Do you see ads, like the ones shown below, labeled Ads by BlockAndSurf, brought by BlockAndSurf or Powered by BlockAndSurf while browsing the web, and two files named BlockAndSurf158.exe and BlockAndSurf_wd.exe in the Windows Task Manager?

When I scanned one of the BlockAndSurf files over at VirusTotal, it was detected as “AddLyrics” and “Lyckricks“.

Here’s a quick video guide how to remove the ads and fix the proxy settings if necessary:

Hope you found the video useful.

Update 2014-10-27: A few users have reported that the Add/Remove uninstall for BlockAndSurf does not work. The BlockAndSurf ads remained after running the uninstaller, so I thought I should follow up on how to remove BlockAndSurf with FreeFixer. The BlockAndSurf adware has also updated its file names since I first published this blog post. Anyway, to remove BlockAndSurf, download FreeFixer and start the scan. Here’s the files I checked to remove BlockAndSurf:

First the webinstrnew.sys driver:

Then the updater.exe scheduled tasks:

Followed by bservice.exe, bservice64.exe and wd.exe:

Then the BlockAndSurf Internet Explorer files, 180_x64.dll and 180.dll:

And here’s I’m removing BlockAndSurf from Firefox. The 180.xpi file:

BlockAndSurf is also loaded into Explorer.exe, with the bhelper64.dll file:

I’m also removing the BlockAndSurf.exe file and a few other processes as shown in the screenshot:

And to remove the BlockAndSurf Chrome extension, type in chrome://extensions in Chrome and remove BlockAndSurf.

Then fix your proxy settings as shown in the video. FreeFixer v1.13 will be able to repair proxy settings 😉

Last step: Reboot.

That’s it. Thanks for reading. Hope this helped you solve the problem.