Category Archives: browser status bar

Remove tr553.com from Firefox, Chrome and Internet Explorer

May 6, 2015browser status bar8.19.136.101Roger Karlsson

This page shows how to remove tr553.com from Mozilla Firefox, Google Chrome and Internet Explorer.

Did you just see tr553.com in the status bar of your browser and wonder where it came from? Or did tr553.com show up while you searched for something on one of the major search engines, such as the Google.com search engine?

Here’s how the tr553.com status bar message looked like when I got it on my system:

Here are some of the status bar notifications you may see in your browser’s status bar:

Waiting for tr553.com…
Transferring data from tr553.com…
Looking up tr553.com…
Read tr553.com
Connected to tr553.com…

Does this sound like what you see your machine, you probably have some potentially unwanted program installed on your computer that makes the tr553.com domain appear in your browser. Don’t flame the people that owns the site you were at when you first spotted tr553.com in the status bar. They are probably not responsible, but from the potentially unwanted program that’s installed on your computer. I’ll try help you with the tr553.com removal in this blog post.

I found tr553.com on one of the lab computers where I have some potentially unwanted programs running. I’ve talked about this in some of the previous blog posts. The potentially unwanted programs was installed on purpose, and from time to time I check if something new has appeared, such as pop-up windows, new tabs in the browsers, injected ads on site that usually don’t show advertisements, or if some new files have been saved to the hard-drive.

tr553.com resolves to the 8.19.136.101 IP address. tr553.com was registered on 2014-08-25.

So, how do you remove tr553.com from your web browser? On the machine where tr553.com showed up in the status bar I had NetMon and Jelbrus Secure Web installed. I removed them with FreeFixer and that stopped the browser from loading data from tr553.com.

The tr553.com domain is attracting quite a lot of traffic, just check out the Alexa traffic rank:

The issue with status bar notifications like this one is that it can be caused by many variants of potentially unwanted programs. This makes it impossible to say exactly what you need to remove to stop the status bar messages.

To remove tr553.com you need to examine your system for potentially unwanted programs and uninstall them. Here’s my suggested removal procedure:

The first thing I would do to remove tr553.com is to examine the programs installed on the machine, by opening the “Uninstall programs” dialog. You can reach this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows Operating System you can just type in “uninstall” in the Control Panel’s search field to find that dialog:

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:

Do you see something strange-looking listed there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if something was installed about the same time as you started observing the tr553.com status bar messages.

Then you can examine you browser add-ons. Potentially unwanted programs often show up under the add-ons menu in Google Chrome, Mozilla Firefox, Internet Explorer or Safari. Is there anything that looks suspicious? Something that you don’t remember installing?

I think most users will be able to track down and remove the potentially unwanted program with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the potentially unwanted program. FreeFixer is a freeware tool that I started develop about 8 years ago. It’s a tool designed to manually track down and remove unwanted software. When you’ve tracked down the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not locked down like many other removal tools out there. It will not require you to purchase the program just when you are about to remove the unwanted files.

And if you’re having issues deciding if a file is clean or potentially unwanted in FreeFixer’s scan report, click on the More Info link for the file. That will open up a web page which contains additional information about the file. On that web page, check out the VirusTotal report which can be quite useful:

FreeFixer More Info link example — An example of FreeFixer’s “More Info” links. Click for full size.

Did you find any potentially unwanted program on your machine? Did that stop tr553.com? Please post the name of the potentially unwanted program you uninstalled from your machine in the comment below.

Thank you!

Remove i.simpli.fi from Chrome, Firefox and Internet Explorer

March 30, 2015browser status barRoger Karlsson

This page shows how to remove i.simpli.fi from Mozilla Firefox, Google Chrome and Internet Explorer.

Does this sound familiar? You see i.simpli.fi in your browser’s status bar while browsing sites that normally don’t load any content from third party domains. Maybe the i.simpli.fi domain appears when performing a search at the Google.com search engine?

Here is a screen capture on i.simpli.fi from my machine, which appeared in Firefox’ status bar while doing a search at Google:

Here are some of the status bar messages you may see in your browser’s status bar:

Waiting for i.simpli.fi …
Transferring data from i.simpli.fi …
Looking up i.simpli.fi …
Read i.simpli.fi
Connected to i.simpli.fi …

Does this sound like your computer, it’s possible you have some potentially unwanted program installed on your machine that makes the i.simpli.fi domain appear in your browser’s status bar. Don’t write angry emails to the website you were browsing, they are most likely not responsible for the i.simpli.fi status bar messages. The potentially unwanted program on your machine is. I’ll do my best to help you remove the i.simpli.fi message in this blog post.

For those that are new to the blog: Some time ago I dedicated a few of my lab machines and purposely installed some potentially unwanted programs on them. Since then I’ve been monitoring the actions on these systems to see what kinds of ads that are displayed. I’m also looking on other interesting things such as if the potentially unwanted program updates itself automatically, or if it downloads additional potentially unwanted programs on the machines. I first found the i.simpli.fi in Mozilla Firefox’s status bar on one of these lab computers.

So, how do you remove i.simpli.fi from your browser? On the machine where i.simpli.fi showed up in the status bar I had BlockAndSurf, TinyWallet and BrowserWarden installed. I removed them with FreeFixer and that stopped the browser from loading data from i.simpli.fi .

The issue with this type of status bar message is that it can be caused by many variants of potentially unwanted programs, not just the potentially unwanted program running on my machine. This makes it impossible to say exactly what you need to remove to stop the status bar messages.

So, what can be done? To remove i.simpli.fi you need to check your machine for potentially unwanted programs and uninstall them. Here’s my suggested removal procedure:

The first thing I would do to remove i.simpli.fi is to examine the software installed on the machine, by opening the “Uninstall programs” dialog. You can find this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows you can just type in “uninstall” in the Control Panel’s search field to find that dialog:

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:

Do you see something strange-looking listed there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if some program was installed about the same time as you started getting the i.simpli.fi statusbar messages.

Then I would check the browser add-ons. Potentially unwanted program often show up under the add-ons menu in Google Chrome, Mozilla Firefox, Internet Explorer, Safari or Opera. Is there anything that looks suspicious? Anything that you don’t remember installing?

I think you will be able to find and uninstall the potentially unwanted program with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the potentially unwanted program. FreeFixer is a freeware tool that I’ve developed since 2006. Freefixer is a tool designed to manually identify and uninstall unwanted software. When you’ve identified the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not locked down like many other removal tools out there. It will not require you to pay a fee just when you are about to remove the unwanted files.

And if you’re having difficulties determining if a file is clean or potentially unwanted in FreeFixer’s scan result, click on the More Info link for the file. That will open up your browser with a page which contains additional details about the file. On that web page, check out the VirusTotal report which can be quite useful:

Did this blog post help you to remove i.simpli.fi ? Please let me know or how I can improve this blog post.

Thank you!

Update 2015-05-04: I’ve also seen the um.simpli.fi subdomain in use. Here’s two examples:

Remove bkz.evgiagvu.com from Firefox, Chrome and Internet Explorer

March 26, 2015browser status barRoger Karlsson

This page shows how to remove bkz.evgiagvu.com from Mozilla Firefox, Google Chrome and Internet Explorer.

Having issues with bkz.evgiagvu.com showing up in the lower left corner of your browser? If so, you might have some potentially unwanted program installed on your computer. I noticed bkz.evgiagvu.com in Mozilla Firefox’s statusbar when doing a search at Google, but I guess bkz.evgiagvu.com can appear if you are using Chrome, Internet Explorer, Safari or Opera too.

The following are some of the status bar messages you may see in your browser’s status bar:

Waiting for bkz.evgiagvu.com…
Transferring data from bkz.evgiagvu.com…
Looking up bkz.evgiagvu.com…
Read bkz.evgiagvu.com
Connected to bkz.evgiagvu.com…

If you also see this on your computer, you almost certainly have some potentially unwanted program installed on your machine that makes the bkz.evgiagvu.com domain appear in your browser. So there’s no use contacting the owner of the site you were browsing. The bkz.evgiagvu.com status bar messages are not coming from them. I’ll do my best to help you with the bkz.evgiagvu.com removal in this blog post.

I found bkz.evgiagvu.com on one of the lab computers where I have some potentially unwanted programs running. I’ve talked about this in some of the previous blog posts. The potentially unwanted programs was installed on purpose, and from time to time I check if something new has appeared, such as pop-up windows, new tabs in the web browsers, injected ads on site that usually don’t show ads, or if some new files have been saved to the hard-drive.

bkz.evgiagvu.com was registered on 2015-03-18. bkz.evgiagvu.com resolves to 5.153.38.134.

So, how do you remove bkz.evgiagvu.com from your web browser? On the machine where bkz.evgiagvu.com showed up in the status bar I had CheckMeUp installed. I removed it with FreeFixer and that stopped the web browser from loading data from bkz.evgiagvu.com.

The problem with this type of status bar message is that it can be caused by many variants of potentially unwanted programs, not just the potentially unwanted program on my machine. This makes it impossible to say exactly what you need to remove to stop the status bar messages.

So, what can be done to solve the problem? To remove bkz.evgiagvu.com you need to examine your machine for potentially unwanted programs and uninstall them. Here’s my suggested removal procedure:

The first thing I would do to remove bkz.evgiagvu.com is to examine the software installed on the machine, by opening the “Uninstall programs” dialog. You can reach this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows you can just type in “uninstall” in the Control Panel’s search field to find that dialog:

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:

Do you see something dubious in there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if something was installed approximately about the same time as you started getting the bkz.evgiagvu.com status bar messages.

The next thing to check would be your browser’s add-ons. Potentially unwanted programs often show up under the add-ons menu in Google Chrome, Mozilla Firefox, Internet Explorer, Safari or Opera. Is there something that looks suspicious? Something that you don’t remember installing?

I think most users will be able to identify and uninstall the potentially unwanted program with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the potentially unwanted program. FreeFixer is a freeware tool that I started develop about 8 years ago. Freefixer is a tool designed to manually track down and uninstall unwanted software. When you’ve tracked down the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not locked like many other removal tools out there. It won’t require you to pay for the program just when you are about to remove the unwanted files.

And if you’re having troubles figuring out if a file is legit or potentially unwanted in the FreeFixer scan result, click on the More Info link for the file. That will open up a web page which contains additional details about the file. On that web page, check out the VirusTotal report which can be very useful:

Did you find any potentially unwanted program on your machine? Did that stop bkz.evgiagvu.com? Please post the name of the potentially unwanted program you uninstalled from your machine in the comment below.

Thank you!

Remove i_crbfjs_info.tlscdn.com from Firefox, Chrome and Internet Explorer

March 23, 2015browser status barRoger Karlsson

This page shows how to remove i_crbfjs_info.tlscdn.com from Mozilla Firefox, Google Chrome and Internet Explorer.

Having a mess with i_crbfjs_info.tlscdn.com showing up in the lower left corner of your web browser? If that is the case, you might have some potentially unwanted program installed on your machine. I noticed i_crbfjs_info.tlscdn.com in Mozilla Firefox’s status bar when doing a search at Google, but I guess i_crbfjs_info.tlscdn.com can show up if you are using Chrome, Internet Explorer, Safari or Opera too.

Here is how the i_crbfjs_info.tlscdn.com status bar message looked like on my computer:

Here are some of the status bar messages you may see in your browser’s statusbar:

Waiting for i_crbfjs_info.tlscdn.com…
Transferring data from i_crbfjs_info.tlscdn.com…
Looking up i_crbfjs_info.tlscdn.com…
Read i_crbfjs_info.tlscdn.com
Connected to i_crbfjs_info.tlscdn.com…

If this sounds like what you are seeing on your computer, you presumably have some potentially unwanted program installed on your computer that makes the i_crbfjs_info.tlscdn.com domain appear in your browser. Don’t send angry emails to the site you were browsing, they are most likely not responsible for the i_crbfjs_info.tlscdn.com status bar messages. The potentially unwanted program on your machine is. I’ll do my best to help you remove the i_crbfjs_info.tlscdn.com message in this blog post.

If you have been following this blog already know this, but if you are new: Recently I dedicated a few of my lab machines and intentionally installed a few potentially unwanted programs on them. I have been observing the actions on these machines to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the potentially unwanted program auto-updates, or if it downloads additional potentially unwanted programs on the systems. I first observed the i_crbfjs_info.tlscdn.com in Mozilla Firefox’s status bar on one of these lab computers.

i_crbfjs_info.tlscdn.com resolves to the 108.59.4.164 IP address.

So, how do you remove i_crbfjs_info.tlscdn.com from your browser? On the machine where i_crbfjs_info.tlscdn.com showed up in the status bar I had TornTV installed. I removed it with FreeFixer and that stopped the browser from loading data from i_crbfjs_info.tlscdn.com.

The issue with status bar messages like the one described in this blog post is that it can be caused by many variants of potentially unwanted programs, not just the potentially unwanted program that’s installed on my machine. This makes it impossible to say exactly what you need to remove to stop the status bar messages.

Anyway, here’s my suggestion for the i_crbfjs_info.tlscdn.com removal:

The first thing I would do to remove i_crbfjs_info.tlscdn.com is to examine the programs installed on the machine, by opening the “Uninstall programs” dialog. You can find this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows OS you can just type in “uninstall” in the Control Panel’s search field to find that dialog:

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:

Do you see something suspect listed there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if some program was installed about the same time as you started seeing the i_crbfjs_info.tlscdn.com statusbar messages.

The next thing to check would be your browser’s add-ons. Potentially unwanted program often appear under the add-ons dialog in Mozilla Firefox, Google Chrome, Internet Explorer or Safari. Is there anything that looks suspicious? Something that you don’t remember installing?

I think most users will be able to identify and remove the potentially unwanted program with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the potentially unwanted program. FreeFixer is a freeware tool that I started develop many years ago. It’s a tool built to manually identify and remove unwanted software. When you’ve tracked down the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not crippled like many other removal tools out there. It will not require you to pay for the program just when you are about to remove the unwanted files.

And if you’re having problems determining if a file is legitimate or potentially unwanted in FreeFixer’s scan report, click on the More Info link for the file. That will open up your browser with a page which contains additional details about the file. On that web page, check out the VirusTotal report which can be very useful:

Did this blog post help you to remove i_crbfjs_info.tlscdn.com? Please let me know or how I can improve this blog post.

Thank you!

Remove jsl.infostatsvc.com From Firefox, Chrome and Internet Explorer

March 22, 2015browser status bar70.186.131.246, Domains By Proxy LLCRoger Karlsson

This page shows how to remove jsl.infostatsvc.com from Mozilla Firefox, Google Chrome and Internet Explorer.

Does this sound like what you are seeing right now? You see jsl.infostatsvc.com in your browser’s status bar while browsing web sites that generally don’t load any content from third party domains. Maybe the jsl.infostatsvc.com domain show up when performing a search at the Google.com search engine?

Here is how the jsl.infostatsvc.com status bar message looked like on my computer while searching at my favourite search engine Google:

The following are some of the statusbar messages you may see in your browser’s status bar:

Waiting for jsl.infostatsvc.com…
Transferring data from jsl.infostatsvc.com…
Looking up jsl.infostatsvc.com…
Read jsl.infostatsvc.com
Connected to jsl.infostatsvc.com…

If this description sounds like your computer, you probably have some potentially unwanted program installed on your machine that makes the jsl.infostatsvc.com domain appear in your browser. So there’s no idea contacting the owner of the web site you were browsing. The jsl.infostatsvc.com statusbar messages are not coming from them. I’ll do my best to help you with the jsl.infostatsvc.com removal in this blog post.

I found jsl.infostatsvc.com on one of the lab computers where I have some potentially unwanted programs running. I’ve talked about this in some of the previous blog posts. The potentially unwanted programs was installed on purpose, and from time to time I check if something new has appeared, such as pop-up windows, new tabs in the browsers, injected ads on website that usually don’t show ads, or if some new files have been saved to the hard-drive.

jsl.infostatsvc.com was created on 2013-07-23. jsl.infostatsvc.com resolves to the 70.186.131.246 IP address. The domain is protected by Domains By Proxy LLC.

If you are wondering if there are many others out seeing jsl.infostatsvc.com in the browser, the answer is probably yes. Check out the traffic rank from Alexa:

The bad news with this type of status bar message is that it can probably be caused by many variants of potentially unwanted programs. This makes it impossible to say exactly what you need to remove to stop the status bar messages.

So, what can be done? To remove jsl.infostatsvc.com you need to examine your computer for potentially unwanted programs and uninstall them. Here’s my suggested removal procedure:

The first thing I would do to remove jsl.infostatsvc.com is to examine the programs installed on the machine, by opening the “Uninstall programs” dialog. You can open this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows you can just type in “uninstall” in the Control Panel’s search field to find that dialog:

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:

Do you see something shady in there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if something was installed approximately about the same time as you started seeing the jsl.infostatsvc.com status bar messages.

Then you can examine you browser add-ons. Potentially unwanted program often show up under the add-ons dialog in Mozilla Firefox, Google Chrome, Internet Explorer or Safari. Is there something that looks suspicious? Anything that you don’t remember installing?

I think most users will be able to track down and uninstall the potentially unwanted program with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the potentially unwanted program. FreeFixer is a freeware tool that I started develop about 8 years ago. Freefixer is a tool built to manually find and uninstall unwanted software. When you’ve found the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not locked down like many other removal tools out there. It won’t require you to pay for the program just when you are about to remove the unwanted files.

And if you’re having difficulties determining if a file is clean or potentially unwanted in FreeFixer’s scan result, click on the More Info link for the file. That will open up your browser with a page which contains more details about the file. On that web page, check out the VirusTotal report which can be quite useful:

Did you find any potentially unwanted program on your machine? Did that stop jsl.infostatsvc.com? Please post the name of the potentially unwanted program you uninstalled from your machine in the comment below.

Thank you!

Remove asrv-a.akamaihd.net from Firefox, Chrome and Internet Explorer

March 20, 2015browser status bar23.62.6.72, 37.58.102.34Roger Karlsson

This page shows how to remove asrv-a.akamaihd.net from Mozilla Firefox, Google Chrome and Internet Explorer.

Did you just see asrv-a.akamaihd.net in the status bar of your browser and ask yourself where it came from? Or did asrv-a.akamaihd.net show up while you search for something on one of the major search engines, such as the Google.com search engine?

Here is how the asrv-a.akamaihd.net connection looked like in my network log. The connection was made when I searched at Google.

The actual url is https://asrv-a.akamaihd.net/sd/9717/1001.js. When loaded, a code snippet is returned, that mentions the gal.adviceoncarsse.com (37.58.102.34) domain.

Here are some of the status bar messages you may see in your browser’s status bar:

Waiting for asrv-a.akamaihd.net…
Transferring data from asrv-a.akamaihd.net…
Looking up asrv-a.akamaihd.net…
Read asrv-a.akamaihd.net
Connected to asrv-a.akamaihd.net…

If this description sounds like your story, you almost certainly have some potentially unwanted program installed on your computer that makes the asrv-a.akamaihd.net domain appear in your browser. So don’t write angry emails to the website you were browsing, they are almost certainly not responsible for the asrv-a.akamaihd.net status bar messages. The potentially unwanted program on your machine is. I’ll do my best to help you with the asrv-a.akamaihd.net removal in this blog post.

If you have been spending some time on this blog already know this, but if you are new: A little while back I dedicated some of my lab machines and knowingly installed some potentially unwanted programs on them. Since then I have been tracking the behaviour on these machines to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the potentially unwanted program auto-updates, or if it installs additional potentially unwanted programs on the computers. I first noticed the asrv-a.akamaihd.net in Mozilla Firefox’s status bar on one of these lab computers.

asrv-a.akamaihd.net resolves to the 23.62.6.72 address.

So, how do you remove asrv-a.akamaihd.net from your browser? On the machine where asrv-a.akamaihd.net showed up in the status bar I had PriceFountain, WebWaltz, SpeedChecker and YTDownloader installed. I removed them with FreeFixer and that stopped the browser from loading data from asrv-a.akamaihd.net.

The bad news with status bar messages such as this one is that it can be caused by many variants of potentially unwanted programs, not just the potentially unwanted program that’s installed on my system. This makes it impossible to say exactly what you need to remove to stop the statusbar messages.

Anyway, here’s my suggestion for the asrv-a.akamaihd.net removal:

The first thing I would do to remove asrv-a.akamaihd.net is to examine the programs installed on the machine, by opening the “Uninstall programs” dialog. You can open this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows you can just type in “uninstall” in the Control Panel’s search field to find that dialog:

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:

Do you see something suspicious listed there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if some program was installed about the same time as you started observing the asrv-a.akamaihd.net status bar messages.

The next thing to check would be your browser’s add-ons. Potentially unwanted program often appear under the add-ons dialog in Firefox, Chrome, Internet Explorer or Safari. Is there anything that looks suspicious? Something that you don’t remember installing?

I think most users will be able to identify and uninstall the potentially unwanted program with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the potentially unwanted program. FreeFixer is a freeware tool that I started develop many years ago. It’s a tool designed to manually find and uninstall unwanted software. When you’ve found the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not locked like many other removal tools out there. It won’t require you to pay a fee just when you are about to remove the unwanted files.

And if you’re having a hard time determining if a file is legitimate or potentially unwanted in FreeFixer’s scan report, click on the More Info link for the file. That will open up your web browser with a page which contains additional information about the file. On that web page, check out the VirusTotal report which can be very useful:

Did this blog post help you to remove asrv-a.akamaihd.net? Please let me know or how I can improve this blog post.

Thank you!

Remove lightbox.linkbolic.com from Firefox, Chrome and Internet Explorer

March 20, 2015browser status bar46.105.156.71, 72.21.91.50, 93.184.220.50Roger Karlsson

This page shows how to remove lightbox.linkbolic.com from Mozilla Firefox, Google Chrome and Internet Explorer.

Did you just interrupt your work because you noticed lightbox.linkbolic.com in your browser’s status bar? You are not alone. I also got the lightbox.linkbolic.com status bar message while browsing. Please read on…

Here is a screenshot on lightbox.linkbolic.com from my system:

The following are some of the status bar notifications you may see in your browser’s status bar:

Waiting for lightbox.linkbolic.com…
Transferring data from lightbox.linkbolic.com…
Looking up lightbox.linkbolic.com…
Read lightbox.linkbolic.com
Connected to lightbox.linkbolic.com…

If this sounds like what you are seeing on your computer, you presumably have some potentially unwanted program installed on your machine that makes the lightbox.linkbolic.com domain appear in your browser. Contacting the owner for the site you were at would be a waste of time. The lightbox.linkbolic.com status bar messages are not coming from them. I’ll try help you with the lightbox.linkbolic.com removal in this blog post.

Those that have been following this blog already know this, but here we go: Some time ago I dedicated a few of my lab systems and deliberately installed a few potentially unwanted programs on them. I have been monitoring the actions on these systems to see what kinds of ads that are displayed. I’m also looking on other interesting things such as if the potentially unwanted program updates itself, or if it downloads additional potentially unwanted programs on the computers. I first noticed the lightbox.linkbolic.com in Mozilla Firefox’s statusbar on one of these lab computers.

lightbox.linkbolic.com was created on 2014-05-15. linkbolic.com resolves to the 46.105.156.71 IP address and lightbox.linkbolic.com to 72.21.91.50.

I also found the cjs.linkbolic.com in use and it resolves to 93.184.220.50.

Update 2015-06-11: I’ve also seen ctx.linkbolic.com (93.184.220.5) in use.

So, how do you remove lightbox.linkbolic.com from your web browser? On the machine where lightbox.linkbolic.com showed up in the statusbar I had TornTV installed. I removed it with FreeFixer and that stopped the browser from loading data from lightbox.linkbolic.com.

The issue with status bar messages like this one is that it can be caused by many variants of potentially unwanted programs, not just the potentially unwanted program that’s installed on my computer. This makes it impossible to say exactly what you need to remove to stop the status bar messages.

So, what can be done to solve the problem? To remove lightbox.linkbolic.com you need to examine your computer for potentially unwanted programs and uninstall them. Here’s my suggested removal procedure:

Review what programs you have installed in the Add/Remove programs dialog in the Windows Control Panel. Do you see anything that you don’t remember installing or that was recently installed?
You can also review the browser add-ons. Same thing here, do you see something that you don’t remember installing?
If that does not help, you can give FreeFixer a try. FreeFixer is built to assist users when manually tracking down potentially unwanted programs. It is a freeware utility that I’ve been working since 2006 and it scans your machine at lots of locations where unwanted software is known to hook into your computer. If you would like to get additional details about a file in FreeFixer’s scan result, you can just click the More Info link for that file and a web page with a VirusTotal report will open up, which can be very useful to determine if the file is safe or malware:
An example of FreeFixer’s “More Info” links. Click for full size.

Did this blog post help you to remove lightbox.linkbolic.com? Please let me know or how I can improve this blog post.

Thank you!

Remove iam.avafymm.com fromFirefox, Chrome and Internet Explorer

March 16, 2015browser status bar5.153.38.133Roger Karlsson

This page shows how to remove iam.avafymm.com from Mozilla Firefox, Google Chrome and Internet Explorer.

Did you just see iam.avafymm.com in the statusbar of your browser and ask yourself where it came from? Or did iam.avafymm.com show up while you search for something on one of the big search engines, such as the Google search engine?

The screenshot above is from my network log. https://iam.avafymm.com/kerr/?d?=… appeared there when I did a Google search.

Here are some of the status bar messages you may see in your browser’s status bar:

Waiting for iam.avafymm.com…
Transferring data from iam.avafymm.com…
Looking up iam.avafymm.com…
Read iam.avafymm.com
Connected to iam.avafymm.com…

If this sounds like what you are seeing on your computer, you almost certainly have some potentially unwanted program installed on your computer that makes the iam.avafymm.com domain appear in your web browser. Don’t flame the people that owns the website you were at when you first spotted iam.avafymm.com in the status bar. They are most likely not responsible, but from the potentially unwanted program that’s installed on your computer. I’ll do my best to help you remove the iam.avafymm.com message in this blog post.

Those that have been spending some time on this blog already know this, but here we go: Recently I dedicated some of my lab computers and intentionally installed some potentially unwanted programs on them. I’ve been monitoring the actions on these machines to see what kinds of adverts that are displayed. I’m also looking on other interesting things such as if the potentially unwanted program updates itself, or if it downloads additional potentially unwanted programs on the systems. I first observed the iam.avafymm.com in Mozilla Firefox’s status bar on one of these lab machines.

iam.avafymm.com resolves to the 5.153.38.133 address. iam.avafymm.com was created on 2015-01-05.

So, how do you remove iam.avafymm.com from your web browser? On the machine where iam.avafymm.com showed up in the status bar I had TinyWallet, BlockAndSurf and BrowserWarden installed. I removed them with FreeFixer and that stopped the web browser from loading data from iam.avafymm.com.

The issue with status bar messages such as this one is that it can be caused by many variants of potentially unwanted programs, not just the potentially unwanted program running on my computer. This makes it impossible to say exactly what you need to remove to stop the status bar messages.

Anyway, here’s my suggestion for the iam.avafymm.com removal:

Check what programs you have installed in the Add/Remove programs dialog in the Windows Control Panel. Do you see something that you don’t remember installing or that was recently installed?
How about your add-ons you installed in Mozilla Firefox, Google Chrome, Internet Explorer or Safari. Anything in the list that you don’t remember installing?
If that did not help, I’d recommend a scan with FreeFixer to manually track down the potentially unwanted program. FreeFixer is a freeware tool that I’m working on that scans your computer at lots of locations, such as browser add-ons, processes, Windows services, recently modified files, etc. If you want to get additional details about a file in the scan result, you can click the More Info link for that file and a web page will open up with a VirusTotal report which will be very useful to determine if the file is safe or malware:
An example of FreeFixer’s “More Info” links. Click for full size.

Did this blog post help you to remove iam.avafymm.com? Please let me know or how I can improve this blog post.

Thank you!

Remove lko.jafyzfyu.com from Firefox, Chrome and Internet Explorer

March 13, 2015browser status bar81.95.152.220Roger Karlsson

This page shows how to remove lko.jafyzfyu.com from Mozilla Firefox, Google Chrome and Internet Explorer.

Does this sound familiar? You see lko.jafyzfyu.com in your web browser’s statusbar while browsing sites that normally don’t load any content from third party domains. Perhaps the lko.jafyzfyu.com domain appear when performing a search at the Google search engine?

Here’s a screen capture of lko.jafyzfyu.com when it showed up on my machine in the network log:

The following are some of the status bar messages you may see in your browser’s statusbar:

Waiting for lko.jafyzfyu.com…
Transferring data from lko.jafyzfyu.com…
Looking up lko.jafyzfyu.com…
Read lko.jafyzfyu.com
Connected to lko.jafyzfyu.com…

Does this sound like your story, you probably have some potentially unwanted program installed on your machine that makes the lko.jafyzfyu.com domain appear in your browser. So don’t send angry emails to the web site you were browsing, they are presumably not responsible for the lko.jafyzfyu.com status bar messages. The potentially unwanted program on your system is. I’ll do my best to help you remove the lko.jafyzfyu.com message in this blog post.

For those that are new to the blog: Some time ago I dedicated some of my lab computers and knowingly installed some potentially unwanted programs on them. Since then I have been following the behaviour on these computers to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the potentially unwanted program auto-updates, or if it downloads and installs additional potentially unwanted programs on the machines. I first found the lko.jafyzfyu.com in Mozilla Firefox’s status bar on one of these lab computers.

lko.jafyzfyu.com resolves to the 81.95.152.220 IP address.

So, how do you remove lko.jafyzfyu.com from your browser? On the machine where lko.jafyzfyu.com showed up in the status bar I had installed. I removed them with FreeFixer and that stopped the browser from loading data from lko.jafyzfyu.com.

The problem with status bar messages such as this one is that it can be caused by many variants of potentially unwanted programs, not just the potentially unwanted program that’s installed on my system. I think that potentially unwanted programs such as SpeedChecker, WebWaltz, PriceFountain and YTDownloader can also be responsible for lko.jafyzfyu.com appearing in the browser. And there are probably other variants too. This makes it impossible to say exactly what you need to remove to stop the status bar messages.

Anyway, here’s my suggestion for the lko.jafyzfyu.com removal:

The first thing I would do to remove lko.jafyzfyu.com is to examine the programs installed on the machine, by opening the “Uninstall programs” dialog. You can reach this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows you can just type in “uninstall” in the Control Panel’s search field to find that dialog:

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:

Then you can examine you browser add-ons. Potentially unwanted program often show up under the add-ons menu in Firefox, Chrome, Internet Explorer or Safari. Is there anything that looks suspicious? Something that you don’t remember installing?

I think you will be able to find and uninstall the potentially unwanted program with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the potentially unwanted program. FreeFixer is a freeware tool that I’ve developed since 2006. Freefixer is a tool designed to manually identify and uninstall unwanted software. When you’ve tracked down the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not locked like many other removal tools out there. It won’t require you to pay for the program just when you are about to remove the unwanted files.

And if you’re having a hard time deciding if a file is legit or potentially unwanted in the FreeFixer scan result, click on the More Info link for the file. That will open up a web page which contains more details about the file. On that web page, check out the VirusTotal report which can be very useful:

Did you find any potentially unwanted program on your machine? Did that stop lko.jafyzfyu.com? Please post the name of the potentially unwanted program you uninstalled from your machine in the comment below.

Thank you!

Remove i_crbsjs_info.tlscdn.com from Mozilla Firefox, Google Chrome and Internet Explorer

March 6, 2015browser status bar207.244.65.148Roger Karlsson

This page shows how to remove i_crbsjs_info.tlscdn.com from Mozilla Firefox, Google Chrome and Internet Explorer.

Sound familiar? You see i_crbsjs_info.tlscdn.com in your browser’s status bar while browsing on websites that typically don’t load any content from third party domains. Maybe the i_crbsjs_info.tlscdn.com domain appear when performing a search at the Google.com search engine?

Here is how the i_crbsjs_info.tlscdn.com status bar message looked like on my computer:

It appeared while I did a search at Google.

The following are some of the status bar messages you may see in your browser’s status bar:

Waiting for i_crbsjs_info.tlscdn.com…
Transferring data from i_crbsjs_info.tlscdn.com…
Looking up i_crbsjs_info.tlscdn.com…
Read i_crbsjs_info.tlscdn.com
Connected to i_crbsjs_info.tlscdn.com…

If this description sounds like your computer, you probably have some potentially unwanted program installed on your machine that makes the i_crbsjs_info.tlscdn.com domain appear in your browser. Contacting the owner for the site you were at would be a waste of time. The i_crbsjs_info.tlscdn.com status bar messages are not coming from them. I’ll try help you with the i_crbsjs_info.tlscdn.com removal in this blog post.

If you have been visiting this blog already know this, but if you are new: A little while back I dedicated a few of my lab computers and deliberately installed some potentially unwanted programs on them. Since then I have been following the behaviour on these computers to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the potentially unwanted program auto-updates, or if it installs additional potentially unwanted programs on the computers. I first spotted the i_crbsjs_info.tlscdn.com in Mozilla Firefox’s status bar on one of these lab computers.

i_crbsjs_info.tlscdn.com resolves to the 207.244.65.148 IP address.

So, how do you remove i_crbsjs_info.tlscdn.com from your browser? On the machine where i_crbsjs_info.tlscdn.com showed up in the status bar I had TornTV installed. I removed it with FreeFixer and that stopped the web browser from loading data from i_crbsjs_info.tlscdn.com.

Anyway, here’s my suggestion for the i_crbsjs_info.tlscdn.com removal:

The first thing I would do to remove i_crbsjs_info.tlscdn.com is to examine the software installed on the machine, by opening the “Uninstall programs” dialog. You can find this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows you can just type in “uninstall” in the Control Panel’s search field to find that dialog:

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:

Do you see something suspicious listed there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if something was installed approximately about the same time as you started observing the i_crbsjs_info.tlscdn.com statusbar messages. Does TornTV appear there?

Then I would check the browser add-ons. Potentially unwanted program often show up under the add-ons menu in Google Chrome, Mozilla Firefox, Internet Explorer or Safari. Is there anything that looks suspicious? Anything that you don’t remember installing? Is TornTV in the list?

I think most users will be able to identify and remove the potentially unwanted program with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the potentially unwanted program. FreeFixer is a freeware tool that I started develop about 8 years ago. It’s a tool built to manually identify and uninstall unwanted software. When you’ve found the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not locked like many other removal tools out there. It won’t require you to pay for the program just when you are about to remove the unwanted files.

And if you’re having a hard time figuring out if a file is clean or potentially unwanted in FreeFixer’s scan report, click on the More Info link for the file. That will open up a web page which contains more details about the file. On that web page, check out the VirusTotal report which can be quite useful:

Did you find any potentially unwanted program on your machine? Did that stop i_crbsjs_info.tlscdn.com? Please post the name of the potentially unwanted program you uninstalled from your machine in the comment below.

Thank you!