Remove ung.devffyire.com from Chrome, Firefox and IE

This page shows how to remove ung.devffyire.com from Mozilla Firefox, Google Chrome and Internet Explorer.

Having issues with ung.devffyire.com showing up in the lower left corner of your browser? If so, you may have some adware installed on your system. I noticed ung.devffyire.com in Mozilla Firefox’s status bar when doing a search at Google, but I guess ung.devffyire.com can appear if you are using Chrome, Internet Explorer, Safari or Opera too.

Here is a screen-cap on ung.devffyire.com from my machine while searching at Google:

ung.devffyire.com status bar

Here are some of the status bar messages you may see in your browser’s status bar:

  • Waiting for ung.devffyire.com…
  • Transferring data from ung.devffyire.com…
  • Looking up ung.devffyire.com…
  • Read ung.devffyire.com
  • Connected to ung.devffyire.com…

When I examined the network log, the following URL was listed:

https://ung.devffyire.com/gadot/?d=W3sidTE..

The same type of URL, with https and the “gadot” subfolder appeared some time ago, when wrote about tyu.flafyshzfyoom.com.

Does this sound like what you are seeing, you most likely have some adware installed on your machine that makes the ung.devffyire.com domain appear in your web browser. So there’s no idea contacting the owner of the site you were browsing. The ung.devffyire.com status bar notifications are not coming from them. I’ll try help you with the ung.devffyire.com removal in this blog post.

I found ung.devffyire.com on one of the lab computers where I have some adware running. I’ve talked about this in some of the previous blog posts. The adware was installed on purpose, and from time to time I check if something new has appeared, such as pop-up windows, new tabs in the browsers, injected ads on site that usually don’t show ads, or if some new files have been saved to the hard-drive.

ung.devffyire.com resolves to the 81.95.152.219 address. ung.devffyire.com was registered on 2015-01-05 and protected by WHOISGUARD, INC. According to YouGetSignal’s reverse whois, ybr.lilyochin.com is also resolving to the same IP.

So, how do you remove ung.devffyire.com from your web browser? On the machine where ung.devffyire.com showed up in the status bar I had TinyWallet, BlockAndSurf and BrowserWarden installed. I removed them with FreeFixer and that stopped the browser from loading data from ung.devffyire.com.

The issue with status bar messages like this one is that it can be caused by many variants of adware, not just the adware on my machine. This makes it impossible to say exactly what you need to remove to stop the statusbar messages.

So, what should done to solve the problem? To remove ung.devffyire.com you need to check your machine for adware or other types of unwanted software and uninstall it. Here’s my suggested removal procedure:

The first thing I would do to remove ung.devffyire.com is to examine the programs installed on the machine, by opening the “Uninstall programs” dialog. You can open this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows OS you can just type in “uninstall” in the Control Panel’s search field to find that dialog:
Uninstall a program search

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:
Uninstall a program dialog

Do you see something suspicious listed there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if something was installed approximately about the same time as you started getting the ung.devffyire.com status bar messages.

Then you can examine you browser add-ons. Adware often show up under the add-ons dialog in Google Chrome, Mozilla Firefox, Internet Explorer or Safari. Is there anything that looks suspicious? Something that you don’t remember installing?
Firefox add-ons manager

I think most users will be able to identify and uninstall the adware with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the adware. FreeFixer is a freeware tool that I’ve developed since 2006. Freefixer is a tool built to manually identify and remove unwanted software. When you’ve identified the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not locked like many other removal tools out there. It will not require you to pay for the program just when you are about to remove the unwanted files.

And if you’re having issues deciding if a file is legit or malware in the FreeFixer scan report, click on the More Info link for the file. That will open up your web browser with a page which contains more information about the file. On that web page, check out the VirusTotal report which can be quite useful:

FreeFixer More Info link example
An example of FreeFixer’s “More Info” links. Click for full size.

Did you find any adware on your machine? Did that stop ung.devffyire.com? Please post the name of the adware you uninstalled from your machine in the comment below.

Thank you!

Leave a Reply

Your email address will not be published.