You are not logged in.

#1 2018-07-16 09:54:18

jbenge1
Member
From: Az
Registered: 2018-04-09
Posts: 151

[SOLVED]Google always asking me to solve capcha

I have been facing a weird error and I am not entirely sure if it is arch related or not. Whenever I search for something on google, I am taken to a captcha page to verify that I am not a robot.
A typical captcha page with the following text under the submit button

"Our systems have detected unusual traffic from your computer network. This page checks..."

Has anyone else experienced anything like this? And if my understanding is correct, someone who is using the network likely has a virus or something of the sort(not necessarily me correct?).
After using clamav to scan my computer for any viruses it came up with

/bin/openal-info: Unix.Trojan.Vali-6606621-0 FOUND

Could this be the cause?

Last edited by jbenge1 (2018-07-16 13:43:57)


"Dr. Madden, why don't the natural numbers include 0?" -me
"....... Take a philosophy course" -Dr. Madden

Offline

#2 2018-07-16 11:43:42

Awebb
Member
Registered: 2010-05-06
Posts: 6,688

Re: [SOLVED]Google always asking me to solve capcha

Tried "pkgfile /bin/openal-info", does not belong to an Arch package.

You should "pacman -Qo /bin/openal-info" to see what AUR package you've installed to pull this in, verify, that it has been built cleanly and then report this in the AUR package site and the mailing list.

Offline

#3 2018-07-16 11:48:01

seth
Member
From: Won't reply 2 private help req
Registered: 2012-09-03
Posts: 78,843

Re: [SOLVED]Google always asking me to solve capcha

netstat -tp

Alternatively run wireshark.

google does this if you bang their servers w/ requests - rogue network status indicators tend to do such.
(Yes, could also be malware, but malware usually tries to go stealth mode)

Offline

#4 2018-07-16 11:56:38

progandy
Member
Registered: 2012-05-17
Posts: 5,322

Re: [SOLVED]Google always asking me to solve capcha

If you still connect with an IPv4, you might also be unlucky and share your IP with too many other users that access google.


| alias CUTF='LANG=en_XX.UTF-8@POSIX ' | alias ENGLISH='LANG=C.UTF-8 ' |

Offline

#5 2018-07-16 12:43:39

jbenge1
Member
From: Az
Registered: 2018-04-09
Posts: 151

Re: [SOLVED]Google always asking me to solve capcha

pacman reports the owner of /bin/openal-info is openal

/bin/openal-info is owned by openal 1.18.2-2

I couldn't find any packages from the AUR that would require this the only ones I have pulled and built are google-chrome and kaku...


seth wrote:
netstat -tp

Alternatively run wireshark.

google does this if you bang their servers w/ requests - rogue network status indicators tend to do such.
(Yes, could also be malware, but malware usually tries to go stealth mode)

I'm not entirely sure what I should be looking for in the output if you could give me a few pointers? Also here is the actual output

$ss -tp
State    Recv-Q     Send-Q          Local Address:Port              Peer Address:Port                                                
ESTAB    0          0               192.168.4.130:42100           198.252.206.25:https      users:(("firefox",pid=12792,fd=152))     
ESTAB    0          0               192.168.4.130:44502           74.125.133.189:https      users:(("firefox",pid=12792,fd=123))     
ESTAB    0          0               192.168.4.130:48220            216.58.205.46:https      users:(("firefox",pid=12792,fd=126))     
ESTAB    0          0               192.168.4.130:59900            216.58.205.35:https      users:(("firefox",pid=12792,fd=178))     
ESTAB    0          0               192.168.4.130:39206             34.214.201.8:https      users:(("firefox",pid=12792,fd=161))    

"Dr. Madden, why don't the natural numbers include 0?" -me
"....... Take a philosophy course" -Dr. Madden

Offline

#6 2018-07-16 12:52:46

seth
Member
From: Won't reply 2 private help req
Registered: 2012-09-03
Posts: 78,843

Re: [SOLVED]Google always asking me to solve capcha

Currently only firefox holds 3 tcp connections to google (74.125.133.189, 216.58.205.46 & 216.58.205.35) - that's not suspicious, but you've to look at the connections more often to see whether something "odd" pops up (google will captcha you for some hours after an "attack")

Reg. post #4: You're "192.168.4.130" - are you maybe behind a NAT in a bigger LAN (company, university pool, …)?

Offline

#7 2018-07-16 13:07:44

jbenge1
Member
From: Az
Registered: 2018-04-09
Posts: 151

Re: [SOLVED]Google always asking me to solve capcha

yes a company


"Dr. Madden, why don't the natural numbers include 0?" -me
"....... Take a philosophy course" -Dr. Madden

Offline

#8 2018-07-16 13:10:21

seth
Member
From: Won't reply 2 private help req
Registered: 2012-09-03
Posts: 78,843

Re: [SOLVED]Google always asking me to solve capcha

Doesn't have to be you at all, sombody™ else could bug google. The entire subnet will be affected.
Talk to your IT, they can isolate the system w/ overly many requests to google.

Offline

#9 2018-07-16 13:43:42

jbenge1
Member
From: Az
Registered: 2018-04-09
Posts: 151

Re: [SOLVED]Google always asking me to solve capcha

turns out, it was in fact someone else on the network....


"Dr. Madden, why don't the natural numbers include 0?" -me
"....... Take a philosophy course" -Dr. Madden

Offline

Board footer

Powered by FluxBB