Did you just get a pop-up from consumerhealthoffers.com and ask yourself where it came from?

Did the consumerhealthoffers.com ad appear to have been launched from a web site that under normal circumstances don’t use advertising such as pop-up windows? Or did the consumerhealthoffers.com pop-up show up while you clicked a link on one of the major search engines, such as Google, Bing or Yahoo?

(Sorry for the ridiculous use of watermarks. I have to do it to stop the copy-cats.)

If this description sounds like your system, you presumably have some adware installed on your system that pops up the consumerhealthoffers.com ads. There’s no use contacting the owners of the web site you currently were browsing. The ads are not coming from them. I’ll do my best to help you with the consumerhealthoffers.com removal in this blog post.

Those that have been visiting this blog already know this, but here we go: Not long ago I dedicated some of my lab computers and deliberately installed a few adware programs on them. I’ve been monitoring the behaviour on these computers to see what kinds of ads that are displayed. I’m also looking on other interesting things such as if the adware auto-updates, or if it installs additional unwanted software on the machines. I first found the consumerhealthoffers.com pop-up on one of these lab machines.

consumerhealthoffers.com was created on 2014-03-26. consumerhealthoffers.com resolves to the 104.28.13.94 address. According to DomainTools and YouGetSignal’s reverse lookup service the following domains are located on the same server:

• dj-ssm.com
• 238bet.com
• deennetwork.org.uk
• gtcheer.com
• guvenlibozdurma.com
• investing.kuchita.com
• lagubaru.club
• minecraftmodarchive.org
• nidal.tv
• theswiftcodes.net
• vip-riviera.ch
• www.coastrta.com
• www.femininex.com
• www.ifeme.com
• www.mbisilver.com
• www.plprx.com
• www.smedio.com
• www.tempouk.org
• www.theswiftcodes.net
• www.walletburn.com
• www.yourpublicliability.org

So, how do you remove the consumerhealthoffers.com pop-up ads? On the machine where I got the consumerhealthoffers.com ads I had WebShield, mystartsearch, Wajam, PhaseProfessor, FastSearch, PrimaryColor, SSFK.exe, SFKEX64.exe, YTDownloader and acengine installed. I removed them with FreeFixer and that stopped the consumerhealthoffers.com pop-ups and all the other ads I was getting in Mozilla Firefox.

The problem with this type of pop-up is that it can be popped up by many variants of adware, not just the adware that’s installed on my machine. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

So, what can be done to solve the problem? To remove the consumerhealthoffers.com pop-up ads you need to check your computer for adware or other types of unwanted software and uninstall it. Here’s my suggested removal procedure:

1. Review what programs you have installed in the Add/Remove programs dialog in the Windows Control Panel. Do you see anything that you don’t remember installing or that was recently installed?
2. How about your browser add-ons. Anything in the list that you don’t remember installing?
3. If that didn’t solve the problem, you can give FreeFixer a try. FreeFixer is built to assist users when manually tracking down adware and other types of unwanted software. It is a freeware utility that I’ve been working since 2006 and it scans your machine at lots of locations where unwanted software is known to hook into your machine. If you would like to get additional details about a file in FreeFixer’s scan result, you can just click the More Info link for that file and a web page with a VirusTotal report will open up, which can be very useful to determine if the file is safe or malware:

   

Here’s a video tutorial on how to remove the pop-ups with FreeFixer:

Did you find any adware on your machine? Did that stop the consumerhealthoffers.com ads? Please post the name of the adware you uninstalled from your machine in the comment below.

Thank you!