Sound familiar? You see pop-up ads from thebestofferdeals.com while browsing web sites that usually don’t advertise in pop-up windows. The pop-ups manage to find a way round the built-in pop-up blockers in Chrome, Firefox, Internet Explorer or Safari. Maybe the thebestofferdeals.com pop-ups appear when clicking search results from a Google search? Or does the pop-ups show up even when you’re not browsing?

Here is how the thebestofferdeals.com ad looked like on my machine:

Does this sound like your system, you presumably have some adware installed on your machine that pops up the thebestofferdeals.com ads. There’s no use contacting the owners of the web site you currently were browsing. The ads are not coming from them. I’ll try help you with the thebestofferdeals.com removal in this blog post.

I found the thebestofferdeals.com pop-up on one of the lab machines where I have some adware running. I’ve talked about this in some of the previous blog posts. The adware was installed on purpose, and from time to time I check if anything new has appeared, such as pop-up windows, new tabs in the browsers, injected ads on website that usually don’t show ads, or if some new files have been saved to the hard-drive.

thebestofferdeals.com resolves to the 8.29.141.45 IP address. thebestofferdeals.com was created on 2010-11-28. YouGetSignal’s reverse IP lookup reports that these domains are located on the same server:

• ayi1f.thebestofferdeals.com
• cashadvance.thebestofferdeals.com
• cchorizongold.thebestofferdeals.com
• dk1.firstdate.thebestofferdeals.com
• fbdating13.thebestofferdeals.com
• fbdating1fr.thebestofferdeals.com
• fbdating2fr.thebestofferdeals.com
• filp1.firstdate.thebestofferdeals.com
• fr.becoquin1.thebestofferdeals.com
• kingjack1.thebestofferdeals.com
• lf1hourcashadvance.thebestofferdeals.com
• no1.firstdate.thebestofferdeals.com
• paydayloanl1.thebestofferdeals.com
• rehighspeedpayday.thebestofferdeals.com
• renetloanusa.thebestofferdeals.com
• sbr.com.sg
• se1.firstdate.thebestofferdeals.com
• se2.firstdate.thebestofferdeals.com
• swisscasino1.thebestofferdeals.com
• thebestofferdeals.com
• whadu.com
• www.ilkka.fi
• www.newark.com

So, how do you remove the thebestofferdeals.com pop-up ads? On the machine where I got the thebestofferdeals.com ads I had istartsurf, MedPlayerNewVersion and Movie Wizard installed. I removed them with FreeFixer and that stopped the thebestofferdeals.com pop-ups and all the other ads I was getting in Mozilla Firefox.

The issue with pop-ups such as this one is that it can be popped up by many variants of adware. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

Anyway, here’s my suggestion for the thebestofferdeals.com ads removal:

1. What software do you have installed if you look in the Add/Remove programs dialog in the Windows Control Panel? Something that you don’t remember installing yourself or that was recently installed?
2. You can also check the add-ons that you have in your browser. Same thing here, do you see anything that you don’t remember installing?
3. If that did not help, I’d recommend a scan with FreeFixer to manually track down the adware. FreeFixer is a freeware tool that I’m working on that scans your computer at lots of locations, such as browser add-ons, processes, Windows services, recently modified files, etc. If you want to get additional details about a file in the scan result, you can click the More Info link for that file and a web page will open up with a VirusTotal report which will be very useful to determine if the file is safe or malware:

   

Here you can see FreeFixer in action removing the adware that caused pop-up ads:

Did you find any adware on your machine? Did that stop the thebestofferdeals.com ads? Please post the name of the adware you uninstalled from your machine in the comment below.

Thank you!