我最近访问了 YouTube 网站,发现它告诉我我的 Adobe Flash 插件被允许了。这很奇怪,因为出于安全原因我不使用 Flash,而且据我所知,我没有安装它。昨天我安装了沙姆韦,但我以前用过,没有注意到它安装了 Adobe Flash 插件。这是有问题的 Adobe Flash 插件:
这和 Shumway 有关吗?或者是什么?我不记得安装过它……这可能是恶意软件吗?我前段时间安装了 Ubuntu GNOME 15.04,之前没有注意到这个插件的出现……有什么可担心的吗?如果我在 Firefox 中查看我最近更新的内容,它是唯一的,日期是今天,但据我所知,我今天肯定没有做任何事情来获取它……
信息更新:
我检查了今天创建的所有文件,我发现:
-rw-r--r-- 1 root root 19264896 Sep 6 14:48 /usr/lib/flashplugin-installer/libflashplayer.so
它与今天创建的其他文件相隔数小时,所以我认为这是唯一与之相关的文件。还有一件事是,我早上打开了电脑,然后关掉了,但这个文件是在我重新启动电脑后大约 28 分钟创建的。该时间段的完整摘录如下:
107458 -rw-r----- 1 clamav adm 62107 Sep 6 14:25 /var/log/clamav/freshclam.log.1
107459 -rw-r----- 1 syslog adm 152664 Sep 6 14:25 /var/log/auth.log.1
107460 -rw------- 1 arthur-dent arthur-dent 5212 Sep 6 14:31 /home/arthur-dent/.cache/mozilla/firefox/5ifhm5wp.default/directoryLinks. json
107461 -rw-r--r-- 1 root root 0 Sep 6 14:46 /var/lib/apt-xapian-index/update-timestamp
107462 -rw-r--r-- 1 root root 0 Sep 6 14:46 /var/lib/apt/periodic/update-stamp
107463 -rw-r--r-- 1 root root 0 Sep 6 14:47 /var/cache/apt-xapian-index/index.2/flintlock
107464 -rw-r--r-- 1 root root 3618000 Sep 6 14:47 /var/lib/apt-xapian-index/cataloged_times.p
107465 -rw-r--r-- 1 root root 54444032 Sep 6 14:47 /var/cache/apt-xapian-index/index.2/termlist.DB
107466 -rw-r--r-- 1 root root 16384 Sep 6 14:47 /var/cache/apt-xapian-index/index.2/synonym.DB
107467 -rw-r--r-- 1 root root 71860224 Sep 6 14:47 /var/cache/apt-xapian-index/index.2/postlist.DB
107468 -rw-r--r-- 1 root root 6127616 Sep 6 14:47 /var/cache/apt-xapian-index/index.2/spelling.DB
107469 -rw-r--r-- 1 root root 2285568 Sep 6 14:47 /var/cache/apt-xapian-index/index.2/record.DB
107470 -rw-r--r-- 1 root root 1114 Sep 6 14:47 /var/cache/apt-xapian-index/index.2/postlist.baseB
107471 -rw-r--r-- 1 root root 849 Sep 6 14:47 /var/cache/apt-xapian-index/index.2/termlist.baseB
107472 -rw-r--r-- 1 root root 14 Sep 6 14:47 /var/cache/apt-xapian-index/index.2/synonym.baseB
107473 -rw-r--r-- 1 root root 80 Sep 6 14:47 /var/cache/apt-xapian-index/index.2/spelling.baseB
107474 -rw-r--r-- 1 root root 51 Sep 6 14:47 /var/cache/apt-xapian-index/index.2/record.baseB
107475 -rw-r----- 1 clamav adm 41702 Sep 6 14:47 /var/log/clamav/clamav.log.1
107476 -rw-r----- 1 syslog adm 6044563 Sep 6 14:47 /var/log/ufw.log.1
107477 -rw-r----- 1 syslog adm 7817152 Sep 6 14:47 /var/log/kern.log.1
107478 -rw-r----- 1 syslog adm 18982650 Sep 6 14:47 /var/log/syslog.1
107479 -rw-r--r-- 1 root root 1766 Sep 6 14:47 /var/lib/logrotate/status
107480 -rw-r--r-- 1 man root 1228800 Sep 6 14:47 /var/cache/man/index.db
107481 -rw------- 1 root lp 594 Sep 6 14:48 /etc/cups/printers.conf.O
107482 -rw-r----- 1 root mlocate 8797722 Sep 6 14:48 /var/lib/mlocate/mlocate.db
107483 -rw-r--r-- 1 root root 111 Sep 6 14:48 /var/lib/dpkg/alternatives/mozilla-flashplugin
107484 -rw-r--r-- 1 root root 1638 Sep 6 14:48 /var/log/alternatives.log
107485 -rw-r--r-- 1 root root 0 Sep 6 14:48 /var/lib/update-notifier/package-data-downloads/flashplugin-installer
107486 -rw------- 1 root root 9 Sep 6 14:48 /var/spool/anacron/cron.daily
107487 -rw-r----- 1 syslog adm 114 Sep 6 14:48 /var/log/mail.log
107488 -rw-r----- 1 syslog adm 114 Sep 6 14:48 /var/log/mail.err
-rw-r--r-- 1 root root 19264896 Sep 6 14:48 /usr/lib/flashplugin-installer/libflashplayer.so
/var/log/dpkg.log
今天的内容是:
1378 2015-09-06 14:23:50 startup archives unpack
1379 2015-09-06 14:23:57 upgrade numix-icon-theme:all 0.3+524~201509050731~ubuntu15.04.1 0.3+528~201509060731~ubuntu15.04.1
1380 2015-09-06 14:23:57 status half-configured numix-icon-theme:all 0.3+524~201509050731~ubuntu15.04.1
1381 2015-09-06 14:23:57 status unpacked numix-icon-theme:all 0.3+524~201509050731~ubuntu15.04.1
1382 2015-09-06 14:23:58 status half-installed numix-icon-theme:all 0.3+524~201509050731~ubuntu15.04.1
1383 2015-09-06 14:24:21 status half-installed numix-icon-theme:all 0.3+524~201509050731~ubuntu15.04.1
1384 2015-09-06 14:24:22 status unpacked numix-icon-theme:all 0.3+528~201509060731~ubuntu15.04.1
1385 2015-09-06 14:24:22 status unpacked numix-icon-theme:all 0.3+528~201509060731~ubuntu15.04.1
1386 2015-09-06 14:24:23 startup packages configure
1387 2015-09-06 14:24:23 configure numix-icon-theme:all 0.3+528~201509060731~ubuntu15.04.1 <none>
1388 2015-09-06 14:24:23 status unpacked numix-icon-theme:all 0.3+528~201509060731~ubuntu15.04.1
1389 2015-09-06 14:24:23 status half-configured numix-icon-theme:all 0.3+528~201509060731~ubuntu15.04.1
1390 2015-09-06 14:24:23 status installed numix-icon-theme:all 0.3+528~201509060731~ubuntu15.04.1
1391 2015-09-06 14:24:23 startup packages configure
的输出apt-cache policy flashplugin-installer
为:
flashplugin-installer:
Installed: 11.2.202.508ubuntu0.15.04.1
Candidate: 11.2.202.508ubuntu0.15.04.1
Version table:
*** 11.2.202.508ubuntu0.15.04.1 0
500 http://archive.ubuntu.com/ubuntu/ vivid-updates/multiverse amd64 Packages
500 http://archive.ubuntu.com/ubuntu/ vivid-security/multiverse amd64 Packages
100 /var/lib/dpkg/status
11.2.202.457ubuntu1 0
500 http://archive.ubuntu.com/ubuntu/ vivid/multiverse amd64 Packages
我绝对不是故意安装它的。我也不想要它。那么它是恶意的,还是错误安装的?而且在 Ubuntu 软件中心的所有更改历史记录中没有它的踪迹:
操作系统信息:
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 15.04
Release: 15.04
Codename: vivid
Flavour: GNOME
GNOME Version: 3.16
答案1
APT 在文件/var/log/apt/history.log
和中维护操作历史记录/var/log/apt/history.log.#.gz
。在其中搜索“flashplugin-installer”,您应该会发现软件包的安装时间以及它是否是自动安装(作为另一个软件包的依赖项)。
aptitude
并deborphan
可以帮助您找出一个包是否是另一个包的依赖项:
$ aptitude why flashplugin-installer
i ubuntu-restricted-extras Depends ubuntu-restricted-addons
i A ubuntu-restricted-addons Recommends flashplugin-installer
$ deborphan -a --ignore-suggests flashplugin-installer
flashplugin-installer:amd64 (contrib/web)
ubuntu-restricted-addons:amd64
如您所见,flashplugin-installer
已安装,因为ubuntu-restricted-addons
建议这样做:
$ apt-cache show ubuntu-restricted-addons | grep ^Recommends
Recommends: flashplugin-installer, gstreamer0.10-plugins-ugly, gstreamer1.0-plugins-ugly, gstreamer0.10-plugins-bad, gstreamer1.0-plugins-bad, gstreamer1.0-libav, gstreamer0.10-fluendo-mp3, gstreamer1.0-fluendo-mp3, chromium-codecs-ffmpeg-extra, oxideqt-codecs-extra
但是,推荐的软件包默认会自动安装,但它们不是强制性的。如果您不需要 Flash,只需删除该软件包即可。既ubuntu-restricted-addons
不会出现任何问题,也不会破坏任何东西。