Category Archives: browser status bar

Remove nsl.mapticket.net from Firefox, Chrome and Internet Explorer

This page shows how to remove nsl.mapticket.net from Mozilla Firefox, Google Chrome and Internet Explorer.

Does this sound like your story? You see nsl.mapticket.net in your browser’s status bar while browsing sites that usually don’t load any content from third party domains. Maybe the nsl.mapticket.net domain show up when performing a search at the Google search engine?

Here is how the nsl.mapticket.net statusbar message looked like on my machine, when I did a search at the Google search engine:

nsl.mapticket.net status bar

Here are some of the statusbar messages you may see in your browser’s status bar:

  • Waiting for nsl.mapticket.net…
  • Transferring data from nsl.mapticket.net…
  • Looking up nsl.mapticket.net…
  • Read nsl.mapticket.net
  • Connected to nsl.mapticket.net…

Does this sound like your machine, you most likely have some adware installed on your machine that makes the mapticket.net domain appear in your web browser. There’s no use contacting the owners of the site you currently were browsing. The nsl.mapticket.net status bar messages are not coming from them. I’ll do my best to help you remove the nsl.mapticket.net message in this blog post.

I found nsl.mapticket.net on one of the lab systems where I have some adware running. I’ve talked about this in some of the previous blog posts. The adware was installed on purpose, and from time to time I check if anything new has appeared, such as pop-up windows, new tabs in the browsers, injected ads on site that usually don’t show ads, or if some new files have been saved to the hard-drive.

nsl.mapticket.net resolves to 208.43.241.247. nsl.mapticket.net was created on 2013-06-26. The domain is protected by Domains By Proxy, LLC.

According to YouGetSignal’s reverse IP lookup, the following domains has also resolved to the same IP:

  • dso.maptickets.net
  • dss.drivefor.net
  • enl.trepage.net
  • gho.doorknobregorgeasperse.com
  • gin.mapdiv.net
  • gip.driverdiv.net
  • gir.driveropti.net
  • gld.pathticket.net
  • jdt.drivetool.net
  • jgp.makejava.net
  • jgs.prediv.net
  • jsf.jsticket.net
  • lkb.yardarmsweatermothy.com
  • luu.lightquartrate.com
  • nel.dosection.net
  • nll.coupecranklest.com
  • nsl.mapticket.net
  • www.usertube.com
  • yxo.warmportrait.com

So, how do you remove nsl.mapticket.net from your browser? On the machine where nsl.mapticket.net showed up in the status bar I had BlockAndSurf, TinyWallet and BrowserWarden installed. I removed them with FreeFixer and that stopped the web browser from loading data from nsl.mapticket.net.

It seems as nsl.mapticket.net has been getting a lot of traffic, but it has dropped significantly recently, based on Alexa’s traffic rank:

mapticket.net traffic

The problem with status bar messages such as this one is that it can be caused by many variants of adware. This makes it impossible to say exactly what you need to remove to stop the status bar messages.

Anyway, here’s my suggestion for the nsl.mapticket.net removal:

  1. Review what programs you have installed in the Add/Remove programs dialog in the Windows Control Panel. Do you see anything that you don’t remember installing or that was recently installed?
  2. You can also review the browser add-ons. Same thing here, do you see something that you don’t remember installing?
  3. If that didn’t solve the problem, you can give FreeFixer a try. FreeFixer is built to assist users when manually tracking down adware and other types of unwanted software. It is a freeware utility that I’ve been working since 2006 and it scans your system at lots of locations where unwanted software is known to hook into your computer. If you would like to get additional details about a file in FreeFixer’s scan result, you can just click the More Info link for that file and a web page with a VirusTotal report will open up, which can be very useful to determine if the file is safe or malware:

    FreeFixer More Info link example
    An example of FreeFixer’s “More Info” links. Click for full size.

Did you find any adware on your machine? Did that stop nsl.mapticket.net? Please post the name of the adware you uninstalled from your machine in the comment below.

Thank you!

Remove ourstaticdatastorage.com from Firefox, Chrome and Internet Explorer

This page shows how to remove ourstaticdatastorage.com from Mozilla Firefox, Google Chrome and Internet Explorer.

Did you just see app.ourstaticdatastorage.com or logs.ourstaticdatastorage.com in the status bar of your browser and wonder where it came from? Or did ourstaticdatastorage.com show up while you search for something on one of the big search engines, such as the Google.com search engine?

Here is how the ourstaticdatastorage.com looked in my network log:

ourstaticdatastorage.com connection

I got this while doing a search at Google.

Here are some of the status bar messages you may see in your browser’s status bar:

  • Waiting for ourstaticdatastorage.com…
  • Transferring data from ourstaticdatastorage.com…
  • Looking up ourstaticdatastorage.com…
  • Read ourstaticdatastorage.com
  • Connected to ourstaticdatastorage.com…

If this description sounds like what you are seeing, you probably have some potentially unwanted program installed on your computer that makes the ourstaticdatastorage.com domain appear in your browser. Don’t blame the people that runs the site you were at when you first spotted ourstaticdatastorage.com in the status bar. They are probably not responsible, but from the potentially unwanted program that’s installed on your machine. I’ll try help you with the ourstaticdatastorage.com removal in this blog post.

Those that have been reading this blog already know this, but here we go: Not long ago I dedicated some of my lab computers and purposely installed a few potentially unwanted programs on them. Since then I have been monitoring the actions on these computers to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the potentially unwanted program updates itself, or if it downloads and installs additional potentially unwanted programs on the computers. I first noticed the ourstaticdatastorage.com in Mozilla Firefox’s status bar on one of these lab machines.

ourstaticdatastorage.com was created on 2014-02-18. app.ourstaticdatastorage.com resolves to the 69.16.175.10 IP address and ourstaticdatastorage.com to 208.109.4.201. logs.ourstaticdatastorage.com resolves 69.16.175.4.

Update 2015-03-19: Found another subdomain called js.ourstaticdatastorage.com.

Update 2015-03-28: Found another subdomain: stats.ourstaticdatastorage.com.

So, how do you remove ourstaticdatastorage.com from your browser? On the machine where ourstaticdatastorage.com showed up in the status bar I had TornTV installed. I removed it with FreeFixer and that stopped the browser from loading data from ourstaticdatastorage.com.

The issue with statusbar messages like this one is that it can be caused by many variants of potentially unwanted programs, not just the potentially unwanted program on my computer. This makes it impossible to say exactly what you need to remove to stop the status bar messages.

To remove ourstaticdatastorage.com you need to check your computer for potentially unwanted programs and uninstall them. Here’s my suggested removal procedure:

The first thing I would do to remove ourstaticdatastorage.com is to examine the programs installed on the machine, by opening the “Uninstall programs” dialog. You can open this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows Operating System you can just type in “uninstall” in the Control Panel’s search field to find that dialog:
Uninstall a program search

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:
Uninstall a program dialog

Do you see something strange-looking in there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if something was installed about the same time as you started observing the ourstaticdatastorage.com status bar messages.

The next thing to check would be your web browser’s add-ons. Potentially unwanted program often appear under the add-ons dialog in Google Chrome, Mozilla Firefox, Internet Explorer or Safari. Is there anything that looks suspicious? Something that you don’t remember installing?
Firefox add-ons manager

I think you will be able to track down and uninstall the potentially unwanted program with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the potentially unwanted program. FreeFixer is a freeware tool that I’ve developed since 2006. Freefixer is a tool built to manually identify and uninstall unwanted software. When you’ve found the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not locked like many other removal tools out there. It will not require you to pay for the program just when you are about to remove the unwanted files.

And if you’re having problems figuring out if a file is safe or potentially unwanted in the FreeFixer scan result, click on the More Info link for the file. That will open up your browser with a page which contains additional information about the file. On that web page, check out the VirusTotal report which can be very useful:

FreeFixer More Info link example
An example of FreeFixer’s “More Info” links. Click for full size.

Did you find any potentially unwanted program on your machine? Did that stop ourstaticdatastorage.com? Please post the name of the potentially unwanted program you uninstalled from your machine in the comment below.

Thank you!

Remove d2a8a4q9.ssl.hwcdn.net From Your Browser

This page shows how to remove d2a8a4q9.ssl.hwcdn.net from Mozilla Firefox, Google Chrome and Internet Explorer.

d2a8a4q9.ssl.hwcdn.net status bar

Does this sound like your story? You see d2a8a4q9.ssl.hwcdn.net in your browser’s status bar while browsing at sites that commonly don’t load any content from third party domains. Perhaps the d2a8a4q9.ssl.hwcdn.net domain appear when performing a search at the Google search engine?

Here’s how the d2a8a4q9.ssl.hwcdn.net connection when I got it in the network log on my computer, while searching at Google:

d2a8a4q9.ssl.hwcdn.net connection

Here are some of the status bar messages you may see in your browser’s status bar:

  • Waiting for d2a8a4q9.ssl.hwcdn.net…
  • Transferring data from d2a8a4q9.ssl.hwcdn.net…
  • Looking up d2a8a4q9.ssl.hwcdn.net…
  • Read d2a8a4q9.ssl.hwcdn.net
  • Connected to d2a8a4q9.ssl.hwcdn.net…

Does this sound like what you see your system, you presumably have some potentially unwanted program installed on your computer that makes the d2a8a4q9.ssl.hwcdn.net domain appear in your browser. So there’s no idea contacting the owner of the site you currently were browsing. The d2a8a4q9.ssl.hwcdn.net status bar messages are not coming from them. I’ll try help you with the d2a8a4q9.ssl.hwcdn.net removal in this blog post.

If you have been visiting this blog already know this, but if you are new: Some time ago I dedicated a few of my lab computers and knowingly installed some potentially unwanted programs on them. I’ve been tracking the actions on these systems to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the potentially unwanted program auto-updates, or if it downloads and installs additional potentially unwanted programs on the machines. I first found the d2a8a4q9.ssl.hwcdn.net in Mozilla Firefox’s status bar on one of these lab computers.

d2a8a4q9.ssl.hwcdn.net resolves to 205.185.208.11.

So, how do you remove d2a8a4q9.ssl.hwcdn.net from your browser? On the machine where d2a8a4q9.ssl.hwcdn.net showed up in the statusbar I had GamesDesktop, istartsurf, MedPlayerNewVersion and Movie Wizard installed. I removed them with FreeFixer and that stopped the browser from loading data from d2a8a4q9.ssl.hwcdn.net.

The issue with statusbar messages like the one described in this blog post is that it can be caused by many variants of potentially unwanted programs, not just the potentially unwanted program on my computer. This makes it impossible to say exactly what you need to remove to stop the statusbar messages.

Anyway, here’s my suggestion for the d2a8a4q9.ssl.hwcdn.net removal:

  1. What software do you have installed if you look in the Add/Remove programs dialog in the Windows Control Panel? Something that you don’t remember installing yourself or that was recently installed?
  2. You can also examine the browser add-ons. Same thing here, do you see anything that you don’t remember installing?
  3. If that didn’t solve the problem, I’d recommend a scan with FreeFixer to manually track down the potentially unwanted program. FreeFixer is a freeware tool that I’m working on that scans your computer at lots of locations, such as browser add-ons, processes, Windows services, recently modified files, etc. If you want to get additional details about a file in the scan result, you can click the More Info link for that file and a web page will open up with a VirusTotal report which will be very useful to determine if the file is safe or malware:

    FreeFixer More Info link example
    An example of FreeFixer’s “More Info” links. Click for full size.

Did this blog post help you to remove d2a8a4q9.ssl.hwcdn.net? Please let me know or how I can improve this blog post.

Thank you!

Remove god.driverjs.net From Chrome, Firefox and Internet Explorer

This page shows how to remove god.driverjs.net from Mozilla Firefox, Google Chrome and Internet Explorer.

Does this sound like what you are seeing right now? You see god.driverjs.net in your web browser’s status bar while browsing at websites that typically don’t load any content from third party domains. Perhaps the god.driverjs.net domain appear when performing a search at the Google search engine?

Here is how the god.driverjs.net status bar message looked like on my computer while I was doing a Google search:

god.driverjs.net status bar

The following are some of the status bar messages you may see in your browser’s status bar:

  • Waiting for god.driverjs.net…
  • Transferring data from god.driverjs.net…
  • Looking up god.driverjs.net…
  • Read god.driverjs.net
  • Connected to god.driverjs.net…

If this sounds like what you are seeing on your system, you probably have some adware installed on your machine that makes the god.driverjs.net domain appear in your web browser. So there’s no use contacting the owner of the site you were browsing. The god.driverjs.net status bar messages are not coming from them. I’ll do my best to help you remove the god.driverjs.net message in this blog post.

Those that have been following this blog already know this, but here we go: Not long ago I dedicated a few of my lab machines and wilfully installed a few adware programs on them. Since then I have been monitoring the actions on these machines to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the adware updates itself automatically, or if it installs additional unwanted software on the machines. I first found the god.driverjs.net in Mozilla Firefox’s status bar on one of these lab computers.

god.driverjs.net resolves to the 208.43.241.241 IP address. god.driverjs.net was created on 2013-06-26.

So, how do you remove god.driverjs.net from your browser? On the machine where god.driverjs.net showed up in the status bar I had TinyWallet, BlockAndSurf and BrowserWarden installed. I removed them with FreeFixer and that stopped the browser from loading data from god.driverjs.net.

The problem with statusbar messages such as this one is that it can be caused by many variants of adware. This makes it impossible to say exactly what you need to remove to stop the status bar messages.

Anyway, here’s my suggestion for the god.driverjs.net removal:

  1. Examine what programs you have installed in the Add/Remove programs dialog in the Windows Control Panel. Do you see something that you don’t remember installing or that was recently installed?
  2. How about your browser add-ons. Anything in the list that you don’t remember installing?
  3. If that did not help, you can give FreeFixer a try. FreeFixer is built to assist users when manually tracking down adware and other types of unwanted software. It is a freeware utility that I’ve been working since 2006 and it scans your machine at lots of locations where unwanted software is known to hook into your computer. If you would like to get additional details about a file in FreeFixer’s scan result, you can just click the More Info link for that file and a web page with a VirusTotal report will open up, which can be very useful to determine if the file is safe or malware:

    FreeFixer More Info link example
    An example of FreeFixer’s “More Info” links. Click for full size.

Did this blog post help you to remove god.driverjs.net? Please let me know or how I can improve this blog post.

Thank you!

ajax.googleapis.com – Open-Source JavaScript Libraries Hosted By Google

Do you see some of the following messages about ajax.googleapis.com in the status bar of Firefox, Chrome or Internet Explorer while visiting a web site?

Waiting for ajax.googleapis.com...

  • Waiting for ajax.googleapis.com…
  • Transferring data from ajax.googleapis.com…
  • Looking up ajax.googleapis.com…
  • Read ajax.googleapis.com
  • Connected to ajax.googleapis.com…

You are seeing those status messages in your browser because the web site you visited is using one of the Google Hosted Libraries.  Google is offering a bunch of open-source JavaScript libraries on a content distribution network.

These script libraries are included by adding the script tag to a web page. For example, here’s how to include jQuery on a web page:

<script src="https://ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js"></script>

Your browser may get stuck for a moment the first time it downloads a library from ajax.googleapis.com. The second time you load the same web page, you should probably not see any delay caused by ajax.googleapis.com, since the browser loads the library code from its local cache.

Thanks for reading!

Remove yaa.blfyuefyset.com From Chrome, Firefox and Internet Explorer

This page shows how to remove yaa.blfyuefyset.com from Mozilla Firefox, Google Chrome and Internet Explorer.

Did you just see yaa.blfyuefyset.com in the status bar or the network log of your web browser and wonder where it came from? Or did yaa.blfyuefyset.com show up while you search for something on one of the major search engines, such as the Google search engine?

Here is how the yaa.blfyuefyset.com connection looked like on my machine when I examined the network log:

yaa.blfyuefyset.com connection

The connection was done while I did a Google search. I’ve noticed that other bloggers say that pop-ups are loaded from this domain, but I have not seen any yet when I tested it. However, there were lots of pop-ups from http://yxo.warmportrait.com.

The following are some of the statusbar messages you may see in your browser’s status bar:

  • Waiting for yaa.blfyuefyset.com…
  • Transferring data from yaa.blfyuefyset.com…
  • Looking up yaa.blfyuefyset.com…
  • Read yaa.blfyuefyset.com
  • Connected to yaa.blfyuefyset.com…

Does this sound like your experience, you probably have some adware installed on your system that makes the yaa.blfyuefyset.com domain appear in your browser. Contacting the site owner would be a waste of time. The yaa.blfyuefyset.com status bar messages are not coming from them. I’ll try help you with the yaa.blfyuefyset.com removal in this blog post.

For those that are new to the blog: Not long ago I dedicated a few of my lab computers and knowingly installed some adware programs on them. I have been monitoring the actions on these machines to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the adware auto-updates, or if it downloads and installs additional unwanted software on the machines. I first found the yaa.blfyuefyset.com in Mozilla Firefox’s status bar on one of these lab machines.

yaa.blfyuefyset.com was registered on 2015-01-05. yaa.blfyuefyset.com resolves to the 5.153.38.134 IP address. The domain is protected by WHOISGUARD, INC.

So, how do you remove yaa.blfyuefyset.com from your web browser? On the machine where yaa.blfyuefyset.com showed up in the status bar I had CheckMeUp installed. I removed it with FreeFixer and that stopped the browser from loading data from yaa.blfyuefyset.com.

The yaa.blfyuefyset.com domain is attracting quite a lot of traffic, just check out the Alexa traffic rank:

blfyuefyset.com traffic rank

The issue with this type of status bar message is that it can be caused by many variants of adware, not just the adware running on my computer. I think that adware such as SaferSurf, NewPlayer, BlockAndSurf and SpeedCheck can also be responsible for yaa.blfyuefyset.com appearing in the browser. And there are probably other variants too. This makes it impossible to say exactly what you need to remove to stop the status bar messages.

To remove yaa.blfyuefyset.com you need to examine your machine for adware or other types of unwanted software and uninstall it. Here’s my suggested removal procedure:

  1. What software do you have installed if you look in the Add/Remove programs dialog in the Windows Control Panel? Something that you don’t remember installing yourself or that was recently installed?
  2. You can also check the web browser add-ons. Same thing here, do you see something that you don’t remember installing?
  3. If that does not help, I’d recommend a scan with FreeFixer to manually track down the adware. FreeFixer is a freeware tool that I’m working on that scans your computer at lots of locations, such as web browser add-ons, processes, Windows services, recently modified files, etc. If you want to get additional details about a file in the scan result, you can click the More Info link for that file and a web page will open up with a VirusTotal report which will be very useful to determine if the file is safe or malware:

    FreeFixer More Info link example
    An example of FreeFixer’s “More Info” links. Click for full size.

Did you find any adware on your machine? Did that stop yaa.blfyuefyset.com? Please post the name of the adware you uninstalled from your machine in the comment below.

Thank you!

Remove w9u6a2p6.ssl.hwcdn.net from Firefox, Chrome and Internet Explorer

This page shows how to remove w9u6a2p6.ssl.hwcdn.net from Mozilla Firefox, Google Chrome and Internet Explorer.

Did you just see w9u6a2p6.ssl.hwcdn.net in the status bar of your browser and ponder where it came from? Or did w9u6a2p6.ssl.hwcdn.net show up while you search for something on one of the major search engines, such as the Google.com search engine?

Here is how the w9u6a2p6.ssl.hwcdn.net connection looked like in the network log, while I did a Google search on my computer:

w9u6a2p6.ssl.hwcdn.net connection

The full url is https://w9u6a2p6.ssl.hwcdn.net/plugin/ff/update/71819.rdf

Here are some of the status bar messages you may see in your browser’s status bar:

  • Waiting for w9u6a2p6.ssl.hwcdn.net…
  • Transferring data from w9u6a2p6.ssl.hwcdn.net…
  • Looking up w9u6a2p6.ssl.hwcdn.net…
  • Read w9u6a2p6.ssl.hwcdn.net
  • Connected to w9u6a2p6.ssl.hwcdn.net…

If you also see this on your computer, you almost certainly have some potentially unwanted program installed on your computer that makes the w9u6a2p6.ssl.hwcdn.net domain appear in your browser. Don’t blame the people that runs the web site you were at when you first spotted w9u6a2p6.ssl.hwcdn.net in the status bar. They are apparently not responsible, but from the potentially unwanted program that’s running on your system. I’ll try help you with the w9u6a2p6.ssl.hwcdn.net removal in this blog post.

I found w9u6a2p6.ssl.hwcdn.net on one of the lab systems where I have some potentially unwanted programs running. I’ve talked about this in some of the previous blog posts. The potentially unwanted programs was installed on purpose, and from time to time I check if something new has appeared, such as pop-up windows, new tabs in the web browsers, injected ads on web site that usually don’t show ads, or if some new files have been saved to the hard-drive.

w9u6a2p6.ssl.hwcdn.net resolves to 205.185.208.11.

So, how do you remove w9u6a2p6.ssl.hwcdn.net from your browser? On the machine where w9u6a2p6.ssl.hwcdn.net showed up in the status bar I had GamesDesktop, istartsurf, MedPlayerNewVersion and Movie Wizard installed. I removed them with FreeFixer and that stopped the browser from loading data from w9u6a2p6.ssl.hwcdn.net.

The issue with status bar messages like the one described in this blog post is that it can be caused by many variants of potentially unwanted programs, not just the potentially unwanted program on my computer. This makes it impossible to say exactly what you need to remove to stop the status bar messages.

Anyway, here’s my suggestion for the w9u6a2p6.ssl.hwcdn.net removal:

  1. Check what programs you have installed in the Add/Remove programs dialog in the Windows Control Panel. Do you see something that you don’t remember installing or that was recently installed?
  2. How about your add-ons you installed in Mozilla Firefox, Google Chrome, Internet Explorer or Safari. Anything in the list that you don’t remember installing?
  3. If that didn’t solve the problem, you can give FreeFixer a try. FreeFixer is built to assist users when manually tracking down potentially unwanted programs. It is a freeware utility that I’ve been working since 2006 and it scans your machine at lots of locations where unwanted software is known to hook into your machine. If you would like to get additional details about a file in FreeFixer’s scan result, you can just click the More Info link for that file and a web page with a VirusTotal report will open up, which can be very useful to determine if the file is safe or malware:

    FreeFixer More Info link example
    An example of FreeFixer’s “More Info” links. Click for full size.

Did you find any potentially unwanted program on your machine? Did that stop w9u6a2p6.ssl.hwcdn.net? Please post the name of the potentially unwanted program you uninstalled from your machine in the comment below.

Thank you!

staticclientstorage.com – What Is It and How To Remove It

If you see connections to staticclientstorage.com in your network log, it’s possible you have some potentially unwanted software running on your machine.

app.staticclientstorage.com connection

 

These are the subdomains I’ve seen:

  • app.staticclientstorage.com
  • logs.staticclientstorage.com

To prevent these connections from happening, you need to uninstall the unwanted software. You can do so from the Windows Control Panel or from you browser’s add-ons menu. If that did not help, try a FreeFixer to track down and remove the unwanted software.

Thanks for reading.

Remove jsgnr.datafastguru.info, pstatic.datafastguru.info and app.datafastguru.info

This page shows how to remove jsgnr.datafastguru.info, pstatic.datafastguru.info and app.datafastguru.info from Mozilla Firefox, Google Chrome and Internet Explorer.

Update 2015-03-13: I’ve also spotted the cwbl.datafastguru.info subdomain in use.

Does this sound familiar? You see datafastguru.info in your web browser’s status bar while browsing web sites that normally don’t load any content from third party domains. Perhaps the datafastguru.info domain appear when performing a search at the Google.com search engine?

Here’s a screenshot of jsgnr.datafastguru.info when it showed up on my computer:

jsgnr.datafastguru.info status bar

Datafastguru.info appeared in the Firefox status bar, while I did a search at Google.se.

Here’s a screenshot of app.datafastguru.info:

app.datafastguru.info status bar

Here are some of the status bar messages you may see in your browser’s status bar:

  • Waiting for jsgnr.datafastguru.info…
  • Transferring data from jsgnr.datafastguru.info…
  • Looking up jsgnr.datafastguru.info…
  • Read jsgnr.datafastguru.info
  • Connected to jsgnr.datafastguru.info…

Does this sound like what you see on your system, you most likely have some adware installed on your system that makes the jsgnr.datafastguru.info domain appear in your web browser. There’s no use contacting the owners of the site you currently were browsing. The jsgnr.datafastguru.info status bar messages are not coming from them. I’ll try help you to remove the jsgnr.datafastguru.info status bar messages in this blog post.

I found jsgnr.datafastguru.info on one of the lab machines where I have some adware running. I’ve talked about this in some of the previous blog posts. The adware was installed on purpose, and from time to time I check if something new has appeared, such as pop-up windows, new tabs in the browsers, injected ads on website that usually don’t show ads, or if some new files have been saved to the hard-drive.

datafastguru.info was registered on 2013-08-14 and is protected by WhoisProtectService.net. jsgnr.datafastguru.info resolves to the 69.16.175.10 IP address and pstatic.datafastguru.info to 69.16.175.42. app.datafastguru.info resolves to the 54.186.138.39 host.

So, how do you remove jsgnr.datafastguru.info from your browser? On the machine where jsgnr.datafastguru.info showed up in the statusbar I had TinyWallet, BlockAndSurf and BrowserWarden installed. I removed them with FreeFixer and that stopped the browser from loading data from jsgnr.datafastguru.info.

If you are wondering if there are many others out seeing jsgnr.datafastguru.info in the browser, the answer is probably yes. Check out the traffic rank from Alexa:

datafastguru.info

The issue with status bar messages such as this one is that it can be caused by many variants of adware, not just the adware on my computer. This makes it impossible to say exactly what you need to remove to stop the status bar messages.

So, what can be done? To remove jsgnr.datafastguru.info you need to check your system for adware or other types of unwanted software and uninstall it. Here’s my suggested removal procedure:

The first thing I would do to remove jsgnr.datafastguru.info is to examine the software installed on the machine, by opening the “Uninstall programs” dialog. You can open this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows you can just type in “uninstall” in the Control Panel’s search field to find that dialog:
Uninstall a program search

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:
Uninstall a program dialog

Do you see something strange-looking listed there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if some program was installed about the same time as you started observing the jsgnr.datafastguru.info statusbar messages.

Then I would check the web browser add-ons. Adware often appear under the add-ons menu in Mozilla Firefox, Google Chrome, Internet Explorer or Safari. Is there anything that looks suspicious? Something that you don’t remember installing?
Firefox add-ons manager

I think you will be able to track down and uninstall the adware with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the adware. FreeFixer is a freeware tool that I started develop many years ago. Freefixer is a tool designed to manually identify and remove unwanted software. When you’ve identified the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not crippled like many other removal tools out there. It won’t require you to pay a fee just when you are about to remove the unwanted files.

And if you’re having problems figuring out if a file is legit or malware in the FreeFixer scan result, click on the More Info link for the file. That will open up your browser with a page which contains more details about the file. On that web page, check out the VirusTotal report which can be quite useful:

FreeFixer More Info link example
An example of FreeFixer’s “More Info” links. Click for full size.

Did this blog post help you to remove jsgnr.datafastguru.info? Please let me know or how I can improve this blog post.

Thank you!

Remove i_spigpcjs_info.tlscdn.com from Firefox, Chrome and Internet Explorer.

This page shows how to remove i_spigpcjs_info.tlscdn.com from Mozilla Firefox, Google Chrome and Internet Explorer.

Did you just see i_spigpcjs_info.tlscdn.com in the status bar of your browser and wonder where it came from? Or did i_spigpcjs_info.tlscdn.com show up while you search for something on one of the major search engines, such as the Google search engine?

Here’s how the i_spigpcjs_info.tlscdn.com connection looked in the network log when I got it on my computer:

i_spigpcjs_info.tlscdn.com connection

The following are some of the statusbar messages you may see in your browser’s status bar:

  • Waiting for i_spigpcjs_info.tlscdn.com…
  • Transferring data from i_spigpcjs_info.tlscdn.com…
  • Looking up i_spigpcjs_info.tlscdn.com…
  • Read i_spigpcjs_info.tlscdn.com
  • Connected to i_spigpcjs_info.tlscdn.com…

If you also see this on your machine, you probably have some potentially unwanted program installed on your machine that makes the i_spigpcjs_info.tlscdn.com domain appear in your browser. Contacting the owner of the site you were browsing would be a waste of time. They are not responsible for the i_spigpcjs_info.tlscdn.com status bar messages. I’ll try help you to remove the i_spigpcjs_info.tlscdn.com status bar messages in this blog post.

Those that have been spending some time on this blog already know this, but here we go: Recently I dedicated some of my lab systems and intentionally installed a few potentially unwanted programs on them. I have been monitoring the behaviour on these machines to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the potentially unwanted program updates itself automatically, or if it downloads and installs additional potentially unwanted programs on the computers. I first noticed the i_spigpcjs_info.tlscdn.com in ‘s status bar on one of these lab machines.

So, how do you remove i_spigpcjs_info.tlscdn.com from your web browser? On the machine where i_spigpcjs_info.tlscdn.com showed up in the status bar I had EBay Shopping Assistant 2.2, Start Page 2.7, Browser Extensions, Search Protection and Slick Savings 3.6 installed. Unfortunately I don’t know which one of them was responsible for the connection. I removed them with FreeFixer and that stopped the browser from loading data from i_spigpcjs_info.tlscdn.com.

Anyway, here’s my suggestion for the i_spigpcjs_info.tlscdn.com removal:

The first thing I would do to remove i_spigpcjs_info.tlscdn.com is to examine the programs installed on the machine, by opening the “Uninstall programs” dialog. You can open this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows OS you can just type in “uninstall” in the Control Panel’s search field to find that dialog:
Uninstall a program search

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:
Uninstall a program dialog

Do you see something strange-looking in there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if some program was installed approximately about the same time as you started observing the i_spigpcjs_info.tlscdn.com status bar messages.

The next thing to check would be your browser’s add-ons. Potentially unwanted program often appear under the add-ons menu in Google Chrome, Mozilla Firefox, Internet Explorer, Safari or Opera. Is there anything that looks suspicious? Something that you don’t remember installing?
Firefox add-ons manager

I think you will be able to find and remove the potentially unwanted program with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the potentially unwanted program. FreeFixer is a freeware tool that I started develop many years ago. It’s a tool designed to manually identify and uninstall unwanted software. When you’ve found the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not locked down like many other removal tools out there. It will not require you to purchase the program just when you are about to remove the unwanted files.

And if you’re having problems deciding if a file is safe or potentially unwanted in the FreeFixer scan result, click on the More Info link for the file. That will open up your browser with a page which contains more details about the file. On that web page, check out the VirusTotal report which can be quite useful:

FreeFixer More Info link example
An example of FreeFixer’s “More Info” links. Click for full size.

Did this blog post help you to remove i_spigpcjs_info.tlscdn.com? Please let me know or how I can improve this blog post.

Thank you!