This page shows how to remove api.jollywallet.com from Mozilla Firefox, Google Chrome and Internet Explorer.

Did you just see api.jollywallet.com in the status bar of your browser and ponder where it came from? Or did api.jollywallet.com show up while you search for something on one of the major search engines, such as the Google.com search engine?

Here is a screen capture of the api.jollywallet.com connection from my network log:

The api.jollywallet.com request was done by the browser, when I did a search at Google.

Here are some of the status bar messages you may see in your browser’s status bar:

• Waiting for api.jollywallet.com…
• Transferring data from api.jollywallet.com…
• Looking up api.jollywallet.com…
• Read api.jollywallet.com
• Connected to api.jollywallet.com…

Does this sound like what you see your computer, you most likely have some potentially unwanted program installed on your machine that makes the api.jollywallet.com domain appear in your browser. There’s no use contacting the owners of the site you were browsing. The api.jollywallet.com status bar messages are not coming from them. I’ll do my best to help you remove the api.jollywallet.com message in this blog post.

Those that have been reading this blog already know this, but for new visitors: Recently I dedicated some of my lab computers and wilfully installed a few potentially unwanted programs on them. I have been observing the behaviour on these computers to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the potentially unwanted program updates itself automatically, or if it downloads and installs additional potentially unwanted programs on the machines. I first noticed the api.jollywallet.com in Mozilla Firefox’s statusbar on one of these lab machines.

jollywallet.com resolves to 54.208.18.58 and api.jollywallet.com to the 54.209.12.71 IP address. api.jollywallet.com was registered on 2012-02-05.

So, how do you remove api.jollywallet.com from your browser? On the machine where api.jollywallet.com showed up in the status bar I had TornTV installed. I removed it with FreeFixer and that stopped the browser from loading data from api.jollywallet.com.

It seems as api.jollywallet.com is getting quite a lot of traffic, based on Alexa’s traffic rank:

The issue with status bar notifications such as this one is that it can be caused by many variants of potentially unwanted programs. This makes it impossible to say exactly what you need to remove to stop the status bar messages.

So, what can be done? To remove api.jollywallet.com you need to check your system for potentially unwanted programs and uninstall them. Here’s my suggested removal procedure:

The first thing I would do to remove api.jollywallet.com is to examine the programs installed on the machine, by opening the “Uninstall programs” dialog. You can open this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows Operating System you can just type in “uninstall” in the Control Panel’s search field to find that dialog:

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:

Do you see something suspect in there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if some program was installed about the same time as you started observing the api.jollywallet.com status bar messages.

Then you can examine you browser add-ons. Potentially unwanted program often appear under the add-ons menu in Google Chrome, Mozilla Firefox, Internet Explorer, Safari or Opera. Is there anything that looks suspicious? Anything that you don’t remember installing?

I think most users will be able to identify and uninstall the potentially unwanted program with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the potentially unwanted program. FreeFixer is a freeware tool that I started develop about 8 years ago. Freefixer is a tool designed to manually find and remove unwanted software. When you’ve identified the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not locked down like many other removal tools out there. It will not require you to pay for the program just when you are about to remove the unwanted files.

And if you’re having problems deciding if a file is clean or potentially unwanted in the FreeFixer scan report, click on the More Info link for the file. That will open up a web page which contains additional details about the file. On that web page, check out the VirusTotal report which can be quite useful:

Did you find any potentially unwanted program on your machine? Did that stop api.jollywallet.com? Please post the name of the potentially unwanted program you uninstalled from your machine in the comment below.

Thank you!

Update 2015-03-20: Found another “JollyWallet” related domains on the machine with TornTV installed. The domain is d2cnb4m0nke2lh.cloudfront.net, and the requested URL is https://d2cnb4m0nke2lh.cloudfront.net/jollywallet/resources/js/2/affiliate_client.js

Update 2015-03-21: Another CloudFront domain showed up on the same machine with TornTV: d2lh2xae64ne37.cloudfront.net. The -URL is https://d2lh2xae64ne37.cloudfront.net/adsset.png