December 14, 2014

unclebait.xyz Pop-Up Ads?

Getting pop-ups or new tabs from unclebait.xyz?



Then you got some adware installed on your machine. I think you should scan your computer with FreeFixer to track down and remove the adware.

December 11, 2014

How To Remove ratlanguage.xyz Pop-Up Surveys

Are you being bombarded with pop-up surveys from ratlanguage.xyz?



Then I think you should scan your computer with FreeFixer and remove the adware that is causing them.

Remove elitewindowstream.xyz Pop-Up Survey Ads

If you are getting surveys in pop-ups or new tab from elitewindowstream.xyz you probably have some adware installed on your machine.

I think you should scan your computer with the freeware tool FreeFixer to track down and remove the adware.

Remove scarecrowhen.xyz Pop-Up Survey Ads

Getting pop-ups or new tab containing a survey from scarecrowhen.xyz?


If so, you most likely have some adware installed and running on your machine. I recommend that you scan your computer with FreeFixer to track down and remove the unwanted software.

Remove awardsgeese.xyz Pop-Up Survey Ads

Getting pop-ups or new tabs from awardsgeese.xyz?


Then you probably have some adware installed on your machine. I'd recommend a scan with FreeFixer to track down and remove the adware.

How To Remove primeslots.com Pop-Up Ads

If you are getting pop-ups or new tabs from primeslots.com that bypass your pop-up blocker, you probably have some adware installed on your machine.


I'd recommend a scan with FreeFixer to track down and remove the adware.

November 25, 2014

Remove surveypollutiondress.xyz Pop-Up Survey Ads

If you are getting surveys from surveypollutiondress.xyz in pop-ups while browsing in Chrome, Firefox or Internet Explorer, you probably have some adware installed and running on your machine.



You can track down and remove the adware with FreeFixer.

Remove sampleshill.xyz Pop-Up Surveys

Problems with sampleshill.xyz pop-ups? I think you should scan your computer with your anti-malware program to find and remove the adware responsible for the sampleshill.xyz pop-up surveys.


November 10, 2014

Remove ladysheet.biz Pop-Up Surveys

I you get pop-ups from ladysheet.biz in the form or surveys, I think you should scan your computer with your anti-malware tool. It's likely that you have some adware installed on your machine.


November 7, 2014

How To Remove PrizeBrick.Biz Pop-Up Surveys

If you are getting surveys from prizebrick.biz, you have some adware installed on your machine. You need to scan your computer or search for the adware manually. I removed the BlockAndSurf adware and that stopped the prizebrick.biz pop-ups.


November 6, 2014

sweepstakesjeans.biz Pop-Ups?- You Need To Scan Your Computer For Adware

If you are getting pop-ups from sweepstakesjeans.biz you have some adware installed on your machine. You need to scan your computer with you favourite anti-malware tool.


November 4, 2014

How To Stop the bannerrecess.biz Pop-Ups

Same thing here, you need to scan your computer for unwanted software. You have some adware that pop-up these bannerrecess.biz surveys.


Remove samplestreet.biz pop-up surveys

If you bugged with pop-ups surveys from samplestreet.biz, you need to scan your computer for adware. You probably have some installed on your machine that pop up these samplestreet.biz surveys.


November 3, 2014

How To Remove giftbubble.biz Pop-Up Surveys

Good afternoon. Getting pop-up surveys from giftbubble.biz? Then you probably have some adware installed on your machine. I'd recommend that you review what programs you have installed on your machine. One of them is probably responsible for the giftbubble.biz pop-up surveys.


October 30, 2014

How To Remove bootman.biz Survey Pop-Ups

Getting pop-ups surveys from sites such as bootman.biz? Do they appear even when browsing sites that does not normally show pop-ups? Then you probably have some unwanted software installed on your machine. You need to run you favourite anti-malware scanner to track it down.


How To Remove sweepscup.biz Pop-Up Surveys

Pop-ups from sweepscup.biz containing a survey? You probably have some adware installed on your machine. I'd recommend a scan with your favourite anti-malware tool.


October 26, 2014

hobbiesgalley.biz Survey Pop-Ups Removal

Do you get pop-ups from hobbiesgalley.biz, with a survey? Do these surveys appear on sites that normally don't have any advertising? Do the hobbiesgalley.biz pop-ups sneak though your pop-up blocker?


If so, you most likely have some adware installed on your machine. I'd recommend reviewing your computer, checking the Add/Remove programs dialog in the Windows Control Panel, the processes running in the Windows Task Manager and the extensions/add-ons installed in Firefox, Chrome and Internet Explorer.

You can also try the freeware tool FreeFixer to help you track down the unwanted software on your machine.

Thanks for reading.

Remove roadspace.biz Pop-Up Surveys

Getting annoyed by pop-up surveys from roadspace.biz? It's possible, or even likely, that you have some adware or some other type of unwanted software installed on your machine that cause these survey pop-ups.


In case the roadspace.biz pop-ups are caused by software on your machine, you need to review your computer, either manually or use some tool to track down the unwanted software. You can use FreeFixer or some other free tool to help you with the removal.

Thanks for reading.

October 25, 2014

Remove Pop-Up Surveys From RailwayDowntown.Biz


Are you getting a bunch of pop-ups from railwaydowntown.biz containing a survey. Do they also manage to sneak though your pop-up blocker? Then you probably have some adware or some other type of potentially unwanted software running on your computer. You'll need to scan your machine with your favourite anti-malware tool and clean it up.


October 23, 2014

vanplot.biz Survey Pop-Up Ads?

Getting pop-ups from a web site called vanplot.biz while browsing the web? Then you might have some adware installed on your machine. I'd recommend a anti-malware scan. This is how the vanplot.biz pop-up ad looked like when I got it:



May 21, 2014

Sambamedia SL Publisher - Don't run that file

If you've downloaded a file and the publisher field, or the digital signature tabs says Sambamedia SL, don't run the file. 

Sambamedia SL publisher

Sambamedia SL Digital Signature

Why? The Sambamedia signed file is detected by some of the anti-virus programs. Here are the current detections:

  • ESET-NOD32 a variant of Win32/SoftPulse.B 
  • Sophos SoftPulse 
  • VBA32 suspected of Trojan.Downloader.gen.h
Hope this posted saved you some adware cleaning ;)

May 14, 2014

EZ Software Updater - Removal Instructions

Do you see a process named EZ Software Updater.exe in the Task Manager or a EZ Software Updater version 1.0.0.0 listed in the uninstall list on your machine?

EZ Software Updater version 1.0.0.0

If you wonder where the EZ Software Updater came from, it is likely that you got it from a software bundled. That's where I found it, packaged with a free software download.

I've uploaded the EZ Software Updater.exe file to VirusTotal and only Symantec detects it, as WS.Reputation.1:

ez software updater.exe detectes as WS.reputation.1
I'll follow up to see if any of the other anti-virus programs detects it later on. 

If you are looking for info on how to remove EZ Software Updater you can use the entry in the uninstall programs list, or if that for some reason did not work, you can remove the EZ Software Updater.exe file and the service by checking the two items in FreeFixer, as shown in the screenshot below.

Removing ez software updater with FreeFixer

Hope this helped you with the removal.

How did you get EZ Software Updater on your machine? Please share by posting a comment.

May 9, 2014

ReWinUpProtect.exe and ReWinUp.dll detected as Gen:Variant.Zusy and Trojan:MSIL/Spacekito

I'm in a hurry so this will be a short one. I just stumbled upon something called ReWinUp, which appears to have two main files: ReWinUpProtect.exe and ReWinUp.dll. You might spot ReWinUpProtect.exe in the Windows Task Manager:

ReWinUpProtect.exe in the Windows Task Manager


The anti-virus scanners at VirusTotal reports ReWinUpProtect.exe as Gen:Variant.Zusy.91801 and  Trojan:MSIL/Spacekito.C.

ReWinUp anti-virus detection


I'll try to follow up with more info as soon as possible. If you'd like to remove ReWinUpProtect.exe and ReWinUp.dll you can just check them in FreeFixer for removal. You might need to restart your machine to complete the removal.

ReWinUpProtect.exe

ReWinUpProtect.exe service





May 6, 2014

Tuguu S.L Digital Signature - Don't Run The File

Another publisher that often appear when I browse the web for unwanted programs is Tuguu S.L. If you have downloaded one of the Tuguu S.L signed file I'd strongly advise against running it. The VirusTotal scan result for the Tuguu signed file I found, named player.exe, should convince you:

Tuguu S.L digital signature

The anti-virus programs at VirusTotal detects the file as APPL/DomainIQ.Gen and "a variant of Win32.DomainIQ.BB". Bad news for your workstation or laptop.

How did you come across the Tuguu S.L file? Please share by posting a comment.

May 1, 2014

consoleguard.exe is Trojan.Siggen6.16089 and WS.Reputation.1 - How To Remove

I just found a new process running in the Windows Task Manager named consoleguard.exe. Sounds pretty suspicious, don't you think?

consoleguard.exe in the Windows Task Manager


I ran consoleguard.exe through the scanners over at VirusTotal, and it was detected as Trojan.Siggen6.16089 and WS.Reputation.1 by DrWeb and Symantec:

consoleguard.exe is detected by some of the anti-virus programs


It will be interesting to see if the other anti-virus programs start picking up the consoleguard.exe file.

Since I'm convinced you want to remove consoleguard.exe, you can do so by checking consoleguard.exe in FreeFixer's scan result for removal. You can find it under Processes and Registry Startups in the scan result.

Any idea how you got consoleguard.exe on your computer? Please let us know by posting a comment?




bservice.exe and wd.exe in C:\Program Files\Bench\ - Removal Instructions

I was playing around with another software download that bundles lots of unwanted application. This time I discovered a new folder called "Bench" under "C:\Program Files\" or "C:\Program Files (x86)\" when installed on a 64-bit machine. I also found a new process running named bservice.exe:

bservice.exe in the Task Manager


There was also a file called wd.exe added as an automatic startup which caught my attention. It turned out that wd.exe is detected by many of the anti-virus program under names such as Adware, Ransom.dxTrojan.Crossrider and Trojan.Win32.Generic!BT. Ouch!

You can remove the "Bench" software by checking bservice.exe, wd.exe and updater.exe in FreeFixer:

bservice.exe in the Task Manager

updater.exe as a scheduled task


Hope this helped you with the removal.

How did you get bservice.exe and wd.exe on your machine? Please share by posting a comment.

ConstaSurf - Removal Instructions

A common tactic these days to get users to uninstall some unwanted software is to offer a download that claims to install some well-known software with a good reputation. For example, the download show in the screenshot below, which is digitally signed by Outbrowse LTD, claims to install VLC Player, which it also does. But, during the installation process there are also a large number of bundled offers.

OutBrowse LTD VLC Player


One of these offers is the ConstaSurf adware. It will add itself in Internet Explorer and Mozilla Firefox:

ConstaSurf 1.0.1 in Firefox


ConstaSurf is detected by many of the anti-virus programs under names such as BrowseFox and AltBrowse.

If you'd like to remove ConstaSurf, you can easily do so by downloading FreeFixer and checking the ConstaSurfBho.dll file and the ConstaSurf Firefox extension for removal, as shown in the screenshots below.

ConstaSurf Firefox Extension

ConstaSurfBho.dll

I've created a short video clip which shows FreeFixer in action when deleting ConstaSurf:




You can also remove the ContraSurf software from the Programs and Features dialog, from the Windows Control Panel.

Removing ConstaSurf from the Programs and Features dialog

How did you get ConstaSurf on your computer? Please share by posting a comment.

April 30, 2014

Wisen Wizard - Removal Instructions

If you recently started seeing more ads while you browse the web, or a sidebar that opens up on many web sites, you might have an adware called Wisen Wizard installed on your machine. Here's an example of how the ads and sidebar may look like:

Wisen Wizard ads

The screenshot above shows the Wisen Wizard "Related Searches" and an ad that claims that I've won something and mention Coop, ICA and Willys, which are retails stores that operates in Sweden and other countries.

WisenWizard will add itself into Internet Explorer as a browser helper object and as a Mozilla Firefox Add-on. Here's how it appears in the Firefox Add-ons list:

Wisen Wizard 1.0.1 in Firefox' Add-ons list

When I found Wisen Wizard it was disclosed in the installer that Wisen Wizard was bundled, and that it
"enables multi-site searching, related search results, offers and coupons and much more"
How WisenWizard is disclosed in the installer

To avoid getting this type of unwanted software, please be careful when downloading software and take the time to actually read licenses shown in the installers before pressing the Next, Accept, or Install buttons.

Some of the anti-virus programs detect Wisen Wizard, under names such as Application.Win32.Altbrowse.AK, Adware.BrowseFox/Variant and Adware.Agent. Some of the anti-virus programs also detects Wisen Wizard as a trojan.

To remove Wizen Wizard, you can just check the WisenWizardBho.dll file and the Wizen Wizard Mozilla Extension in FreeFixer for removal.

wisenwizardbho.dllWisen Wizard firefox extension

There's also an entry in the Add/Remove programs dialog, which should remove Wisen Wizard:

How to remove Wisen Wizard from the Windows Control Panel

Hope this helped you figure what Wisen Wizard is a how to remove it.

How did you get Wisen Wizard on your machine? Please share your story by posting a comment.

April 29, 2014

Math Problem Solver, Solve.exe and Optimize.exe - Removal Instructions

While testing a free compression program I found a bundled program called Math Problem Solver. The installation screen shows the following information:


Clicking on the Privacy Policy links brings up the BOINC privacy policy. Since BOINC is a legitimate project  that uses idle time on computers to study global warming many other types of scientific research computations, you might be tempted to install Math Problem Solver. The problem is, if you choose to install Math Problem Solver you will get something completely different: A Bitcoin miner.

The following scheduled tasks will appear on your machine:

solve.exe optitimize.exe

Here's some of the detection names for Solve.exe:



You can remove the Bitcoin miner by selecting Solve.exe and Optimize.exe in FreeFixer as shown above. There's also an entry in the Add/Remove programs dialog, but I haven't tried it.

Remove Math Problem Solver


Hope this helped you remove Math Problem Solver.