Monthly Archives: July 2014

What is UnknownFile? And How To Remove It

Getting a pop-up dialog labeled “UnknownFile” while double-clicking on a file on your computer?

UnknownFile Dialog

Well, then you’ve got the UnknownFile File Assistant installed on your machine. While this dialog is active, you can also see UnknownFile.exe running in the Windows Task Manager. You probably got this program on your computer when installing something else. I found UnknownFile bundled with the Softango Downloaders. Did you also download and install something from Softango?

So, how do you remove UnknownFile? No problem, just uninstall it from the Programs and Features dialog:

UnknownFile Uninstall

Hope you found this useful.

By the way, none of the anti-virus programs detects UnknownFile, except MalwareBytes which has named UnknownFile.exe Trojan.Agent.MVXGen:

UnknownFile.exe VirusTotal Report - Trojan.Agent.MVXGen

Smart Secure Software S.l – Bundling and VirusTotal Report

Just a quick post before going back to working on FreeFixer. Found a “Google Chrome” download this morning, digitally signed by Smart Secure Software S.l. 

Smart Secure Software S.l

Smart secure software sl - google_chrome.exe - Click Yes to begin setup

The problem is that it was not an official Chrome download. The setup file bundled a large number of potentially unwanted programs, such as GridMonetize, IStartSurf, PepperZip, Severe Weather Alerts, Wajam, Browser App and CostMin, as shown in the screenshots below:IstartSurf installer GridMonetize installer CostMin installer

And here’s the VirusTotal report:

Smart Secure Software Virus Total Report

DomainIQ, SoftPulse and Smart Secure Software are some of the detection names.

Did you also find a file digitally signed by Smart Secure Software S.l.? What kind of download was it and where did you find it?

How To Remove TheTornTV

Getting ads labeled Ads by TheTornTV on top of the Google search results as show in the screenshot below?

TheTornTV - Ads by TheTornTV V10

As you’ve probably figured out you’ve got an adware called TheTornTV running on your machine. You can also see it in Mozilla’s Add-on dialog:

TheTornTV firefox add-on

Removing TheTornTV is pretty easy. Just select the TheTornTV in FreeFixer, as shown in the screenshots:

TheTornTV tasks TheTornTV firefox TheTornTV BHO

I’ve made a quick video that shows FreeFixer in action while removing TheTornTV. Hope you find it useful.

websearch.wonderfulsearches.info – How To Remove It

Have your web browser been changed to use the  websearch.wonderfulsearches.info web site for searches?webssearch.wonderfulsearches.info internet explorer

No problem, you can use FreeFixer to remove websearch.wonderfulsearches.info. Just select the wonderfulsearches.info items, as shown below:wonderfulsearches.info firefox search engine websearch.wonderfulsearches.info  ie search provider

Here’s a video which shows FreeFixer in action removing websearch.wonderfulsearches.info:

How did you get WondefulSearches on your machine?