Remove safedownloadsrus147.com Pop Up Ads About Outdated Java Software

Did you just get a pop-up from safedownloadsrus147.com and ponder where it came from? Did the safedownloadsrus147.com ad appear to have been initiated from a web site that under normal circumstances don’t use advertising such as pop-up windows? Or did the safedownloadsrus147.com pop-up show up while you clicked a link on one of the big search engines, such as Google, Bing or Yahoo?

Here’s a screenshot of the safedownloadsrus147.com pop-up ad when it showed up on my computer:

safedownloadsrus147.com pop up

(I know, lots of watermarks. Have to do it to stop the copy-cats.)

If this sounds like what you are seeing on your machine, you presumably have some adware installed on your machine that pops up the safedownloadsrus147.com ads. So there’s no idea contacting the owner of the web site you currently were browsing. The ads are not coming from them. I’ll try help you with the safedownloadsrus147.com removal in this blog post.

Those that have been following this blog already know this, but for new visitors: Not long ago I dedicated some of my lab machines and deliberately installed a few adware programs on them. Since then I have been monitoring the behaviour on these computers to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the adware auto-updates, or if it installs additional unwanted software on the machines. I first spotted the safedownloadsrus147.com pop-up on one of these lab machines.

safedownloadsrus147.com was registered on 2015-08-20. safedownloadsrus147.com resolves to 162.159.248.237.

Update Nov 27 2015: I just ran into a pop up fromĀ safedownloadsrus169.com. The following similar domains are also registered:

  • safedownloadsrus160.com
  • safedownloadsrus161.com
  • safedownloadsrus162.com
  • safedownloadsrus163.com
  • safedownloadsrus164.com
  • safedownloadsrus165.com
  • safedownloadsrus166.com
  • safedownloadsrus167.com
  • safedownloadsrus168.com
  • safedownloadsrus170.com
  • safedownloadsrus171.com
  • safedownloadsrus172.com
  • safedownloadsrus173.com
  • safedownloadsrus174.com
  • safedownloadsrus175.com

And I will not be surprised if these domains starts to appear in pop-ups too:

  • safedownloadsrus176.com
  • safedownloadsrus177.com
  • safedownloadsrus178.com
  • safedownloadsrus179.com
  • safedownloadsrus180.com
  • safedownloadsrus181.com
  • safedownloadsrus182.com
  • safedownloadsrus183.com
  • safedownloadsrus184.com
  • safedownloadsrus185.com

So, how do you remove the safedownloadsrus147.com pop-up ads? On the machine where I got the safedownloadsrus147.com ads I had Windows Menager, SmartComp Safe Network, gosearch.me and Live Malware Protection installed. I removed them with FreeFixer and that stopped the safedownloadsrus147.com pop-ups and all the other ads I was getting in Mozilla Firefox.

It seems as safedownloadsrus147.com is getting quite a lot of traffic, based on Alexa’s traffic rank:

safedownloadsrus147.com traffic

The issue with this type of pop-up is that it can be popped up by many variants of adware, not just the adware on my computer. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

Anyway, here’s my suggestion for the safedownloadsrus147.com ads removal:

  1. Review what programs you have installed in the Add/Remove programs dialog in the Windows Control Panel. Do you see anything that you don’t remember installing or that was recently installed?
  2. How about your add-ons that you have in your browser. Anything in the list that you don’t remember installing?
  3. If that didn’t help, I’d recommend a scan with FreeFixer to manually track down the adware. FreeFixer is a freeware tool that I’m working on that scans your computer at lots of locations, such as browser add-ons, processes, Windows services, recently modified files, etc. If you want to get additional details about a file in the scan result, you can click the More Info link for that file and a web page will open up with a VirusTotal report which will be very useful to determine if the file is safe or malware:

    FreeFixer More Info link example
    An example of FreeFixer’s “More Info” links. Click for full size.

Here’s a video tutorial which shows FreeFixer in action removing adware that caused pop-up ads:

Did this blog post help you to remove the safedownloadsrus147.com pop-up ads? Please let me know or how I can improve this blog post.

Thank you!

Leave a Reply

Your email address will not be published.