0

A few days ago an ad "Powered by LaSuperba" is showing on every broser of my Ubuntu 14.04. My main browser is google-chrome, but it happens on Firefox and Opera aswell. I noticed that it doesn't happen on incognito mode, but even removing EVERY extension from Chrome didn't do the trick.

  • Update I've also tried removing every browser preference file, reinstaled the SO keeping the /home partition and the problem is still there. So I think it hides somewhere in my home dir.

It looks like that this ads overlays something on the browser using SWF. Some sites like feedly even stop working because of this "overlay".

Any ideas?

Improve this question
9
  • Clear your cookies. And don't remove all add-ons. You might want to keep an adblocker around.
    – Nephente
    Sep 29, 2015 at 16:21
  • At the bottom of this page, after much Windows-oriented information, are instructions for cleaning out Google Chrome and Firefox. Did you try these?
    – Jos
    Sep 29, 2015 at 16:25
  • @mark: Since it happens on multiple browsers, "fixing" 1 browser cannot fix the problem. You could look at /etc/resolv.conf to see where your DNS comes from, use tracepath (sudo apt-get install tracepath) to see where your connections go, wireshark to watch the connections, check /etc/hosts for strangeness. You could use a command-line browser (lynx, links) to expose more info. Any idea who/what "LaSuperba" is? ISP? Porn site? Your Government? J. Random Hacker?
    – waltinator
    Sep 29, 2015 at 18:43
  • @waltinator I don't see anything unusual on resolv.conf or hosts. I've tried removing the ~/ .config/google-chrome and ~/.config/opera but it didn't do the trick. I'll try cleaning the cookies. I don't really know what la superba is, looks like a malware for ads. Now I have ads popping up on every site that I open and sometimes new tabs open on their own with ads.
    – Mark
    Sep 30, 2015 at 14:55
  • There was (on my computer at home, 6 1/2 hours away) a Firefox extension to show all sites connected to, but its name slips my mind. You could use wireshark to capture all TCP/IP packets in and out, and inspect them. man wireshark
    – waltinator
    Sep 30, 2015 at 15:33

1 Answer 1

Reset to default
0

My roommate caught the same malware days ago and he found this post useful. I suppose it can give you some reference as well. You need to check files to clean ads.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .