Remove s.nklm15.com from Firefox, Chrome and Internet Explorer

This page shows how to remove s.nklm15.com from Mozilla Firefox, Google Chrome and Internet Explorer.

Does this sound like what you are seeing right now? You see s.nklm15.com in your browser’s statusbar while browsing on websites that normally don’t load any content from third party domains. Perhaps the s.nklm15.com domain appear when performing a search at the Google search engine?

Here’s a screen capture of s.nklm15.com when it showed up on my machine in the network log:

s.nklm15.com connection

Here are some of the status bar messages you may see in your browser’s status bar:

  • Waiting for s.nklm15.com…
  • Transferring data from s.nklm15.com…
  • Looking up s.nklm15.com…
  • Read s.nklm15.com
  • Connected to s.nklm15.com…

Does this sound like your experience, you apparently have some potentially unwanted program installed on your system that makes the s.nklm15.com domain appear in your web browser. So there’s no use contacting the owner of the site you were browsing. The s.nklm15.com status bar messages are not coming from them. I’ll try help you to remove the s.nklm15.com status bar messages in this blog post.

Those that have been visiting this blog already know this, but for new visitors: Not long ago I dedicated some of my lab computers and intentionally installed some potentially unwanted programs on them. Since then I’ve been monitoring the behaviour on these systems to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the potentially unwanted program updates itself automatically, or if it downloads additional potentially unwanted programs on the systems. I first observed the s.nklm15.com in Mozilla Firefox’s status bar on one of these lab machines.

s.nklm15.com resolves to 54.235.80.18. s.nklm15.com was registered on 2015-03-09.

So, how do you remove s.nklm15.com from your browser? On the machine where s.nklm15.com showed up in the status bar I had NetMon and Jelbrus Secure Web installed. I removed them with FreeFixer and that stopped the browser from loading data from s.nklm15.com.

The issue with status bar messages like the one described in this blog post is that it can be caused by many variants of potentially unwanted programs, not just the potentially unwanted program that’s installed on my machine. This makes it impossible to say exactly what you need to remove to stop the status bar messages.

So, what can be done? To remove s.nklm15.com you need to check your system for potentially unwanted programs and uninstall them. Here’s my suggested removal procedure:

The first thing I would do to remove s.nklm15.com is to examine the software installed on the machine, by opening the “Uninstall programs” dialog. You can open this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows OS you can just type in “uninstall” in the Control Panel’s search field to find that dialog:
Uninstall a program search

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:
Uninstall a program dialog

Do you see something dubious listed there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if something was installed about the same time as you started seeing the s.nklm15.com status bar messages.

Then you can examine you browser add-ons. Potentially unwanted program often appear under the add-ons dialog in Google Chrome, Mozilla Firefox, Internet Explorer, Safari or Opera. Is there something that looks suspicious? Something that you don’t remember installing?
Firefox add-ons manager

I think most users will be able to track down and remove the potentially unwanted program with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the potentially unwanted program. FreeFixer is a freeware tool that I started develop about 8 years ago. It’s a tool designed to manually find and remove unwanted software. When you’ve identified the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not locked like many other removal tools out there. It will not require you to pay for the program just when you are about to remove the unwanted files.

And if you’re having difficulties figuring out if a file is safe or potentially unwanted in FreeFixer’s scan report, click on the More Info link for the file. That will open up your browser with a page which contains more information about the file. On that web page, check out the VirusTotal report which can be quite useful:

FreeFixer More Info link example
An example of FreeFixer’s “More Info” links. Click for full size.

Did this blog post help you to remove s.nklm15.com? Please let me know or how I can improve this blog post.

Thank you!