I have been experiencing this problem for quite some time now. Whenever I open any site in chrome/FF and click on any link on it, it opens a fresh tab in chrome and with a URL http://wonderlandads.com/afu.php?zoneid=437742 and it randomly redirects to some websites.

I have this problem with my windows machine as well as ubuntu. My thinking till date was ubuntu is immune to viruses. But this is really annoying.

I searched in the internet for long hours to find a solution. Removed chrome extensions, reset browser and my router multiple times. But the problem still persists. I have seen some solutions online for windows but not for ubuntu eg here.

Can somebody point me in some direction so that I can go and figure out a solution for my issue.

I am pretty much fed up with this. When I browse behind a Firewall protected network this issue is not present.

  • 2
    " My thinking till date was ubuntu is immune to viruses." 1. Not immune but far more difficult than with another OS; at the moment there are zero virusses in the world that left a lab evironments. 2. this is not a virus; it is something you install yourself. Check /etc/hosts for this. Also check if the binary for firefox and chrome is the same. Update locatedb and do a locate on "wonderlandads". – Rinzwind Sep 18 '16 at 19:36
  • and please tell us also what software you installed that got you this. – Rinzwind Sep 18 '16 at 19:59
  • I tried to locate wonderlandads and checked in /etc/hosts. Did not find any traces there. I don't remember what exactly created this problem. But it happens on this very page when i click on any link. I removed all the extensions in chrome/FF but its still giving me headache – zamil Sep 19 '16 at 9:03
  • Have a look at this work in progress: askubuntu.com/questions/826801/… – Rinzwind Sep 19 '16 at 9:11
  • wonderlandads is a toolbar in a browser it seems.And can have the following names: babylon toolbar, coolcake, search product by conduit. This might work: virusresearch.org/… – Rinzwind Sep 19 '16 at 9:20

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Browse other questions tagged or ask your own question.