Monthly Archives: February 2016

Remove promo3.c-rewards.com Pop Up Ads

Sound familiar? You see pop-up ads from promo3.c-rewards.com while browsing web sites that generally don’t advertise in pop-up windows. The pop-ups manage to evade the built-in pop-up blockers in Google Chrome, Mozilla Firefox, Internet Explorer, Safari or Opera. Perhaps the promo3.c-rewards.com pop-ups show up when clicking search results from Google? Or does the pop-ups appear even when you’re not browsing?

Here’s a screenshot of the promo3.c-rewards.com pop-up ad when it showed up on my computer:

promo3.c-rewards.com pop up

(Sorry for the watermarks. Need to add them to prevent the most blatant attempts of other bloggers using my screenshots without attribution)

If this sounds like what you are seeing on your computer, you almost certainly have some adware installed on your machine that pops up the promo3.c-rewards.com ads. So there’s no idea contacting the owner of the website you currently were browsing. The ads are not coming from them. I’ll do my best to help you remove the promo3.c-rewards.com pop-up in this blog post.

Those that have been spending some time on this blog already know this, but here we go: Recently I dedicated some of my lab computers and knowingly installed some adware programs on them. Since then I have been tracking the actions on these systems to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the adware updates itself, or if it downloads and installs additional unwanted software on the machines. I first noticed the promo3.c-rewards.com pop-up on one of these lab computers.

promo3.c-rewards.com resolves to the 209.15.247.29 IP address and c-rewards.com to 209.15.247.40.

So, how do you remove the promo3.c-rewards.com pop-up ads? On the machine where I got the promo3.c-rewards.com ads I had gosearch.me, SmartComp Safe Network, Windows Menager and Live Malware Protection installed. I removed them with FreeFixer and that stopped the promo3.c-rewards.com pop-ups and all the other ads I was getting in Mozilla Firefox.

If you are wonder if there are many others out there also getting the promo3.c-rewards.com ads, the answer is probably yes. Check out the traffic rank from Alexa:

promo3.c-rewards.com traffic

The problem with this type of pop-up is that it can be popped up by many variants of adware, not just the adware running on my machine. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

Anyway, here’s my suggestion for the promo3.c-rewards.com ads removal:

The first thing I would do to remove the promo3.c-rewards.com pop-ups is to examine the programs installed on the machine, by opening the “Uninstall programs” dialog. You can find this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows you can just type in “uninstall” in the Control Panel’s search field to find that dialog:
Uninstall a program search

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:
Uninstall a program dialog

Do you see something suspect in there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if something was installed approximately about the same time as you started getting the promo3.c-rewards.com pop-ups.

The next thing to check would be your browser’s add-ons. Adware often show up under the add-ons menu in Google Chrome, Mozilla Firefox, Internet Explorer, Safari or Opera. Is there anything that looks suspicious? Something that you don’t remember installing?
Firefox add-ons manager

I think you will be able to track down and remove the adware with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the adware. FreeFixer is a freeware tool that I started develop about 8 years ago. It’s a tool designed to manually find and uninstall unwanted software. When you’ve tracked down the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not locked like many other removal tools out there. It won’t require you to purchase the program just when you are about to remove the unwanted files.

And if you’re having problems determining if a file is safe or unwanted in the FreeFixer scan result, click on the More Info link for the file. That will open up a web page which contains additional details about the file. On that web page, check out the VirusTotal report which can be very useful:

FreeFixer More Info link example
An example of FreeFixer’s “More Info” links. Click for full size.

Here’s a video tutorial showing FreeFixer in action removing pop-up ads:

Did you find any adware on your machine? Did that stop the promo3.c-rewards.com ads? Please post the name of the adware you uninstalled from your machine in the comment below.

Thank you!

Remove millionaires-blackbook.com Pop Up Ads

Did you just get a pop-up from millionaires-blackbook.com and ask yourself where it came from? Did the millionaires-blackbook.com ad appear to have been initiated from a web site that under normal circumstances don’t use advertising such as pop-up windows? Or did the millionaires-blackbook.com pop-up show up while you clicked a link on one of the big search engines, such as Google, Bing or Yahoo?

Here’s how the millionaires-blackbook.com pop-up looked like when I got it on my machine:

millionaires-blackbook.com pop up

(I’m sorry for the many watermarks. If I don’t add them, the screenshot always show up at some copy-cat blogs.)

Does this sound like what you see your machine, you probably have some adware installed on your machine that pops up the millionaires-blackbook.com ads. So there’s no idea contacting the owner of the website you were browsing. The ads are not coming from them. I’ll try help you to remove the millionaires-blackbook.com pop ups in this blog post.

For those that are new to the blog: Some time ago I dedicated some of my lab systems and intentionally installed a few adware programs on them. Since then I’ve been observing the behaviour on these computers to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the adware updates itself automatically, or if it downloads additional unwanted software on the computers. I first observed the millionaires-blackbook.com pop-up on one of these lab systems.

millionaires-blackbook.com was created on 2015-11-17. The site is located at 107.154.116.14.

So, how do you remove the millionaires-blackbook.com pop-up ads? On the machine where I got the millionaires-blackbook.com ads I had SmartComp Safe Network, Windows Menager, Live Malware Protection and gosearch.me installed. I removed them with FreeFixer and that stopped the millionaires-blackbook.com pop-ups and all the other ads I was getting in Mozilla Firefox.

The issue with this type of pop-up is that it can be launched by many variants of adware. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

So, what can be done to solve the problem? To remove the millionaires-blackbook.com pop-up ads you need to review your machine for adware or other types of unwanted software and uninstall it. Here’s my suggested removal procedure:

  1. Check what programs you have installed in the Add/Remove programs dialog in the Windows Control Panel. Do you see anything that you don’t remember installing or that was recently installed?
  2. How about your browser add-ons. Anything in the list that you don’t remember installing?
  3. If that didn’t help, you can give FreeFixer a try. FreeFixer is built to assist users when manually tracking down adware and other types of unwanted software. It is a freeware utility that I’ve been working since 2006 and it scans your computer at lots of locations where unwanted software is known to hook into your machine. If you would like to get additional details about a file in FreeFixer’s scan result, you can just click the More Info link for that file and a web page with a VirusTotal report will open up, which can be very useful to determine if the file is safe or malware:

    FreeFixer More Info link example
    An example of FreeFixer’s “More Info” links. Click for full size.

Did this blog post help you to remove the millionaires-blackbook.com pop-up ads? Please let me know or how I can improve this blog post.

Thank you!

Remove swedishmethod.com Pop Up Ads

Does this sound familiar? You see pop-up ads from swedishmethod.com while browsing web sites that mostl of the time don’t advertise in pop-up windows. The pop-ups manage to circumvent the built-in popup blockers in Mozilla Firefox, Google Chrome, Internet Explorer or Safari. Perhaps the swedishmethod.com pop-ups show up when clicking search results from a Google search? Or does the pop-ups show up even when you’re not browsing?

Here is a screenshot on the swedishmethod.com pop-up from my machine:

swedishmethod.com popup

If you also see this on your machine, you probably have some adware installed on your computer that pops up the swedishmethod.com ads. Contacting the owner of the web site would be a waste of time. They are not responsible for the ads. I’ll do my best to help you remove the swedishmethod.com pop-up in this blog post.

Those that have been following this blog already know this, but for new visitors: Some time ago I dedicated some of my lab computers and deliberately installed some adware programs on them. Since then I have been following the behaviour on these machines to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the adware updates itself automatically, or if it downloads and installs additional unwanted software on the computers. I first observed the swedishmethod.com pop-up on one of these lab machines.

swedishmethod.com resolves to 104.27.130.234.

So, how do you remove the swedishmethod.com pop-up ads? On the machine where I got the swedishmethod.com ads I had Live Malware Protection, gosearch.me, SmartComp Safe Network and Windows Menager installed. I removed them with FreeFixer and that stopped the swedishmethod.com pop-ups and all the other ads I was getting in Mozilla Firefox.

The problem with pop-ups like the one described in this blog post is that it can be popped up by many variants of adware, not just the adware running on my machine. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

So, what can be done? To remove the swedishmethod.com pop-up ads you need to review your computer for adware or other types of unwanted software and uninstall it. Here’s my suggested removal procedure:

  1. Examine what programs you have installed in the Add/Remove programs dialog in the Windows Control Panel. Do you see something that you don’t remember installing or that was recently installed?
  2. You can also review the browser add-ons. Same thing here, do you see something that you don’t remember installing?
  3. If that didn’t help, you can give FreeFixer a try. FreeFixer is built to assist users when manually tracking down adware and other types of unwanted software. It is a freeware utility that I’ve been working since 2006 and it scans your machine at lots of locations where unwanted software is known to hook into your computer. If you would like to get additional details about a file in FreeFixer’s scan result, you can just click the More Info link for that file and a web page with a VirusTotal report will open up, which can be very useful to determine if the file is safe or malware:

    FreeFixer More Info link example
    An example of FreeFixer’s “More Info” links. Click for full size.

Here’s a video tutorial showing FreeFixer in action removing pop-up ads:

Did this blog post help you to remove the swedishmethod.com pop-up ads? Please let me know or how I can improve this blog post.

Thank you!

Remove dingit.tv Pop Up Ads

Did you just get a pop-up from dingit.tv and wonder where it came from? Did the dingit.tv ad appear to have been popped up from a web site that under normal circumstances don’t use advertising such as pop-up windows? Or did the dingit.tv pop-up show up while you clicked a link on one of the big search engines, such as Google, Bing or Yahoo?

Here’s how the dingit.tv pop-up looked like when I got it on my computer:

dingit.tv pop up ad

Does this sound like your machine, you most likely have some adware installed on your system that pops up the dingit.tv ads. Contacting the site owner would be a waste of time. The ads are not coming from them. I’ll do my best to help you remove the dingit.tv pop up in this blog post.

Those that have been spending some time on this blog already know this, but here we go: Some time ago I dedicated some of my lab machines and deliberately installed a few adware programs on them. Since then I’ve been monitoring the behaviour on these systems to see what kinds of adverts that are displayed. I’m also looking on other interesting things such as if the adware updates itself automatically, or if it installs additional unwanted software on the machines. I first observed the dingit.tv pop-up on one of these lab computers.

So, how do you remove the dingit.tv pop-up ads? On the machine where I got the dingit.tv ads I had CPUMiner, GamesDesktop and PineTree installed. I removed them with FreeFixer and that stopped the dingit.tv pop-ups and all the other ads I was getting in Mozilla Firefox.

Judging from Alexa’s traffic rank, dingit.tv is getting quite a lot of traffic:

The bad news with pop-ups such as this one is that it can be launched by many variants of adware, not just the adware running on my system. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

To remove the dingit.tv pop-up ads you need to examine your computer for adware or other types of unwanted software and uninstall it. Here’s my suggested removal procedure:

The first thing I would do to remove the dingit.tv pop-ups is to examine the software installed on the machine, by opening the “Uninstall programs” dialog. You can reach this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows you can just type in “uninstall” in the Control Panel’s search field to find that dialog:
Uninstall a program search

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:
Uninstall a program dialog

Do you see something suspicious listed there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if something was installed about the same time as you started observing the dingit.tv pop-ups.

The next thing to check would be your browser’s add-ons. Adware often appear under the add-ons menu in Google Chrome, Mozilla Firefox, Internet Explorer or Safari. Is there anything that looks suspicious? Anything that you don’t remember installing?
Firefox add-ons manager

I think you will be able to find and remove the adware with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the adware. FreeFixer is a freeware tool that I started develop about 8 years ago. Freefixer is a tool built to manually track down and remove unwanted software. When you’ve found the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not locked down like many other removal tools out there. It won’t require you to pay for the program just when you are about to remove the unwanted files.

And if you’re having problems deciding if a file is safe or malware in FreeFixer’s scan result, click on the More Info link for the file. That will open up a web page which contains more information about the file. On that web page, check out the VirusTotal report which can be quite useful:

FreeFixer More Info link example
An example of FreeFixer’s “More Info” links. Click for full size.

Here’s a video guide showing how to remove pop-up ads with FreeFixer:

Did you find any adware on your machine? Did that stop the dingit.tv ads? Please post the name of the adware you uninstalled from your machine in the comment below.

Thank you!

Remove se-arligundersokning.xyz Pop Up Ads

Did you just get a pop-up from se-arligundersokning.xyz and wonder where it came from? Did the se-arligundersokning.xyz ad appear to have been initiated from a web site that under normal circumstances don’t use advertising such as pop-up windows? Or did the se-arligundersokning.xyz pop-up show up while you clicked a link on one of the major search engines, such as Google, Bing or Yahoo?

Here is a screenshot on the se-arligundersokning.xyz pop-up from my computer:

se-arligundersokning.xyz pop up

If this sounds like what you are seeing on your system, you almost certainly have some adware installed on your computer that pops up the se-arligundersokning.xyz ads. Don’t flame the people that owns the site you were at, the ads are presumably not coming from that website, but from the adware that’s installed on your system. I’ll do my best to help you remove the se-arligundersokning.xyz popup in this blog post.

For those that are new to the blog: Not long ago I dedicated a few of my lab machines and intentionally installed some adware programs on them. I’ve been following the behaviour on these machines to see what kinds of ads that are displayed. I’m also looking on other interesting things such as if the adware updates itself, or if it downloads additional unwanted software on the computers. I first noticed the se-arligundersokning.xyz pop-up on one of these lab computers.

se-arligundersokning.xyz was created on 2016-01-08. se-arligundersokning.xyz resolves to the 104.18.53.93 IP address and comhem.se-arligundersokning.xyz to 104.18.53.93.

So, how do you remove the se-arligundersokning.xyz pop-up ads? On the machine where I got the se-arligundersokning.xyz ads I had CPUMiner, GamesDesktop and PineTree installed. I removed them with FreeFixer and that stopped the se-arligundersokning.xyz pop-ups and all the other ads I was getting in Mozilla Firefox.

The problem with this type of pop-up is that it can be initiated by many variants of adware, not just the adware that’s installed on my machine. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

To remove the se-arligundersokning.xyz pop-up ads you need to review your computer for adware or other types of unwanted software and uninstall it. Here’s my suggested removal procedure:

The first thing I would do to remove the se-arligundersokning.xyz pop-ups is to examine the software installed on the machine, by opening the “Uninstall programs” dialog. You can open this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows you can just type in “uninstall” in the Control Panel’s search field to find that dialog:
Uninstall a program search

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:
Uninstall a program dialog

Do you see something shady in there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if something was installed approximately about the same time as you started seeing the se-arligundersokning.xyz pop-ups.

Then you can examine you browser add-ons. Adware often appear under the add-ons dialog in Chrome, Firefox, Internet Explorer or Safari. Is there something that looks suspicious? Something that you don’t remember installing?
Firefox add-ons manager

I think most users will be able to identify and remove the adware with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the adware. FreeFixer is a freeware tool that I started develop many years ago. It’s a tool built to manually track down and uninstall unwanted software. When you’ve tracked down the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not locked down like many other removal tools out there. It won’t require you to pay for the program just when you are about to remove the unwanted files.

And if you’re having problems deciding if a file is safe or adware in the FreeFixer scan result, click on the More Info link for the file. That will open up a web page which contains additional information about the file. On that web page, check out the VirusTotal report which can be quite useful:

FreeFixer More Info link example
An example of FreeFixer’s “More Info” links. Click for full size.

Here’s a video tutorial on how to remove the pop-ups with FreeFixer:

Did this blog post help you to remove the se-arligundersokning.xyz pop-up ads? Please let me know or how I can improve this blog post.

Thank you!

Remove couponxplorer.com Pop Up Ads

Having problems with pop-ups from couponxplorer.com? If that is the case, you might have adware installed on your system. I got the couponxplorer.com pop-ups in Firefox, but they can show up if you are using Chrome, Internet Explorer, Safari or Opera too.

Here is how the couponxplorer.com ad looked like on my computer:

couponxplorer.com pop up

(Sorry for the ridiculous use of watermarks. I have to do it to stop the copy-cats.)

Does this sound like your story, you probably have some adware installed on your machine that pops up the couponxplorer.com ads. Contacting the site owner would be a waste of time. The advertisements are not coming from them. I’ll try help you with the couponxplorer.com removal in this blog post.

Those that have been following this blog already know this, but here we go: Recently I dedicated some of my lab systems and intentionally installed some adware programs on them. Since then I’ve been monitoring the behaviour on these computers to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the adware auto-updates, or if it installs additional unwanted software on the machines. I first spotted the couponxplorer.com pop-up on one of these lab computers.

couponxplorer.com resolves to 74.113.233.180.

So, how do you remove the couponxplorer.com pop-up ads? On the machine where I got the couponxplorer.com ads I had PineTree, CPUMiner and GamesDesktop installed. I removed them with FreeFixer and that stopped the couponxplorer.com pop-ups and all the other ads I was getting in Mozilla Firefox.

The couponxplorer.com domain is attracting quite a lot of traffic, just check out the Alexa traffic rank:

couponxplorer.com traffic ranking

The problem with pop-ups like the one described in this blog post is that it can be launched by many variants of adware. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

Anyway, here’s my suggestion for the couponxplorer.com ads removal:

The first thing I would do to remove the couponxplorer.com pop-ups is to examine the software installed on the machine, by opening the “Uninstall programs” dialog. You can reach this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows you can just type in “uninstall” in the Control Panel’s search field to find that dialog:
Uninstall a program search

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:
Uninstall a program dialog

Do you see something suspicious listed there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if something was installed about the same time as you started observing the couponxplorer.com pop-ups.

Then you can examine you browser add-ons. Adware often appear under the add-ons dialog in Chrome, Firefox, Internet Explorer or Safari. Is there something that looks suspicious? Something that you don’t remember installing?
Firefox add-ons manager

I think you will be able to identify and uninstall the adware with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the adware. FreeFixer is a freeware tool that I started develop many years ago. It’s a tool designed to manually track down and remove unwanted software. When you’ve found the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not locked like many other removal tools out there. It won’t require you to pay a fee just when you are about to remove the unwanted files.

And if you’re having problems determining if a file is clean or adware in FreeFixer’s scan result, click on the More Info link for the file. That will open up your browser with a page which contains more information about the file. On that web page, check out the VirusTotal report which can be quite useful:

FreeFixer More Info link example
An example of FreeFixer’s “More Info” links. Click for full size.

Here’s a video tutorial on how to remove the pop-ups with FreeFixer:

Did this blog post help you to remove the couponxplorer.com pop-up ads? Please let me know or how I can improve this blog post.

Thank you!

Remove imvu.com Pop Up Ads

Did you just get a pop-up from imvu.com and wonder where it came from? Did the imvu.com ad appear to have been launched from a web site that under normal circumstances don’t use advertising such as pop-up windows? Or did the imvu.com pop-up show up while you clicked a link on one of the major search engines, such as Google, Bing or Yahoo?

Here’s how the imvu.com pop-up looked like when I got it on my computer:

imvu.com pop up

Does this sound like your story, you almost certainly have some adware installed on your computer that pops up the imvu.com ads. Contacting the owner of the web site would be a waste of time. They are not responsible for the ads. I’ll do my best to help you with the imvu.com removal in this blog post.

Those that have been reading this blog already know this, but for new visitors: Recently I dedicated some of my lab computers and purposely installed some adware programs on them. Since then I have been monitoring the behaviour on these systems to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the adware updates itself, or if it downloads additional unwanted software on the computers. I first found the imvu.com pop-up on one of these lab systems.

imvu.com resolves to 204.225.145.58.

So, how do you remove the imvu.com pop-up ads? On the machine where I got the imvu.com ads I had Live Malware Protection, SmartComp Safe Network, Windows Menager and gosearch.me installed. I removed them with FreeFixer and that stopped the imvu.com pop-ups and all the other ads I was getting in Mozilla Firefox.

The problem with pop-ups like this one is that it can be popped up by many variants of adware, not just the adware on my system. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

So, what can be done to solve the problem? To remove the imvu.com pop-up ads you need to review your computer for adware or other types of unwanted software and uninstall it. Here’s my suggested removal procedure:

  1. What software do you have installed if you look in the Add/Remove programs dialog in the Windows Control Panel? Something that you don’t remember installing yourself or that was recently installed?
  2. How about your add-ons you installed in your browsers. Anything in the list that you don’t remember installing?
  3. If that did not help, I’d recommend a scan with FreeFixer to manually track down the adware. FreeFixer is a freeware tool that I’m working on that scans your computer at lots of locations, such as browser add-ons, processes, Windows services, recently modified files, etc. If you want to get additional details about a file in the scan result, you can click the More Info link for that file and a web page will open up with a VirusTotal report which will be very useful to determine if the file is safe or malware:

    FreeFixer More Info link example
    An example of FreeFixer’s “More Info” links. Click for full size.

Here you can see FreeFixer in action removing pop-up ads:

Did this blog post help you to remove the imvu.com popup ads? Please let me know or how I can improve this blog post.

Thank you!

Remove signup.lotro.com Pop Up Ads

Having troubles with popups from signup.lotro.com? If that is the case, you may have adware installed on your system. I got the signup.lotro.com pop-ups in Firefox, but they can appear if you are using Chrome, Internet Explorer, Safari or Opera too.

Here is how the signup.lotro.com ad looked like on my computer:

signup.lotro.com pop up

Does this sound like what you see your system, you probably have some adware installed on your system that pops up the signup.lotro.com ads. So there’s no idea contacting the owner of the website you were browsing. The ads are not coming from them. I’ll do my best to help you with the signup.lotro.com removal in this blog post.

Those that have been following this blog already know this, but for new visitors: Not long ago I dedicated some of my lab machines and wilfully installed a few adware programs on them. Since then I have been monitoring the behaviour on these computers to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the adware auto-updates, or if it downloads and installs additional unwanted software on the machines. I first found the signup.lotro.com pop-up on one of these lab machines.

signup.lotro.com resolves to 74.201.102.42.

So, how do you remove the signup.lotro.com pop-up ads? On the machine where I got the signup.lotro.com ads I had SmartComp Safe Network, gosearch.me, Windows Menager and Live Malware Protection installed. I removed them with FreeFixer and that stopped the signup.lotro.com pop-ups and all the other ads I was getting in Mozilla Firefox.

The problem with pop-ups like the one described in this blog post is that it can be popped up by many variants of adware, not just the adware running on my computer. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

Anyway, here’s my suggestion for the signup.lotro.com ads removal:

  1. What software do you have installed if you look in the Add/Remove programs dialog in the Windows Control Panel? Something that you don’t remember installing yourself or that was recently installed?
  2. How about your browser add-ons. Anything in the list that you don’t remember installing?
  3. If that did not help, I’d recommend a scan with FreeFixer to manually track down the adware. FreeFixer is a freeware tool that I’m working on that scans your computer at lots of locations, such as browser add-ons, processes, Windows services, recently modified files, etc. If you want to get additional details about a file in the scan result, you can click the More Info link for that file and a web page will open up with a VirusTotal report which will be very useful to determine if the file is safe or malware:

    FreeFixer More Info link example
    An example of FreeFixer’s “More Info” links. Click for full size.

Did you find any adware on your machine? Did that stop the signup.lotro.com ads? Please post the name of the adware you uninstalled from your machine in the comment below.

Thank you!

Remove multilotto.news Pop Up Ads

Having problems with pop-ups from multilotto.news? If so, you might have adware installed on your system. I got the multilotto.news pop-ups in Firefox, but they can appear if you are using Chrome, Internet Explorer, Safari or Opera too.

Here is a screen capture on the multilotto.news pop-up from my computer:

multilotto.news pop up

(Sorry for the watermarks. Need to add them to prevent the most blatant attempts of other bloggers using my screenshots without attribution)

If this description sounds like your system, you almost certainly have some adware installed on your system that pops up the multilotto.news ads. There’s no use contacting the owners of the web site you currently were browsing. The adverts are not coming from them. I’ll do my best to help you remove the multilotto.news pop-up in this blog post.

I found the multilotto.news pop-up on one of the lab computers where I have some adware running. I’ve talked about this in some of the previous blog posts. The adware was installed on purpose, and from time to time I check if something new has appeared, such as pop-up windows, new tabs in the browsers, injected ads on site that usually don’t show ads, or if some new files have been saved to the hard-drive.

multilotto.news resolves to the 194.9.94.11 IP address. multilotto.news was registered on 2015-12-07.

So, how do you remove the multilotto.news pop-up ads? On the machine where I got the multilotto.news ads I had GamesDesktop, CPUMiner and PineTree installed. I removed them with FreeFixer and that stopped the multilotto.news pop-ups and all the other ads I was getting in Mozilla Firefox.

The problem with pop-ups like this one is that it can be initiated by many variants of adware. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

So, what can be done? To remove the multilotto.news pop-up ads you need to review your system for adware or other types of unwanted software and uninstall it. Here’s my suggested removal procedure:

  1. What software do you have installed if you look in the Add/Remove programs dialog in the Windows Control Panel? Something that you don’t remember installing yourself or that was recently installed?
  2. How about your add-ons that you have in your browser. Anything in the list that you don’t remember installing?
  3. If that didn’t help, you can give FreeFixer a try. FreeFixer is built to assist users when manually tracking down adware and other types of unwanted software. It is a freeware utility that I’ve been working since 2006 and it scans your computer at lots of locations where unwanted software is known to hook into your machine. If you would like to get additional details about a file in FreeFixer’s scan result, you can just click the More Info link for that file and a web page with a VirusTotal report will open up, which can be very useful to determine if the file is safe or malware:

    FreeFixer More Info link example
    An example of FreeFixer’s “More Info” links. Click for full size.

Here you can see FreeFixer in action removing the adware that caused pop-up ads:

Did this blog post help you to remove the multilotto.news pop-up ads? Please let me know or how I can improve this blog post.

Thank you!

Remove lhbzz.reward-zone.0215.pics Pop Survey Ads

Sound familiar? You see pop-up advertisements from lhbzz.reward-zone.0215.pics while browsing web sites that mostl of the time don’t advertise in pop-up windows. The pop-ups manage to find a way round the built-in pop-up blockers in Mozilla Firefox, Google Chrome, Internet Explorer or Safari. Perhaps the lhbzz.reward-zone.0215.pics pop-ups show up when clicking search results from Google? Or does the pop-ups appear even when you’re not browsing?

Here is a screen capture on the lhbzz.reward-zone.0215.pics pop-up from my system:

lhbzz.reward-zone.0215.pics

(I know, lots of watermarks. Have to do it to stop the copy-cats.)

If this description sounds like your story, you most likely have some adware installed on your machine that pops up the lhbzz.reward-zone.0215.pics ads. So there’s no use contacting the site owner. The ads are not coming from them. I’ll do my best to help you remove the lhbzz.reward-zone.0215.pics pop up in this blog post.

I found the lhbzz.reward-zone.0215.pics pop-up on one of the lab machines where I have some adware running. I’ve talked about this in some of the previous blog posts. The adware was installed on purpose, and from time to time I check if something new has appeared, such as pop-up windows, new tabs in the browsers, injected ads on web site that usually don’t show advertisements, or if some new files have been saved to the hard-drive.

lhbzz.reward-zone.0215.pics resolves to 107.191.40.156 and 0215.pics to the 199.59.243.120 IP address. lhbzz.reward-zone.0215.pics was registered on 2015-06-02.

So, how do you remove the lhbzz.reward-zone.0215.pics pop-up ads? On the machine where I got the lhbzz.reward-zone.0215.pics ads I had MedPlayerNewVersion, Movie Wizard and istartsurf installed. I removed them with FreeFixer and that stopped the lhbzz.reward-zone.0215.pics pop-ups and all the other ads I was getting in Mozilla Firefox.

MedPlayerNewVersion was the adware that caused the pop-ups in my case.

The problem with pop-ups such as this one is that it can be popped up by many variants of adware, not just the adware on my computer. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

Anyway, here’s my suggestion for the lhbzz.reward-zone.0215.pics ads removal:

The first thing I would do to remove the lhbzz.reward-zone.0215.pics pop-ups is to examine the programs installed on the machine, by opening the “Uninstall programs” dialog. You can find this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows Operating System you can just type in “uninstall” in the Control Panel’s search field to find that dialog:
Uninstall a program search

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:
Uninstall a program dialog

Do you see something strange-looking in there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if something was installed about the same time as you started getting the lhbzz.reward-zone.0215.pics pop-ups.

Then you can examine you browser add-ons. Adware often show up under the add-ons menu in Google Chrome, Mozilla Firefox, Internet Explorer, Safari or Opera. Is there something that looks suspicious? Something that you don’t remember installing?
Firefox add-ons manager

I think you will be able to identify and remove the adware with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the adware. FreeFixer is a freeware tool that I started develop about 8 years ago. It’s a tool designed to manually track down and remove unwanted software. When you’ve tracked down the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not crippled like many other removal tools out there. It will not require you to purchase the program just when you are about to remove the unwanted files.

And if you’re having problems figuring out if a file is safe or malware in FreeFixer’s scan report, click on the More Info link for the file. That will open up a web page which contains additional information about the file. On that web page, check out the VirusTotal report which can be very useful:

FreeFixer More Info link example
An example of FreeFixer’s “More Info” links. Click for full size.

Here’s a video guide showing how to remove pop-up ads with FreeFixer:

Did this blog post help you to remove the lhbzz.reward-zone.0215.pics pop-up ads? Please let me know or how I can improve this blog post.

Thank you!