This page shows how to remove mkl.phfyotocfyube.com from Mozilla Firefox, Google Chrome and Internet Explorer.

Did you just see mkl.phfyotocfyube.com in the status bar of your browser and wonder where it came from? Or did mkl.phfyotocfyube.com show up while you search for something on one of the major search engines, such as the Google.com search engine?

I tried to get a screen dump when it appeared in my browser’s status bar, but it flashed by too quickly. Here is a screen dump on mkl.phfyotocfyube.com from my system when it appeared in the network log:

The URL starts with: https://mkl.phfyotocfyube.com/kerr/?d=

The following are some of the status bar messages you may see in your browser’s status bar:

• Waiting for mkl.phfyotocfyube.com…
• Transferring data from mkl.phfyotocfyube.com…
• Looking up mkl.phfyotocfyube.com…
• Read mkl.phfyotocfyube.com
• Connected to mkl.phfyotocfyube.com…

If this description sounds like your system, you presumably have some adware installed on your system that makes the mkl.phfyotocfyube.com domain appear in your browser. There’s no use contacting the owners of the web site you were browsing. The mkl.phfyotocfyube.com status bar messages are not coming from them. I’ll try help you to remove the mkl.phfyotocfyube.com status bar messages in this blog post.

Those that have been following this blog already know this, but for new visitors: A little while back I dedicated a few of my lab machines and intentionally installed some adware programs on them. Since then I’ve been observing the actions on these machines to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the adware auto-updates, or if it downloads additional unwanted software on the computers. I first noticed the mkl.phfyotocfyube.com in Mozilla Firefox’s status bar on one of these lab computers.

mkl.phfyotocfyube.com was created on 2015-01-05 so it has been registered quite recently. The domain is protected by Whoisguard INC. mkl.phfyotocfyube.com resolves to the 81.95.152.220 IP address.

So, how do you remove mkl.phfyotocfyube.com from your browser? On the machine where mkl.phfyotocfyube.com showed up in the statusbar I had TinyWallet, BlockAndSurf and BrowserWarden installed. I removed them with FreeFixer and that stopped the browser from loading data from mkl.phfyotocfyube.com.

The bad news with status bar messages like this one is that it can be caused by many variants of adware, not just the adware that’s installed on my machine. This makes it impossible to say exactly what you need to remove to stop the status bar messages.

Anyway, here’s my suggestion for the mkl.phfyotocfyube.com removal:

1. What software do you have installed if you look in the Add/Remove programs dialog in the Windows Control Panel? Something that you don’t remember installing yourself or that was recently installed?
2. You can also check the add-ons you have in your browsers. Same thing here, do you see something that you don’t remember installing?
3. If that didn’t help, you can give FreeFixer a try. FreeFixer is built to assist users when manually tracking down adware and other types of unwanted software. It is a freeware utility that I’ve been working since 2006 and it scans your computer at lots of locations where unwanted software is known to hook into your computer. If you would like to get additional details about a file in FreeFixer’s scan result, you can just click the More Info link for that file and a web page with a VirusTotal report will open up, which can be very useful to determine if the file is safe or malware:

   

Did this blog post help you to remove mkl.phfyotocfyube.com? Please let me know or how I can improve this blog post.

Thank you!