How to remove naganoadigei.com popup virus
up vote
1
down vote
favorite
Whenever I click any URL so that will open a new tab with this URL (Please be careful):
hxxp://naganoadigei.com/imp/6932/?scontext_r=xlBO1OGoXtDY%2AqpCVwdK6hjcJXf8xQdE2bF9D7qYvJirlGAXcl42kf_7I6Zo60fY&md=snIhJiO2cDMywiIzJiOiEjNwADe5ADMiwiIiJiOiETN1cDe4AzNiwiIyJiOigGd0BnOv8SYwBnLzFmcrFmcpd3bytmLp52LkF2coJ2bhJHZvICLigmI6QzMyQDLiwmI6ISZu1SVTJCLiQnI60yMzADLionI6cTM2UDLismI6ETf
I'm using Ubuntu 16.04 LTS. I tried this with all my browsers such as Mozilla and Chrome; same thing happens in both browsers.
How do I remove this? Thanks in Advance
firefox google-chrome browser malware popup-ads
edited Oct 26 at 13:56
Thomas Ward♦
43k23119169
asked Oct 26 at 13:38
Tarun Mahajan
184
|
show 3 more comments
up vote
1
down vote
favorite
Whenever I click any URL so that will open a new tab with this URL (Please be careful):
hxxp://naganoadigei.com/imp/6932/?scontext_r=xlBO1OGoXtDY%2AqpCVwdK6hjcJXf8xQdE2bF9D7qYvJirlGAXcl42kf_7I6Zo60fY&md=snIhJiO2cDMywiIzJiOiEjNwADe5ADMiwiIiJiOiETN1cDe4AzNiwiIyJiOigGd0BnOv8SYwBnLzFmcrFmcpd3bytmLp52LkF2coJ2bhJHZvICLigmI6QzMyQDLiwmI6ISZu1SVTJCLiQnI60yMzADLionI6cTM2UDLismI6ETf
I'm using Ubuntu 16.04 LTS. I tried this with all my browsers such as Mozilla and Chrome; same thing happens in both browsers.
How do I remove this? Thanks in Advance
firefox google-chrome browser malware popup-ads
edited Oct 26 at 13:56
Thomas Ward♦
43k23119169
asked Oct 26 at 13:38
Tarun Mahajan
184
1
Are you using your home internet or something else? Are you using a proxy or VPN?
– wjandrea
Oct 26 at 13:52
1
What's your DNS server settings? Are you using your Home internet? Are you using a VPN?
– Thomas Ward♦
Oct 26 at 13:57
I'm Using Home Internet no proxy no VPN
– Tarun Mahajan
Oct 26 at 13:58
Everything is automatically obtained.
– Tarun Mahajan
Oct 26 at 14:03
2
I would start by checking the browser's extras/extensions. If you find something you didn't installed there, remove them all.
– GabrielaGarcia
Oct 26 at 17:07
|
show 3 more comments
up vote
1
down vote
favorite
up vote
1
down vote
favorite
Whenever I click any URL so that will open a new tab with this URL (Please be careful):
hxxp://naganoadigei.com/imp/6932/?scontext_r=xlBO1OGoXtDY%2AqpCVwdK6hjcJXf8xQdE2bF9D7qYvJirlGAXcl42kf_7I6Zo60fY&md=snIhJiO2cDMywiIzJiOiEjNwADe5ADMiwiIiJiOiETN1cDe4AzNiwiIyJiOigGd0BnOv8SYwBnLzFmcrFmcpd3bytmLp52LkF2coJ2bhJHZvICLigmI6QzMyQDLiwmI6ISZu1SVTJCLiQnI60yMzADLionI6cTM2UDLismI6ETf
I'm using Ubuntu 16.04 LTS. I tried this with all my browsers such as Mozilla and Chrome; same thing happens in both browsers.
How do I remove this? Thanks in Advance
firefox google-chrome browser malware popup-ads
edited Oct 26 at 13:56
Thomas Ward♦
43k23119169
asked Oct 26 at 13:38
Tarun Mahajan
184
Whenever I click any URL so that will open a new tab with this URL (Please be careful):
hxxp://naganoadigei.com/imp/6932/?scontext_r=xlBO1OGoXtDY%2AqpCVwdK6hjcJXf8xQdE2bF9D7qYvJirlGAXcl42kf_7I6Zo60fY&md=snIhJiO2cDMywiIzJiOiEjNwADe5ADMiwiIiJiOiETN1cDe4AzNiwiIyJiOigGd0BnOv8SYwBnLzFmcrFmcpd3bytmLp52LkF2coJ2bhJHZvICLigmI6QzMyQDLiwmI6ISZu1SVTJCLiQnI60yMzADLionI6cTM2UDLismI6ETf
I'm using Ubuntu 16.04 LTS. I tried this with all my browsers such as Mozilla and Chrome; same thing happens in both browsers.
How do I remove this? Thanks in Advance
firefox google-chrome browser malware popup-ads
firefox google-chrome browser malware popup-ads
edited Oct 26 at 13:56
Thomas Ward♦
43k23119169
asked Oct 26 at 13:38
Tarun Mahajan
184
edited Oct 26 at 13:56
Thomas Ward♦
43k23119169
asked Oct 26 at 13:38
Tarun Mahajan
184
edited Oct 26 at 13:56
Thomas Ward♦
43k23119169
edited Oct 26 at 13:56
Thomas Ward♦
43k23119169
edited Oct 26 at 13:56
Thomas Ward♦
43k23119169
43k23119169
asked Oct 26 at 13:38
Tarun Mahajan
184
asked Oct 26 at 13:38
Tarun Mahajan
184
asked Oct 26 at 13:38
Tarun Mahajan
184
184
1
Are you using your home internet or something else? Are you using a proxy or VPN?
– wjandrea
Oct 26 at 13:52
1
What's your DNS server settings? Are you using your Home internet? Are you using a VPN?
– Thomas Ward♦
Oct 26 at 13:57
I'm Using Home Internet no proxy no VPN
– Tarun Mahajan
Oct 26 at 13:58
Everything is automatically obtained.
– Tarun Mahajan
Oct 26 at 14:03
2
I would start by checking the browser's extras/extensions. If you find something you didn't installed there, remove them all.
– GabrielaGarcia
Oct 26 at 17:07
|
show 3 more comments
1
Are you using your home internet or something else? Are you using a proxy or VPN?
– wjandrea
Oct 26 at 13:52
1
What's your DNS server settings? Are you using your Home internet? Are you using a VPN?
– Thomas Ward♦
Oct 26 at 13:57
I'm Using Home Internet no proxy no VPN
– Tarun Mahajan
Oct 26 at 13:58
Everything is automatically obtained.
– Tarun Mahajan
Oct 26 at 14:03
2
I would start by checking the browser's extras/extensions. If you find something you didn't installed there, remove them all.
– GabrielaGarcia
Oct 26 at 17:07
1
1
Are you using your home internet or something else? Are you using a proxy or VPN?
– wjandrea
Oct 26 at 13:52
Are you using your home internet or something else? Are you using a proxy or VPN?
– wjandrea
Oct 26 at 13:52
1
1
What's your DNS server settings? Are you using your Home internet? Are you using a VPN?
– Thomas Ward♦
Oct 26 at 13:57
What's your DNS server settings? Are you using your Home internet? Are you using a VPN?
– Thomas Ward♦
Oct 26 at 13:57
I'm Using Home Internet no proxy no VPN
– Tarun Mahajan
Oct 26 at 13:58
I'm Using Home Internet no proxy no VPN
– Tarun Mahajan
Oct 26 at 13:58
Everything is automatically obtained.
– Tarun Mahajan
Oct 26 at 14:03
Everything is automatically obtained.
– Tarun Mahajan
Oct 26 at 14:03
2
2
I would start by checking the browser's extras/extensions. If you find something you didn't installed there, remove them all.
– GabrielaGarcia
Oct 26 at 17:07
I would start by checking the browser's extras/extensions. If you find something you didn't installed there, remove them all.
– GabrielaGarcia
Oct 26 at 17:07
|
show 3 more comments
2 Answers
2
active
oldest
votes
up vote
1
down vote
This comment is on the right track. There are a number of extensions that you can pick up than can cause this type of behaviour. Coupon Companion comes to mind but there are others as well. One way to determine if it's a plugin or extension causing this problem would be to launch the browser in safe mode:
Firefox safe mode
For Chrome use chrome --disable-extensions launched from the terminal.
Make sure all other instances of these browsers are closed when conducting this test.
When the problem doesn't exist when launched in safe mode you can remove all your extensions and add them in one by one to determine which extension is the culprit.
Sources:
How to start firefox in safemode?
https://superuser.com/questions/254579/how-to-open-google-chrome-with-extensions-disabled-turned-off
answered Nov 2 at 16:41
Elder Geek
26.2k951124
I agree with your comment @elder-geek, still, I'm having the same issue on my machine. In between that, I'm also trying to figure out the actual problem.
– Tarun Mahajan
Nov 3 at 15:35
@user132319 The answer I provided if followed should lead you to the extension that is causing the problem. Is there something about it that you don't understand? If so, let me know where you found it to be unclear and I'll do my best to clarify.
– Elder Geek
Nov 5 at 16:58
add a comment |
up vote
0
down vote
Long time lurker first time poster.
@Elder Geek
Thanks for your response to to @Tarun Mahajan question, malicious or misconfired extensions can cause this behavior but in this case your this is URL/code injection from the ISP.
How do I know?
- I am confident that @Tarun Mahajans ISP is BSNL/MTNL in India
- Got the redirects while using a live CD
- Tested the live CD at home, in the office, at a coffee shop all served by the same ISP
- Was unable to replicate results using another ISP ( Airtel )
@Tarun Mahajan can you share your ISPs' name?
naganoadigei.com was registered explicitly to serve malware and redirect users to phishing sites
Updated Date: 2018-05-10
Created Date: 2018-05-10
answered Nov 28 at 3:33
naganoadigei.com
1
New contributor
naganoadigei.com is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
2 Answers
2
active
oldest
votes
2 Answers
2
active
oldest
votes
active
oldest
votes
active
oldest
votes
up vote
1
down vote
This comment is on the right track. There are a number of extensions that you can pick up than can cause this type of behaviour. Coupon Companion comes to mind but there are others as well. One way to determine if it's a plugin or extension causing this problem would be to launch the browser in safe mode:
Firefox safe mode
For Chrome use chrome --disable-extensions launched from the terminal.
Make sure all other instances of these browsers are closed when conducting this test.
When the problem doesn't exist when launched in safe mode you can remove all your extensions and add them in one by one to determine which extension is the culprit.
Sources:
How to start firefox in safemode?
https://superuser.com/questions/254579/how-to-open-google-chrome-with-extensions-disabled-turned-off
answered Nov 2 at 16:41
Elder Geek
26.2k951124
I agree with your comment @elder-geek, still, I'm having the same issue on my machine. In between that, I'm also trying to figure out the actual problem.
– Tarun Mahajan
Nov 3 at 15:35
@user132319 The answer I provided if followed should lead you to the extension that is causing the problem. Is there something about it that you don't understand? If so, let me know where you found it to be unclear and I'll do my best to clarify.
– Elder Geek
Nov 5 at 16:58
add a comment |
up vote
1
down vote
This comment is on the right track. There are a number of extensions that you can pick up than can cause this type of behaviour. Coupon Companion comes to mind but there are others as well. One way to determine if it's a plugin or extension causing this problem would be to launch the browser in safe mode:
Firefox safe mode
For Chrome use chrome --disable-extensions launched from the terminal.
Make sure all other instances of these browsers are closed when conducting this test.
When the problem doesn't exist when launched in safe mode you can remove all your extensions and add them in one by one to determine which extension is the culprit.
Sources:
How to start firefox in safemode?
https://superuser.com/questions/254579/how-to-open-google-chrome-with-extensions-disabled-turned-off
answered Nov 2 at 16:41
Elder Geek
26.2k951124
I agree with your comment @elder-geek, still, I'm having the same issue on my machine. In between that, I'm also trying to figure out the actual problem.
– Tarun Mahajan
Nov 3 at 15:35
@user132319 The answer I provided if followed should lead you to the extension that is causing the problem. Is there something about it that you don't understand? If so, let me know where you found it to be unclear and I'll do my best to clarify.
– Elder Geek
Nov 5 at 16:58
add a comment |
up vote
1
down vote
up vote
1
down vote
This comment is on the right track. There are a number of extensions that you can pick up than can cause this type of behaviour. Coupon Companion comes to mind but there are others as well. One way to determine if it's a plugin or extension causing this problem would be to launch the browser in safe mode:
Firefox safe mode
For Chrome use chrome --disable-extensions launched from the terminal.
Make sure all other instances of these browsers are closed when conducting this test.
When the problem doesn't exist when launched in safe mode you can remove all your extensions and add them in one by one to determine which extension is the culprit.
Sources:
How to start firefox in safemode?
https://superuser.com/questions/254579/how-to-open-google-chrome-with-extensions-disabled-turned-off
answered Nov 2 at 16:41
Elder Geek
26.2k951124
This comment is on the right track. There are a number of extensions that you can pick up than can cause this type of behaviour. Coupon Companion comes to mind but there are others as well. One way to determine if it's a plugin or extension causing this problem would be to launch the browser in safe mode:
Firefox safe mode
For Chrome use chrome --disable-extensions launched from the terminal.
Make sure all other instances of these browsers are closed when conducting this test.
When the problem doesn't exist when launched in safe mode you can remove all your extensions and add them in one by one to determine which extension is the culprit.
Sources:
How to start firefox in safemode?
https://superuser.com/questions/254579/how-to-open-google-chrome-with-extensions-disabled-turned-off
answered Nov 2 at 16:41
Elder Geek
26.2k951124
answered Nov 2 at 16:41
Elder Geek
26.2k951124
answered Nov 2 at 16:41
Elder Geek
26.2k951124
answered Nov 2 at 16:41
Elder Geek
26.2k951124
26.2k951124
I agree with your comment @elder-geek, still, I'm having the same issue on my machine. In between that, I'm also trying to figure out the actual problem.
– Tarun Mahajan
Nov 3 at 15:35
@user132319 The answer I provided if followed should lead you to the extension that is causing the problem. Is there something about it that you don't understand? If so, let me know where you found it to be unclear and I'll do my best to clarify.
– Elder Geek
Nov 5 at 16:58
add a comment |
I agree with your comment @elder-geek, still, I'm having the same issue on my machine. In between that, I'm also trying to figure out the actual problem.
– Tarun Mahajan
Nov 3 at 15:35
@user132319 The answer I provided if followed should lead you to the extension that is causing the problem. Is there something about it that you don't understand? If so, let me know where you found it to be unclear and I'll do my best to clarify.
– Elder Geek
Nov 5 at 16:58
I agree with your comment @elder-geek, still, I'm having the same issue on my machine. In between that, I'm also trying to figure out the actual problem.
– Tarun Mahajan
Nov 3 at 15:35
I agree with your comment @elder-geek, still, I'm having the same issue on my machine. In between that, I'm also trying to figure out the actual problem.
– Tarun Mahajan
Nov 3 at 15:35
@user132319 The answer I provided if followed should lead you to the extension that is causing the problem. Is there something about it that you don't understand? If so, let me know where you found it to be unclear and I'll do my best to clarify.
– Elder Geek
Nov 5 at 16:58
@user132319 The answer I provided if followed should lead you to the extension that is causing the problem. Is there something about it that you don't understand? If so, let me know where you found it to be unclear and I'll do my best to clarify.
– Elder Geek
Nov 5 at 16:58
add a comment |
up vote
0
down vote
Long time lurker first time poster.
@Elder Geek
Thanks for your response to to @Tarun Mahajan question, malicious or misconfired extensions can cause this behavior but in this case your this is URL/code injection from the ISP.
How do I know?
- I am confident that @Tarun Mahajans ISP is BSNL/MTNL in India
- Got the redirects while using a live CD
- Tested the live CD at home, in the office, at a coffee shop all served by the same ISP
- Was unable to replicate results using another ISP ( Airtel )
@Tarun Mahajan can you share your ISPs' name?
naganoadigei.com was registered explicitly to serve malware and redirect users to phishing sites
Updated Date: 2018-05-10
Created Date: 2018-05-10
answered Nov 28 at 3:33
naganoadigei.com
1
New contributor
naganoadigei.com is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
up vote
0
down vote
Long time lurker first time poster.
@Elder Geek
Thanks for your response to to @Tarun Mahajan question, malicious or misconfired extensions can cause this behavior but in this case your this is URL/code injection from the ISP.
How do I know?
- I am confident that @Tarun Mahajans ISP is BSNL/MTNL in India
- Got the redirects while using a live CD
- Tested the live CD at home, in the office, at a coffee shop all served by the same ISP
- Was unable to replicate results using another ISP ( Airtel )
@Tarun Mahajan can you share your ISPs' name?
naganoadigei.com was registered explicitly to serve malware and redirect users to phishing sites
Updated Date: 2018-05-10
Created Date: 2018-05-10
answered Nov 28 at 3:33
naganoadigei.com
1
New contributor
naganoadigei.com is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
up vote
0
down vote
up vote
0
down vote
Long time lurker first time poster.
@Elder Geek
Thanks for your response to to @Tarun Mahajan question, malicious or misconfired extensions can cause this behavior but in this case your this is URL/code injection from the ISP.
How do I know?
- I am confident that @Tarun Mahajans ISP is BSNL/MTNL in India
- Got the redirects while using a live CD
- Tested the live CD at home, in the office, at a coffee shop all served by the same ISP
- Was unable to replicate results using another ISP ( Airtel )
@Tarun Mahajan can you share your ISPs' name?
naganoadigei.com was registered explicitly to serve malware and redirect users to phishing sites
Updated Date: 2018-05-10
Created Date: 2018-05-10
answered Nov 28 at 3:33
naganoadigei.com
1
New contributor
naganoadigei.com is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
Long time lurker first time poster.
@Elder Geek
Thanks for your response to to @Tarun Mahajan question, malicious or misconfired extensions can cause this behavior but in this case your this is URL/code injection from the ISP.
How do I know?
- I am confident that @Tarun Mahajans ISP is BSNL/MTNL in India
- Got the redirects while using a live CD
- Tested the live CD at home, in the office, at a coffee shop all served by the same ISP
- Was unable to replicate results using another ISP ( Airtel )
@Tarun Mahajan can you share your ISPs' name?
naganoadigei.com was registered explicitly to serve malware and redirect users to phishing sites
Updated Date: 2018-05-10
Created Date: 2018-05-10
answered Nov 28 at 3:33
naganoadigei.com
1
New contributor
naganoadigei.com is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
answered Nov 28 at 3:33
naganoadigei.com
1
New contributor
naganoadigei.com is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
answered Nov 28 at 3:33
naganoadigei.com
1
answered Nov 28 at 3:33
naganoadigei.com
1
1
New contributor
naganoadigei.com is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
New contributor
naganoadigei.com is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
naganoadigei.com is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
add a comment |
Thanks for contributing an answer to Ask Ubuntu!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Some of your past answers have not been well-received, and you're in danger of being blocked from answering.
Please pay close attention to the following guidance:
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1087450%2fhow-to-remove-naganoadigei-com-popup-virus%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
1
Are you using your home internet or something else? Are you using a proxy or VPN?
– wjandrea
Oct 26 at 13:52
1
What's your DNS server settings? Are you using your Home internet? Are you using a VPN?
– Thomas Ward♦
Oct 26 at 13:57
I'm Using Home Internet no proxy no VPN
– Tarun Mahajan
Oct 26 at 13:58
Everything is automatically obtained.
– Tarun Mahajan
Oct 26 at 14:03
2
I would start by checking the browser's extras/extensions. If you find something you didn't installed there, remove them all.
– GabrielaGarcia
Oct 26 at 17:07