Monthly Archives: July 2014

What is UnknownFile? And How To Remove It

July 31, 2014UncategorizedSoftango, Trojan.Agent.MVXGenRoger Karlsson

Getting a pop-up dialog labeled “UnknownFile” while double-clicking on a file on your computer?

Well, then you’ve got the UnknownFile File Assistant installed on your machine. While this dialog is active, you can also see UnknownFile.exe running in the Windows Task Manager. You probably got this program on your computer when installing something else. I found UnknownFile bundled with the Softango Downloaders. Did you also download and install something from Softango?

So, how do you remove UnknownFile? No problem, just uninstall it from the Programs and Features dialog:

Hope you found this useful.

By the way, none of the anti-virus programs detects UnknownFile, except MalwareBytes which has named UnknownFile.exe Trojan.Agent.MVXGen:

What is PepperZip? And How Did You Get It On Your Computer?

July 30, 2014UncategorizedRoger Karlsson

Did you just spot an icon called PepperZip on your computer desktop and wonder where it came from?

You might have got PepperZip if you downloaded something recently. I found PepperZip while testing an unofficial Google Chrome download. Here’s how it was disclosed during the installation process:

What is Severe Weather Alerts?

July 30, 2014UncategorizedRoger Karlsson

Do you have something called Severe Weather Alerts installed on your machine and wonder where it came from?

I found Severe Weather Alerts while testing out an un-official Google Chrome download which bundled the Weather alerts software, as you can see in the screenshot below.

Any idea where you got Severe Weather Alerts?

Ads by SaferSearch – Removal Instructions

July 30, 2014UncategorizedRoger Karlsson

Are you seeing ads labeled “Ads by SaferSearch” while browsing the web? Then you have the SaferSearch adware installed on your machine.

I found SaferSearch while testing a download. Here’s how it was disclosed in the installer:

Removing SaferSearch can be done with FreeFixer, by selecting the SaferSearch files in the scan result:

How did you get SaferSearch on your computer?

How To Remove GridMonetize

July 30, 2014UncategorizedRoger Karlsson

Just found a program called GridMonetize bundled with an unofficial Google Chrome download. The main file of GridMonetize appears to be Ctp.exe. detected as dnSauce, MSIL/Injector.EJO, Worm.Win32.Msil, etc:

You can remove GridMonetize by selecting the CtP.exe file for removal in FreeFixer:

Did you get GridMonetize on your computer?

Smart Secure Software S.l – Bundling and VirusTotal Report

July 30, 2014digital signatureRoger Karlsson

Just a quick post before going back to working on FreeFixer. Found a “Google Chrome” download this morning, digitally signed by Smart Secure Software S.l.

The problem is that it was not an official Chrome download. The setup file bundled a large number of potentially unwanted programs, such as GridMonetize, IStartSurf, PepperZip, Severe Weather Alerts, Wajam, Browser App and CostMin, as shown in the screenshots below:

And here’s the VirusTotal report:

DomainIQ, SoftPulse and Smart Secure Software are some of the detection names.

Did you also find a file digitally signed by Smart Secure Software S.l.? What kind of download was it and where did you find it?

How To Remove MySearch?

July 27, 2014UncategorizedRoger Karlsson

Do you see an add-on listed in Firefox and Internet Explorer called MySearch?

The MySearch add-on is detected by some of the anti-virus programs, according to VirusTotal:

MultiPlug and QVM30 are some of the detection names.

So, how about the MySearch removal? Easy with FreeFixer, just select the MySearch files:

How To Remove TheTornTV

July 27, 2014adware, freefixerRoger Karlsson

Getting ads labeled Ads by TheTornTV on top of the Google search results as show in the screenshot below?

As you’ve probably figured out you’ve got an adware called TheTornTV running on your machine. You can also see it in Mozilla’s Add-on dialog:

Removing TheTornTV is pretty easy. Just select the TheTornTV in FreeFixer, as shown in the screenshots:

I’ve made a quick video that shows FreeFixer in action while removing TheTornTV. Hope you find it useful.

websearch.wonderfulsearches.info – How To Remove It

July 27, 2014UncategorizedRoger Karlsson

Have your web browser been changed to use the websearch.wonderfulsearches.info web site for searches?

No problem, you can use FreeFixer to remove websearch.wonderfulsearches.info. Just select the wonderfulsearches.info items, as shown below:

Here’s a video which shows FreeFixer in action removing websearch.wonderfulsearches.info:

How did you get WondefulSearches on your machine?

Meta Installer LLC – Certificate Information

July 27, 2014digital signatureRoger Karlsson

I’ve previously written about a program called JDownloader. I just found out that another company, named Meta Installer LLC, is also signing the JDownloader setup file. The setup file is detected by many of the anti-virus scanners at VirusTotal.

Just wanted to let you know. Hope this helped you avoid installing some adware on your machine.