Redirect malware randomly opening new tabs
-
ukgg last edited by
I can see from general web searches that I am not the only one with this problem. My browsing experience is being seriously disrupted by redirections to adware sites. Using what settings and extensions are available I have now prevented most of them from opening in pop ups BUT there is only one way to stop them randomly opening themselves in new tabs, and that is to turn off Javascript. Obviously I don't want to resort to that as it is even more disruptive to using the web. (Before anyone asks I have run full scans with Kaspersky and nothing is found). I would obviously like to prevent my browser from opening up new tabs when I haven't asked it to. Perhaps someone can tell me if this is possible (I can find nothing in settings that appears to do that) PLEASE? If not perhaps such an option could be added????
I have the latest updates to Opera and my phone is a stock KitKat ROM Galaxy Note Edcge -
-
Deleted User last edited by
Something like "tracking protection" feature from Firefox Nightly or Bluhell add-on would be great. However Adguard VPN adblock should work on non-rooted devices but I'm not sure if redirections are blocked.
-
sgunhouse Moderator Volunteer last edited by
He said "opening in pop-up" ... that's not actually redirection. Either some external software is opening links when it detects a browser running, or he has one of those cheap networks that inserts code for ads into pages you visit. On a desktop he could look at the code for the ads to determine where they came from, but Android isn't so simple ...
-
Deleted User last edited by
Ad tracker kills them all, new tabs are opened blank and current pop-ups removed (AdFree via localhost) but apk files linked to Google Store still manage to pass in any case. Connection is backed by Opera Max (DoubleClick is 'Maxed', btw) an HTTPS traffic mark my location as 'unknown' so no dedicated ads for me other than Google Services wants to. Some cases in which gservices inject ads to Chrome browser were reported.
-
Deleted User last edited by
Another thing, Opera should ditch that damned Toolbar, Horizon one. When Google account is active then slimpot.com is bugging around as second link from ads redir chain. First guess, first hit, previously I've changed google settings until I was bored.
-
-
Deleted User last edited by
Yes, it is. Skyfire Horizon are messing around with my nerves passing over all collected data translated in intrusive adds.
-
-
ukgg last edited by
Thanks everyone. I think that I know when it happened. I was browsing when suddenly my phone switched to google playstore and downloaded something (I'm talking less than two to three seconds to complete). I guessed this was bad and turned off mobile data and wiFi on the toggles and then turned the phone off as fast as I could. BUT I obviously wasn't quick enough. Unfortunately I have no idea what was downloaded. I have tried google searching every service and app running but haven't found what the malware is hiding as - so much for Android being better than MS because it is 'open source'. I can't even see the manufacturer or date installed for the apps on my phone to narrow it down. Anyware I also ran Malwarebytes but nothing was found. I have ad blokers which have stopped the pop ups but I still have random new tabs opening to all sorts of dodgy sites. I just close the windows straight away, but it is extremely annoying!
-
-
Deleted User last edited by
sagrid - how can I find the malware apk amongst the genuine ones??
You can't. There should not be any unexpected threads regarding apk redirections, anyway once downloaded these files are not installed so either persist in download manager or download history. I recommend you to check only normal cookies instead "excluding third-party" option and avoid Off-Road mode. I can confirm that several spam links are served in foreground and inject popups in media player layer and also replace generic ads in both cases mentioned already.
-
Deleted User last edited by
@sgunhouse Thanks for your feedback. Add: original post may refer to speedclick\popads JavaScript redirections as for slimposts.com and it appears that has an easy fix, also I can confirm that "networks that inserts code for ads into pages" still stands adding that is true for deprecated connections with a bad pattern in loading process.
-
terryancyberyan last edited by
i have a similar problem some new tab oppening in the setting i have search if a can enter or create my own black list same that the pc version but i dont find
i'm on a stock 4.4.3 samsung note 3
-
Deleted User last edited by
i have a similar problem some new tab oppening in the setting i have search if a can enter or create my own black list same that the pc version but i dont find
i'm on a stock 4.4.3 samsung note 3Set the highest image quality in settings, eventually that will stop the UA parser for ads (site example www.filmeonline2013.biz) and javascript injection caused by (the same) loading layer for ads and links with '#' in URL. As a matter of preference I always set DXT for tile compression method in flags and foreground for new tabs in settings. Opera browser will run slightly slower, btw.
-
-
ukgg last edited by
Thanks sagrid. You said before that HTTPS marks your location as unknown - how do you do that?
-
Deleted User last edited by
Thanks sagrid. You said before that HTTPS marks your location as unknown - how do you do that?
That doesn't count for ads. Google can track me silently without gmap fuss, anyway that depends on G account settings.
-
android123454321 last edited by
I finally found the solution!!
This irritated me so much I actually came back to all the forums and registered so that I could help other people fix this. (P.S. I never leave comments on these forums so you must know how much this stupid popup thing annoyed me that I actually come back and registered)
It is a malicious app that is causing it. In my case it was "MP3 Music Download Best". Someone else found it was "Simple Mp3 Downloader". It could be potentially be almost any app though.
The app that I used to find the malicious app is called "Ad Clean & Antivirus by StopBadApp Mobile Security". It has great reviews on Google Play as well.
Install this app and let it scan your device and it will find the app that is causing your problem.
Let me know if this sorts out your problem. This popup thing has been annoying me for weeks and I would like to know if this helped anyone else.
Good luck!
-
Deleted User last edited by
@android123454321 that must be a joke in respect to users feedback related with malware redirection problem. Perhaps can work for you but doesn't mean necessary that it's an ultimate solution for everybody. Some tests on CM reveals that the exploit is resumed at memory compression factor when is below standard (dev variables), at least in this manner I was able to reproduce the issue using Opera Browser.
