Tag Archives: 37.58.101.203

Remove aft.coupplayoff.com Pop-Up Ads

Did you just get a pop up from aft.coupplayoff.com and ponder where it came from? Did the aft.coupplayoff.com ad appear to have been launched from a web site that under normal circumstances don’t use aggressive advertising such as pop-up windows? Or did the aft.coupplayoff.com pop-up show up while you clicked a link on one of the major search engines, such as Google, Bing or Yahoo?

Here’s how the aft.coupplayoff.com pop-up looked like when I got it on my computer:aft.coupplayoff.com pop-up in Firefox

(I know, lots of watermarks. Have to do it to stop the copy-cats.)

I got the pop-up in Firefox, but it can also appear in Chrome and Internet Explorer. Does this sounds like your experience, you probably have some adware installed on your system that pop up the aft.coupplayoff.com ads.

For those that are new to the blog: Not long ago I dedicated some of my lab machines and deliberately installed some adware programs on them. I’ve been following the behaviour on these computers to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the adware auto-updates, or if it downloads additional unwanted software on the machines. I first found the aft.coupplayoff.com pop-up on one of these lab systems.

So, how do you remove the aft.coupplayoff.com pop-up ads? On the machine where I got the aft.coupplayoff.com ads I had BrowserWarden, BuyNSave and BlockAndSurf installed. I removed them with FreeFixer and that stopped the aft.coupplayoff.com pop-ups and all the other ads I was getting in Mozilla Firefox.

aft.coupplayoff.com resolves to 37.58.101.203. The domain was created 2014-09-18.

BlockAndSurf was the adware that caused the pop-ups in my case. The pop-up was labelled “Ads by BlockAndSurf“.

bxh.mulctsamsaracorbel.com ads by BlockAndSurf

What label did your pop-up ad have? Please share in the comments area.

The issue with this type of pop-up is that it can be launched by many variants of adware. I think that adware such as Salus, CheckMeUp and NewPlayer can also be responsible for the aft.coupplayoff.com popups. And there are probably other variants too. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

Anyway, here’s my suggestion for the aft.coupplayoff.com ads removal:

The first thing I would do to remove the aft.coupplayoff.com pop-ups is to examine the programs installed on the machine, by opening the “Uninstall programs” dialog. You can reach this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows you can just type in “uninstall” in the Control Panel’s search field to find that dialog:
Uninstall a program search

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:
Uninstall a program dialog

Do you see something strange-looking in there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if some program was installed approximately about the same time as you started seeing the aft.coupplayoff.com pop-ups.

I think you will be able to identify and uninstall the adware with the two steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the adware. FreeFixer is a freeware tool that I started develop about 8 years ago. FreeFixer is a tool designed to manually identify and uninstall unwanted software. When you’ve tracked down the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not crippled like many other removal tools out there. It won’t require you to pay for the program just when you are about to remove the unwanted files.

And if you’re having issues deciding if a file is legitimate or malware in the FreeFixer scan result, click on the More Info link for the file. That will open up a web page which contains additional details about the file. On that web page, check out the VirusTotal report which can be quite useful:

FreeFixer More Info link example
An example of FreeFixer’s “More Info” links. Click for full size.

Are you a Mac or Linux user and get the aft.coupplayoff.com pop-ups? What did you do to stop the pop-up in your browser? Please share in the comments below. Thank you!

Did this blog post help you to remove the aft.coupplayoff.com pop-up ads? Please let me know or how I can improve this blog post.

Thank you!

Remove icf.unbentdilativecutpurse.com Pop-Up Ads

Hello folks, just a quick post before dinner. Are you getting pop-up ads from icf.unbentdilativecutpurse.com? I’m sorry to say this, but you may have some adware installed on your machine. Here’s how the pop-up looked like when I was browsing with Mozilla Firefox. The pop-up can probably appear in Chrome and Internet Explorer too.

icf.unbentdilativecutpurse.com pop-up

Anyway, the icf.unbentdilativecutpurse.com removal is pretty straightforward, I scanned the computer with FreeFixer and uninstalled an adware called Salus and the icf.unbentdilativecutpurse.com pop-ups were gone. It’s possible that these pop-up ads can be launched by variants of Salus or by other types of unwanted software on your machine. Did you have to remove something else than Salus? Please share in the comments below.

Hope this helped you remove icf.unbentdilativecutpurse.com.

Thanks for reading.

Now, dinner..

Back again.. I checked the WHOIS database hoping to find some useful stuff about unbentdilativecutpurse.com, but the unbentdilativecutpurse.com domain is protected by WhoisGuard, Inc. company. The domain was created 2014-08-14, and the whois record was updated today.unbentdilativecutpurse.com whois

icf.unbentdilativecutpurse.com resolves to the following IP addresses:

  • 37.58.101.200
  • 37.58.101.203
  • 37.58.101.204
  • 37.58.101.205

Update 2014-10-23: I noticed the same pop-up while testing some other bundled software. One of them is responsible for the pop-up. My guess is Safer-Surf:

Update 2 2014-10-23: I just noticed that some of the pop-up ads were labeled “Ads by BlockAndSurf“. If your pop-up is labeled like this, removing BlockAndSurf will probably solve the problem.

icf.unbentdilativecutpurse.com pop-up ad labeled "Ads by BlockAndSurf"

Update 2014-10-24: Found the same pop-up, but this time labelled “Ads by SpeedCheck“. Uninstalling SpeedCheck may solve the problem.

Ads by SpeedCheck

Update 2014-10-25: Tested to load the BlockAndSurf adware on my lab machine again, and it’s still popping up the icf.unbentdilativecutpurse.com web site. Are you finding a way to stop the icf.unbentdilativecutpurse.com pop-ups? Please share in the comments below.

Update 2 2014-10-25: Found another icf.unbentdilativecutpurse.com pop-up. This time labeled “Ads by salus“. If you have the Salus Adware installed on your machine, uninstall it. That might solve the problem.

Ads by salus - icf.unbentdilativecutpurse.com pop-up

Update 2014-10-27: I’m no longer getting this pop-up, instead it is loaded from enh.guzzlepraxiscommune.com.

Remove wwu.bouffebasculetimeous.com Pop-Up Ads

Getting lots of pop-up ads from wwu.bouffebasculetimeous.com? If you have been following my posts here on the blog for the last week you know that I’ve been documenting the domain names that appears in pop-ups launched by adware installed on user machines.

wwu.bouffebasculetimeous.com pop-up bouffebasculetimeous.com pop up ad in firefox

Adware, that is probably why you are getting these wwu.bouffebasculetimeous.com pop-ups. I removed the wwu.bouffebasculetimeous.com ads by using the freeware tool FreeFixer to uninstalling two adwares that was installed on my machine. The first was called TinyWallet and the other was named BlockAndSurf.

I think that other variants of adware can launch these pop-ups. Please keep that in mind while examining your computer for the unwanted software.

If you had to remove something else than BlockAndSurf or TinyWallet, please post a comment below to help other users in the same situation.

I also tried to get some more information about the bouffebasculetimeous.com domain using a WHOIS lookup, but the domain is protected by the WHOISGUARD company 🙁 wwu.bouffebasculetimeous.com resolves to the 37.58.101.202 and 37.58.101.203 IP address.

BOUFFEBASCULETIMEOUS.COM whois lookup

Did this help you solve the bouffebasculetimeous.com problem?

Thanks for reading