xn--ivg highjack

Asked by Professor George F. Hart

I think my Ubuntu 13.03 system was recently high-jacked. When I use Google [either through Chrome or Firefox] it seems I am redirected via http://xn--ivg. It started a few days ago and I think came from one of my LinkedIn groups. Any idea what I can do to get rid of it other than a complete re-installation? According to the web this is registered to Andrew Naylor: NS1 [and NS2] SEDOPARKING.COM.

Is this a key logger?

George Hart

Question information

Language:
English Edit question
Status:
Answered
For:
Ubuntu Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
N1ck 7h0m4d4k15 (nicktux) said :
#1

I think this is not an Ubuntu hijacked issue, but browser's issue insted.

Try to remove all the cache of Chrome and Firefox. (browsers must be closed).

    rm .cache/google-chrome/*
    rm .cache/mozilla/firefox/*

If problem persist, then try to start firefox with a new profile (sometimes flash player gets hijacked). Is a simple redirecting link. Keyloggers and/or viruses are more complicated (than a simple adware) and most of them cannot leave in a Unix-like environment.
To start firefox with a new profile

    firefox -p

and choose to create a new profile.

If with the new profile everything is good, then go to Firefox > Help > Troublesooting and RESET firefox. (you will lose all your settings)

I don't know if Chrome has similar RESET feature , but in case it hasn't you can remove the configuration files. (You will lose all your settings).

    rm -rf .config/google-chrome/*

Regards
 NikTh

Can you help with this problem?

Provide an answer of your own, or ask Professor George F. Hart for more information if necessary.

To post a message you must log in.