Tag Archives: 5.153.38.133

Remove fkv.kaeygmagba.com from Chrome, Firefox and Internet Explorer

This page shows how to remove fkv.kaeygmagba.com from Mozilla Firefox, Google Chrome and Internet Explorer.

Does this sound like your story? You see fkv.kaeygmagba.com in your browser’s status bar while browsing on sites that typically don’t load any content from third party domains. Perhaps the fkv.kaeygmagba.com domain appear when performing a search at the Google search engine?

Here is a screenshot on fkv.kaeygmagba.com in the network log from my computer:

fkv.kaeygmagba.com connection

The following are some of the status bar messages you may see in your browser’s status bar:

  • Waiting for fkv.kaeygmagba.com…
  • Transferring data from fkv.kaeygmagba.com…
  • Looking up fkv.kaeygmagba.com…
  • Read fkv.kaeygmagba.com
  • Connected to fkv.kaeygmagba.com…

Does this sound like what you are seeing, you presumably have some potentially unwanted program installed on your computer that makes the fkv.kaeygmagba.com domain appear in your browser. Contacting the owner of the web site you were browsing would be a waste of time. They are not responsible for the fkv.kaeygmagba.com status bar messages. I’ll do my best to help you remove the fkv.kaeygmagba.com message in this blog post.

If you have been spending some time on this blog already know this, but if you are new: Some time ago I dedicated some of my lab systems and intentionally installed a few potentially unwanted programs on them. Since then I’ve been following the behaviour on these computers to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the potentially unwanted program updates itself automatically, or if it downloads and installs additional potentially unwanted programs on the computers. I first found the fkv.kaeygmagba.com in Mozilla Firefox’s status bar on one of these lab systems.

fkv.kaeygmagba.com resolves to 5.153.38.133. fkv.kaeygmagba.com was registered on 2015-03-18.

So, how do you remove fkv.kaeygmagba.com from your web browser? On the machine where fkv.kaeygmagba.com showed up in the status bar I had TinyWallet, BlockAndSurf and BrowserWarden installed. I removed them with FreeFixer and that stopped the browser from loading data from fkv.kaeygmagba.com.

The problem with this type of status bar message is that it can be caused by many variants of potentially unwanted programs, not just the potentially unwanted program running on my machine. This makes it impossible to say exactly what you need to remove to stop the status bar messages.

Anyway, here’s my suggestion for the fkv.kaeygmagba.com removal:

The first thing I would do to remove fkv.kaeygmagba.com is to examine the programs installed on the machine, by opening the “Uninstall programs” dialog. You can open this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows you can just type in “uninstall” in the Control Panel’s search field to find that dialog:
Uninstall a program search

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:
Uninstall a program dialog

Do you see something shady listed there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if some program was installed approximately about the same time as you started getting the fkv.kaeygmagba.com status bar messages.

Then I would check the browser add-ons. Potentially unwanted program often appear under the add-ons menu in Mozilla Firefox, Google Chrome, Internet Explorer or Safari. Is there anything that looks suspicious? Something that you don’t remember installing?
Firefox add-ons manager

I think you will be able to track down and remove the potentially unwanted program with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the potentially unwanted program. FreeFixer is a freeware tool that I started develop about 8 years ago. It’s a tool designed to manually track down and remove unwanted software. When you’ve tracked down the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not locked down like many other removal tools out there. It won’t require you to purchase the program just when you are about to remove the unwanted files.

And if you’re having issues figuring out if a file is clean or potentially unwanted in FreeFixer’s scan report, click on the More Info link for the file. That will open up a web page which contains more information about the file. On that web page, check out the VirusTotal report which can be very useful:

FreeFixer More Info link example
An example of FreeFixer’s “More Info” links. Click for full size.

Did this blog post help you to remove fkv.kaeygmagba.com? Please let me know or how I can improve this blog post.

Thank you!

Remove iam.avafymm.com fromFirefox, Chrome and Internet Explorer

This page shows how to remove iam.avafymm.com from Mozilla Firefox, Google Chrome and Internet Explorer.

iam.avafymm.com connection

Did you just see iam.avafymm.com in the statusbar of your browser and ask yourself where it came from? Or did iam.avafymm.com show up while you search for something on one of the big search engines, such as the Google search engine?

The screenshot above is from my network log. https://iam.avafymm.com/kerr/?d?=… appeared there when I did a Google search.

Here are some of the status bar messages you may see in your browser’s status bar:

  • Waiting for iam.avafymm.com…
  • Transferring data from iam.avafymm.com…
  • Looking up iam.avafymm.com…
  • Read iam.avafymm.com
  • Connected to iam.avafymm.com…

If this sounds like what you are seeing on your computer, you almost certainly have some potentially unwanted program installed on your computer that makes the iam.avafymm.com domain appear in your web browser. Don’t flame the people that owns the website you were at when you first spotted iam.avafymm.com in the status bar. They are most likely not responsible, but from the potentially unwanted program that’s installed on your computer. I’ll do my best to help you remove the iam.avafymm.com message in this blog post.

Those that have been spending some time on this blog already know this, but here we go: Recently I dedicated some of my lab computers and intentionally installed some potentially unwanted programs on them. I’ve been monitoring the actions on these machines to see what kinds of adverts that are displayed. I’m also looking on other interesting things such as if the potentially unwanted program updates itself, or if it downloads additional potentially unwanted programs on the systems. I first observed the iam.avafymm.com in Mozilla Firefox’s status bar on one of these lab machines.

iam.avafymm.com resolves to the 5.153.38.133 address. iam.avafymm.com was created on 2015-01-05.

So, how do you remove iam.avafymm.com from your web browser? On the machine where iam.avafymm.com showed up in the status bar I had TinyWallet, BlockAndSurf and BrowserWarden installed. I removed them with FreeFixer and that stopped the web browser from loading data from iam.avafymm.com.

The issue with status bar messages such as this one is that it can be caused by many variants of potentially unwanted programs, not just the potentially unwanted program running on my computer. This makes it impossible to say exactly what you need to remove to stop the status bar messages.

Anyway, here’s my suggestion for the iam.avafymm.com removal:

  1. Check what programs you have installed in the Add/Remove programs dialog in the Windows Control Panel. Do you see something that you don’t remember installing or that was recently installed?
  2. How about your add-ons you installed in Mozilla Firefox, Google Chrome, Internet Explorer or Safari. Anything in the list that you don’t remember installing?
  3. If that did not help, I’d recommend a scan with FreeFixer to manually track down the potentially unwanted program. FreeFixer is a freeware tool that I’m working on that scans your computer at lots of locations, such as browser add-ons, processes, Windows services, recently modified files, etc. If you want to get additional details about a file in the scan result, you can click the More Info link for that file and a web page will open up with a VirusTotal report which will be very useful to determine if the file is safe or malware:

    FreeFixer More Info link example
    An example of FreeFixer’s “More Info” links. Click for full size.

Did this blog post help you to remove iam.avafymm.com? Please let me know or how I can improve this blog post.

Thank you!