Redirect malware randomly opening new tabs

  • I can see from general web searches that I am not the only one with this problem. My browsing experience is being seriously disrupted by redirections to adware sites. Using what settings and extensions are available I have now prevented most of them from opening in pop ups BUT there is only one way to stop them randomly opening themselves in new tabs, and that is to turn off Javascript. Obviously I don't want to resort to that as it is even more disruptive to using the web. (Before anyone asks I have run full scans with Kaspersky and nothing is found). I would obviously like to prevent my browser from opening up new tabs when I haven't asked it to. Perhaps someone can tell me if this is possible (I can find nothing in settings that appears to do that) PLEASE? If not perhaps such an option could be added????
    I have the latest updates to Opera and my phone is a stock KitKat ROM Galaxy Note Edcge

  • What other apps are currently running in your phone? Tap the window list icon in the toolbar to see. Then start closing them to find out which is causing the problem.

  • Something like "tracking protection" feature from Firefox Nightly or Bluhell add-on would be great. However Adguard VPN adblock should work on non-rooted devices but I'm not sure if redirections are blocked.

  • He said "opening in pop-up" ... that's not actually redirection. Either some external software is opening links when it detects a browser running, or he has one of those cheap networks that inserts code for ads into pages you visit. On a desktop he could look at the code for the ads to determine where they came from, but Android isn't so simple ...

  • Ad tracker kills them all, new tabs are opened blank and current pop-ups removed (AdFree via localhost) but apk files linked to Google Store still manage to pass in any case. Connection is backed by Opera Max (DoubleClick is 'Maxed', btw) an HTTPS traffic mark my location as 'unknown' so no dedicated ads for me other than Google Services wants to. Some cases in which gservices inject ads to Chrome browser were reported.

  • Another thing, Opera should ditch that damned Toolbar, Horizon one. When Google account is active then slimpot.com is bugging around as second link from ads redir chain. First guess, first hit, previously I've changed google settings until I was bored.

  • Toolbar? Are you sure it isn't an extension?

  • Yes, it is. Skyfire Horizon are messing around with my nerves passing over all collected data translated in intrusive adds.

  • If it's an extension, just disable or remove it.

  • Thanks everyone. I think that I know when it happened. I was browsing when suddenly my phone switched to google playstore and downloaded something (I'm talking less than two to three seconds to complete). I guessed this was bad and turned off mobile data and wiFi on the toggles and then turned the phone off as fast as I could. BUT I obviously wasn't quick enough. Unfortunately I have no idea what was downloaded. I have tried google searching every service and app running but haven't found what the malware is hiding as - so much for Android being better than MS because it is 'open source'. I can't even see the manufacturer or date installed for the apps on my phone to narrow it down. Anyware I also ran Malwarebytes but nothing was found. I have ad blokers which have stopped the pop ups but I still have random new tabs opening to all sorts of dodgy sites. I just close the windows straight away, but it is extremely annoying!

  • sagrid - how can I find the malware apk amongst the genuine ones??

  • sagrid - how can I find the malware apk amongst the genuine ones??

    You can't. There should not be any unexpected threads regarding apk redirections, anyway once downloaded these files are not installed so either persist in download manager or download history. I recommend you to check only normal cookies instead "excluding third-party" option and avoid Off-Road mode. I can confirm that several spam links are served in foreground and inject popups in media player layer and also replace generic ads in both cases mentioned already.

  • @sgunhouse Thanks for your feedback. Add: original post may refer to speedclick\popads JavaScript redirections as for slimposts.com and it appears that has an easy fix, also I can confirm that "networks that inserts code for ads into pages" still stands adding that is true for deprecated connections with a bad pattern in loading process.

  • i have a similar problem some new tab oppening in the setting i have search if a can enter or create my own black list same that the pc version but i dont find

    i'm on a stock 4.4.3 samsung note 3

  • i have a similar problem some new tab oppening in the setting i have search if a can enter or create my own black list same that the pc version but i dont find
    i'm on a stock 4.4.3 samsung note 3

    Set the highest image quality in settings, eventually that will stop the UA parser for ads (site example www.filmeonline2013.biz) and javascript injection caused by (the same) loading layer for ads and links with '#' in URL. As a matter of preference I always set DXT for tile compression method in flags and foreground for new tabs in settings. Opera browser will run slightly slower, btw.

  • How do you disable javascript?

  • Thanks sagrid. You said before that HTTPS marks your location as unknown - how do you do that?

  • Thanks sagrid. You said before that HTTPS marks your location as unknown - how do you do that?

    That doesn't count for ads. Google can track me silently without gmap fuss, anyway that depends on G account settings.

  • I finally found the solution!!

    This irritated me so much I actually came back to all the forums and registered so that I could help other people fix this. (P.S. I never leave comments on these forums so you must know how much this stupid popup thing annoyed me that I actually come back and registered)

    It is a malicious app that is causing it. In my case it was "MP3 Music Download Best". Someone else found it was "Simple Mp3 Downloader". It could be potentially be almost any app though.

    The app that I used to find the malicious app is called "Ad Clean & Antivirus by StopBadApp Mobile Security". It has great reviews on Google Play as well.

    Install this app and let it scan your device and it will find the app that is causing your problem.

    Let me know if this sorts out your problem. This popup thing has been annoying me for weeks and I would like to know if this helped anyone else.

    Good luck!

  • @android123454321 that must be a joke in respect to users feedback related with malware redirection problem. Perhaps can work for you but doesn't mean necessary that it's an ultimate solution for everybody. Some tests on CM reveals that the exploit is resumed at memory compression factor when is below standard (dev variables), at least in this manner I was able to reproduce the issue using Opera Browser.

Log in to reply
 

Looks like your connection to Opera forums was lost, please wait while we try to reconnect.