Would anyone know how I can remove the wonderlandads.com pop-up virus from my Nexus 5 mobile - it appears in my Chrome browser.

While there are many sites dedicated to the manual removal of the virus from PCs, despite several searches I am at a loss to find a suitable alternative solution for Android.

I have installed the free versions of AVG, Avast and Kaspersky to no avail, and I am wary of those sites which suggest SpyHunter, etc as a solution, for a fee. Any help, advice or suggestions would be much appreciated.

  • The easiest thing you can do is a factory reset. Not exactly desirable, but usually gets the job done. – Ethan Z Nov 15 '15 at 22:57
  • 2
    Have you considered using an adblocker? – Firelord Nov 16 '15 at 2:20
  • Does it happen to some sites, or all sites (including some that are proven safe like Google, or this site)? Does it happen on WiFi/mobile data/both? – Andrew T. Nov 16 '15 at 2:22
  • 1
    Hi, the site pops up on one particular website - telegraph.co.uk - constantly, but on no others that I can see to date. This always happens on wi-fi, as I am abroad at the moment and don't use data roaming – Max400 Nov 16 '15 at 6:28
  • 1
    Related SE post – Manubhargav Nov 17 '15 at 2:02

I managed to successfully identify the cause of wonderland pop ups, this pop up was annoying me for sometime, my PC, two mobiles, a tab was infected and inspite of multiple reset from the scratch didn't work I realised to look at my router and found a tempered DNS, I validated this with my broadband provider and updated correct one.....this works with me and would work for you as well Regards Neeraj

| improve this answer | |
  • Thank you Neeraj, that sounds promising. I will look into it and see if I have any luck – Max400 Dec 7 '15 at 14:12
  • @Neeraj Where was the so called tempered DNS added? I get DNS right from my provider and no way to define it manually. would u please explain more? – Pmpr Dec 25 '15 at 10:18

Neeraj is right i'm also experiencing the same problem and found tempered dns in my router and changed it to dns provided by my isp and malware removed from all my devices but it get changed to malware dns after few hours again. So now i have to change it manually and keep checking. I haven't found a permanent solution for this and checked my systems and devices for dnschanger malware with no luck.

Also in this case only puffin browser will help you on android. In nexus 6 chrome is default browser.

| improve this answer | |
  • Where can one find this tempered DNS? please provide more information – Pmpr Dec 25 '15 at 10:19
  • In my WiFi Internet Router's Lan setting there are sub DNS settings. In this there is two fields for primary and secondary DNS, they are getting frequently changed. – Anshuman Chandel Dec 25 '15 at 17:19
  • I found solution for my windows computers by using free 14 days trail of hitman pro but my android devices are still affected. – Anshuman Chandel Dec 25 '15 at 17:21

Try to remove Chrome from your Android device and use default browser. It was ok for me on Galaxy S6 Edge.

| improve this answer | |

Not the answer you're looking for? Browse other questions tagged or ask your own question.