Remove palaceofbingo.com Pop Up Ads Caused By Adware

Having issues with pop-ups from palaceofbingo.com? If that is the case, you might have adware installed on your machine. I got the palaceofbingo.com pop-ups in Firefox, but they can appear if you are using Chrome, Internet Explorer, Safari or Opera too.

Here’s how the palaceofbingo.com pop-up looked like when I got it on my computer in a new tab:

palaceofbingo.com pop up

If this sounds like what you are seeing on your system, you probably have some adware installed on your computer that pops up the palaceofbingo.com ads. There’s no use contacting the owners of the site you were browsing. The advertisements are not coming from them. I’ll do my best to help you with the palaceofbingo.com removal in this blog post. This is done by removing the unwanted adware from your machine.

I found the palaceofbingo.com pop-up on one of the lab computers where I have some adware running. I’ve talked about this in some of the previous blog posts. The adware was installed on purpose, and from time to time I check if something new has appeared, such as pop-up windows, new tabs in the browsers, injected ads on web site that usually don’t show ads, or if some new files have been saved to the hard-drive.

So, how do you remove the palaceofbingo.com pop-up ads? On the machine where I got the palaceofbingo.com ads I had TinyWallet, BlockAndSurf and TinyWallet installed. I removed them with FreeFixer and that stopped the palaceofbingo.com pop-ups and all the other ads I was getting in Mozilla Firefox.

The problem with pop-ups like this one is that it can be initiated by many variants of adware. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

So, what can be done to solve the problem? To remove the palaceofbingo.com pop-up ads you need to examine your system for adware or other types of unwanted software and uninstall it. Here’s my suggested removal procedure:

The first thing I would do to remove the palaceofbingo.com pop-ups is to examine the programs installed on the machine, by opening the “Uninstall programs” dialog. You can reach this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows Operating System you can just type in “uninstall” in the Control Panel’s search field to find that dialog:
Uninstall a program search

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:
Uninstall a program dialog

Do you see something suspicious in there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if something was installed approximately about the same time as you started seeing the palaceofbingo.com pop-ups.

Then you can examine you browser add-ons. Adware often appear under the add-ons dialog in Google Chrome, Mozilla Firefox, Internet Explorer or Safari. Is there anything that looks suspicious? Something that you don’t remember installing?
Firefox add-ons manager

I think you will be able to find and remove the adware with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the adware. FreeFixer is a freeware tool that I’ve developed since 2006. Freefixer is a tool built to manually find and remove unwanted software. When you’ve found the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not locked like many other removal tools out there. It will not require you to purchase the program just when you are about to remove the unwanted files.

And if you’re having difficulties deciding if a file is safe or adware in FreeFixer’s scan result, click on the More Info link for the file. That will open up a web page which contains more details about the file. On that web page, check out the VirusTotal report which can be very useful:

FreeFixer More Info link example
An example of FreeFixer’s “More Info” links. Click for full size.

Here’s a video tutorial which shows FreeFixer in action removing adware that caused pop-up ads:

Did you find any adware on your machine? Did that stop the palaceofbingo.com ads? Please post the name of the adware you uninstalled from your machine in the comment below.

Thank you!

Symbu LLC – 9% Detection Rate – DownloadAdmin / WebInstallBundle

Hello! Was looking for some downloads to play around with and found one, digitally signed by Symbu LLC. The file is named freeallinonemediaplayer-setup.exe. You may see Symbu LLC appear as the publisher when double-clicking on the freeallinonemediaplayer-setup.exe file.

Symbu LLC uac

By examining the certificate, we can see that Symbu LLC is located in San Fransisco, the US. The certificate is issued by DigiCert SHA2 Assured ID Code Signing CA.

Symbu LLC certificate

9% of the scanners detected the file when uploaded to VirusTotal. The freeallinonemediaplayer-setup.exe file is detected as Trojan.Win32.Atraps.b by ByteHero, Adware:W32/WebInstallBundle by F-Secure, Win32.Application.DownloadAdmin.A by GData and DownloadAdmin (fs) by VIPRE.

Symbu LLC virustotal

Did you also find a Symbu LLC file?

Hope this blog post helped you avoid some unwanted software on your machine.

Thank you for reading.

Software Association LLC – 16% Detection Rate – Sevas-S / iBryte / OpenCandy

Hi there! Just wanted to give you the heads up on a file called skypesetupfull.exe that’s digitally signed by Software Association LLC. This is how it looks when double-clicking on the file and Software Association LLC appears as the publisher.

Software Association LLC uac

Software Association LLC is located in Ukraine. The certificate is issued by DigiCert SHA2 Assured ID Code Signing CA.

Software Association LLC certificate

The issue is that skypesetupfull.exe is not an official Skype download. If it was, it would have been digitally signed by Skype Software Sarl. Here’s how the authentic Skype looks like when you double click on it. Notice that the “Verified publisher” says “Skype Software Sarl”.
Skype Software Sarl publisher

The reason I’m writing this blog post is that the Software Association LLC file is detected by some of the anti-malware scanners at VirusTotal. AVG detects skypesetupfull.exe as OpenCandy.F33, AVware names it Sevas-S Installer (fs), Jiangmin detects it as Adware/iBryte.hhhm, K7GW names it DoS-Trojan ( 200b63e51 ) and Malwarebytes reports PUP.Optional.OpenCandy.

Software Association LLC virustotal

Did you also find a file digitally signed by Software Association LLC? Where did you find it and are the anti-virus programs detecting it? Please share in the comments below.

Thanks for reading.

How To Remove The Positive Finds Adware

Just found another bundled program called “Positive Finds“. If you are wondering where it came from, it was probably bundled with some free download. In my case it was bundled with a program that extracts RAR files. Currently, no anti-virus program detected it when I uploaded it to VirusTotal.

positive find firefox

The software is clearly adware as explained in the EULA:

positive find eula adware

You can remove Positive Finds from the Windows Control Panel:

Positive Finds uninstall

If that does not work, just select the files in FreeFixer:

positive finds internet explorer Positive Finds firefox remove

Thanks for reading!

 

 

Broken Spoke Digital – 28% Detection Rate – DownloadAdmin / Downware

Hi there! Just a short post on a publisher called Broken Spoke Digital. You may see Broken Spoke Digital appear as the publisher when double-clicking on the installer_jdownloader_English.exe file.

Broken Spoke Digital uac dialog-*

Information about a digital signature and the certificate can also be found under the Digital Signature tab. According to the certificate we can see that Broken Spoke Digital is located in San Fransisco in US and that the certificate is issued by Go Daddy Secure Certificate Authority – G2.

Broken Spoke Digital certificate

When I uploaded the Broken Spoke Digital file to VirusTotal, it came up with a 28% detection rate. The file is detected as Riskware.Agent! by Agnitum, PUP/Win32.Downware by AhnLab-V3, Trojan/Win32.TSGeneric by Antiy-AVL, DownloadAdmin (fs) by AVware, Win.Adware.Downloadadmin by ClamAV, W32/S-92ce39bf!Eldorado by F-Prot, PUP.Optional.DownloadAdmin by Malwarebytes and DownloadAdmin (fs) by VIPRE.

Broken Spoke Digital virustotal

Did you also find a Broken Spoke Digital file? Do you remember where you downloaded it?

Thanks for reading.

Remove Gate Snapper Ads

Hello readers. Hope you are doing ok. I just found another bundled adware called Gate Snapper and thought I should give you some removal instructions. This seems to be a variant of BrowseFox that I’ve previously blogged about. If you got Gate Snapper installed and running on your computer, you will see new add-ons/extensions installed into Mozilla Firefox and Internet Explorer. You may also see ads labeled “By gate snapper“. You can also see “apigatesnapperco-a.akamaihd.net” and “api.gatesnapper.com” appear in the status bar of your web browser or in the network log.

Google Chrome was not affected by the adware.gate snapper firefox

I’ll show how to remove Gate Snapper in this blog post with the FreeFixer removal tool.

Gate Snapper is bundled with other software. Bundled means that it is included in another software’s installer.

As always when I run into some new bundled software I uploaded it to VirusTotal to see if the anti-virus scanners there detect anything suspicious. 12 of the scanners detected the file. The Gate Snapper files are detected as BrowseFox.F by AVG, Application.Win32.BrowseFox.JM by Comodo, a variant of Win32/BrowseFox.O by ESET-NOD32, AdWare/LinkSwift.acd by Jiangmin, PUP.Optional.GateSnapper.A by Malwarebytes and AdWare.Kranet by VBA32.

gate snapper virus total

You probably came here looking for removal instructions for GateSnapper and you can do so with the FreeFixer removal tool. Here’s a few screenshots from the removal that should help you: A restart of your computer may be required to complete the removal.

gatesnapper internet explorer gate snapper 1.0.1

Hope that helped you with the removal.

Did you also find Gate Snapper on your system? Any idea how it was installed? Please share in the comments below. Thanks a bunch!

Hope you found this useful. Thanks for reading.

Mathematical Applications – 32% Detection Rate – PullUpdate / Jatif / Artemis

Hello readers! Short on time today, but I just wanted to give you the heads up on a publisher called Mathematical Applications. I’ve seen many files digitally signed by this publisher submitted to the FreeFixer database, so I thought it was about time to write a few lines about it.

The issue with the Mathematical Applications file is that it is detected by many of the anti-virus progams. Here are some of the detection names: Downloader.CBD, Adware.Yontoo.55, a variant of MSIL/Adware.PullUpdate.G.gen, Gen:Variant.Adware.Jatif.92, PUP.Optional.CrimeWatch.A and Artemis. In other words, you are probably better off removing these files.

Mathematical Applications virustotal

Did you also find a download that was signed by Mathematical Applications? What kind of download was it and was it detected by the anti-viruses at VirusTotal? Please share in posting comments below.

Thanks for reading.

What is Google Chrome Packages?

If you got something called Google Chrome Packages installed on your machine, I just want to let you know that it is not something that comes with the official Google Chrome  download.

Google Chrome Packages

I found Google Chrome Packages yesterday, while installing an unofficial Chrome download, that was digitally signed by World Setup (New Media Holdings Ltd.). That file was detected by 11% of the anti-virus scanners over at VirusTotal.

Hope that helped you figure out what Google Chrome Packages is and how it got onto your system.

Did you also get Google Chrome Packages from this “Chrome” download?

Thanks for reading!

Remove softnewready.freeupgrade24.com Pop Up Ads – freeupgrade24.com Removal Guide

Did you just get a pop-up from softnewready.freeupgrade24.com and wonder where it came from? Did the freeupgrade24.com ad appear to have been launched from a web site that under normal circumstances don’t use aggressive advertising such as pop-up windows? Or did the softnewready.freeupgrade24.com pop-up show up while you clicked a link on one of the big search engines, such as Google, Bing or Yahoo?

Here is how the softnewready.freeupgrade24.com ad looked like on my machine:

freeupgrade24.com pop-up

If you also see this on your system, you apparently have some adware installed on your machine that pops up the softnewready.freeupgrade24.com ads. Contacting the owner of the site would be a waste of time. They are not responsible for the ads. I’ll do my best to help you remove the softnewready.freeupgrade24.com pop-up in this blog post.

Those that have been reading this blog already know this, but for new visitors: Not long ago I dedicated some of my lab machines and knowingly installed a few adware programs on them. I’ve been observing the actions on these machines to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the adware updates itself automatically, or if it downloads and installs additional unwanted software on the machines. I first spotted the softnewready.freeupgrade24.com pop-up on one of these lab machines.

softnewready.freeupgrade24.com was created on 2015-01-26. softnewready.freeupgrade24.com resolves to 198.7.56.112.

So, how do you remove the softnewready.freeupgrade24.com pop-up ads? On the machine where I got the softnewready.freeupgrade24.com ads I had PriceHorse, PriceLess, OfferBoulevard and SpeedCheck installed. I removed them with FreeFixer and that stopped the softnewready.freeupgrade24.com pop-ups and all the other ads I was getting in Mozilla Firefox.

The issue with this type of pop-up is that it can be launched by many variants of adware, not just the adware on my computer. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

Anyway, here’s my suggestion for the softnewready.freeupgrade24.com ads removal:

The first thing I would do to remove the softnewready.freeupgrade24.com pop-ups is to examine the software installed on the machine, by opening the “Uninstall programs” dialog. You can open this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows you can just type in “uninstall” in the Control Panel’s search field to find that dialog:
Uninstall a program search

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:
Uninstall a program dialog

Do you see something suspicious in there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if something was installed about the same time as you started seeing the softnewready.freeupgrade24.com pop-ups.

Then I would check the browser add-ons. Adware often appear under the add-ons menu in Mozilla Firefox, Google Chrome, Internet Explorer or Safari. Is there anything that looks suspicious? Something that you don’t remember installing?
Firefox add-ons manager

I think you will be able to find and remove the adware with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the adware. FreeFixer is a freeware tool that I’ve developed since 2006. It’s a tool designed to manually find and uninstall unwanted software. When you’ve identified the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not locked like many other removal tools out there. It will not require you to pay for the program just when you are about to remove the unwanted files.

And if you’re having difficulties determining if a file is clean or malware in the FreeFixer scan result, click on the More Info link for the file. That will open up a web page which contains more details about the file. On that web page, check out the VirusTotal report which can be very useful:

FreeFixer More Info link example
An example of FreeFixer’s “More Info” links. Click for full size.

Here you can see FreeFixer in action removing pop-up ads:

Did this blog post help you to remove the softnewready.freeupgrade24.com pop-up ads? Please let me know or how I can improve this blog post.

Thank you!

Remove pcchecker.plugin-update.org Pop Up Ads About Outdated Flash Player

Sound familiar? You see pop-up ads from pcchecker.plugin-update.org while browsing sites that in general don’t advertise in pop-up windows. The pop-ups manage to bypass the built-in pop-up blockers in Chrome, Firefox, Internet Explorer or Safari. Maybe the pcchecker.plugin-update.org pop-ups show up when clicking search results from Google? Or does the pop-ups appear even when you’re not browsing?

Here’s a screen capture of the plugin-update.org pop-up ad when it showed up on my computer:

pcchecker.plugin-update.org pop-up

Does this sound like what you see your computer, you almost certainly have some adware installed on your system that pops up the pcchecker.plugin-update.org ads. So don’t flame the people that runs the website you were at, the ads are presumably not coming from that website, but from the adware that’s installed on your machine. I’ll try help you to remove the plugin-update.org pop-ups in this blog post.

If you have been reading this blog already know this, but if you are new: A little while back I dedicated some of my lab computers and intentionally installed a few adware programs on them. Since then I have been tracking the behaviour on these computers to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the adware auto-updates, or if it installs additional unwanted software on the computers. I first noticed the pcchecker.plugin-update.org pop-up on one of these lab computers.

pcchecker.plugin-update.org resolves to 198.7.56.118. pcchecker.plugin-update.org was created on 2015-01-20.

So, how do you remove the pcchecker.plugin-update.org pop-up ads? On the machine where I got the pcchecker.plugin-update.org ads I had PriceLess, PriceHorse, OfferBoulevard and SpeedCheck installed. I removed them with FreeFixer and that stopped the pcchecker.plugin-update.org pop-ups and all the other ads I was getting in Mozilla Firefox.

The issue with pop-ups such as this one is that it can be initiated by many variants of adware. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

So, what can be done to solve the problem? To remove the pcchecker.plugin-update.org pop-up ads you need to review your machine for adware or other types of unwanted software and uninstall it. Here’s my suggested removal procedure:

  1. What software do you have installed if you look in the Add/Remove programs dialog in the Windows Control Panel? Something that you don’t remember installing yourself or that was recently installed?
  2. You can also check the add-ons that you have in your browser. Same thing here, do you see something that you don’t remember installing?
  3. If that did not help, I’d recommend a scan with FreeFixer to manually track down the adware. FreeFixer is a freeware tool that I’m working on that scans your computer at lots of locations, such as browser add-ons, processes, Windows services, recently modified files, etc. If you want to get additional details about a file in the scan result, you can click the More Info link for that file and a web page will open up with a VirusTotal report which will be very useful to determine if the file is safe or malware:

    FreeFixer More Info link example
    An example of FreeFixer’s “More Info” links. Click for full size.

Here’s a video guide showing how to remove pop-up ads with FreeFixer:

Did this blog post help you to remove the pcchecker.plugin-update.org pop-up ads? Please let me know or how I can improve this blog post.

Thank you!