Remove gpm.sekgaagzz.com from Chrome, Firefox and IE

This page shows how to remove gpm.sekgaagzz.com from Mozilla Firefox, Google Chrome and Internet Explorer.

Having troubles with gpm.sekgaagzz.com showing up in the lower left corner of your browser? If so, you may have some potentially unwanted program installed on your machine. I noticed gpm.sekgaagzz.com in Mozilla Firefox’s status bar when doing a search at Google, but I guess gpm.sekgaagzz.com can appear if you are using Chrome, Internet Explorer, Safari or Opera too.

Here is a screen dump on gpm.sekgaagzz.com from my system, from the network log:

gpm.sekgaagzz.com connection

The following are some of the status bar messages you may see in your browser’s status bar:

  • Waiting for gpm.sekgaagzz.com…
  • Transferring data from gpm.sekgaagzz.com…
  • Looking up gpm.sekgaagzz.com…
  • Read gpm.sekgaagzz.com
  • Connected to gpm.sekgaagzz.com…

If you also see this on your machine, you almost certainly have some potentially unwanted program installed on your computer that makes the gpm.sekgaagzz.com domain appear in your browser. So don’t write angry emails to the site you were browsing, they are almost certainly not responsible for the gpm.sekgaagzz.com status bar messages. The potentially unwanted program on your computer is. I’ll do my best to help you remove the gpm.sekgaagzz.com message in this blog post.

Those that have been spending some time on this blog already know this, but for new visitors: Not long ago I dedicated a few of my lab computers and knowingly installed a few potentially unwanted programs on them. Since then I have been observing the actions on these computers to see what kinds of adverts that are displayed. I’m also looking on other interesting things such as if the potentially unwanted program updates itself, or if it installs additional potentially unwanted programs on the computers. I first noticed the gpm.sekgaagzz.com in Mozilla Firefox’s status bar on one of these lab machines.

gpm.sekgaagzz.com resolves to the 5.153.38.134 IP address. gpm.sekgaagzz.com was registered on 2015-03-18. WhoisGuard INC. is protecting the whois info for the domain.

So, how do you remove gpm.sekgaagzz.com from your browser? On the machine where gpm.sekgaagzz.com showed up in the status bar I had BlockAndSurf, TinyWallet and BrowserWarden installed. I removed them with FreeFixer and that stopped the browser from loading data from gpm.sekgaagzz.com.

The issue with this type of status bar message is that it can be caused by many variants of potentially unwanted programs, not just the potentially unwanted program that’s installed on my machine. This makes it impossible to say exactly what you need to remove to stop the status bar messages.

Anyway, here’s my suggestion for the gpm.sekgaagzz.com removal:

  1. What software do you have installed if you look in the Add/Remove programs dialog in the Windows Control Panel? Something that you don’t remember installing yourself or that was recently installed?
  2. You can also examine the web browser add-ons. Same thing here, do you see something that you don’t remember installing?
  3. If that does not help, you can give FreeFixer a try. FreeFixer is built to assist users when manually tracking down potentially unwanted programs. It is a freeware utility that I’ve been working since 2006 and it scans your machine at lots of locations where unwanted software is known to hook into your machine. If you would like to get additional details about a file in FreeFixer’s scan result, you can just click the More Info link for that file and a web page with a VirusTotal report will open up, which can be very useful to determine if the file is safe or malware:

    FreeFixer More Info link example
    An example of FreeFixer’s “More Info” links. Click for full size.

Did you find any potentially unwanted program on your machine? Did that stop gpm.sekgaagzz.com? Please post the name of the potentially unwanted program you uninstalled from your machine in the comment below.

Thank you!