Software & AppsOperating SystemLinux

How To Remove Suspicious Software Requesting nmcheck.gnome.org in Ubuntu 18.04

Ubuntu 5

In this article, we will discuss a common issue experienced by some Ubuntu users, where a suspicious software triggers a pop-up that opens the default web browser and makes a request to nmcheck.gnome.org. This can cause issues with system updates and running composer commands. We will provide a detailed guide on how to identify and remove the script responsible for this behavior.

Quick Answer

To remove suspicious software requesting nmcheck.gnome.org in Ubuntu 18.04, you can start by checking and disabling any browser extensions that may be causing the pop-up. Then, investigate network connections using the sudo lsof -i command to identify any processes or scripts making requests to nmcheck.gnome.org. If needed, modify the hosts file to redirect the requests to your local machine. Additionally, verify the NetworkManager configuration and disable the auto connectivity check if necessary.

Understanding nmcheck.gnome.org

Before we delve into the solutions, it’s important to understand that nmcheck.gnome.org is a legitimate domain used by NetworkManager to verify internet connectivity. It hosts a single file, network_status.txt, which is used to indicate that NetworkManager is connected to the internet. Therefore, it is important to ensure that the issue is not related to network connectivity problems or other underlying system issues.

Checking Browser Extensions

The first step in troubleshooting this issue is to disable any installed plugins or add-ons in your web browser, as they may be causing the pop-up. If you’re using Firefox, you can do this by going to the Add-ons menu and disabling all extensions. If the pop-up still occurs, you can move on to the next step.

Investigating Network Connections

You can use the command sudo lsof -i to check for any suspicious internet connections. This command lists all the files that are open by processes which are using Internet sockets. Here, lsof stands for ‘list open files’, -i selects the listing of files any of whose Internet address matches the address specified in i. If there are any processes or scripts making requests to nmcheck.gnome.org, they should appear in the output of this command.

Modifying the Hosts File

Another way to prevent the connection to nmcheck.gnome.org is by adding an entry for it in your /etc/hosts file with the IP address 127.0.0.1. This will redirect any requests to nmcheck.gnome.org to your local machine, effectively blocking the connection. You can edit the hosts file using a text editor with root privileges, such as sudo nano /etc/hosts.

Verifying NetworkManager Configuration

Next, check the /etc/NetworkManager/NetworkManager.conf file for a section containing [Connectivity] and the line uri=http://nmcheck.gnome.org/check_network_status.txt. If this section is present, it indicates that your system is using NetworkManager’s connectivity check feature. However, in Ubuntu 20.04, this configuration may be located in /etc/NetworkManager/conf.d/20-connectivity.conf.

Disabling Auto Connectivity Check

In Ubuntu 20.04, the auto connectivity check can be disabled through the Settings app. Go to the Privacy menu, select the Connectivity tab, and uncheck the Connectivity Checking option. This will prevent NetworkManager from automatically checking your internet connectivity by making a request to nmcheck.gnome.org.

Conclusion

In this article, we have discussed several ways to identify and remove suspicious software that is making requests to nmcheck.gnome.org in Ubuntu 18.04. We hope that this guide has been helpful in resolving this issue. If you continue to experience problems, it may be worth reaching out to the Ubuntu community for further assistance. Remember to always keep your system updated and only install software from trusted sources to prevent similar issues in the future.

How can I disable the suspicious pop-up requesting nmcheck.gnome.org?

To disable the pop-up, you can start by checking your browser extensions and disabling any installed plugins or add-ons. If that doesn’t work, you can modify the hosts file by adding an entry for nmcheck.gnome.org with the IP address 127.0.0.1. This will redirect any requests to nmcheck.gnome.org to your local machine, effectively blocking the connection.

How can I check for suspicious internet connections?

You can use the command sudo lsof -i to check for any suspicious internet connections. This command lists all the files that are open by processes which are using Internet sockets. If there are any processes or scripts making requests to nmcheck.gnome.org, they should appear in the output of this command.

Where can I find the NetworkManager configuration file?

The NetworkManager configuration file can be found at /etc/NetworkManager/NetworkManager.conf in Ubuntu 18.04. However, in Ubuntu 20.04, this configuration may be located in /etc/NetworkManager/conf.d/20-connectivity.conf.

How can I disable the auto connectivity check in Ubuntu 20.04?

To disable the auto connectivity check in Ubuntu 20.04, you can go to the Settings app, navigate to the Privacy menu, select the Connectivity tab, and uncheck the Connectivity Checking option. This will prevent NetworkManager from automatically checking your internet connectivity by making a request to nmcheck.gnome.org.

Leave a Comment

Your email address will not be published. Required fields are marked *