Remove umf.grandscleft.com from Firefox, Chrome and Internet Explorer

This page shows how to remove umf.grandscleft.com from Mozilla Firefox, Google Chrome and Internet Explorer.

Does this sound like your story? You see umf.grandscleft.com in your browser’s status bar while browsing sites that mostly don’t load any content from third party domains. Perhaps the umf.grandscleft.com domain appear when performing a search at the Google.com search engine?

Here’s umf.grandscleft.com in my network log:

umf.grandscleft.com connection

The following are some of the status bar notifications you may see in your browser’s status bar:

  • Waiting for umf.grandscleft.com…
  • Transferring data from umf.grandscleft.com…
  • Looking up umf.grandscleft.com…
  • Read umf.grandscleft.com
  • Connected to umf.grandscleft.com…

If you also see this on your computer, you most likely have some potentially unwanted program installed on your machine that makes the umf.grandscleft.com domain appear in your web browser. Contacting the owner of the website you were browsing would be a waste of time. They are not responsible for the umf.grandscleft.com status bar notifications. I’ll do my best to help you with the umf.grandscleft.com removal in this blog post.

Those that have been reading this blog already know this, but here we go: Not long ago I dedicated a few of my lab machines and deliberately installed some potentially unwanted programs on them. Since then I’ve been following the behaviour on these computers to see what kinds of adverts, if any, that are displayed. I’m also looking on other interesting things such as if the potentially unwanted program auto-updates, or if it installs additional software on the systems. I first noticed umf.grandscleft.com in Mozilla Firefox’s status bar on one of these lab machines.

umf.grandscleft.com resolves to 37.58.80.221. umf.grandscleft.com was registered on 2015-05-13.

So, how do you remove umf.grandscleft.com from your browser? On the machine where umf.grandscleft.com showed up in the status bar I had SalePlus, YouTubeAdBlocke and IStart 5.3.7 installed. I removed them with FreeFixer and that stopped the browser from loading data from umf.grandscleft.com.

The problem with status bar messages like the one described in this blog post is that it can be caused by many variants of potentially unwanted programs, not just the potentially unwanted program on my computer. This makes it impossible to say exactly what you need to remove to stop the status bar messages.

So, what can be done? To remove umf.grandscleft.com you need to check your computer for potentially unwanted programs and uninstall them. Here’s my suggested removal procedure:

  1. Review what programs you have installed in the Add/Remove programs dialog in the Windows Control Panel. Do you see anything that you don’t remember installing or that was recently installed?
  2. How about your add-ons you have in your browsers. Anything in the list that you don’t remember installing?
  3. If that did not help, I’d recommend a scan with FreeFixer to manually track down the potentially unwanted program. FreeFixer is a freeware tool that I’m working on that scans your computer at lots of locations, such as browser add-ons, processes, Windows services, recently modified files, etc. If you want to get additional details about a file in the scan result, you can click the More Info link for that file and a web page will open up with a VirusTotal report which will be very useful to determine if the file is safe or malware:

    FreeFixer More Info link example
    An example of FreeFixer’s “More Info” links. Click for full size.

Did this blog post help you to remove umf.grandscleft.com? Please let me know or how I can improve this blog post.

Thank you!