Category Archives: adware

Remove Ads by CheckMeUp

October 3, 2014adware, freefixerAddLyrics, OutBrowse, RevizerRoger Karlsson

Hello there and welcome to the FreeFixer blog. Just a short post on an adware called CheckMeUp. If the CheckMeUp adware is installed on your machine, you’ll find ads labeled “Ads by CheckMeUp”, a new add-on named CheckMeUp added into Internet Explorer and Firefox and a process called CheckMeUp.exe running in the Windows Task Manager. I’ll show how to remove CheckMeUp in this blog post with the FreeFixer removal tool.

Here’s how CheckMeUp shows up in Firefox and Internet Explorer:

CheckMeUp is distributed by a tactic called bundling. Bundling means that a piece of software – in this case CheckMeUp – is included in other software’s installers. When I first found CheckMeUp, it was bundled with a download called FLV Player by OutBrowse.

Generally, you can avoid bundled software such as CheckMeUp by being careful when installing software and declining the bundled offers in the installer.

When I find some new bundled software I usually upload it to VirusTotal to see if the anti-malware tools there detect something. 3 of the 55 anti-virus scanners detected the file. The CheckMeUp.exe file is detected as AddLyrics by Sophos and Revizer (fs) by VIPRE.

Since you probably want to remove CheckMeUp, these are the items you should check for removal if you want to remove it with FreeFixer. You might have to restart your machine to complete the removal. Problem taken care of.

Hope that helped you to figure out how to do the removal.

Any idea how CheckMeUp was installed on your computer? Please let me and the readers know by posting a comments. Thank you!

Thanks for reading. Welcome back!

Update 2014-12-06: CheckMeUp is now using files named webinstrNewH.sys, 184_x64.dll and 184.dll.

“Ads by Sense” – Sense Adware Removal Instructions

October 1, 2014adware, freefixerCrossRider, Cyprus, Krance Development, Ni, Nicosia, Porter Studio Plus, Sara Kodama Project, Tita-nium Great MindsRoger Karlsson

Hello readers. Another day, another blog post. As usual I was looking around on the Internet to see what is being bundled with some software downloads. This time I found something called Sense. This appears to be a variant of CrossRider that I’ve previously written about.

If the Sense adware is installed on your computer, you will find banners labeled “Ads by Sense“, “Ad by Sense1“, green links added to web pages, saying “Click to Continue -> by Sense“, new add-ons added into Internet Explorer and Firefox and new processes running in the Task Manager. You’ll also see some files on your hard-drive that are digitally signed by Krance Development. I’ll show how to remove Sense in this blog post with the FreeFixer removal tool.

Sense is bundled with other software. Bundled means that it is included in another software’s installer. When I first found Sense, it was bundled with a piece of software called Free Download Manager.

As usual when I find some new bundled software I uploaded it to VirusTotal to test if the anti-viruses there find anything suspicious. CrossRider seems to be the common detection name.

The file is digitally signed by a company called Krance Development.

Removing Sense is straightforward with FreeFixer. Just select the Sense files for removal and then click the Fix button and the problem will be solved.

Hope that helped you with the removal.

Any idea how Sense was installed on your system? Please let me and the readers know by posting a comments. Thanks!

Thank you for reading.

Update 5 November 2014: The Sense adware is still being distributed. Now the files are signed by Porter Studio Plus as you can see in the screenshot from the Digital Signatures tab for the Sense-bg.exe file. According to the information in the certificate, Porter Studio Plus is located in Nicosia, Cyprus.

Update 7 Nov 2014: Now the files are signed by Sara Kodama Project. They seem to change the certificate quite often.

Update 2014-11-19: Now the files are signed by Tita-nium Great Minds. They are located in Nicosia, Cyprus.

How To Remove PriceHorse – Adware Removal Instructions

October 1, 2014adware, freefixerFirst Offerz Ltd, Montiera, PayByAdsRoger Karlsson

Hello there. As usual I was looking around on the Internet to see what is being bundled with some software downloads. This time I found something called PriceHorse. If you have PriceHorse on your system, you will see a new process called pricehorse.exe, signed by PayByAds ltd., running in the Windows Task Manager and 2 new scheduled tasks. You can also see ads labeled “Ads by Price-Horse”. I’ll show how to remove PriceHorse in this blog post with the FreeFixer removal tool.

Here’s a screenshot from the www.price-horse.com web site which shows how the PriceHorse ads look like:

PriceHorse is bundled with a number of downloads. Bundling means that software is included in other software’s installers. When I first found PriceHorse, it was bundled with a download named Free Download Manager. Here’s how it appeared in the Free Download Manager installer where I found it:

The EULA refers to the software as Price-Horse instead of PriceHorse. The EULA also mention a company called First Offerz Ltd.

Generally, you can avoid bundled software such as PriceHorse by being careful when installing software and declining the bundled offers in the installer.

As usual when I stumble upon some new bundled software I uploaded it to VirusTotal to check if the antiviruses there detect something fishy. The PriceHorse.exe file is detected as PayByAds and Montiera.

Removing PriceHorse is pretty easy with FreeFixer. Just select the PriceHorse files for removal and then click the Fix button and the problem will be solved.

Hope this helped you solved the PriceHorse ad problem.

Do you also have PriceHorse on your computer? Any idea how it installed? Please share in the comments below. Thanks!

Thanks for reading. Welcome back!

How To Remove JollyWallet

October 1, 2014adwareCrossRiderRoger Karlsson

Hello there and welcome to the FreeFixer blog. Today I wanted to talk about an adware named JollyWallet and thought I should give you some removal instructions. JollyWallet appears to be a variant of CrossRider that I’ve written about before. If the JollyWallet adware is installed and running on your machine, you will see JollyWallet ads added in the top area of your web browsers and a new add-on installed into Mozilla FireFox and Internet Explorer. I’ll show how to remove JollyWallet in this blog post with the FreeFixer removal tool.

The JollyWallet adware has been around for some time. I think I first spotted it in the spring of 2014, then it disappeared from the radar for some time, but now it appears to be distributed again.

So, how did JollyWallet install on your machine? It was probably bundled with some download that you installed recently. Bundling means that software is included in other software’s installers. When I found JollyWallet, it was bundled with a download claiming to be an episode of the Game of Thrones TV-series. The screenshot below shows how the download informed the user that JollyWallet was bundled.

When I run into some new bundled software I usually upload it to VirusTotal to check if the anti-viruses there detect anything. The JollyWallet file was detected by 10 of the anti-virus scanners.

Removing JollyWallet is pretty with FreeFixer. Just check the JollyWallet files as the screenshots below shows. A restart of your machine may be required to complete the removal. Problem taken care of 😉

Hope this helped you remove the JollyWallet adware.

Any idea how JollyWallet was installed on your machine? Please share in the comments below. Thank you!

Thanks for reading!

Powered by Information Ads on Google?

September 23, 2014adwareRoger Karlsson

Getting ads labeled “Powered by Information” in your Google search results? Then you have some adware installed and running on your machine. You can track down this adware with the FreeFixer removal tool.

Thanks for reading!

AllGenius Ads – Removal Instructions

September 22, 2014adwareRoger Karlsson

Just a short post on a variant of the BrowseFox/AltBrowse adware. It’s called AllGenius. If you got AllGenius on your machine, you’ll see it in the add-ons menu in Internet Explorer and Firefox:

AllGenius is bundled with other software. Here’s one example how it appears in an installer for an unrelated program.

You probably want to remove the AllGenius adware, and you can do so from the Add/Remove programs dialog in the Windows Control Panel:

That worked for me. Did it completely remove AllGenius for you too? Please share in the comments below.

If the AllGenius installer fails, you can remove it with the freeware tool FreeFixer. Just select the AllGenius files for removal and click the Fix button:

Thanks for reading.

Ads by SpeedCheck – Removal Instructions

September 18, 2014adwareRoger Karlsson

Getting ads labeled Ads by SpeedCheck or Brought by SpeedCheck? Then you got the SpeedCheck adware installed on your machine.

SpeedCheck is installed in your web browser. Here’s how it appears in Mozilla Firefox:

The detection rate among the anti-virus programs is very low. Only 2 of the 55 anti-virus scanners at VirusTotal detects the file.

The detection name for SpeedCheck is Revizer.b.

Since you probably want to remove the SpeedCheck ads, these are the files you should check if you want to remove it with FreeFixer:

Thank you for reading! Any idea how you got SpeedCheck on your machine?

Remove Klip Pal Ads

September 18, 2014adware, freefixerCrossRiderRoger Karlsson

Just a quick post about the Klip Pal adware. Klip Pal is bundled with other software. I’ll show how to remove Klip Pal in this blog post. Here’s how it can appear in an installer:

As you can see, KlipPal inserts advertisements on web sites while you are browsing the web.

Klip Pal installs itself in Internet Explorer and Firefox:

Removing Klip Pal is a piece of cake with FreeFixer. Just select the Klip Pal files for removal and then click the Fix button and the ad problem will be solved.

Hope this helped you solve the Klip Pal problem. Any idea how you got it on your machine?

Thanks for reading!

Website Counselor – Adware Removal Instructions

September 18, 2014adwareRoger Karlsson

Found a new adware called Website Counselor that is being bundled with other software downloads. Here’s how it appeared in the installer:

Website Counselor is installed as an add-on in Firefox. It will appears as Website Counselor 0.1 in the add-ons menu.

How do I know that this is adware? Well, the Website Counselor EULA clearly explains that it can show advertisements:

If you’d like to remove Website Counselor you can do so by removing it from the Firefox add-ons menu. You can also remove it with FreeFixer by checking the Website Counselor extension for removal:

Hope this helped you figure about what Website Counselor and how to remove it.

Any idea how you got this on your machine? Please share by posting a comment.

MyBestOffersToday – Pop Up Removal Instructions.

September 14, 2014adware, freefixerEorezo, Tuto4PC, Tuto4PC.comRoger Karlsson

Getting pop-up ads from MyBestOffersToday?

Removing MyBestOffersToday is easy. Just uninstall it from the Windows Control Panel…

.. or if you’d like to use FreeFixer, select the MyBestOffersToday files for removal. They will have “mbot” as part of the filename:

I uploaded one of the file to VirusTotal. Here’s the scan result for mybestofferstoday_widget.exe. The files are signed by Tuto4PC.com. Tuto4PC and Eorezo are two of the detection names:

My Best Offers Today is bundled with other software downloads. Here’s how it was disclosed in one of the installers where I found it:

How did you get My Best Soft Today on your machine? Please share in the comments.