It's about a month I'm experiencing a problem on my Ubuntu Desktop PC. Whenever I select a text or click somewhere on the browser, a popup window will be opened and then closed rapidly.
Finally, one time (by chance) I found out that popup window is opening a website with this address:
With a few searches, I decided to delete Firefox folder in my home folder.
The problem just solved for couple of days. Today, again I saw a new popup is opening. This time the address is
wonderlandads.com and more repeatedly happens.
After so much searchs, most websites are telling me this is a malware. I installed ClamAV and Node32 for linux, fully scanned the local disk and 2 HTML Exploits found in
I deleted the
/home/user/.mozilla folder, also reset Firefox to default settings again, but this time the problem didn't solved.
While I was trying to search and found a solution, something strange caught my attention. The popup window is just opening on Stack Exchange websites. I have tested this issue tens or probably hundreds of times on Ask Ubuntu, Stack Overflow, Super User and even on this website (stackexchange.com).
Mostly when I double click on a text, or select it by dragging the mouse, this popup window opens. It never happens on any other website but Stack Exchange websites.
Other solutions I have tested:
- Reset my router to factory settings.
- Changed DNS server to 220.127.116.11 to make sure there isn't a hijack.
- Changed ISP and Internet connection.
- Disabled all add-ons on my Firefox (despite I don't have any untrusted add-on).
AS @oded mentioned in the comment, I found out it doesn't happen when I browse website over https. But also it doesn't happen in other non-ssl websites. It's just about this website and non-secure http protocol.
Also found another user which is affected with approximately the same situations.