Did you just get a pop-up from yxo.warmportrait.com and ask yourself where it came from? Did the yxo.warmportrait.com ad appear to have been popped up from a web site that under normal circumstances don’t use aggressive advertising such as pop-up windows? Or did the yxo.warmportrait.com pop-up show up while you clicked a link on one of the major search engines, such as Google, Bing or Yahoo?

Here’s how the yxo.warmportrait.com pop-up looked like when I got it on my computer:

After a while I was redirected to adcash.com and then to banners.unibet.com.

If this sounds like what you are seeing on your machine, you almost certainly have some adware installed on your computer that pops up the yxo.warmportrait.com ads. So don’t flame the people that runs the site you were at, the ads are apparently not coming from that website, but from the adware that’s running on your machine. I’ll do my best to help you with the yxo.warmportrait.com removal in this blog post.

For those that are new to the blog: Not long ago I dedicated a few of my lab computers and deliberately installed a few adware programs on them. Since then I’ve been monitoring the actions on these machines to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the adware updates itself automatically, or if it downloads and installs additional unwanted software on the systems. I first found the yxo.warmportrait.com pop-up on one of these lab machines.

yxo.warmportrait.com resolves to 208.43.241.242. yxo.warmportrait.com was created on 2015-01-01.

So, how do you remove the yxo.warmportrait.com pop-up ads? On the machine where I got the yxo.warmportrait.com ads I had CheckMeUp installed. I removed it with FreeFixer and that stopped the yxo.warmportrait.com pop-ups and all the other ads I was getting in Mozilla Firefox.

The problem with this type of popup is that it can be initiated by many variants of adware. I think that adware such as NewPlayer, BlockAndSurf, SaferSurf and SpeedCheck can also be responsible for the yxo.warmportrait.com popups. And there are probably other variants too. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

Anyway, here’s my suggestion for the yxo.warmportrait.com ads removal:

The first thing I would do to remove the yxo.warmportrait.com pop-ups is to examine the software installed on the machine, by opening the “Uninstall programs” dialog. You can reach this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows you can just type in “uninstall” in the Control Panel’s search field to find that dialog:

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:

Do you see something suspect listed there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if some program was installed about the same time as you started observing the yxo.warmportrait.com pop-ups.

Then you can examine you browser add-ons. Adware often appear under the add-ons dialog in Chrome, Firefox, Internet Explorer or Safari. Is there something that looks suspicious? Something that you don’t remember installing?

I think you will be able to identify and uninstall the adware with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the adware. FreeFixer is a freeware tool that I’ve developed since 2006. Freefixer is a tool designed to manually track down and uninstall unwanted software. When you’ve tracked down the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not locked down like many other removal tools out there. It will not require you to pay a fee just when you are about to remove the unwanted files.

And if you’re having a hard time figuring out if a file is safe or adware in FreeFixer’s scan report, click on the More Info link for the file. That will open up a web page which contains more details about the file. On that web page, check out the VirusTotal report which can be very useful:

Here’s a video tutorial showing FreeFixer in action removing the yxo.warmportrait.com pop-up ads:

Did this blog post help you to remove the yxo.warmportrait.com pop-up ads? Please let me know or how I can improve this blog post.

Thank you!