1bcde.com browser hijacker removal

Asked by Trevor Fernandes

Hi,

My Ubuntu 14.04 LTS system has 2 browsers namely Firefox and Chrome.

Whenever I open an 'http' page & click on links, buttons in the webpage a pop up will open showing either 'newsprofin.com' or '1bcde.com'. There is no problem with 'https' sites. It happens on both browsers. The problem persists even if I login using a different Ubuntu user.

I had installed ClamAV (& ClamTK graphical interface), but it is unable to detect the malware/hijacker. Comodo antivirus too is unable to detect it. I ran both the antiviruses with latest updates.

(I've just uninstalled both these antiviruses since they can't get the job done)

What do I do?

Many thanks.

Question information

Language:
English Edit question
Status:
Expired
For:
Ubuntu Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
actionparsnip (andrew-woodhead666) said :
#1

What is the output of:

lsb_release -a; cat -n /etc/resolv.conf; uname -a; cat -n /etc/hosts

Thanks

Revision history for this message
Trevor Fernandes (trevorubuntu) said :
#2

Thanks andrew-woodhead666

The output is:

No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 14.04.5 LTS
Release: 14.04
Codename: trusty
     1 # Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8)
     2 # DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN
     3 nameserver 127.0.1.1
Linux Lappy 3.13.0-156-generic #206-Ubuntu SMP Fri Aug 17 08:51:32 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux
     1 127.0.0.1 localhost
     2 127.0.1.1 Lappy
     3
     4 # The following lines are desirable for IPv6 capable hosts
     5 ::1 ip6-localhost ip6-loopback
     6 fe00::0 ip6-localnet
     7 ff00::0 ip6-mcastprefix
     8 ff02::1 ip6-allnodes
     9 ff02::2 ip6-allrouters

Revision history for this message
Launchpad Janitor (janitor) said :
#3

This question was expired because it remained in the 'Open' state without activity for the last 15 days.