0

A few days ago an ad "Powered by LaSuperba" is showing on every broser of my Ubuntu 14.04. My main browser is google-chrome, but it happens on Firefox and Opera aswell. I noticed that it doesn't happen on incognito mode, but even removing EVERY extension from Chrome didn't do the trick.

  • Update I've also tried removing every browser preference file, reinstaled the SO keeping the /home partition and the problem is still there. So I think it hides somewhere in my home dir.

It looks like that this ads overlays something on the browser using SWF. Some sites like feedly even stop working because of this "overlay".

Any ideas?

  • Clear your cookies. And don't remove all add-ons. You might want to keep an adblocker around. – Nephente Sep 29 '15 at 16:21
  • At the bottom of this page, after much Windows-oriented information, are instructions for cleaning out Google Chrome and Firefox. Did you try these? – Jos Sep 29 '15 at 16:25
  • @mark: Since it happens on multiple browsers, "fixing" 1 browser cannot fix the problem. You could look at /etc/resolv.conf to see where your DNS comes from, use tracepath (sudo apt-get install tracepath) to see where your connections go, wireshark to watch the connections, check /etc/hosts for strangeness. You could use a command-line browser (lynx, links) to expose more info. Any idea who/what "LaSuperba" is? ISP? Porn site? Your Government? J. Random Hacker? – waltinator Sep 29 '15 at 18:43
  • @waltinator I don't see anything unusual on resolv.conf or hosts. I've tried removing the ~/ .config/google-chrome and ~/.config/opera but it didn't do the trick. I'll try cleaning the cookies. I don't really know what la superba is, looks like a malware for ads. Now I have ads popping up on every site that I open and sometimes new tabs open on their own with ads. – Mark Sep 30 '15 at 14:55
  • There was (on my computer at home, 6 1/2 hours away) a Firefox extension to show all sites connected to, but its name slips my mind. You could use wireshark to capture all TCP/IP packets in and out, and inspect them. man wireshark – waltinator Sep 30 '15 at 15:33
0

My roommate caught the same malware days ago and he found this post useful. I suppose it can give you some reference as well. You need to check files to clean ads.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.