Getting ads labeled Ads by TheTornTV on top of the Google search results as show in the screenshot below?
As you’ve probably figured out you’ve got an adware called TheTornTV running on your machine. You can also see it in Mozilla’s Add-on dialog:
Removing TheTornTV is pretty easy. Just select the TheTornTV in FreeFixer, as shown in the screenshots:
I’ve made a quick video that shows FreeFixer in action while removing TheTornTV. Hope you find it useful.
Getting ads labled “Ad by Browser App” or “Ads by Browser App“, like in the screenshots below:
Then you have the BrowserApp adware installed on your machine. You will also Browser App listed as a browser add-on. Here it is in Firefox:
The detection rate by the anti-virus programs are currently very low. Only 3 of the 50+ anti-virus scanners at VirusTotal detects the Browser App files. Eldorado and Crossrider are two of the detection names:
How to remove Browser App? No problem, just selected the Browser App files in FreeFixer and you will no longer see the ads:
How did you get the BrowserApp adware on your machine?
These are the variants I’ve found:
Found a new adware called Adanak today. If you got the Adanak adware on your machine, you’ll notice it when starting Mozilla Firefox.
Here’s how Adanak appears in Firefox’s Add-ons dialog:
The anti-virus programs have a pretty decent detection rate for the Adanak adware. 20 of 53 anti-virus scanners detect Adanak according to VirusTotal:
Removal is easy with FreeFixer, just select the Adanak files for removal, and then click Fix and the problem will be solved:
How did you get Adanak on your machine?
Found a download a few days ago called JDownloader which was digitally signed by Software Updater LLC.
What caught my attention was the VirusTotal scan report where 12 of the anti-virus programs detected the Software Updater LLC file:
Some of the detection names are BundleApp_r, Trojan.Generic, CryptVittalia, and Adware.Win32.Vittalia.
By looking at the certificate information, it appears that Software Updater LLC is located in Delaware in the United States.
Since the download was detected by some of the anti-virus programs I got curious to see what the Software Updater LLC file installed: Webssearches, SaveClicker, “Help fight Cancer”, VuuPC, PriceMeter, PlusHD and “Acelar el PC” are the programs I could see bundled with the Software Updater LLC download.
Have you also found a download signed by Software Updater LLC? What kind of download was it and where did you find it?
Just stumbled on a new adware called Focusbase this morning. You might have noticed it on your machine by new ads labeled Ads by Focusbase appearing or the Focusbase add-ons listed in Firefox and Internet Explorer.
I found the Focusbase adware bundled with another program. The installer file was called FlvPlayer.exe and was digitally signed by a company called Outbrowse LTD.
Here’s how Focusbase was disclosed in the installer:
Focusbase content includes advertisements and is not affiliated with any underlying web sites.
So, how about the Focusbase removal? Easy peasy with FreeFixer. Just select the Focusbase files for removal in FreeFixer as shown in the screenshots below:
Hope this helped you figure out what Focusbase is, how it is installed on user’s computers and how to remove it.
How did you get the Focusbase adware on your machine?
Gettings ads labeled “Ads by Sharp Savings” or text links with a mouse-over saying “Click to Continue > by Sharp Savings”.
Sharp Savings is bundled with free downloads. Here’s how it was disclosed when I found it:
You can remove Sharp Savings from the Windows Control Panel. During the uninstall you need to solve a CAPTCHA.
If the removal fails for some reason, you can remove Sharp Savings with FreeFixer, by selecting the Sharp Savings files (bservice.exe, wd.exe, updater.exe, framworkBHO.dll, etc) as shown in the screenshots. You will also need to manually restore your browser’s proxy settings.
Did you just find something called Site Matcher Pro in Mozilla Firefox’ Add-on dialog? 
Site Matcher Pro is a piece of software that suggests similar web site based on the sites that you are currently browsing.
How did you get Site Matcher Pro on your computer? I found it bundled with an unofficial Adobe Flash Player download. The Flash download was signed by the SuperCool Applications publisher. Here’s a screenshot of Site Matcher Pro appearing in the installer:
If you’d like to remove Site Matcher Pro, you can do so from inside Firefox, or by selecting the Site Matcher Pro extension for removal in FreeFixer:
Hope this helped you to figure out what Site Matcher Pro is and how to remove it.
Update 2014-10-06: Found Site Matcher Pro in another installer:
Just wanted to let you know about a new adware variant called Media_Play_AIR+ that I found tonight. 8 of the 50 anti-virus scanners at VirusTotal detects the Media_Play_AIR_1.1-bg.exe file, which you may see in the Windows Task Manager: 
Some of the anti-virus program calls Media_Play_AIR+ Artemis, CrossRider and AppRider.
These are the variants I’ve found so far:
I found Media_Play_AIR+ bundled with a Zip/Unzip utility. The setup file was digitally signed by CloverMedia SL. How did you get Media_Play_AIR on your computer? The Media_Play_AIR+ files are digitally signed by individual developer SIMONA-VIORICA MARIN, which according to the certificate is located in Bucharest, Romania. 
You can remove Media_Play_AIR+ with FreeFixer. Just select the Media_Play_AIR+ files as shown in the screenshots. Most of the files are located in c:\Program Files \Media_Play_AIR+_1.1 or c:\Program Files (x86)\Media_Play_AIR+_1.1 on 64-bit Windows. 
Media_Play_AIR+ is a variant of MPlayerPlus. Since the removal procedure is the same I’ll link that removal video where you can see FreeFixer in action removing the adware: Hope you found this useful.
Did you see a new type of ads labeled Ads by NewPlayer popping up recently on your computer, even on web sites that normally don’t show any ads? Then you have the NewPlayer adware on your machine. The two types of NewPlayer ads that I’ve seen is a standard banner (to the left), and the Nav-Links roll-over ad type (to the right), as shown in the screenshot below.
Removing NewPlayer a one minute job with FreeFixer. All you need to do is to selected the NewPlayer files for removal, and then hit the Fix button. The filenames for NewPlayer can vary somewhat. In my case they were called NewPlayerFT171.exe, NewPlayerV40.exe and NewPlayerLwruQw.exe. I’m sure you can identify them on your computer. Here’s the NewPlayer files in the FreeFixer scan result:
The detection rate for the NewPlayer adware appears to be pretty low. 3 of the 52 anti-virus scanners at VirusTotal detected the NewPlayer file. Avast refers to it as Win32:Adware-BQV and Baidu and ESET-NOD32 calls it AddLyrics.
How did you get NewPlayer on your computer?
Found another adware this morning. It’s called Norpalla, and it adds itself in your web browsers. Here you can see Norpalla in the Mozilla Firefox browser:
I found Norpalla in a download that claimed to be an episode of the Game of Thrones tv-series. That download was digitally signed by “New IT Limited“.
Norpalla is an easy match for FreeFixer. Just select the norpallabho.dll file and the Norpalla Firefox Extension for removal and the problem is solved.
Where did you find the Norpalla adware? Was it also bundled with a movie or tv-series download?