How do I get rid of these?

Ralf Mardorf kde.lists at yahoo.com
Mon Apr 12 06:25:29 UTC 2021


On Mon, 12 Apr 2021 12:53:36 +1000, Karl Auer wrote:
>That looks to me as if you have a browser infection - malware targeting
>the browser. I've never seen such outside Windows though. It is
>generally picked up via some kind of trojaning such as installing a
>useful-looking but malicious plugin, or phishing someone to a malicious
>website.
>
>Luckily, such malware is generally fairly stupid - it's trying to drive
>clicks and downloads, and is not directly destructive, and is very
>obvious (as you've seen). But definitely do not follow any of these
>pop-ups...
>
>As far as I am aware the simplest method of eradication is to take a
>copy of your bookmarks, create a list of plugins that are installed and
>needed, then completely uninstall the browser (use "--purge") and re-
>install it. Then replace the plugins that are needed and restore the
>bookmarks.
>
>Before *using* any bookmark, go through them all and delete any that
>you don't know for a fact are needed. Check the targets on the rest -
>because some malware modifies bookmarks. If you can do without the
>bookmarks, just delete them too.

This is probably caused by a single website opened by one of the tabs,
at worst (still not much likely) the browser profile is quasi infected.
Kill the browser and when open it again don't restore the old session,
start a new session.
Reinstalling the browser is moot, especially without deleting the
browser related files in $HOME. 1. It's most unlikely that the browser
is infected. 2. If the browser should be infected, IOW something has
broken the sandbox, then probably way more than just the browser
is infected. If killing and restarting the browser without restoring
the old session doesn't work, get rid of the files in $HOME.

Depending on the browser you are using, check for switches, such as
Firfox's --safe-mode or --ProfileManager. Some browser provide --help,
other a man page.

For testing purpose, in the most worse case, add a new user and launch
the browser by the new user.

On Sun, 11 Apr 2021 21:07:58 -0400, Gene Heskett wrote:
>You are using gmail and google, so they own you and your machine.
>
>First, your own ISP probably has their own mail server, and it may
>have imap capability, mine does.
>
>Second, purge anything chromium related

I don't like the company, but their products, such as Chromium are way
more safe, than anything else. Google's crime is data mining, not
spamming users with Windows or dating related phishing crap, such as the
shown, "Windows Defender Update" or "Eva (29), 🖤online ~2.1 km".




More information about the ubuntu-users mailing list