Some malicious script redirects every website to cpamobland.net and displays annoying DU Battery Saver ad
Whenever I open almost any site, I'm getting redirected to domain cpamobland.net which displays an ad for 'DU Battery Saver' application from Android Market. It is impossible to browse the web anymore. Example sites I've tried opening: 1) http://m.geektimes.ru 2) http://linux.org.ru 3) http://alexandreev.livejournal.com
I think there's a malicious ad embedded on some of these sites that is using some javascript vulnerability to redirect user to the http://cpamobland.net domain. I've tried turning javascript off in settings, but it didn't help. Eugene
Alla svar (2)
hello, this sounds like an issue with adware/malware that is active on your system, so please perform all these steps:
- reset firefox (this will keep your bookmarks and passwords)
- afterwards go to the firefox menu ≡ > addons > extensions and in case there are still extensions listed there, disable them.
- finally run a full scan of your system with different security tools like the free version of malwarebytes and adwcleaner to make sure that adware isn't present in other places of your system as well.
This happened only on my Android phone. I've installed three antiviruses and Malware removers (McAffee, and a couple of others), but they didn't find anything.
I remembered, that recently I've installed an addon for mobile firefox: https://addons.mozilla.org/fr/firefox/addon/voilier-autour-du-monde/
After removing this theme, problem disappeared, and I can open the same sites without any annoying popups. Maybe this theme is infected somehow?
I'm not sure that I'm right, but I didn't reset the profile or do anything with firefox (not even clearing the history, cookies, etc.), just installed three antivirus programs (none of which found anything), and removed this addon (the only addon my mobile firefox had).