Possible Chrome Extension Malware
Clash Royale CLAN TAG#URR8PPP up vote
0
down vote
favorite
Yesterday, WIRED described how Chrome Malware has now evolved and is affecting all OS's. I run Ubuntu 17.04 and whenever using the Firefox browser, 58.0 (32-bit), my session often freezes for many minutes. At this time, I have noticed rapid activity on my Internet Router indicating there is 'traffic' even though I am unable to move the mouse. Apparently the Malware is botware generating 'clicks'.
Sometimes, the system eventually frees up and sometimes I am prompted to stop a script from running. The prompts have included the following scripts:
chrome://messenger/content/MailWindow.js:270
chrome://messenger/content/folderDisplay.js:66
chrome://messenger/content/msgMail3PanelWindow.js:726
chrome://global/content/bindingsNotification.xml:323
chrome://messenger/content/mailWindow.js:279
From these prompts, I believe I have been affected with some malware version(s).
I have very limited Technical Skills and am asking for help.
1) I have never installed Chrome and I don't believe I have any use for it.
2) If I have Chrome installed, what are the Terminal Instructions to remove it and any extensions that are loaded?
Any assistance would be greatly appreciated.
google-chrome
asked Jan 31 at 22:14
ianmac
1
add a comment |Â
up vote
0
down vote
favorite
Yesterday, WIRED described how Chrome Malware has now evolved and is affecting all OS's. I run Ubuntu 17.04 and whenever using the Firefox browser, 58.0 (32-bit), my session often freezes for many minutes. At this time, I have noticed rapid activity on my Internet Router indicating there is 'traffic' even though I am unable to move the mouse. Apparently the Malware is botware generating 'clicks'.
Sometimes, the system eventually frees up and sometimes I am prompted to stop a script from running. The prompts have included the following scripts:
chrome://messenger/content/MailWindow.js:270
chrome://messenger/content/folderDisplay.js:66
chrome://messenger/content/msgMail3PanelWindow.js:726
chrome://global/content/bindingsNotification.xml:323
chrome://messenger/content/mailWindow.js:279
From these prompts, I believe I have been affected with some malware version(s).
I have very limited Technical Skills and am asking for help.
1) I have never installed Chrome and I don't believe I have any use for it.
2) If I have Chrome installed, what are the Terminal Instructions to remove it and any extensions that are loaded?
Any assistance would be greatly appreciated.
google-chrome
asked Jan 31 at 22:14
ianmac
1
If you believe your Ubuntu system has been compromised, then 1) Boot from a clean LiveUSB. Make a new LiveUSB on a non-infected system if needed. 2) Reinstall Ubuntu. 3) Restore your data from a clean backup. DO NOT try to clean infected data - that's how infections spread to clean systems. 4) Avoid those dodgy websites that spread such infections.
– user535733
Feb 1 at 2:37
add a comment |Â
up vote
0
down vote
favorite
up vote
0
down vote
favorite
Yesterday, WIRED described how Chrome Malware has now evolved and is affecting all OS's. I run Ubuntu 17.04 and whenever using the Firefox browser, 58.0 (32-bit), my session often freezes for many minutes. At this time, I have noticed rapid activity on my Internet Router indicating there is 'traffic' even though I am unable to move the mouse. Apparently the Malware is botware generating 'clicks'.
Sometimes, the system eventually frees up and sometimes I am prompted to stop a script from running. The prompts have included the following scripts:
chrome://messenger/content/MailWindow.js:270
chrome://messenger/content/folderDisplay.js:66
chrome://messenger/content/msgMail3PanelWindow.js:726
chrome://global/content/bindingsNotification.xml:323
chrome://messenger/content/mailWindow.js:279
From these prompts, I believe I have been affected with some malware version(s).
I have very limited Technical Skills and am asking for help.
1) I have never installed Chrome and I don't believe I have any use for it.
2) If I have Chrome installed, what are the Terminal Instructions to remove it and any extensions that are loaded?
Any assistance would be greatly appreciated.
google-chrome
asked Jan 31 at 22:14
ianmac
1
Yesterday, WIRED described how Chrome Malware has now evolved and is affecting all OS's. I run Ubuntu 17.04 and whenever using the Firefox browser, 58.0 (32-bit), my session often freezes for many minutes. At this time, I have noticed rapid activity on my Internet Router indicating there is 'traffic' even though I am unable to move the mouse. Apparently the Malware is botware generating 'clicks'.
Sometimes, the system eventually frees up and sometimes I am prompted to stop a script from running. The prompts have included the following scripts:
chrome://messenger/content/MailWindow.js:270
chrome://messenger/content/folderDisplay.js:66
chrome://messenger/content/msgMail3PanelWindow.js:726
chrome://global/content/bindingsNotification.xml:323
chrome://messenger/content/mailWindow.js:279
From these prompts, I believe I have been affected with some malware version(s).
I have very limited Technical Skills and am asking for help.
1) I have never installed Chrome and I don't believe I have any use for it.
2) If I have Chrome installed, what are the Terminal Instructions to remove it and any extensions that are loaded?
Any assistance would be greatly appreciated.
google-chrome
google-chrome
asked Jan 31 at 22:14
ianmac
1
asked Jan 31 at 22:14
ianmac
1
asked Jan 31 at 22:14
ianmac
1
asked Jan 31 at 22:14
ianmac
1
asked Jan 31 at 22:14
ianmac
1
1
If you believe your Ubuntu system has been compromised, then 1) Boot from a clean LiveUSB. Make a new LiveUSB on a non-infected system if needed. 2) Reinstall Ubuntu. 3) Restore your data from a clean backup. DO NOT try to clean infected data - that's how infections spread to clean systems. 4) Avoid those dodgy websites that spread such infections.
– user535733
Feb 1 at 2:37
add a comment |Â
If you believe your Ubuntu system has been compromised, then 1) Boot from a clean LiveUSB. Make a new LiveUSB on a non-infected system if needed. 2) Reinstall Ubuntu. 3) Restore your data from a clean backup. DO NOT try to clean infected data - that's how infections spread to clean systems. 4) Avoid those dodgy websites that spread such infections.
– user535733
Feb 1 at 2:37
If you believe your Ubuntu system has been compromised, then 1) Boot from a clean LiveUSB. Make a new LiveUSB on a non-infected system if needed. 2) Reinstall Ubuntu. 3) Restore your data from a clean backup. DO NOT try to clean infected data - that's how infections spread to clean systems. 4) Avoid those dodgy websites that spread such infections.
– user535733
Feb 1 at 2:37
If you believe your Ubuntu system has been compromised, then 1) Boot from a clean LiveUSB. Make a new LiveUSB on a non-infected system if needed. 2) Reinstall Ubuntu. 3) Restore your data from a clean backup. DO NOT try to clean infected data - that's how infections spread to clean systems. 4) Avoid those dodgy websites that spread such infections.
– user535733
Feb 1 at 2:37
add a comment |Â
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
var $window = $(window),
onScroll = function(e)
var $elem = $('.new-login-left'),
docViewTop = $window.scrollTop(),
docViewBottom = docViewTop + $window.height(),
elemTop = $elem.offset().top,
elemBottom = elemTop + $elem.height();
if ((docViewTop elemBottom))
StackExchange.using('gps', function() StackExchange.gps.track('embedded_signup_form.view', location: 'question_page' ); );
$window.unbind('scroll', onScroll);
;
$window.on('scroll', onScroll);
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1001878%2fpossible-chrome-extension-malware%23new-answer', 'question_page');
);
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
var $window = $(window),
onScroll = function(e)
var $elem = $('.new-login-left'),
docViewTop = $window.scrollTop(),
docViewBottom = docViewTop + $window.height(),
elemTop = $elem.offset().top,
elemBottom = elemTop + $elem.height();
if ((docViewTop elemBottom))
StackExchange.using('gps', function() StackExchange.gps.track('embedded_signup_form.view', location: 'question_page' ); );
$window.unbind('scroll', onScroll);
;
$window.on('scroll', onScroll);
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
var $window = $(window),
onScroll = function(e)
var $elem = $('.new-login-left'),
docViewTop = $window.scrollTop(),
docViewBottom = docViewTop + $window.height(),
elemTop = $elem.offset().top,
elemBottom = elemTop + $elem.height();
if ((docViewTop elemBottom))
StackExchange.using('gps', function() StackExchange.gps.track('embedded_signup_form.view', location: 'question_page' ); );
$window.unbind('scroll', onScroll);
;
$window.on('scroll', onScroll);
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
var $window = $(window),
onScroll = function(e)
var $elem = $('.new-login-left'),
docViewTop = $window.scrollTop(),
docViewBottom = docViewTop + $window.height(),
elemTop = $elem.offset().top,
elemBottom = elemTop + $elem.height();
if ((docViewTop elemBottom))
StackExchange.using('gps', function() StackExchange.gps.track('embedded_signup_form.view', location: 'question_page' ); );
$window.unbind('scroll', onScroll);
;
$window.on('scroll', onScroll);
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
If you believe your Ubuntu system has been compromised, then 1) Boot from a clean LiveUSB. Make a new LiveUSB on a non-infected system if needed. 2) Reinstall Ubuntu. 3) Restore your data from a clean backup. DO NOT try to clean infected data - that's how infections spread to clean systems. 4) Avoid those dodgy websites that spread such infections.
– user535733
Feb 1 at 2:37