I use ubuntu 32 bit and chrome's infected with the softwareupdaterlp virus. I don't really know what steps I should take aside from resetting/re-installing chrome. Would really appreciate any tips on identifying and removing corrupted or infected files related to the malware.
2 Answers
Here are couple of suggestions. When I mention commands, those are to be issued in command-line aka terminal , which you can access by pressing CtrlAltT
- Remove google-chrome related folders, e.g.
/home/username/.config/google-chrome
and/home/username/.cache/google-chrome
. You can find others withlocate google-chrome
command. - Remove google-chrome completely with
sudo apt-get remove --purge google-chrome
orsudo dpkg --purge google-chrome
. - Get an antivirus or rootkit checker, as well as system cleaning programs. jkrix mentioned ClamTK, which is decent option, but there's others. Open Software Center and simply search for
rootkit
orantivirus
orsecurity
. As for cleaning software, I recommend BleachBit. - Popup adware might not necessarily infect viruses but rather routers. Refer to this post on askubuntu.com.
- Remove
.macromedia
folder; flash-player related adware isn't something unheard of. - Adware might not necessarily be attatched to the browser, but come from somewhere else. Open chrome (with only one page if possible) and in terminal isssue the command
netstat -tulpan > netscan.txt && gnome-open netscan.txt
. This will output list of established connections with list of which progams have established those connections. The text file will be opened as soon as the scan complete with gedit, which is a default text editor in Ubuntu. - If things don't work out, backup your files and reinstall the whole system. Upon completing the reinstall get yourself a firewall and chrome plug-ins such as
adblock
orBetter Privacy
. Reinstalling whole system may sound paranoid, but if a system is seriously compromised, it's better be safe than sorry.
You could also ask about your issue on security.stackexchange.com . That site is all about cyber security in general, and you probably will find much better solutions than here.
Best of luck to you !
-
1I found your
netstat -tulpan
helpful for one of my current projects. Jul 30, 2017 at 17:11
My first guess would be to install and run ClamAV. I've been using it for a few months now and it does a pretty good job at detecting malware.
I use the GUI version of ClamAV which is called ClamTK.
Hope this has helped you out.