I was working on my Linux "workstation" (it has no sound and I don't play on it nor watch any movie: it's purely a work-machine, hence I call it my "workstation") and suddenly something very weird happened.
I was browsing, using a temporary user account (one I use only for browsing) and the Iceweasel browser. I came to a website which was obviously trying to install malware (popups with fake windows telling your computer is infected, etc.). I got some issues closing these web-pages and ended up kill -9'ing the browser.
Then the 4th dimension started: the IP changed automatically to some 169.xxx.xxx.xxx (I don't remember exactly) IP. But this should never have happened as that workstation as a static IP that, I thought, was carved in stone.
I immediately unplugged the ethernet cable (and there's no WiFi on that workstation) and queried running processes using "ps auxf"
I found some really weird processes running: "uml network switch" something. Upon reboot (still cable unplugged) I saw a "Starting user mode networking switch" service message. I never installed that and I'm nearly sure this stuff wasn't there beforehand.
I also found some "free desktop" something task running. Never ever installed that either.
I started removing the package related to the UML-thinggy and rebooted (still cable unplugged) and... The "/usr/bin/uml_switch" (something like that) started re-appearing (even tough I checked it wasn't there anymore after deleting the package).
What is going on?
Is this some sort of mega-SNAFU where some automated Debian software update started going ballistic and automagically installing packages I didn't ask for that broke havoc or did I just get hacked?
Does any of you have any idea about what what I just experienced could be?
Next step is, just in case, a clean install from a known good CD/DVD rom of a new system on a blank HD right?