Just found another bundled Firefox add-on called SitezExpert 2.4.
If you’d like to remove SitezExpert, you can do so from Firefox’ add-on menu or use FreeFixer to remove it.
The SitezExpert add-on has recently been added to Firefox’ block list:
https://bugzilla.mozilla.org/show_bug.cgi?id=1073810
According to the bug database, all the following add-ons are variants of the same adware:
Have a nice day!
Hello guys and gals. I just found another bundled adware named videosMediaPlayersversion2.1 and videosMediaPlayersv2.2 and thought I should give you some removal instructions. videosMediaPlayersversion2.1 and videosMediaPlayersv2.2 seems to be a variant of CrossRider that I wrote about previously. If the videosMediaPlayersversion2.1 and videosMediaPlayerv2.2 adware is running on your machine, you will find new add-ons called videosMediaPlayers installed in Firefox and Internet Explorer. I’ll show how to remove videosMediaPlayersversion2.1 and videosMediaPlayersv2.2 in this blog post with the FreeFixer removal tool in case the removal from the Control Panel fails.
videosMediaPlayersversion2.1 and videosMediaPlayerv2.2 is distributed by a tactic called bundling. Bundling means that a piece of software is included in other software’s installers. I found these two programs bundled with a download called FastPlayer.
Following the standard procedure when I test some new bundled software I uploaded it to VirusTotal to check if the anti-virus progams there find anything suspicious. 13% of the scanners detected the file. Kaspersky names videosMediaPlayersversion2.1 and videosMediaPlayervs2.2 as Trojan.NSIS.GoogUpdate.dp, Malwarebytes reports PUP.Optional.VideosMediaPlayer.A and VIPRE detects it as Crossrider (fs). The file was digitally signed by Railroad Party Apps.
According to the certificate, Railroad Party Apps is located in the city of Nicosia on Cyprus.
Removing videosMediaPlayersversion2.1 and videosMediaPlayerv2.2 is pretty easy with FreeFixer. Here’s a few screen dumps from the removal that should help you. All files are located under the “videosMediaPlayers..” folder. You may have to restart your machine to complete the removal.
Hope that helped you to figure out how to do the removal.
Did you also find videosMediaPlayersversion2.1 and videosMediaPlayerv2.2 on your system? Any idea how it installed? Please share your story the comments below. Thanks!
Hope you found this useful and thanks you for reading.
Hello there. Today I wanted to talk about an adware called PriceFountain and give you some removal instructions. This seems to be a variant of PennyBee that I’ve previously written about. If PriceFountain is running on your computer, you will see ads labeled brought by PriceFountain while browsing the web and pricefountain.exe and pricefountainw.exe running in the Windows Task Manager. You will also see PriceFountain in your browser’s add-on menu. I’ll show how to remove PriceFountain in this blog post with the FreeFixer removal tool.
PriceFountain is bundled with other software. Bundled means that it is included in another software’s installer.
As usual when I test some new bundled software I uploaded it to VirusTotal to test if the anti-virus scanners there detect anything interesting. 19 of the antivirus scanners detected the file. AegisLab reports PriceFountain as Troj.NSIS.GoogUpdate, Avira detects it as Adware/DealPly.1257472, F-Secure calls it Gen:Variant.Graftor.162003, Fortinet names it Riskware/DealPly and McAfee reports Artemis!AD168966F8B7.
You probably came here looking for removal instructions for PriceFountain and you can do so with the FreeFixer removal tool. Just select the PriceFountain files as shown in the screen-caps below. A restart of your machine might be required to complete the removal.
Hope that helped you to figure out how to do the removal.
I stumbled upon PriceFountain while testing out some downloads that are known to bundled lots of unwanted software. Any idea how PriceFountain was installed on your computer? Please share your story the comments below. Thank you very much!
Thanks for reading. Welcome back!
Hello readers. Hope you are having a great Halloween. I just found another bundled adware called SitesKing and wanted give you some removal instructions. This seems to be a variant of Website Counselor that I’ve previously blogged about. If the SitesKing adware is running on your computer, you’ll find a new add-on called SiteKing 3.7 in Mozilla Firefox’ add-on menu. I’ll show how to remove SitesKing in this blog post with the FreeFixer removal tool.
SitesKing is bundled with a number of downloads. Bundling means that software is included in other software’s installers. When I first found SitesKing, it was bundled with the Softsonic Downloader. This is how SitesKing was disclosed in Softsonic Downloader’s installer when I found it. Yes, that is correct, Website Counselor was disclosed, but SitesKing was installed.
Generally, you can avoid bundled software such as SitesKing by being careful when installing software and declining the bundled offers in the installer.
Since you probably want to remove SitesKing, this is the files you should check for removal if you want to remove it with FreeFixer. You may have to reboot your computer to complete the removal. Did that help you solve the problem? Hope this helped you solved the SitesKing problem.
Did you also find SitesKing on your machine? Any idea how it installed? Please share in the comments below. Thanks!
Thank you for reading and welcome back.
Hello readers. Another day, another blog post. I just found another bundled adware named Box Rock this morning and wanted to give you some removal instructions. This seems to be a variant of CrossRider that I’ve previously written about. If the Box Rock adware is running on your computer, you will find floating ads labeled Powered by Box Rock, ads labeled Box Rock Ads in Google’s search results and a new add-on added in Internet Explorer and Mozilla Firefox called Box Rock. Chrome seems to have remained clean. I’ll show how to remove Box Rock in this blog post with the FreeFixer removal tool.
Here’s BoxRock in Mozilla Firefox’ add-on menu:
Box Rock is distributed by a strategy called bundling. Bundling means that a piece of software is included in other software’s installers. When I first found Box Rock, it was bundled with GoForFiles. Here’s one example how it appears in the GoForFiles installer.
Generally, you can avoid bundled software such as Box Rock by being careful when installing software and declining the bundled offers in the installer.
When I stumble upon some new bundled software I always upload it to VirusTotal to test if the anti-malware scanners there find something. 7 of the anti-virus scanners detected the file. The Box Rock files are detected as BrowseFox.F by AVG, Trojan.BPlug.144 by DrWeb and PUP.Optional.BoxRock.A by Malwarebytes.
If you would like to remove Box Rock you can do so with the freeware FreeFixer tool. Select the Box Rock files for removal in FreeFixer, click Fix, reboot your system and the problem will be gone. Here’s a few screenshots to point you in the right direction:
Hope that helped you to figure out how to do the removal.
Any idea how BoxRock was installed on your computer? Please share your story the comments below. Thanks a bunch!
Thanks for reading!
Found another variant of HQ-Video-Pro. This one is called HQ-Video-Pro-2.1cv27.10. If you got it on your machine, you will see ads labeled Powered by HQ-Video-Pro-2.1cv27.10 in your Google search results. The removal procedure is the same as an older version.
Here’s how HQ-Video-Pro-2.1cv27.10 appears in Firefox:
Getting pop-ups from enh.guzzlepraxiscommune.com? If those pop-ups also sneak through the built-in pop-up blockers in Chrome, Firefox and Internet Explorer, you most likely have some adware installed on your machine. I’ll give some advice on how to remove the enh.guzzlepraxiscommune.com pop-up in this blog post.
The enh.guzzlepraxiscommune.com removal is pretty straightforward, I uninstalled the adware that was installed on my machine with help from the FreeFixer removal tool. The adware were BlockAndSurf, Browser Warden and Tiny Wallet. In my case, BlockAndSurf was responsible for the pop-ups. Please keep in mind, that the enh.guzzlepraxiscommune.com pop-ups can be launched by other variants of adware. I think Safer-Surf and CheckMeUp, SpeedCheck and Salus can also be responsible for the pop-ups.
Tip: If you are having problems to determine whether a file or setting in FreeFixer’s scan result is good or bad, please have a look at the information shown on the More Info page, which appears when clicking on the More Info link as shown in the screenshot below. It will show a VirusTotal scan which can be useful when trying to determine whether to keep or remove the file.
Hope that stopped the enh.guzzlepraxiscommune.com pop-ups on your machine.
What adware did you uninstall on your machine to get rid of the enh.guzzlepraxiscommune.com ads? Thank you very much for sharing and helping other users in the same situation.
Thank you for reading and welcome back! I’m going to follow up this one with more info later today or tomorrow.
Update 2014-10-30: Below is the full URL for the pop-up when I spotted it in Chrome. It mentions the datropy.com domain (wkj.datropy.com), it also sends the name of the adware to the server, in this case SaferSurf. The URL also contains www.google.se, which was the web site I was visiting when the pop-up appeared. The URL also contains WhiteLabelBidRequestHandlerServlet, indicating that something in the back-end is written in Java.
http://enh.guzzlepraxiscommune.com/sd/dw32.html?u=http%3A%2F%2Fwkj.datropy.com%2FWhiteLabelBidRequestHandlerServlet%3Foid%3D1%26width%3D1%26height%3D100%26pubid%3D9050%26tagid%3D5771%26noaop%3D1%26revmod%3DCRD%26cb%3Dcybabw%26encoded%3D1%26cirf%3Dhttps%3A%2F%2Fwww.google.se%2F%26pstn%3D90505771&p=SaferSurf&a=&c=9050-5771&b=chrome&bv=37&t1=1414676170615&tt=1414676170615&r=www.google.se&ua=0&n=convertmedia&sn=&mpa=0&mp=0
Based on the traffic I’m getting to this blog post it appears that there’s a large number of users having problems with the enh.guzzlepraxiscommune.com pop-ups. The Alexa traffic rank today shows that the enh.guzzlepraxiscommune.com site has reached a global rank of 26153 in just a few days.
Hello readers. Welcome to the blog. Did something called HQ-Video-Pro-2.1cV26.10 appear on your computer? HQ-Video-Pro-2.1cV26.10 seems to be a variant of CrossRider that I’ve talked about previously. If the HQ-Video-Pro-2.1cV26.10 Adware is installed on your computer, you will find ads labeled powered by HQ-Video-Pro-2.1cV26.10 in Google’s search results. I’ll show how to remove HQ-Video-Pro-2.1cV26.10 in this blog post with the FreeFixer removal tool.
Here’s HQ-Video-Pro-2.1cV26.10 in Firefox’ add-on menu:
HQ-Video-Pro-2.1cV26.10 is bundled with other software. Bundled means that it is included in another software’s installer.
You can remove HQ-Video-Pro-2.1cV26.10 with the FreeFixer removal tool. Just select the HQ-Video-Pro-2.1cV26.10 files as shown in the screen dumps below. You may have to restart your computer to complete the removal.
Hope this helped you solved the HQ-Video-Pro-2.1cV26.10 problem.
I stumbled upon HQ-Video-Pro-2.1cV26.10 while testing out some downloads that are known to bundled lots of unwanted software. Any idea how HQ-Video-Pro-2.1cV26.10 was installed on your machine? Please share by posting a comment. Thank you!
Thank you for reading.
Are you getting a pop-up from Google Chrome saying:
“Disable developer mode extensions. Extensions running in developer mode can harm your computer. If you’re not a developer, you should disable these extensions running in developer mode to stay safe.”
As the pop-up says, if you are a developer and working on an extension in developer mode, it’s fine.
If you are not a developer, this pop-up is an indication that you have some unwanted software on your machine that you need to remove. In my case, Chrome alerted me due to an extension called PriceLess which often is classified as adware. I think you should disable the extensions, and then get your hands dirty tracking down the unwanted software running on your machine. If you are lucky, it’s just the Chrome extension, but most likely you will see other changes and new files on your machine that you will need to remove. If you are comfortable with using a tool used to manually track down unwanted software, you can try the FreeFixer removal tool. It’s freeware.
Hope this blog post pointed you in the right direction.
What unwanted software did you find on your machine?
Thanks for reading.
Getting a message saying
“Errors found on this webpage! Please update your browser. Download Updates Now”
on the Google search page when starting your browser?
If you get this error message, don’t click it. Since the alert is inserted into the Google start page, it may appear the message is comes from the Google, but Google has nothing to do with it. In my case, the alert message was inserted by some adware that was installed on my machine.
I got this error message when using Mozilla Firefox, but I assume you will also see the same type of message when browsing with Google Chrome or Internet Explorer. The error message will probably also appear on other search engines such as Bing and Yahoo.
To remove these misleading messages you need to scan your computer for unwanted software. If you are comfortable using manual removal tools you can use FreeFixer to assist you when tracking down and removing the unwanted software that injects these messages. What adware did you find on your machine?
Thanks for reading.