How to remove naganoadigei.com popup virus












3














Whenever I click any URL so that will open a new tab with this URL (Please be careful):



hxxp://naganoadigei.com/imp/6932/?scontext_r=xlBO1OGoXtDY%2AqpCVwdK6hjcJXf8xQdE2bF9D7qYvJirlGAXcl42kf_7I6Zo60fY&md=snIhJiO2cDMywiIzJiOiEjNwADe5ADMiwiIiJiOiETN1cDe4AzNiwiIyJiOigGd0BnOv8SYwBnLzFmcrFmcpd3bytmLp52LkF2coJ2bhJHZvICLigmI6QzMyQDLiwmI6ISZu1SVTJCLiQnI60yMzADLionI6cTM2UDLismI6ETf


I'm using Ubuntu 16.04 LTS. I tried this with all my browsers such as Mozilla and Chrome; same thing happens in both browsers.



How do I remove this? Thanks in Advance










share|improve this question




















  • 1




    Are you using your home internet or something else? Are you using a proxy or VPN?
    – wjandrea
    Oct 26 at 13:52






  • 1




    What's your DNS server settings? Are you using your Home internet? Are you using a VPN?
    – Thomas Ward
    Oct 26 at 13:57






  • 2




    I would start by checking the browser's extras/extensions. If you find something you didn't installed there, remove them all.
    – GabrielaGarcia
    Oct 26 at 17:07






  • 1




    no, that ads are visible only in desktop and not so frequently. and one more thing I noticed a few days ago that mostly happen when I visit any non-SSL sites.
    – Tarun Mahajan
    Nov 3 at 15:26






  • 1




    I'm facing the same issues on ubuntu 18.04 . Damn how did it manage to get in here!
    – Nikhil VJ
    Nov 23 at 6:39
















3














Whenever I click any URL so that will open a new tab with this URL (Please be careful):



hxxp://naganoadigei.com/imp/6932/?scontext_r=xlBO1OGoXtDY%2AqpCVwdK6hjcJXf8xQdE2bF9D7qYvJirlGAXcl42kf_7I6Zo60fY&md=snIhJiO2cDMywiIzJiOiEjNwADe5ADMiwiIiJiOiETN1cDe4AzNiwiIyJiOigGd0BnOv8SYwBnLzFmcrFmcpd3bytmLp52LkF2coJ2bhJHZvICLigmI6QzMyQDLiwmI6ISZu1SVTJCLiQnI60yMzADLionI6cTM2UDLismI6ETf


I'm using Ubuntu 16.04 LTS. I tried this with all my browsers such as Mozilla and Chrome; same thing happens in both browsers.



How do I remove this? Thanks in Advance










share|improve this question




















  • 1




    Are you using your home internet or something else? Are you using a proxy or VPN?
    – wjandrea
    Oct 26 at 13:52






  • 1




    What's your DNS server settings? Are you using your Home internet? Are you using a VPN?
    – Thomas Ward
    Oct 26 at 13:57






  • 2




    I would start by checking the browser's extras/extensions. If you find something you didn't installed there, remove them all.
    – GabrielaGarcia
    Oct 26 at 17:07






  • 1




    no, that ads are visible only in desktop and not so frequently. and one more thing I noticed a few days ago that mostly happen when I visit any non-SSL sites.
    – Tarun Mahajan
    Nov 3 at 15:26






  • 1




    I'm facing the same issues on ubuntu 18.04 . Damn how did it manage to get in here!
    – Nikhil VJ
    Nov 23 at 6:39














3












3








3


3





Whenever I click any URL so that will open a new tab with this URL (Please be careful):



hxxp://naganoadigei.com/imp/6932/?scontext_r=xlBO1OGoXtDY%2AqpCVwdK6hjcJXf8xQdE2bF9D7qYvJirlGAXcl42kf_7I6Zo60fY&md=snIhJiO2cDMywiIzJiOiEjNwADe5ADMiwiIiJiOiETN1cDe4AzNiwiIyJiOigGd0BnOv8SYwBnLzFmcrFmcpd3bytmLp52LkF2coJ2bhJHZvICLigmI6QzMyQDLiwmI6ISZu1SVTJCLiQnI60yMzADLionI6cTM2UDLismI6ETf


I'm using Ubuntu 16.04 LTS. I tried this with all my browsers such as Mozilla and Chrome; same thing happens in both browsers.



How do I remove this? Thanks in Advance










share|improve this question















Whenever I click any URL so that will open a new tab with this URL (Please be careful):



hxxp://naganoadigei.com/imp/6932/?scontext_r=xlBO1OGoXtDY%2AqpCVwdK6hjcJXf8xQdE2bF9D7qYvJirlGAXcl42kf_7I6Zo60fY&md=snIhJiO2cDMywiIzJiOiEjNwADe5ADMiwiIiJiOiETN1cDe4AzNiwiIyJiOigGd0BnOv8SYwBnLzFmcrFmcpd3bytmLp52LkF2coJ2bhJHZvICLigmI6QzMyQDLiwmI6ISZu1SVTJCLiQnI60yMzADLionI6cTM2UDLismI6ETf


I'm using Ubuntu 16.04 LTS. I tried this with all my browsers such as Mozilla and Chrome; same thing happens in both browsers.



How do I remove this? Thanks in Advance







firefox google-chrome browser malware popup-ads






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited Oct 26 at 13:56









Thomas Ward

43.4k23120172




43.4k23120172










asked Oct 26 at 13:38









Tarun Mahajan

284




284








  • 1




    Are you using your home internet or something else? Are you using a proxy or VPN?
    – wjandrea
    Oct 26 at 13:52






  • 1




    What's your DNS server settings? Are you using your Home internet? Are you using a VPN?
    – Thomas Ward
    Oct 26 at 13:57






  • 2




    I would start by checking the browser's extras/extensions. If you find something you didn't installed there, remove them all.
    – GabrielaGarcia
    Oct 26 at 17:07






  • 1




    no, that ads are visible only in desktop and not so frequently. and one more thing I noticed a few days ago that mostly happen when I visit any non-SSL sites.
    – Tarun Mahajan
    Nov 3 at 15:26






  • 1




    I'm facing the same issues on ubuntu 18.04 . Damn how did it manage to get in here!
    – Nikhil VJ
    Nov 23 at 6:39














  • 1




    Are you using your home internet or something else? Are you using a proxy or VPN?
    – wjandrea
    Oct 26 at 13:52






  • 1




    What's your DNS server settings? Are you using your Home internet? Are you using a VPN?
    – Thomas Ward
    Oct 26 at 13:57






  • 2




    I would start by checking the browser's extras/extensions. If you find something you didn't installed there, remove them all.
    – GabrielaGarcia
    Oct 26 at 17:07






  • 1




    no, that ads are visible only in desktop and not so frequently. and one more thing I noticed a few days ago that mostly happen when I visit any non-SSL sites.
    – Tarun Mahajan
    Nov 3 at 15:26






  • 1




    I'm facing the same issues on ubuntu 18.04 . Damn how did it manage to get in here!
    – Nikhil VJ
    Nov 23 at 6:39








1




1




Are you using your home internet or something else? Are you using a proxy or VPN?
– wjandrea
Oct 26 at 13:52




Are you using your home internet or something else? Are you using a proxy or VPN?
– wjandrea
Oct 26 at 13:52




1




1




What's your DNS server settings? Are you using your Home internet? Are you using a VPN?
– Thomas Ward
Oct 26 at 13:57




What's your DNS server settings? Are you using your Home internet? Are you using a VPN?
– Thomas Ward
Oct 26 at 13:57




2




2




I would start by checking the browser's extras/extensions. If you find something you didn't installed there, remove them all.
– GabrielaGarcia
Oct 26 at 17:07




I would start by checking the browser's extras/extensions. If you find something you didn't installed there, remove them all.
– GabrielaGarcia
Oct 26 at 17:07




1




1




no, that ads are visible only in desktop and not so frequently. and one more thing I noticed a few days ago that mostly happen when I visit any non-SSL sites.
– Tarun Mahajan
Nov 3 at 15:26




no, that ads are visible only in desktop and not so frequently. and one more thing I noticed a few days ago that mostly happen when I visit any non-SSL sites.
– Tarun Mahajan
Nov 3 at 15:26




1




1




I'm facing the same issues on ubuntu 18.04 . Damn how did it manage to get in here!
– Nikhil VJ
Nov 23 at 6:39




I'm facing the same issues on ubuntu 18.04 . Damn how did it manage to get in here!
– Nikhil VJ
Nov 23 at 6:39










2 Answers
2






active

oldest

votes


















6














Long time lurker first time poster.



@Elder Geek



Thanks for your response to to @Tarun Mahajan question, malicious or misconfired extensions can cause this behavior but in this case your this is URL/code injection from the ISP.



How do I know?




  • I am confident that @Tarun Mahajans ISP is BSNL/MTNL in India

  • Got the redirects while using a live CD

  • Tested the live CD at home, in the office, at a coffee shop all served by the same ISP

  • Was unable to replicate results using another ISP ( Airtel )


@Tarun Mahajan can you share your ISPs' name?



naganoadigei.com was registered explicitly to serve malware and redirect users to phishing sites



Updated Date: 2018-05-10
Created Date: 2018-05-10






share|improve this answer

















  • 2




    Even I am facing the same issue. I have a bsnl connection and I keep getting occasional redirects to the above-said URL in my macos chrome browser. sometimes even in my android chrome browser. Any solutions yet?
    – Ganesh
    Dec 20 at 6:57










  • Darn it I also have same issue and YES my ISP is BSNL.
    – Nikhil VJ
    Dec 25 at 9:44










  • Lot of discussion on this going on here: broadbandforum.co/threads/…
    – Nikhil VJ
    Dec 25 at 9:57



















1














This comment is on the right track. There are a number of extensions that you can pick up than can cause this type of behaviour. Coupon Companion comes to mind but there are others as well. One way to determine if it's a plugin or extension causing this problem would be to launch the browser in safe mode:



Firefox safe mode



For Chrome use chrome --disable-extensions launched from the terminal.



Make sure all other instances of these browsers are closed when conducting this test.



When the problem doesn't exist when launched in safe mode you can remove all your extensions and add them in one by one to determine which extension is the culprit.



Sources:



How to start firefox in safemode?



https://superuser.com/questions/254579/how-to-open-google-chrome-with-extensions-disabled-turned-off






share|improve this answer





















  • I agree with your comment @elder-geek, still, I'm having the same issue on my machine. In between that, I'm also trying to figure out the actual problem.
    – Tarun Mahajan
    Nov 3 at 15:35










  • @user132319 The answer I provided if followed should lead you to the extension that is causing the problem. Is there something about it that you don't understand? If so, let me know where you found it to be unclear and I'll do my best to clarify.
    – Elder Geek
    Nov 5 at 16:58










protected by Community 2 days ago



Thank you for your interest in this question.
Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).



Would you like to answer one of these unanswered questions instead?














2 Answers
2






active

oldest

votes








2 Answers
2






active

oldest

votes









active

oldest

votes






active

oldest

votes









6














Long time lurker first time poster.



@Elder Geek



Thanks for your response to to @Tarun Mahajan question, malicious or misconfired extensions can cause this behavior but in this case your this is URL/code injection from the ISP.



How do I know?




  • I am confident that @Tarun Mahajans ISP is BSNL/MTNL in India

  • Got the redirects while using a live CD

  • Tested the live CD at home, in the office, at a coffee shop all served by the same ISP

  • Was unable to replicate results using another ISP ( Airtel )


@Tarun Mahajan can you share your ISPs' name?



naganoadigei.com was registered explicitly to serve malware and redirect users to phishing sites



Updated Date: 2018-05-10
Created Date: 2018-05-10






share|improve this answer

















  • 2




    Even I am facing the same issue. I have a bsnl connection and I keep getting occasional redirects to the above-said URL in my macos chrome browser. sometimes even in my android chrome browser. Any solutions yet?
    – Ganesh
    Dec 20 at 6:57










  • Darn it I also have same issue and YES my ISP is BSNL.
    – Nikhil VJ
    Dec 25 at 9:44










  • Lot of discussion on this going on here: broadbandforum.co/threads/…
    – Nikhil VJ
    Dec 25 at 9:57
















6














Long time lurker first time poster.



@Elder Geek



Thanks for your response to to @Tarun Mahajan question, malicious or misconfired extensions can cause this behavior but in this case your this is URL/code injection from the ISP.



How do I know?




  • I am confident that @Tarun Mahajans ISP is BSNL/MTNL in India

  • Got the redirects while using a live CD

  • Tested the live CD at home, in the office, at a coffee shop all served by the same ISP

  • Was unable to replicate results using another ISP ( Airtel )


@Tarun Mahajan can you share your ISPs' name?



naganoadigei.com was registered explicitly to serve malware and redirect users to phishing sites



Updated Date: 2018-05-10
Created Date: 2018-05-10






share|improve this answer

















  • 2




    Even I am facing the same issue. I have a bsnl connection and I keep getting occasional redirects to the above-said URL in my macos chrome browser. sometimes even in my android chrome browser. Any solutions yet?
    – Ganesh
    Dec 20 at 6:57










  • Darn it I also have same issue and YES my ISP is BSNL.
    – Nikhil VJ
    Dec 25 at 9:44










  • Lot of discussion on this going on here: broadbandforum.co/threads/…
    – Nikhil VJ
    Dec 25 at 9:57














6












6








6






Long time lurker first time poster.



@Elder Geek



Thanks for your response to to @Tarun Mahajan question, malicious or misconfired extensions can cause this behavior but in this case your this is URL/code injection from the ISP.



How do I know?




  • I am confident that @Tarun Mahajans ISP is BSNL/MTNL in India

  • Got the redirects while using a live CD

  • Tested the live CD at home, in the office, at a coffee shop all served by the same ISP

  • Was unable to replicate results using another ISP ( Airtel )


@Tarun Mahajan can you share your ISPs' name?



naganoadigei.com was registered explicitly to serve malware and redirect users to phishing sites



Updated Date: 2018-05-10
Created Date: 2018-05-10






share|improve this answer












Long time lurker first time poster.



@Elder Geek



Thanks for your response to to @Tarun Mahajan question, malicious or misconfired extensions can cause this behavior but in this case your this is URL/code injection from the ISP.



How do I know?




  • I am confident that @Tarun Mahajans ISP is BSNL/MTNL in India

  • Got the redirects while using a live CD

  • Tested the live CD at home, in the office, at a coffee shop all served by the same ISP

  • Was unable to replicate results using another ISP ( Airtel )


@Tarun Mahajan can you share your ISPs' name?



naganoadigei.com was registered explicitly to serve malware and redirect users to phishing sites



Updated Date: 2018-05-10
Created Date: 2018-05-10







share|improve this answer












share|improve this answer



share|improve this answer










answered Nov 28 at 3:33









naganoadigei.com

612




612








  • 2




    Even I am facing the same issue. I have a bsnl connection and I keep getting occasional redirects to the above-said URL in my macos chrome browser. sometimes even in my android chrome browser. Any solutions yet?
    – Ganesh
    Dec 20 at 6:57










  • Darn it I also have same issue and YES my ISP is BSNL.
    – Nikhil VJ
    Dec 25 at 9:44










  • Lot of discussion on this going on here: broadbandforum.co/threads/…
    – Nikhil VJ
    Dec 25 at 9:57














  • 2




    Even I am facing the same issue. I have a bsnl connection and I keep getting occasional redirects to the above-said URL in my macos chrome browser. sometimes even in my android chrome browser. Any solutions yet?
    – Ganesh
    Dec 20 at 6:57










  • Darn it I also have same issue and YES my ISP is BSNL.
    – Nikhil VJ
    Dec 25 at 9:44










  • Lot of discussion on this going on here: broadbandforum.co/threads/…
    – Nikhil VJ
    Dec 25 at 9:57








2




2




Even I am facing the same issue. I have a bsnl connection and I keep getting occasional redirects to the above-said URL in my macos chrome browser. sometimes even in my android chrome browser. Any solutions yet?
– Ganesh
Dec 20 at 6:57




Even I am facing the same issue. I have a bsnl connection and I keep getting occasional redirects to the above-said URL in my macos chrome browser. sometimes even in my android chrome browser. Any solutions yet?
– Ganesh
Dec 20 at 6:57












Darn it I also have same issue and YES my ISP is BSNL.
– Nikhil VJ
Dec 25 at 9:44




Darn it I also have same issue and YES my ISP is BSNL.
– Nikhil VJ
Dec 25 at 9:44












Lot of discussion on this going on here: broadbandforum.co/threads/…
– Nikhil VJ
Dec 25 at 9:57




Lot of discussion on this going on here: broadbandforum.co/threads/…
– Nikhil VJ
Dec 25 at 9:57













1














This comment is on the right track. There are a number of extensions that you can pick up than can cause this type of behaviour. Coupon Companion comes to mind but there are others as well. One way to determine if it's a plugin or extension causing this problem would be to launch the browser in safe mode:



Firefox safe mode



For Chrome use chrome --disable-extensions launched from the terminal.



Make sure all other instances of these browsers are closed when conducting this test.



When the problem doesn't exist when launched in safe mode you can remove all your extensions and add them in one by one to determine which extension is the culprit.



Sources:



How to start firefox in safemode?



https://superuser.com/questions/254579/how-to-open-google-chrome-with-extensions-disabled-turned-off






share|improve this answer





















  • I agree with your comment @elder-geek, still, I'm having the same issue on my machine. In between that, I'm also trying to figure out the actual problem.
    – Tarun Mahajan
    Nov 3 at 15:35










  • @user132319 The answer I provided if followed should lead you to the extension that is causing the problem. Is there something about it that you don't understand? If so, let me know where you found it to be unclear and I'll do my best to clarify.
    – Elder Geek
    Nov 5 at 16:58
















1














This comment is on the right track. There are a number of extensions that you can pick up than can cause this type of behaviour. Coupon Companion comes to mind but there are others as well. One way to determine if it's a plugin or extension causing this problem would be to launch the browser in safe mode:



Firefox safe mode



For Chrome use chrome --disable-extensions launched from the terminal.



Make sure all other instances of these browsers are closed when conducting this test.



When the problem doesn't exist when launched in safe mode you can remove all your extensions and add them in one by one to determine which extension is the culprit.



Sources:



How to start firefox in safemode?



https://superuser.com/questions/254579/how-to-open-google-chrome-with-extensions-disabled-turned-off






share|improve this answer





















  • I agree with your comment @elder-geek, still, I'm having the same issue on my machine. In between that, I'm also trying to figure out the actual problem.
    – Tarun Mahajan
    Nov 3 at 15:35










  • @user132319 The answer I provided if followed should lead you to the extension that is causing the problem. Is there something about it that you don't understand? If so, let me know where you found it to be unclear and I'll do my best to clarify.
    – Elder Geek
    Nov 5 at 16:58














1












1








1






This comment is on the right track. There are a number of extensions that you can pick up than can cause this type of behaviour. Coupon Companion comes to mind but there are others as well. One way to determine if it's a plugin or extension causing this problem would be to launch the browser in safe mode:



Firefox safe mode



For Chrome use chrome --disable-extensions launched from the terminal.



Make sure all other instances of these browsers are closed when conducting this test.



When the problem doesn't exist when launched in safe mode you can remove all your extensions and add them in one by one to determine which extension is the culprit.



Sources:



How to start firefox in safemode?



https://superuser.com/questions/254579/how-to-open-google-chrome-with-extensions-disabled-turned-off






share|improve this answer












This comment is on the right track. There are a number of extensions that you can pick up than can cause this type of behaviour. Coupon Companion comes to mind but there are others as well. One way to determine if it's a plugin or extension causing this problem would be to launch the browser in safe mode:



Firefox safe mode



For Chrome use chrome --disable-extensions launched from the terminal.



Make sure all other instances of these browsers are closed when conducting this test.



When the problem doesn't exist when launched in safe mode you can remove all your extensions and add them in one by one to determine which extension is the culprit.



Sources:



How to start firefox in safemode?



https://superuser.com/questions/254579/how-to-open-google-chrome-with-extensions-disabled-turned-off







share|improve this answer












share|improve this answer



share|improve this answer










answered Nov 2 at 16:41









Elder Geek

26.4k952125




26.4k952125












  • I agree with your comment @elder-geek, still, I'm having the same issue on my machine. In between that, I'm also trying to figure out the actual problem.
    – Tarun Mahajan
    Nov 3 at 15:35










  • @user132319 The answer I provided if followed should lead you to the extension that is causing the problem. Is there something about it that you don't understand? If so, let me know where you found it to be unclear and I'll do my best to clarify.
    – Elder Geek
    Nov 5 at 16:58


















  • I agree with your comment @elder-geek, still, I'm having the same issue on my machine. In between that, I'm also trying to figure out the actual problem.
    – Tarun Mahajan
    Nov 3 at 15:35










  • @user132319 The answer I provided if followed should lead you to the extension that is causing the problem. Is there something about it that you don't understand? If so, let me know where you found it to be unclear and I'll do my best to clarify.
    – Elder Geek
    Nov 5 at 16:58
















I agree with your comment @elder-geek, still, I'm having the same issue on my machine. In between that, I'm also trying to figure out the actual problem.
– Tarun Mahajan
Nov 3 at 15:35




I agree with your comment @elder-geek, still, I'm having the same issue on my machine. In between that, I'm also trying to figure out the actual problem.
– Tarun Mahajan
Nov 3 at 15:35












@user132319 The answer I provided if followed should lead you to the extension that is causing the problem. Is there something about it that you don't understand? If so, let me know where you found it to be unclear and I'll do my best to clarify.
– Elder Geek
Nov 5 at 16:58




@user132319 The answer I provided if followed should lead you to the extension that is causing the problem. Is there something about it that you don't understand? If so, let me know where you found it to be unclear and I'll do my best to clarify.
– Elder Geek
Nov 5 at 16:58





protected by Community 2 days ago



Thank you for your interest in this question.
Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).



Would you like to answer one of these unanswered questions instead?



Popular posts from this blog

Human spaceflight

Can not write log (Is /dev/pts mounted?) - openpty in Ubuntu-on-Windows?

張江高科駅