
   >> offending lines in that script.   
      
   >> My question: If so ... which script is the likely host?   
      
   [...]   
      
   > First type "sudo chkconfig --help" without the quotation marks in a, yes,   
   > shell terminal, and have a look.  Then type "sudo chkconfig -- list   
   > firestarter" and you'll see where it's on and off.  Then type "sudo   
   > chkconfig --level 3 firestarter off" as always without the quotes.   
      
   Might help in Mandr or RH or FC but not typically in a debian based   
   system, at least not Ubuntu.   
      
   --    
   David   
   Beware of all enterprises that require new clothes, and not rather   
   a new wearer of clothes.   
     -- Henry David Thoreau   
   --- Platinum Xpress/Win/WINServer v3.0pr5   
    * Origin: Omicron Theta BBS (1:261/20)