Hello readers. Another day, another blog post. Today I wanted to talk about a Adware called UniSales and thought I should give you some removal instructions. UniSales appears to be a variant of BuyNSave that I wrote about previously. If UniSales is installed on your computer, you will see ads labeled Ads by unisales added into Google’s search results, new add-ons called “Unisales” installed into Firefox and Internet Explorer, pop-up windows labeled “Ads by unisales” and overlay ads, also tagged “Ads by unisales”.
I’ll show how to remove UniSales in this blog post with the FreeFixer removal tool.
UniSales is distributed by a tactic called bundling. Bundling means that a piece of software is included in other software’s installers. Here’s how it appeared in the installer:
Generally, you can avoid bundled software such as UniSales by being careful when installing software and declining the bundled offers in the installer.
When I stumble upon some new bundled software I always upload it to VirusTotal to verify if the anti-virus programs there detect something interesting. 29% of the anti-virus scanners detected the file. ESET-NOD32 names UniSales as a variant of Win32/AdWare.MultiPlug.BN, F-Secure calls it Gen:Variant.Adware.Graftor.153998, McAfee detects it as Artemis!7E61FEF6948F and McAfee-GW-Edition names it BehavesLike.Win32.Adware.hm.
I’m sure you’d like to remove UniSales, and that’s pretty straightforward with FreeFixer. Select the UniSales files, as shown in the screenshots below, click Fix, and restart your machine and the problem should be gone.
Hope this helped you remove the UniSales Adware.
I stumbled upon UniSales while testing out some downloads that are known to bundled lots of unwanted software. Any idea how you got UniSales on your computer? Please let me and the readers know by posting a comments. Thanks a bunch!
Thank you for reading.
January 6, 2016
UNISALES REMOVED COMPLETELY – ISSUE FINALLY SOLVED!
NO DOWNLOAD NECESSARY
This malicious adware/spyware kept coming back no matter what I tried, including all of the methods above and others I found posted on the internet. Every time I uninstalled, deleted, reset, etc. it would magically reappear when I restarted my browser. Since nobody had the answer I decided to figure this out on my own. I was able to remove the add-on from Firefox and IE without issue, but Chrome seemed to be it’s main target.
TO REMOVE FROM CHROME:
1. Start Chrome.
2. Go to SETTINGS>EXTENSIONS. You should see “uunIsalaes.”
3. Click DEVELOPER MODE button in the upper right hand corner. This will show you its ID and where the insidious files are stored.
4. Go to that folder and delete it; the entire folder.
5. Go back to Chrome SETTINGS>EXTENSIONS and disable, then delete the offending extension.
6. Restart Chrome and see that the extension is now gone. For good.
7. Empty recycle bin when you are satisfied everything on your system is back to normal.
That’s it! It worked perfectly and I have not seen a trace of it since. I hope works for you as well. One last thing. Have you noticed all of the sites that are willing to help you remove UniSales? Makes you wonder if it was a scheme from the beginning. Someone needs to sue the crap out of this person/entity/hacker/company!
Thank you so much, Burt. I have tried so many malware removal tools but couldn’t get rid of this rubbish unisales thing. Your trick worked like charm. Much appreciated.
Thank you captain Burt! I do agree that downloading additional software are useless. your solution is extremely effective. Oh, for those who are unable to search the files, you might want to check the hidden file box. View > hidden file.
Extensions does not have unisale extension but still the search engine gets directed to it. Plz help me. This is very irritating.