3

I have been experiencing this problem for quite some time now. Whenever I open any site in chrome/FF and click on any link on it, it opens a fresh tab in chrome and with a URL http://wonderlandads.com/afu.php?zoneid=437742 and it randomly redirects to some websites.

I have this problem with my windows machine as well as ubuntu. My thinking till date was ubuntu is immune to viruses. But this is really annoying.

I searched in the internet for long hours to find a solution. Removed chrome extensions, reset browser and my router multiple times. But the problem still persists. I have seen some solutions online for windows but not for ubuntu eg here.

Can somebody point me in some direction so that I can go and figure out a solution for my issue.

I am pretty much fed up with this. When I browse behind a Firewall protected network this issue is not present.

zamil
  • 131
  • 2
    " My thinking till date was ubuntu is immune to viruses." 1. Not immune but far more difficult than with another OS; at the moment there are zero virusses in the world that left a lab evironments. 2. this is not a virus; it is something you install yourself. Check /etc/hosts for this. Also check if the binary for firefox and chrome is the same. Update locatedb and do a locate on "wonderlandads". – Rinzwind Sep 18 '16 at 19:36
  • and please tell us also what software you installed that got you this. – Rinzwind Sep 18 '16 at 19:59
  • I tried to locate wonderlandads and checked in /etc/hosts. Did not find any traces there. I don't remember what exactly created this problem. But it happens on this very page when i click on any link. I removed all the extensions in chrome/FF but its still giving me headache – zamil Sep 19 '16 at 09:03
  • Have a look at this work in progress: http://askubuntu.com/questions/826801/chinese-character-folder-created-at-startup/826812#826812 – Rinzwind Sep 19 '16 at 09:11
  • wonderlandads is a toolbar in a browser it seems.And can have the following names: babylon toolbar, coolcake, search product by conduit. This might work: http://www.virusresearch.org/remove-wonderlandads-com-pop-up-ads-chrome-firefox-ie/#uninstall – Rinzwind Sep 19 '16 at 09:20
  • Does this occur only for your device or other devices in your house,too ? – Sergiy Kolodyazhnyy Sep 19 '16 at 09:30
  • Also check your router. – Rinzwind Sep 19 '16 at 10:16
  • @Serg: It happens on my windows 8 desktop, ubuntu 14 and android phone. For my windows I have kaspersky internet security latest. But still this redirect happens in windows. – zamil Sep 19 '16 at 13:09
  • @zamil it's likely that you've got someone tampering with your router. I've seen it done before. People don't typically change router admin password so it's an easy attack vector for hackers. I suggest you change router settings or ask your ISP to do that – Sergiy Kolodyazhnyy Sep 19 '16 at 13:38

0 Answers0