Monthly Archives: April 2014

Ads By BlockAndSurf – Removal Instructions

Do you see ads, like the ones shown below, labeled Ads by BlockAndSurf, brought by BlockAndSurf or Powered by BlockAndSurf while browsing the web, and two files named BlockAndSurf158.exe and BlockAndSurf_wd.exe in the Windows Task Manager?

brought by BlockAndSurf ads

Ads by BlockAndSurf Nav-LinksAds by BlockAndSurf bannerAds by BlockAndSurfPowered by blockandsurf


When I scanned one of the BlockAndSurf files over at VirusTotal, it was detected as “AddLyrics” and “Lyckricks“.

Here’s a quick video guide how to remove the ads and fix the proxy settings if necessary:

Hope you found the video useful.

Update 2014-10-27: A few users have reported that the Add/Remove uninstall for BlockAndSurf does not work. The BlockAndSurf ads remained after running the uninstaller, so I thought I should follow up on how to remove BlockAndSurf with FreeFixer. The BlockAndSurf adware has also updated its file names since I first published this blog post. Anyway, to remove BlockAndSurf, download FreeFixer and start the scan. Here’s the files I checked to remove BlockAndSurf:

First the webinstrnew.sys driver:BlockAndSurf webinstrnew.sys remove

Then the updater.exe scheduled tasks:BlockAndSurf tasks remove

Followed by bservice.exe, bservice64.exe and wd.exe:BlockAndSurf startup remove

Then the BlockAndSurf Internet Explorer files, 180_x64.dll and 180.dll:BlockAndSurf remove Internet Explorer

And here’s I’m removing BlockAndSurf from Firefox. The 180.xpi file:BlockAndSurf firefox remove

BlockAndSurf is also loaded into Explorer.exe, with the bhelper64.dll file:BlockAndSurf bhelper64.dll remove

I’m also removing the BlockAndSurf.exe file and a few other processes as shown in the screenshot:Block And Surf processes remove

And to remove the BlockAndSurf Chrome extension, type in chrome://extensions in Chrome and remove BlockAndSurf.

Then fix your proxy settings as shown in the video. FreeFixer v1.13 will be able to repair proxy settings 😉

Last step: Reboot.

That’s it. Thanks for reading. Hope this helped you solve the problem.

WebSpades – Removal Instructions

Found another adware today called WebSpades. Made a quick video on how to remove it with FreeFixer.

The WebSpades removal is pretty straightforward with FreeFixer. Download and install FreeFixer, scan, check the WebSpades files, click Fix, reboot if FreeFixer asks you to do so, and WebSpades is gone.

Here’s some WebSpades Screenshots: web sitewebspadesbho.dll WebSpade Firefox Extension


How did you get the WebSpades adware on your machine. Please share by posting a comment.

Ads by Costmin and RightCoupon – Removal Instructions

Stumbled upon ads labeled Ads by Costmin and RightCoupon a few days ago. Here’s a video where I show how to remove the ads:

Here are some CostMin and RightCoupon screenshots:

costmin overview


The offers will pop at the top right corner of your browser and help you save money and time.

Here’s how the RightCoupon pop-up looks like:

rightcoupon ad

How to uninstall it? Easy, remove it from the Programs and Features dialog, or nuke it with FreeFixer.

Costmin in the Add Remove programs dialog