How to remove naganoadigei.com popup virus











up vote
1
down vote

favorite
2












Whenever I click any URL so that will open a new tab with this URL (Please be careful):



hxxp://naganoadigei.com/imp/6932/?scontext_r=xlBO1OGoXtDY%2AqpCVwdK6hjcJXf8xQdE2bF9D7qYvJirlGAXcl42kf_7I6Zo60fY&md=snIhJiO2cDMywiIzJiOiEjNwADe5ADMiwiIiJiOiETN1cDe4AzNiwiIyJiOigGd0BnOv8SYwBnLzFmcrFmcpd3bytmLp52LkF2coJ2bhJHZvICLigmI6QzMyQDLiwmI6ISZu1SVTJCLiQnI60yMzADLionI6cTM2UDLismI6ETf


I'm using Ubuntu 16.04 LTS. I tried this with all my browsers such as Mozilla and Chrome; same thing happens in both browsers.



How do I remove this? Thanks in Advance










share|improve this question




















  • 1




    Are you using your home internet or something else? Are you using a proxy or VPN?
    – wjandrea
    Oct 26 at 13:52






  • 1




    What's your DNS server settings? Are you using your Home internet? Are you using a VPN?
    – Thomas Ward
    Oct 26 at 13:57










  • I'm Using Home Internet no proxy no VPN
    – Tarun Mahajan
    Oct 26 at 13:58






  • 2




    I would start by checking the browser's extras/extensions. If you find something you didn't installed there, remove them all.
    – GabrielaGarcia
    Oct 26 at 17:07






  • 1




    I'm facing the same issues on ubuntu 18.04 . Damn how did it manage to get in here!
    – Nikhil VJ
    Nov 23 at 6:39















up vote
1
down vote

favorite
2












Whenever I click any URL so that will open a new tab with this URL (Please be careful):



hxxp://naganoadigei.com/imp/6932/?scontext_r=xlBO1OGoXtDY%2AqpCVwdK6hjcJXf8xQdE2bF9D7qYvJirlGAXcl42kf_7I6Zo60fY&md=snIhJiO2cDMywiIzJiOiEjNwADe5ADMiwiIiJiOiETN1cDe4AzNiwiIyJiOigGd0BnOv8SYwBnLzFmcrFmcpd3bytmLp52LkF2coJ2bhJHZvICLigmI6QzMyQDLiwmI6ISZu1SVTJCLiQnI60yMzADLionI6cTM2UDLismI6ETf


I'm using Ubuntu 16.04 LTS. I tried this with all my browsers such as Mozilla and Chrome; same thing happens in both browsers.



How do I remove this? Thanks in Advance










share|improve this question




















  • 1




    Are you using your home internet or something else? Are you using a proxy or VPN?
    – wjandrea
    Oct 26 at 13:52






  • 1




    What's your DNS server settings? Are you using your Home internet? Are you using a VPN?
    – Thomas Ward
    Oct 26 at 13:57










  • I'm Using Home Internet no proxy no VPN
    – Tarun Mahajan
    Oct 26 at 13:58






  • 2




    I would start by checking the browser's extras/extensions. If you find something you didn't installed there, remove them all.
    – GabrielaGarcia
    Oct 26 at 17:07






  • 1




    I'm facing the same issues on ubuntu 18.04 . Damn how did it manage to get in here!
    – Nikhil VJ
    Nov 23 at 6:39













up vote
1
down vote

favorite
2









up vote
1
down vote

favorite
2






2





Whenever I click any URL so that will open a new tab with this URL (Please be careful):



hxxp://naganoadigei.com/imp/6932/?scontext_r=xlBO1OGoXtDY%2AqpCVwdK6hjcJXf8xQdE2bF9D7qYvJirlGAXcl42kf_7I6Zo60fY&md=snIhJiO2cDMywiIzJiOiEjNwADe5ADMiwiIiJiOiETN1cDe4AzNiwiIyJiOigGd0BnOv8SYwBnLzFmcrFmcpd3bytmLp52LkF2coJ2bhJHZvICLigmI6QzMyQDLiwmI6ISZu1SVTJCLiQnI60yMzADLionI6cTM2UDLismI6ETf


I'm using Ubuntu 16.04 LTS. I tried this with all my browsers such as Mozilla and Chrome; same thing happens in both browsers.



How do I remove this? Thanks in Advance










share|improve this question















Whenever I click any URL so that will open a new tab with this URL (Please be careful):



hxxp://naganoadigei.com/imp/6932/?scontext_r=xlBO1OGoXtDY%2AqpCVwdK6hjcJXf8xQdE2bF9D7qYvJirlGAXcl42kf_7I6Zo60fY&md=snIhJiO2cDMywiIzJiOiEjNwADe5ADMiwiIiJiOiETN1cDe4AzNiwiIyJiOigGd0BnOv8SYwBnLzFmcrFmcpd3bytmLp52LkF2coJ2bhJHZvICLigmI6QzMyQDLiwmI6ISZu1SVTJCLiQnI60yMzADLionI6cTM2UDLismI6ETf


I'm using Ubuntu 16.04 LTS. I tried this with all my browsers such as Mozilla and Chrome; same thing happens in both browsers.



How do I remove this? Thanks in Advance







firefox google-chrome browser malware popup-ads






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited Oct 26 at 13:56









Thomas Ward

43.1k23120170




43.1k23120170










asked Oct 26 at 13:38









Tarun Mahajan

184




184








  • 1




    Are you using your home internet or something else? Are you using a proxy or VPN?
    – wjandrea
    Oct 26 at 13:52






  • 1




    What's your DNS server settings? Are you using your Home internet? Are you using a VPN?
    – Thomas Ward
    Oct 26 at 13:57










  • I'm Using Home Internet no proxy no VPN
    – Tarun Mahajan
    Oct 26 at 13:58






  • 2




    I would start by checking the browser's extras/extensions. If you find something you didn't installed there, remove them all.
    – GabrielaGarcia
    Oct 26 at 17:07






  • 1




    I'm facing the same issues on ubuntu 18.04 . Damn how did it manage to get in here!
    – Nikhil VJ
    Nov 23 at 6:39














  • 1




    Are you using your home internet or something else? Are you using a proxy or VPN?
    – wjandrea
    Oct 26 at 13:52






  • 1




    What's your DNS server settings? Are you using your Home internet? Are you using a VPN?
    – Thomas Ward
    Oct 26 at 13:57










  • I'm Using Home Internet no proxy no VPN
    – Tarun Mahajan
    Oct 26 at 13:58






  • 2




    I would start by checking the browser's extras/extensions. If you find something you didn't installed there, remove them all.
    – GabrielaGarcia
    Oct 26 at 17:07






  • 1




    I'm facing the same issues on ubuntu 18.04 . Damn how did it manage to get in here!
    – Nikhil VJ
    Nov 23 at 6:39








1




1




Are you using your home internet or something else? Are you using a proxy or VPN?
– wjandrea
Oct 26 at 13:52




Are you using your home internet or something else? Are you using a proxy or VPN?
– wjandrea
Oct 26 at 13:52




1




1




What's your DNS server settings? Are you using your Home internet? Are you using a VPN?
– Thomas Ward
Oct 26 at 13:57




What's your DNS server settings? Are you using your Home internet? Are you using a VPN?
– Thomas Ward
Oct 26 at 13:57












I'm Using Home Internet no proxy no VPN
– Tarun Mahajan
Oct 26 at 13:58




I'm Using Home Internet no proxy no VPN
– Tarun Mahajan
Oct 26 at 13:58




2




2




I would start by checking the browser's extras/extensions. If you find something you didn't installed there, remove them all.
– GabrielaGarcia
Oct 26 at 17:07




I would start by checking the browser's extras/extensions. If you find something you didn't installed there, remove them all.
– GabrielaGarcia
Oct 26 at 17:07




1




1




I'm facing the same issues on ubuntu 18.04 . Damn how did it manage to get in here!
– Nikhil VJ
Nov 23 at 6:39




I'm facing the same issues on ubuntu 18.04 . Damn how did it manage to get in here!
– Nikhil VJ
Nov 23 at 6:39










2 Answers
2






active

oldest

votes

















up vote
2
down vote













Long time lurker first time poster.



@Elder Geek



Thanks for your response to to @Tarun Mahajan question, malicious or misconfired extensions can cause this behavior but in this case your this is URL/code injection from the ISP.



How do I know?




  • I am confident that @Tarun Mahajans ISP is BSNL/MTNL in India

  • Got the redirects while using a live CD

  • Tested the live CD at home, in the office, at a coffee shop all served by the same ISP

  • Was unable to replicate results using another ISP ( Airtel )


@Tarun Mahajan can you share your ISPs' name?



naganoadigei.com was registered explicitly to serve malware and redirect users to phishing sites



Updated Date: 2018-05-10
Created Date: 2018-05-10






share|improve this answer




























    up vote
    1
    down vote













    This comment is on the right track. There are a number of extensions that you can pick up than can cause this type of behaviour. Coupon Companion comes to mind but there are others as well. One way to determine if it's a plugin or extension causing this problem would be to launch the browser in safe mode:



    Firefox safe mode



    For Chrome use chrome --disable-extensions launched from the terminal.



    Make sure all other instances of these browsers are closed when conducting this test.



    When the problem doesn't exist when launched in safe mode you can remove all your extensions and add them in one by one to determine which extension is the culprit.



    Sources:



    How to start firefox in safemode?



    https://superuser.com/questions/254579/how-to-open-google-chrome-with-extensions-disabled-turned-off






    share|improve this answer





















    • I agree with your comment @elder-geek, still, I'm having the same issue on my machine. In between that, I'm also trying to figure out the actual problem.
      – Tarun Mahajan
      Nov 3 at 15:35










    • @user132319 The answer I provided if followed should lead you to the extension that is causing the problem. Is there something about it that you don't understand? If so, let me know where you found it to be unclear and I'll do my best to clarify.
      – Elder Geek
      Nov 5 at 16:58











    Your Answer








    StackExchange.ready(function() {
    var channelOptions = {
    tags: "".split(" "),
    id: "89"
    };
    initTagRenderer("".split(" "), "".split(" "), channelOptions);

    StackExchange.using("externalEditor", function() {
    // Have to fire editor after snippets, if snippets enabled
    if (StackExchange.settings.snippets.snippetsEnabled) {
    StackExchange.using("snippets", function() {
    createEditor();
    });
    }
    else {
    createEditor();
    }
    });

    function createEditor() {
    StackExchange.prepareEditor({
    heartbeatType: 'answer',
    convertImagesToLinks: true,
    noModals: true,
    showLowRepImageUploadWarning: true,
    reputationToPostImages: 10,
    bindNavPrevention: true,
    postfix: "",
    imageUploader: {
    brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
    contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
    allowUrls: true
    },
    onDemand: true,
    discardSelector: ".discard-answer"
    ,immediatelyShowMarkdownHelp:true
    });


    }
    });














    draft saved

    draft discarded


















    StackExchange.ready(
    function () {
    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1087450%2fhow-to-remove-naganoadigei-com-popup-virus%23new-answer', 'question_page');
    }
    );

    Post as a guest















    Required, but never shown

























    2 Answers
    2






    active

    oldest

    votes








    2 Answers
    2






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes








    up vote
    2
    down vote













    Long time lurker first time poster.



    @Elder Geek



    Thanks for your response to to @Tarun Mahajan question, malicious or misconfired extensions can cause this behavior but in this case your this is URL/code injection from the ISP.



    How do I know?




    • I am confident that @Tarun Mahajans ISP is BSNL/MTNL in India

    • Got the redirects while using a live CD

    • Tested the live CD at home, in the office, at a coffee shop all served by the same ISP

    • Was unable to replicate results using another ISP ( Airtel )


    @Tarun Mahajan can you share your ISPs' name?



    naganoadigei.com was registered explicitly to serve malware and redirect users to phishing sites



    Updated Date: 2018-05-10
    Created Date: 2018-05-10






    share|improve this answer

























      up vote
      2
      down vote













      Long time lurker first time poster.



      @Elder Geek



      Thanks for your response to to @Tarun Mahajan question, malicious or misconfired extensions can cause this behavior but in this case your this is URL/code injection from the ISP.



      How do I know?




      • I am confident that @Tarun Mahajans ISP is BSNL/MTNL in India

      • Got the redirects while using a live CD

      • Tested the live CD at home, in the office, at a coffee shop all served by the same ISP

      • Was unable to replicate results using another ISP ( Airtel )


      @Tarun Mahajan can you share your ISPs' name?



      naganoadigei.com was registered explicitly to serve malware and redirect users to phishing sites



      Updated Date: 2018-05-10
      Created Date: 2018-05-10






      share|improve this answer























        up vote
        2
        down vote










        up vote
        2
        down vote









        Long time lurker first time poster.



        @Elder Geek



        Thanks for your response to to @Tarun Mahajan question, malicious or misconfired extensions can cause this behavior but in this case your this is URL/code injection from the ISP.



        How do I know?




        • I am confident that @Tarun Mahajans ISP is BSNL/MTNL in India

        • Got the redirects while using a live CD

        • Tested the live CD at home, in the office, at a coffee shop all served by the same ISP

        • Was unable to replicate results using another ISP ( Airtel )


        @Tarun Mahajan can you share your ISPs' name?



        naganoadigei.com was registered explicitly to serve malware and redirect users to phishing sites



        Updated Date: 2018-05-10
        Created Date: 2018-05-10






        share|improve this answer












        Long time lurker first time poster.



        @Elder Geek



        Thanks for your response to to @Tarun Mahajan question, malicious or misconfired extensions can cause this behavior but in this case your this is URL/code injection from the ISP.



        How do I know?




        • I am confident that @Tarun Mahajans ISP is BSNL/MTNL in India

        • Got the redirects while using a live CD

        • Tested the live CD at home, in the office, at a coffee shop all served by the same ISP

        • Was unable to replicate results using another ISP ( Airtel )


        @Tarun Mahajan can you share your ISPs' name?



        naganoadigei.com was registered explicitly to serve malware and redirect users to phishing sites



        Updated Date: 2018-05-10
        Created Date: 2018-05-10







        share|improve this answer












        share|improve this answer



        share|improve this answer










        answered Nov 28 at 3:33









        naganoadigei.com

        212




        212
























            up vote
            1
            down vote













            This comment is on the right track. There are a number of extensions that you can pick up than can cause this type of behaviour. Coupon Companion comes to mind but there are others as well. One way to determine if it's a plugin or extension causing this problem would be to launch the browser in safe mode:



            Firefox safe mode



            For Chrome use chrome --disable-extensions launched from the terminal.



            Make sure all other instances of these browsers are closed when conducting this test.



            When the problem doesn't exist when launched in safe mode you can remove all your extensions and add them in one by one to determine which extension is the culprit.



            Sources:



            How to start firefox in safemode?



            https://superuser.com/questions/254579/how-to-open-google-chrome-with-extensions-disabled-turned-off






            share|improve this answer





















            • I agree with your comment @elder-geek, still, I'm having the same issue on my machine. In between that, I'm also trying to figure out the actual problem.
              – Tarun Mahajan
              Nov 3 at 15:35










            • @user132319 The answer I provided if followed should lead you to the extension that is causing the problem. Is there something about it that you don't understand? If so, let me know where you found it to be unclear and I'll do my best to clarify.
              – Elder Geek
              Nov 5 at 16:58















            up vote
            1
            down vote













            This comment is on the right track. There are a number of extensions that you can pick up than can cause this type of behaviour. Coupon Companion comes to mind but there are others as well. One way to determine if it's a plugin or extension causing this problem would be to launch the browser in safe mode:



            Firefox safe mode



            For Chrome use chrome --disable-extensions launched from the terminal.



            Make sure all other instances of these browsers are closed when conducting this test.



            When the problem doesn't exist when launched in safe mode you can remove all your extensions and add them in one by one to determine which extension is the culprit.



            Sources:



            How to start firefox in safemode?



            https://superuser.com/questions/254579/how-to-open-google-chrome-with-extensions-disabled-turned-off






            share|improve this answer





















            • I agree with your comment @elder-geek, still, I'm having the same issue on my machine. In between that, I'm also trying to figure out the actual problem.
              – Tarun Mahajan
              Nov 3 at 15:35










            • @user132319 The answer I provided if followed should lead you to the extension that is causing the problem. Is there something about it that you don't understand? If so, let me know where you found it to be unclear and I'll do my best to clarify.
              – Elder Geek
              Nov 5 at 16:58













            up vote
            1
            down vote










            up vote
            1
            down vote









            This comment is on the right track. There are a number of extensions that you can pick up than can cause this type of behaviour. Coupon Companion comes to mind but there are others as well. One way to determine if it's a plugin or extension causing this problem would be to launch the browser in safe mode:



            Firefox safe mode



            For Chrome use chrome --disable-extensions launched from the terminal.



            Make sure all other instances of these browsers are closed when conducting this test.



            When the problem doesn't exist when launched in safe mode you can remove all your extensions and add them in one by one to determine which extension is the culprit.



            Sources:



            How to start firefox in safemode?



            https://superuser.com/questions/254579/how-to-open-google-chrome-with-extensions-disabled-turned-off






            share|improve this answer












            This comment is on the right track. There are a number of extensions that you can pick up than can cause this type of behaviour. Coupon Companion comes to mind but there are others as well. One way to determine if it's a plugin or extension causing this problem would be to launch the browser in safe mode:



            Firefox safe mode



            For Chrome use chrome --disable-extensions launched from the terminal.



            Make sure all other instances of these browsers are closed when conducting this test.



            When the problem doesn't exist when launched in safe mode you can remove all your extensions and add them in one by one to determine which extension is the culprit.



            Sources:



            How to start firefox in safemode?



            https://superuser.com/questions/254579/how-to-open-google-chrome-with-extensions-disabled-turned-off







            share|improve this answer












            share|improve this answer



            share|improve this answer










            answered Nov 2 at 16:41









            Elder Geek

            26.3k951124




            26.3k951124












            • I agree with your comment @elder-geek, still, I'm having the same issue on my machine. In between that, I'm also trying to figure out the actual problem.
              – Tarun Mahajan
              Nov 3 at 15:35










            • @user132319 The answer I provided if followed should lead you to the extension that is causing the problem. Is there something about it that you don't understand? If so, let me know where you found it to be unclear and I'll do my best to clarify.
              – Elder Geek
              Nov 5 at 16:58


















            • I agree with your comment @elder-geek, still, I'm having the same issue on my machine. In between that, I'm also trying to figure out the actual problem.
              – Tarun Mahajan
              Nov 3 at 15:35










            • @user132319 The answer I provided if followed should lead you to the extension that is causing the problem. Is there something about it that you don't understand? If so, let me know where you found it to be unclear and I'll do my best to clarify.
              – Elder Geek
              Nov 5 at 16:58
















            I agree with your comment @elder-geek, still, I'm having the same issue on my machine. In between that, I'm also trying to figure out the actual problem.
            – Tarun Mahajan
            Nov 3 at 15:35




            I agree with your comment @elder-geek, still, I'm having the same issue on my machine. In between that, I'm also trying to figure out the actual problem.
            – Tarun Mahajan
            Nov 3 at 15:35












            @user132319 The answer I provided if followed should lead you to the extension that is causing the problem. Is there something about it that you don't understand? If so, let me know where you found it to be unclear and I'll do my best to clarify.
            – Elder Geek
            Nov 5 at 16:58




            @user132319 The answer I provided if followed should lead you to the extension that is causing the problem. Is there something about it that you don't understand? If so, let me know where you found it to be unclear and I'll do my best to clarify.
            – Elder Geek
            Nov 5 at 16:58


















            draft saved

            draft discarded




















































            Thanks for contributing an answer to Ask Ubuntu!


            • Please be sure to answer the question. Provide details and share your research!

            But avoid



            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.


            To learn more, see our tips on writing great answers.





            Some of your past answers have not been well-received, and you're in danger of being blocked from answering.


            Please pay close attention to the following guidance:


            • Please be sure to answer the question. Provide details and share your research!

            But avoid



            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.


            To learn more, see our tips on writing great answers.




            draft saved


            draft discarded














            StackExchange.ready(
            function () {
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1087450%2fhow-to-remove-naganoadigei-com-popup-virus%23new-answer', 'question_page');
            }
            );

            Post as a guest















            Required, but never shown





















































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown

































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown







            Popular posts from this blog

            mysqli_query(): Empty query in /home/lucindabrummitt/public_html/blog/wp-includes/wp-db.php on line 1924

            How to change which sound is reproduced for terminal bell?

            Can I use Tabulator js library in my java Spring + Thymeleaf project?