Category Archives: pop-ups

Remove diriginal.info Pop Up Ads

February 20, 2015pop-ups54.69.104.255Roger Karlsson

Did you just get a pop-up from diriginal.info and wonder where it came from? Did the diriginal.info ad appear to have been initiated from a web site that under normal circumstances don’t use aggressive advertising such as pop-up windows? Or did the diriginal.info pop-up show up while you clicked a link on one of the big search engines, such as Google, Bing or Yahoo?

Here is a screenshot on the diriginal.info pop-up from my computer:

The download pushed here was digitally signed by Andrey Hmelnikov. The download is hosted at groupsetzipmyjob.org.

Does this sound like your experience, you probably have some adware installed on your machine that pops up the diriginal.info ads. So don’t flame the people that runs the web site you were at, the advertisements are almost certainly not coming from that site, but from the adware that’s installed on your system. I’ll do my best to help you with the diriginal.info removal in this blog post.

For those that are new to the blog: A little while back I dedicated some of my lab machines and intentionally installed some adware programs on them. Since then I have been tracking the behaviour on these computers to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the adware updates itself automatically, or if it downloads and installs additional unwanted software on the systems. I first spotted the diriginal.info pop-up on one of these lab computers.

diriginal.info resolves to the 54.69.104.255 address. diriginal.info was created on 2014-08-21.

So, how do you remove the diriginal.info pop-up ads? On the machine where I got the diriginal.info ads I had PriceLess, PriceFountain, PriceHorse, OfferBoulevard and SpeedCheck installed. I removed them with FreeFixer and that stopped the diriginal.info pop-ups and all the other ads I was getting in Internet Explorer.

It seems as diriginal.info is getting quite a lot of traffic, based on Alexa’s traffic rank:

The issue with this type of pop-up is that it can be launched by many variants of adware, not just the adware running on my computer. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

Anyway, here’s my suggestion for the diriginal.info ads removal:

Check what programs you have installed in the Add/Remove programs dialog in the Windows Control Panel. Do you see anything that you don’t remember installing or that was recently installed?
How about your browser add-ons. Anything in the list that you don’t remember installing?
If that did not help, I’d recommend a scan with FreeFixer to manually track down the adware. FreeFixer is a freeware tool that I’m working on that scans your computer at lots of locations, such as browser add-ons, processes, Windows services, recently modified files, etc. If you want to get additional details about a file in the scan result, you can click the More Info link for that file and a web page will open up with a VirusTotal report which will be very useful to determine if the file is safe or malware:
An example of FreeFixer’s “More Info” links. Click for full size.

Here’s a video guide showing how to remove pop-up ads with FreeFixer:

Did this blog post help you to remove the diriginal.info popup ads? Please let me know or how I can improve this blog post.

Thank you!

Remove bestones.net Pop Up Ads

February 20, 2015pop-upsRoger Karlsson

Does this sound familiar? You see pop-up advertisements from bestones.net while browsing websites that normally don’t advertise in pop-up windows. The pop-ups manage to escape the built-in pop-up blockers in Google Chrome, Mozilla Firefox, Internet Explorer or Safari. Perhaps the bestones.net pop-ups appear when clicking search results from a Google search? Or does the pop-ups show up even when you’re not browsing?

Here’s a screenshot of the bestones.net pop-up ad when it showed up on my machine:

The download was digitally signed by Andrey Hmelnikov.

Does this sound like your story, you most likely have some adware installed on your computer that pops up the bestones.net ads. There’s no use contacting the owners of the website you were browsing. The ads are not coming from them. I’ll try help you to remove the bestones.net pop-ups in this blog post.

Those that have been visiting this blog already know this, but for new visitors: Recently I dedicated a few of my lab computers and intentionally installed some adware programs on them. I have been monitoring the actions on these systems to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the adware auto-updates, or if it downloads additional unwanted software on the systems. I first observed the bestones.net pop-up on one of these lab machines.

bestones.net resolves to the 54.69.104.255 IP address. bestones.net was registered on 2014-08-21.

So, how do you remove the bestones.net pop-up ads? On the machine where I got the bestones.net ads I had PriceLess, PriceFountain, PriceHorse and SpeedCheck installed. I removed them with FreeFixer and that stopped the bestones.net pop-ups and all the other ads I was getting in Internet Explorer.

The issue with pop-ups such as this one is that it can be launched by many variants of adware. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

So, what can be done? To remove the bestones.net pop-up ads you need to check your system for adware or other types of unwanted software and uninstall it. Here’s my suggested removal procedure:

Review what programs you have installed in the Add/Remove programs dialog in the Windows Control Panel. Do you see anything that you don’t remember installing or that was recently installed?
You can also check the browser add-ons. Same thing here, do you see something that you don’t remember installing?
If that does not help, you can give FreeFixer a try. FreeFixer is built to assist users when manually tracking down adware and other types of unwanted software. It is a freeware utility that I’ve been working since 2006 and it scans your computer at lots of locations where unwanted software is known to hook into your computer. If you would like to get additional details about a file in FreeFixer’s scan result, you can just click the More Info link for that file and a web page with a VirusTotal report will open up, which can be very useful to determine if the file is safe or malware:
An example of FreeFixer’s “More Info” links. Click for full size.

Here’s a video tutorial on how to remove the pop-ups with FreeFixer:

Did this blog post help you to remove the bestones.net pop-up ads? Please let me know or how I can improve this blog post.

Thank you!

Remove aunewsreport.com Pop Up Ads

February 19, 2015pop-upsRoger Karlsson

Does this sound familiar? You see pop-up adverts from aunewsreport.com while browsing web sites that mostly don’t advertise in pop-up windows. The pop-ups manage to bypass the built-in pop-up blockers in Google Chrome, Mozilla Firefox, Internet Explorer, Safari or Opera. Perhaps the aunewsreport.com pop-ups show up when clicking search results from Google? Or does the pop-ups appear even when you’re not browsing?

Here’s how the aunewsreport.com pop-up looked like when I got it on my computer:

Does this sound like what you see your machine, you probably have some adware installed on your machine that pops up the aunewsreport.com ads. Contacting the owner of the web site would be a waste of time. They are not responsible for the ads. I’ll try help you with the aunewsreport.com removal in this blog post.

I found the aunewsreport.com pop-up on one of the lab machines where I have some adware running. I’ve talked about this in some of the previous blog posts. The adware was installed on purpose, and from time to time I check if anything new has appeared, such as pop-up windows, new tabs in the browsers, injected ads on site that usually don’t show ads, or if some new files have been saved to the hard-drive.

aunewsreport.com was registered on 2015-01-14.

So, how do you remove the aunewsreport.com pop-up ads? On the machine where I got the aunewsreport.com ads I had BlockAndSurf, BrowserWarden and TinyWallet installed. I removed them with FreeFixer and that stopped the aunewsreport.com pop-ups and all the other ads I was getting in Mozilla Firefox.

The issue with pop-ups such as this one is that it can be popped up by many variants of adware, not just the adware on my computer. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

To remove the aunewsreport.com pop-up ads you need to examine your machine for adware or other types of unwanted software and uninstall it. Here’s my suggested removal procedure:

Examine what programs you have installed in the Add/Remove programs dialog in the Windows Control Panel. Do you see anything that you don’t remember installing or that was recently installed?
How about your browser add-ons. Anything in the list that you don’t remember installing?
If that did not help, I’d recommend a scan with FreeFixer to manually track down the adware. FreeFixer is a freeware tool that I’m working on that scans your computer at lots of locations, such as browser add-ons, processes, Windows services, recently modified files, etc. If you want to get additional details about a file in the scan result, you can click the More Info link for that file and a web page will open up with a VirusTotal report which will be very useful to determine if the file is safe or malware:
An example of FreeFixer’s “More Info” links. Click for full size.

Here’s a video tutorial showing FreeFixer in action removing pop-up ads:

Did you find any adware on your machine? Did that stop the aunewsreport.com ads? Please post the name of the adware you uninstalled from your machine in the comment below.

Thank you!

Remove 888poker.com Pop Up Ads Caused By Adware

February 19, 2015pop-upsRoger Karlsson

Did you just get a pop-up from 888poker.com in a new tab and wonder where it came from? Did the 888poker.com ad appear to have been popped up from a web site that under normal circumstances don’t use aggressive advertising such as pop-up windows? Or did the 888poker.com pop-up show up while you clicked a link on one of the major search engines, such as Google, Bing or Yahoo?

Here’s a screen capture of the 888poker.com pop-up ad when it showed up on my system in a new tab:

If you also see this on your system, you apparently have some adware installed on your system that pops up the 888poker.com ads. Contacting the site owner of the site you were browsing would be a waste of time. The ads are not coming from them. I’ll do my best to help you with the 888poker.com removal in this blog post.

Those that have been visiting this blog already know this, but for new visitors: Recently I dedicated some of my lab systems and intentionally installed some adware programs on them. I’ve been tracking the actions on these machines to see what kinds of ads that are displayed. I’m also looking on other interesting things such as if the adware auto-updates, or if it downloads additional unwanted software on the machines. I first noticed the 888poker.com pop-up on one of these lab computers.

So, how do you remove the 888poker.com pop-up ads? On the machine where I got the 888poker.com ads I had TinyWallet, BlockAndSurf and BrowserWarden installed. I removed them with FreeFixer and that stopped the 888poker.com pop-ups and all the other ads I was getting in Mozilla Firefox.

The problem with pop-ups like this one is that it can be popped up by many variants of adware. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

So, what can be done to solve the problem? To remove the 888poker.com pop-up ads you need to check your machine for adware or other types of unwanted software and uninstall it. Here’s my suggested removal procedure:

What software do you have installed if you look in the Add/Remove programs dialog in the Windows Control Panel? Something that you don’t remember installing yourself or that was recently installed?
How about your add-ons that you have in your browser. Anything in the list that you don’t remember installing?
If that did not help, you can give FreeFixer a try. FreeFixer is built to assist users when manually tracking down adware and other types of unwanted software. It is a freeware utility that I’ve been working since 2006 and it scans your computer at lots of locations where unwanted software is known to hook into your machine. If you would like to get additional details about a file in FreeFixer’s scan result, you can just click the More Info link for that file and a web page with a VirusTotal report will open up, which can be very useful to determine if the file is safe or malware:
An example of FreeFixer’s “More Info” links. Click for full size.

Here’s a video guide showing how to remove pop-up ads with FreeFixer:

Did this blog post help you to remove the 888poker.com pop-up ads? Please let me know or how I can improve this blog post.

Thank you!

Remove playmillion.com Pop Up Ads

February 19, 2015pop-upsRoger Karlsson

Does this sound familiar? You see pop-up ads from playmillion.com in new tabs while browsing web sites that generally don’t advertise in pop-ups. The pop-ups manage to evade the built-in pop-up blockers in Mozilla Firefox, Google Chrome, Internet Explorer or Safari. Perhaps the playmillion.com pop-ups show up when clicking search results from the Google search engine? Or does the pop-ups appear even when you’re not browsing?

Here’s how the playmillion.com pop-up looked like when I got it on my system when it appeared in a new tab:

If this sounds like what you are seeing on your machine, you almost certainly have some adware installed on your computer that pops up the playmillion.com ads. So there’s no idea contacting the owner of the website you currently were browsing. The adverts are not coming from them. I’ll try help you to remove the playmillion.com pop-ups in this blog post.

Those that have been following this blog already know this, but for new visitors: Some time ago I dedicated some of my lab machines and knowingly installed some adware programs on them. Since then I have been monitoring the actions on these computers to see what kinds of ads that are displayed. I’m also looking on other interesting things such as if the adware updates itself, or if it installs additional unwanted software on the computers. I first found the playmillion.com pop-up on one of these lab machines.

So, how do you remove the playmillion.com pop-up ads? On the machine where I got the playmillion.com ads I had TinyWallet, BlockAndSurf and BrowserWarden installed. I removed them with FreeFixer and that stopped the playmillion.com pop-ups and all the other ads I was getting in Mozilla Firefox.

The issue with popups such as this one is that it can be popped up by many variants of adware, not just the adware on my machine. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

Anyway, here’s my suggestion for the playmillion.com ads removal:

The first thing I would do to remove the playmillion.com pop-ups is to examine the programs installed on the machine, by opening the “Uninstall programs” dialog. You can open this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows Operating System you can just type in “uninstall” in the Control Panel’s search field to find that dialog:

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:

Do you see something suspicious listed there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if some program was installed about the same time as you started observing the playmillion.com pop-ups.

Then I would check the browser add-ons. Adware often appear under the add-ons dialog in Google Chrome, Mozilla Firefox, Internet Explorer or Safari. Is there anything that looks suspicious? Anything that you don’t remember installing?

I think most users will be able to find and remove the adware with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the adware. FreeFixer is a freeware tool that I’ve developed since 2006. Freefixer is a tool built to manually identify and remove unwanted software. When you’ve found the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not locked down like many other removal tools out there. It won’t require you to pay for the program just when you are about to remove the unwanted files.

And if you’re having a hard time determining if a file is clean or adware in FreeFixer’s scan result, click on the More Info link for the file. That will open up your browser with a page which contains additional details about the file. On that web page, check out the VirusTotal report which can be very useful:

FreeFixer More Info link example — An example of FreeFixer’s “More Info” links. Click for full size.

Did you find any adware on your machine? Did that stop the playmillion.com ads? Please post the name of the adware you uninstalled from your machine in the comment below.

Thank you!

Remove binaryprofessional.com Pop Up Ads Caused By Adware

February 16, 2015pop-ups50.7.157.122Roger Karlsson

Did you just get a pop-up from binaryprofessional.com and ask yourself where it came from? Did the binaryprofessional.com ad appear to have been launched from a web site that under normal circumstances don’t use aggressive advertising such as pop up windows? Or did the binaryprofessional.com pop-up show up while you clicked a link on one of the major search engines, such as Google, Bing or Yahoo?

Here is a screenshot on the binaryprofessional.com pop-up tab from my machine:

If this description sounds like your experience, you most likely have some adware installed on your system that pops up the binaryprofessional.com ads. So there’s no idea contacting the owner of the web site you currently were browsing. The ads are not coming from them. I’ll try help you with the binaryprofessional.com removal in this blog post.

I found the binaryprofessional.com pop-up on one of the lab systems where I have some adware running. I’ve talked about this in some of the previous blog posts. The adware was installed on purpose, and from time to time I check if something new has appeared, such as pop-up windows, new tabs in the browsers, injected ads on site that usually don’t show ads, or if some new files have been saved to the hard-drive.

binaryprofessional.com was registered on 2014-05-25. binaryprofessional.com resolves to the 50.7.157.122 address.

The binaryprofessional.com domain is attracting quite a lot of traffic, just check out the Alexa traffic rank:

So, how do you remove the binaryprofessional.com pop-up ads? On the machine where I got the binaryprofessional.com ads I had TinyWallet, BrowserWarden and BlockAndSurf installed. I removed them with FreeFixer and that stopped the binaryprofessional.com pop-ups and all the other ads I was getting in Mozilla Firefox.

The problem with pop-ups like the one described in this blog post is that it can be launched by many variants of adware, not just the adware on my computer. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

To remove the binaryprofessional.com pop-up ads you need to examine your computer for adware or other types of unwanted software and uninstall it. Here’s my suggested removal procedure:

What software do you have installed if you look in the Add/Remove programs dialog in the Windows Control Panel? Something that you don’t remember installing yourself or that was recently installed?
How about your browser add-ons. Anything in the list that you don’t remember installing?
If that did not help, I’d recommend a scan with FreeFixer to manually track down the adware. FreeFixer is a freeware tool that I’m working on that scans your computer at lots of locations, such as browser add-ons, processes, Windows services, recently modified files, etc. If you want to get additional details about a file in the scan result, you can click the More Info link for that file and a web page will open up with a VirusTotal report which will be very useful to determine if the file is safe or malware:
An example of FreeFixer’s “More Info” links. Click for full size.

Here’s a video tutorial which shows FreeFixer in action removing adware that caused pop-up ads:

Did this blog post help you to remove the binaryprofessional.com pop-up ads? Please let me know or how I can improve this blog post.

Thank you!

Remove .country “2015 Browser Survey” Pop Up Ads From Chrome, Firefox and Internet Explorer

February 9, 2015pop-ups, surveyPrivacyDotLinkRoger Karlsson

Do you see a “2015 Browser Survey” survey from a .country domain while browsing websites that usually don’t advertise in pop-up windows? Do the survey pop-ups manage to bypass the built-in pop-up blockers in Chrome, Firefox, Internet Explorer or Safari. Perhaps the .country pop-ups appear when clicking search results from Google? Or does the surveys appear even when you’re not browsing?

Here an example on how the “2015 browser survey” at a .country domain can look like:

Typically, the web page appears in a new tab and shows a “2015 Browser Survey” and claims to give you chance of winning something by completing the survey. In this case, it tempts you with Apple’s iMac, iPhone 6 or an iPad Air. The survey is also localised, poorly, which is good since it makes it easier to dismiss it. In my case, the survey is localised to swedish. The above survey is from the lamptiger.country domain, but I’ve seen the same type of survey pop up from other domains. Here’s a few:

circleanger.country
linensun.country
grandmothercelery.country
potfuel.country
petquicksand.country
deerpie.country
airportclass.country
micepopcorn.country

etc.. What .country-domain did you see in the survey that popped up on your machine? Please let me and the readers know by posting a comment.

If you also see this on your machine, you probably have some adware installed on your computer that pops up the .country ads. So don’t write angry emails to the web site you were browsing, the ads are almost certainly not coming from them, but from the adware on your machine. I’ll try help you with the .country survey removal in this blog post.

Those that have been following this blog already know this, but here we go: Not long ago I dedicated some of my lab machines and deliberately installed some adware programs on them. I’ve been tracking the behaviour on these computers to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the adware updates itself automatically, or if it installs additional unwanted software on the computers. I first noticed the .country pop-up survey on one of these lab machines.

Who owns these .country domains? I don’t know. This is the registrant info from the WHOIS database:

Registrant ID: 283612-MMd1
Registrant Name: PrivacyDotLink Customer 302315
Registrant Organization: 
Registrant Street: PO Box 30485
Registrant City: Seven Mile Beach
Registrant State/Province: Grand Cayman
Registrant Postal Code: KY1-1202
Registrant Country: KY
Registrant Phone: +1.3457495465

So, how do you remove the .country pop-up surveys? On the machine where I got the .country ads I had TinyWallet, BlockAndSurf and BrowserWarden installed. I removed them with FreeFixer and that stopped the .country pop-ups and all the other ads I was getting in Mozilla Firefox.

The issue with pop-ups such as this one is that it can be popped up by many variants of adware. This makes it impossible to say exactly what you need to remove to stop the surveys.

So, what should done to solve the problem? To remove the .country pop-up surveys you need to examine your system for adware or other types of unwanted software and uninstall it. Here’s my suggested removal procedure:

The first thing I would do to remove the .country pop-up surveys is to examine the software installed on the machine, by opening the “Uninstall programs” dialog. You can reach this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows Operating System you can just type in “uninstall” in the Control Panel’s search field to find that dialog:

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:

Do you see something dubious listed there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if some program was installed approximately about the same time as you started seeing the .country pop-ups.

Then you can examine you browser add-ons. Adware often appear under the add-ons dialog in Firefox, Chrome, Internet Explorer or Safari. Is there anything that looks suspicious? Something that you don’t remember installing?

I think you will be able to identify and remove the adware with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the adware. FreeFixer is a freeware tool that I started develop many years ago. It’s a tool designed to manually track down and uninstall unwanted software. When you’ve identified the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not locked down like many other removal tools out there. It will not require you to pay for the program just when you are about to remove the unwanted files.

And if you’re having a hard time figuring out if a file is legit or malware in FreeFixer’s scan report, click on the More Info link for the file. That will open up a web page which contains more details about the file. On that web page, check out the VirusTotal report which can be very useful:

Here’s a video guide showing how to remove pop-up ads with FreeFixer:

Did this blog post help you to remove the .country pop-up ads? Please let me know or how I can improve this blog post.

Thank you!

Remove selectgo.net Pop Up Windows

February 9, 2015pop-ups108.174.149.154, 54.192.98.188, 54.230.193.85Roger Karlsson

Did you just get a pop-up from selectgo.net and wonder where it came from? Did the selectgo.net ad appear to have been initiated from a web site that under normal circumstances don’t use aggressive advertising such as pop-up windows? Or did the selectgo.net pop-up show up while you clicked a link on one of the major search engines, such as Google, Bing or Yahoo?

Here’s a screenshot of the selectgo.net pop-up ad when it showed up on my machine:

I had some problems capturing a screenshot since the pop-up usually appeared quickly and then disappeared. At times, selectgo.net can also be seen in the status bar of the browser, saying “Waiting for static.selectgo00.selectgo.net“:

Here’s a screenshot from when I captured selectgo.net in a network monitor:

I’ve also spotted ad.selectgo00.selectgo.net in the network log.

Does this sound like what you see your system, you most likely have some adware installed on your computer that pops up the selectgo.net ads. Contacting the owner of the web site would be a waste of time. They are not responsible for the ads. I’ll do my best to help you with the selectgo.net removal in this blog post.

I found the selectgo.net pop-up on one of the lab computers where I have some adware running. I’ve talked about this in some of the previous blog posts. The adware was installed on purpose, and from time to time I check if anything new has appeared, such as pop-up windows, new tabs in the browsers, injected ads on site that usually don’t show ads, or if some new files have been saved to the hard-drive.

selectgo.net was registered on 2013-08-06. selectgo.net resolves to the 108.174.149.154 IP address and static.selectgo00.selectgo.net to 54.230.193.85.

I’ve also seen the ad.selectgo00.selectgo.net (54.192.98.188) subdomain in use.

So, how do you remove the selectgo.net pop-up ads? On the machine where I got the selectgo.net ads I had TinyWallet, BlockAndSurf and BrowserWarden installed. I removed them with FreeFixer and that stopped the selectgo.net pop-ups and all the other ads I was getting in Mozilla Firefox.

The issue with pop-ups like this one is that it can be initiated by many variants of adware, not just the adware that’s installed on my computer. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

So, what can be done to solve the problem? To remove the selectgo.net pop-up ads you need to review your system for adware or other types of unwanted software and uninstall it. Here’s my suggested removal procedure:

Examine what programs you have installed in the Add/Remove programs dialog in the Windows Control Panel. Do you see something that you don’t remember installing or that was recently installed?
How about your browser add-ons. Anything in the list that you don’t remember installing?
If that didn’t solve the problem, I’d recommend a scan with FreeFixer to manually track down the adware. FreeFixer is a freeware tool that I’m working on that scans your computer at lots of locations, such as browser add-ons, processes, Windows services, recently modified files, etc. If you want to get additional details about a file in the scan result, you can click the More Info link for that file and a web page will open up with a VirusTotal report which will be very useful to determine if the file is safe or malware:
An example of FreeFixer’s “More Info” links. Click for full size.

Here’s a video tutorial on how to remove the pop-ups with FreeFixer:

Did this blog post help you to remove the selectgo.net pop-up ads? Please let me know or how I can improve this blog post.

Thank you!

Remove superiends.org Pop Up Ads

February 6, 2015pop-ups104.28.6.50Roger Karlsson

Did you just get a pop-up from superiends.org and wonder where it came from? Did the superiends.org ad appear to have been popped up from a web site that under normal circumstances don’t use aggressive advertising such as pop-up ads? Or did the superiends.org pop-up show up while you clicked a link on one of the big search engines, such as Google, Bing or Yahoo?

Here’s how the superiends.org pop-up looked like when I got it on my machine:

If you also see this on your computer, you probably have some adware installed on your computer that pops up the superiends.org ads. So there’s no idea contacting the owner of the web site you currently were browsing. The ads are not coming from them. I’ll do my best to help you remove the superiends.org pop-up in this blog post.

I found the superiends.org pop-up on one of the lab machines where I have some adware running. I’ve talked about this in some of the previous blog posts. The adware was installed on purpose, and from time to time I check if something new has appeared, such as pop-up windows, new tabs in the browsers, injected ads on web site that usually don’t show ads, or if some new files have been saved to the hard-drive.

superiends.org was created on 2014-08-20. superiends.org resolves to the 104.28.6.50 IP address.

So, how do you remove the superiends.org pop-up ads? On the machine where I got the superiends.org ads I had TinyWallet, BrowserWarden and BlockAndSurf installed. I removed them with FreeFixer and that stopped the superiends.org pop-ups and all the other ads I was getting in Mozilla Firefox.

It seems as superiends.org is getting quite a lot of traffic, based on Alexa’s traffic rank:

The issue with pop-ups like this one is that it can be initiated by many variants of adware, not just the adware running on my machine. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

To remove the superiends.org pop-up ads you need to review your machine for adware or other types of unwanted software and uninstall it. Here’s my suggested removal procedure:

The first thing I would do to remove the superiends.org pop-ups is to examine the programs installed on the machine, by opening the “Uninstall programs” dialog. You can open this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows you can just type in “uninstall” in the Control Panel’s search field to find that dialog:

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:

Do you see something suspicious listed there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if something was installed approximately about the same time as you started seeing the superiends.org pop-ups.

Then I would check the browser add-ons. Adware often show up under the add-ons dialog in Google Chrome, Mozilla Firefox, Internet Explorer, Safari or Opera. Is there something that looks suspicious? Something that you don’t remember installing?

I think you will be able to find and uninstall the adware with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the adware. FreeFixer is a freeware tool that I started develop many years ago. It’s a tool designed to manually identify and remove unwanted software. When you’ve found the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not locked like many other removal tools out there. It won’t require you to pay for the program just when you are about to remove the unwanted files.

And if you’re having troubles determining if a file is legitimate or adware in FreeFixer’s scan report, click on the More Info link for the file. That will open up a web page which contains additional information about the file. On that web page, check out the VirusTotal report which can be quite useful:

Here’s a video tutorial which shows FreeFixer in action removing adware that caused pop-up ads:

Did this blog post help you to remove the superiends.org pop-up ads? Please let me know how I can improve this blog post.

Thank you!

Remove tracking.ibexnetwork.com Pop Up Ads Caused By Adware

February 6, 2015pop-ups50.7.157.124, 54.173.20.116Roger Karlsson

Did you just get a pop-up from tracking.ibexnetwork.com and wonder where it came from? Did the tracking.ibexnetwork.com ad appear to have been popped up from a web site that under normal circumstances don’t use aggressive advertising such as pop-up windows? Or did the tracking.ibexnetwork.com pop-up show up while you clicked a link on one of the big search engines, such as Google, Bing or Yahoo?

Here’s how the tracking.ibexnetwork.com pop-up looked like when I got it on my system:

After a while, the pop-up opened the option.fm page where the actual ad was displayed.

Does this sound like what you are seeing, you probably have some adware installed on your computer that pops up the tracking.ibexnetwork.com ads. There’s no use contacting the owners of the site you currently were browsing. The ads are not coming from them. I’ll try help you with the tracking.ibexnetwork.com removal in this blog post.

If you have been reading this blog already know this, but if you are new: A little while back I dedicated a few of my lab machines and deliberately installed a few adware programs on them. Since then I have been tracking the actions on these machines to see what kinds of ads that are displayed. I’m also looking on other interesting things such as if the adware updates itself, or if it downloads additional unwanted software on the computers. I first noticed the tracking.ibexnetwork.com pop-up on one of these lab computers.

tracking.ibexnetwork.com resolves to the 54.173.20.116 IP address and ibexnetwork.com to 50.7.157.124. tracking.ibexnetwork.com was created on 2012-01-16.

So, how do you remove the tracking.ibexnetwork.com pop-up ads? On the machine where I got the tracking.ibexnetwork.com ads I had BlockAndSurf, TinyWallet and BrowserWarden installed. I removed them with FreeFixer and that stopped the tracking.ibexnetwork.com pop-ups and all the other ads I was getting in Mozilla Firefox.

The issue with pop-ups like the one described in this blog post is that it can be initiated by many variants of adware, not just the adware on my machine. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

Anyway, here’s my suggestion for the tracking.ibexnetwork.com ads removal:

The first thing I would do to remove the tracking.ibexnetwork.com pop-ups is to examine the programs installed on the machine, by opening the “Uninstall programs” dialog. You can open this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows you can just type in “uninstall” in the Control Panel’s search field to find that dialog:

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:

Do you see something dubious listed there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if something was installed approximately about the same time as you started observing the tracking.ibexnetwork.com pop-ups.

Then you can examine you browser add-ons. Adware often show up under the add-ons menu in Firefox, Chrome, Internet Explorer or Safari. Is there anything that looks suspicious? Anything that you don’t remember installing?

I think you will be able to track down and remove the adware with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the adware. FreeFixer is a freeware tool that I started develop about 8 years ago. It’s a tool built to manually track down and remove unwanted software. When you’ve tracked down the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not locked down like many other removal tools out there. It won’t require you to pay a fee just when you are about to remove the unwanted files.

And if you’re having difficulties figuring out if a file is legit or adware in the FreeFixer scan result, click on the More Info link for the file. That will open up your browser with a page which contains more information about the file. On that web page, check out the VirusTotal report which can be very useful:

Here’s a video tutorial on how to remove the pop-ups with FreeFixer:

Did this blog post help you to remove the tracking.ibexnetwork.com pop-up ads? Please let me know or how I can improve this blog post.

Thank you!