Remove www.update-srv2.info from Mozilla Firefox, Google Chrome and Internet Explorer.

This page shows how to remove www.update-srv2.info from Mozilla Firefox, Google Chrome and Internet Explorer.

Sound familiar? You see www.update-srv2.info in your browser’s status bar while browsing web sites that commonly don’t load any content from third party domains. Perhaps the www.update-srv2.info domain appear when performing a search at the Google search engine?

Here is how the www.update-srv2.info connection looked like on my machine, when I performed a search at Google:

www.update-srv2.info connection

Here are some of the statusbar messages you may see in your browser’s status bar:

  • Waiting for www.update-srv2.info…
  • Transferring data from www.update-srv2.info…
  • Looking up www.update-srv2.info…
  • Read www.update-srv2.info
  • Connected to www.update-srv2.info…

If you also see this on your system, you almost certainly have some adware installed on your machine that makes the www.update-srv2.info domain appear in your web browser. So there’s no use contacting the owner of the site you were browsing. The www.update-srv2.info status bar messages are not coming from them. I’ll do my best to help you with the www.update-srv2.info removal in this blog post.

Those that have been reading this blog already know this, but here we go: Recently I dedicated some of my lab machines and deliberately installed a few adware programs on them. Since then I’ve been following the behaviour on these machines to see what kinds of adverts that are displayed. I’m also looking on other interesting things such as if the adware updates itself automatically, or if it downloads and installs additional unwanted software on the computers. I first observed the www.update-srv2.info in Firefox’s status bar on one of these lab machines.

www.update-srv2.info resolves to the 23.62.6.90 IP address and update-srv2.info to 54.235.138.58. www.update-srv2.info was registered on 2014-06-12. As usual, the domain is protected, this time by Domains By Proxy, LLC.

The full URL is

http://www.update-srv2.info/apps/prod/39012/f1a86aac308c7091cf54a2f01d041297/canvas_manifest.json?0.5706526414967109

When I visited that URL, a code snippet was returned, that mentioned the www.vac-p1.info domain.

So, how do you remove www.update-srv2.info from your browser? On the machine where www.update-srv2.info showed up in the status bar I had TinyWallet, BrowserWarden and BlockAndSurf installed. I removed them with FreeFixer and that stopped the web browser from loading data from www.update-srv2.info.

The problem with status bar messages like this one is that it can be caused by many variants of adware, not just the adware running on my computer. This makes it impossible to say exactly what you need to remove to stop the status bar messages.

To remove www.update-srv2.info you need to review your computer for adware or other types of unwanted software and uninstall it. Here’s my suggested removal procedure:

The first thing I would do to remove www.update-srv2.info is to examine the software installed on the machine, by opening the “Uninstall programs” dialog. You can open this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows you can just type in “uninstall” in the Control Panel’s search field to find that dialog:
Uninstall a program search

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:
Uninstall a program dialog

Do you see something suspicious listed there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if some program was installed approximately about the same time as you started getting the www.update-srv2.info status bar messages.

The next thing to check would be your browser’s add-ons. Adware often appear under the add-ons dialog in Google Chrome, Mozilla Firefox, Internet Explorer, Safari or Opera. Is there anything that looks suspicious? Anything that you don’t remember installing?
Firefox add-ons manager

I think you will be able to identify and remove the adware with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the adware. FreeFixer is a freeware tool that I started develop many years ago. Freefixer is a tool built to manually find and uninstall unwanted software. When you’ve tracked down the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not crippled like many other removal tools out there. It will not require you to pay a fee just when you are about to remove the unwanted files.

And if you’re having difficulties deciding if a file is clean or adware in the FreeFixer scan result, click on the More Info link for the file. That will open up your web browser with a page which contains additional details about the file. On that web page, check out the VirusTotal report which can be quite useful:

FreeFixer More Info link example
An example of FreeFixer’s “More Info” links. Click for full size.

Did this blog post help you to remove www.update-srv2.info? Please let me know or how I can improve this blog post.

Thank you!