Category Archives: browser status bar

Remove static.dreamsadnetwork.com from Firefox, Chrome and Internet Explorer

This page shows how to remove static.dreamsadnetwork.com from Mozilla Firefox, Google Chrome and Internet Explorer.

Did you just see static.dreamsadnetwork.com in the status bar of your web browser and ask yourself where it came from? Or did static.dreamsadnetwork.com show up while you search for something on one of the major search engines, such as the Google search engine?

Here are some of the status bar messages you may see in your browser’s status bar:

  • Waiting for static.dreamsadnetwork.com…
  • Transferring data from static.dreamsadnetwork.com…
  • Looking up static.dreamsadnetwork.com…
  • Read static.dreamsadnetwork.com
  • Connected to static.dreamsadnetwork.com…

Does this sound like what you are seeing, you presumably have some potentially unwanted program installed on your machine that makes the static.dreamsadnetwork.com domain appear in your browser. So don’t blame the people that runs the website you were at when you first spotted static.dreamsadnetwork.com in the status bar. They are almost certainly not responsible, but from the potentially unwanted program that’s installed on your system. I’ll try help you with the static.dreamsadnetwork.com removal in this blog post.

I found static.dreamsadnetwork.com on one of the lab machines where I have some potentially unwanted programs running. I’ve talked about this in some of the previous blog posts. The potentially unwanted programs was installed on purpose, and from time to time I check if anything new has appeared, such as pop-up windows, new tabs in the browsers, injected ads on website that usually don’t show ads, or if some new files have been saved to the hard-drive. dreamsadnetwork.com appeared in my network log while I did a search at Google.

static.dreamsadnetwork.com resolves to 69.28.58.33. static.dreamsadnetwork.com was created on 2013-08-29.

So, how do you remove static.dreamsadnetwork.com from your browser? On the machine where static.dreamsadnetwork.com showed up in the statusbar I had WebWaltz, YTDownloader, SpeedChecker and PriceFountain installed. I removed them with FreeFixer and that stopped the browser from loading data from static.dreamsadnetwork.com.

The issue with statusbar messages such as this one is that it can be caused by many variants of potentially unwanted programs, not just the potentially unwanted program on my system. This makes it impossible to say exactly what you need to remove to stop the status bar messages.

Anyway, here’s my suggestion for the static.dreamsadnetwork.com removal:

  1. Check what programs you have installed in the Add/Remove programs dialog in the Windows Control Panel. Do you see something that you don’t remember installing or that was recently installed?
  2. How about your add-ons you have in your web browsers. Anything in the list that you don’t remember installing?
  3. If that does not help, I’d recommend a scan with FreeFixer to manually track down the potentially unwanted program. FreeFixer is a freeware tool that I’m working on that scans your computer at lots of locations, such as browser add-ons, processes, Windows services, recently modified files, etc. If you want to get additional details about a file in the scan result, you can click the More Info link for that file and a web page will open up with a VirusTotal report which will be very useful to determine if the file is safe or malware:

    FreeFixer More Info link example
    An example of FreeFixer’s “More Info” links. Click for full size.

Did you find any potentially unwanted program on your machine? Did that stop static.dreamsadnetwork.com? Please post the name of the potentially unwanted program you uninstalled from your machine in the comment below.

Thank you!

Remove js.ourstatsstaticstack.com From Firefox, Chrome and Internet Explorer

This page shows how to remove js.ourstatsstaticstack.com from Mozilla Firefox, Google Chrome and Internet Explorer.

Sound familiar? You see js.ourstatsstaticstack.com in your browser’s status bar or in the network log while browsing sites that usually don’t load any content from third party domains. Maybe the js.ourstatsstaticstack.com domain appear when performing a search at the Google search engine?

Here’s how the js.ourstatsstaticstack.com connection looked like when I got it in the network log on my computer:

js.ourstatsstaticstack.com connection

The following are some of the status bar messages you may see in your browser’s status bar:

  • Waiting for js.ourstatsstaticstack.com…
  • Transferring data from js.ourstatsstaticstack.com…
  • Looking up js.ourstatsstaticstack.com…
  • Read js.ourstatsstaticstack.com
  • Connected to js.ourstatsstaticstack.com…

I’ve also spotted the app.ourstatsstaticstack.com (69.16.175.10), errors.ourstatsstaticstack.com (54.231.33.68) and logs.ourstatsstaticstack.com (69.16.175.10) subdomains.

Does this sound like your computer, you presumably have some potentially unwanted program installed on your machine that makes the js.ourstatsstaticstack.com domain appear in your browser. Contacting the owner for the site you were at would be a waste of time. The js.ourstatsstaticstack.com statusbar messages are not coming from them. I’ll try help you to remove the js.ourstatsstaticstack.com status bar messages in this blog post.

I found js.ourstatsstaticstack.com on one of the lab systems where I have some potentially unwanted programs running. I’ve talked about this in some of the previous blog posts. The potentially unwanted programs was installed on purpose, and from time to time I check if something new has appeared, such as pop-up windows, new tabs in the web browsers, injected ads on site that usually don’t show ads, or if some new files have been saved to the hard-drive.

js.ourstatsstaticstack.com resolves to the 69.16.175.42 address and ourstatsstaticstack.com to 208.109.4.201. js.ourstatsstaticstack.com was created on 2014-02-18.

So, how do you remove js.ourstatsstaticstack.com from your browser? On the machine where js.ourstatsstaticstack.com showed up in the status bar I had TornTV installed. I removed it with FreeFixer and that stopped the browser from loading data from js.ourstatsstaticstack.com.

The problem with this type of status bar message is that it can be caused by many variants of potentially unwanted programs. This makes it impossible to say exactly what you need to remove to stop the status bar messages.

So, what can be done? To remove js.ourstatsstaticstack.com you need to examine your computer for potentially unwanted programs and uninstall them. Here’s my suggested removal procedure:

The first thing I would do to remove js.ourstatsstaticstack.com is to examine the software installed on the machine, by opening the “Uninstall programs” dialog. You can find this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows Operating System you can just type in “uninstall” in the Control Panel’s search field to find that dialog:
Uninstall a program search

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:
Uninstall a program dialog

Do you see something strange-looking listed there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if something was installed about the same time as you started observing the js.ourstatsstaticstack.com status bar messages.

Then you can examine you browser add-ons. Potentially unwanted program often appear under the add-ons dialog in Google Chrome, Mozilla Firefox, Internet Explorer or Safari. Is there anything that looks suspicious? Something that you don’t remember installing?
Firefox add-ons manager

I think most users will be able to identify and remove the potentially unwanted program with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the potentially unwanted program. FreeFixer is a freeware tool that I started develop about 8 years ago. Freefixer is a tool designed to manually track down and uninstall unwanted software. When you’ve tracked down the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not crippled like many other removal tools out there. It won’t require you to pay a fee just when you are about to remove the unwanted files.

And if you’re having troubles deciding if a file is safe or potentially unwanted in FreeFixer’s scan report, click on the More Info link for the file. That will open up your browser with a page which contains more information about the file. On that web page, check out the VirusTotal report which can be quite useful:

FreeFixer More Info link example
An example of FreeFixer’s “More Info” links. Click for full size.

Did this blog post help you to remove js.ourstatsstaticstack.com? Please let me know or how I can improve this blog post.

Thank you!

Remove i.imgur.com Connections Caused By Adware

This page shows how to remove i.imgur.com connections, caused by adware, from Mozilla Firefox, Google Chrome and Internet Explorer.

i.imgur.com status bar

I noticed i.imgur.com in my browser’s status bar when doing a search at Google. Under normal circumstances, a search at Google should not generate a connection to i.imgur.com. If this is what you are experiencing, you may have some adware installed on your machine. More on that later on.

The following are some of the status bar messages you may see in your browser’s status bar:

  • Waiting for i.imgur.com…
  • Transferring data from i.imgur.com…
  • Looking up i.imgur.com…
  • Read i.imgur.com
  • Connected to i.imgur.com…

Those that have been following this blog already know this, but for new visitors: Not long ago I dedicated a few of my lab machines and purposely installed some potentially unwanted programs on them. I have been tracking the behaviour on these computers to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the potentially unwanted program updates itself, or if it downloads and installs additional potentially unwanted programs on the machines. I first found the i.imgur.com in Firefox’s status bar on one of these lab machines.

So, how do you remove i.imgur.com from your web browser? The answer is: By removing the adware from your machine. On the machine where i.imgur.com showed up in the status bar I had an adware called CheckMeUp installed. I removed CheckMeUp with FreeFixer and that stopped the browser from loading data from i.imgur.com.

The problem with statusbar messages like this one is that I think it can be caused by many variants of potentially unwanted programs, not just the CheckMeUp adware on my system. This makes it impossible to say exactly what you need to remove to stop the statusbar messages.

So, what can be done? To remove i.imgur.com you need to check your computer for potentially unwanted programs and uninstall them. Here’s my suggested removal procedure:

The first thing I would do to remove i.imgur.com is to examine the software installed on the machine, by opening the “Uninstall programs” dialog. You can open this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows you can just type in “uninstall” in the Control Panel’s search field to find that dialog:
Uninstall a program search

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:
Uninstall a program dialog

Do you see something suspect in there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if something was installed about the same time as you started seeing the i.imgur.com status bar messages. Do you see CheckMeUp there?

Then you can examine you browser add-ons. Potentially unwanted program often turn up under the add-ons dialog in Mozilla Firefox, Google Chrome, Internet Explorer or Safari. Is there anything that looks suspicious? Something that you don’t remember installing? Is CheckMeUp listed there?
Firefox add-ons manager

I think you will be able to track down and remove the potentially unwanted program with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the potentially unwanted program. FreeFixer is a freeware tool that I started develop about 8 years ago. Freefixer is a tool designed to manually find and uninstall unwanted software. When you’ve identified the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not locked down like many other removal tools out there. It won’t require you to pay a fee just when you are about to remove the unwanted files.

And if you’re having a mess figuring out if a file is legitimate or potentially unwanted in FreeFixer’s scan result, click on the More Info link for the file. That will open up a web page which contains additional details about the file. On that web page, check out the VirusTotal report which can be very useful:

FreeFixer More Info link example
An example of FreeFixer’s “More Info” links. Click for full size.

Did this blog post help you to remove i.imgur.com? Please let me know or how I can improve this blog post.

Thank you!

Remove guy.brifyghfytify.com from Firefox, Chrome and Internet Explorer

This page shows how to remove guy.brifyghfytify.com from Mozilla Firefox, Google Chrome and Internet Explorer.

Did you just see guy.brifyghfytify.com in the status bar of your browser and ask yourself where it came from? Or did guy.brifyghfytify.com show up while you search for something on one of the big search engines, such as the Google.com search engine?

Here is a screen capture on guy.brifyghfytify.com from my machine when it appeared in my network log, while I did a search at the Google search engine:

guy.brifyghfytify.com connection

Here are some of the status bar messages you may see in your browser’s status bar:

  • Waiting for guy.brifyghfytify.com…
  • Transferring data from guy.brifyghfytify.com…
  • Looking up guy.brifyghfytify.com…
  • Read guy.brifyghfytify.com
  • Connected to guy.brifyghfytify.com…

If you also see this on your computer, you probably have some potentially unwanted program installed on your machine that makes the guy.brifyghfytify.com domain appear in your browser. So there’s no use contacting the owner of the site you were browsing. The guy.brifyghfytify.com status bar messages are not coming from them. I’ll do my best to help you with the guy.brifyghfytify.com removal in this blog post.

I found guy.brifyghfytify.com on one of the lab computers where I have some potentially unwanted programs running. I’ve talked about this in some of the previous blog posts. The potentially unwanted programs was installed on purpose, and from time to time I check if something new has appeared, such as pop-up windows, new tabs in the browsers, injected ads on website that usually don’t show ads, or if some new files have been saved to the hard-drive.

guy.brifyghfytify.com resolves to the 5.153.38.134 IP address. guy.brifyghfytify.com was created on 2015-01-05. The domain is protected by WhoisGuard INC.

So, how do you remove guy.brifyghfytify.com from your browser? On the machine where guy.brifyghfytify.com showed up in the status bar I had TinyWallet, BrowserWarden and BlockAndSurf installed. I removed them with FreeFixer and that stopped the browser from loading data from guy.brifyghfytify.com.

The bad news with this type of status bar message is that it can be caused by many variants of potentially unwanted programs, not just the potentially unwanted program on my system. This makes it impossible to say exactly what you need to remove to stop the statusbar messages.

So, what can be done to solve the problem? To remove guy.brifyghfytify.com you need to review your system for potentially unwanted programs and uninstall them. Here’s my suggested removal procedure:

The first thing I would do to remove guy.brifyghfytify.com is to examine the programs installed on the machine, by opening the “Uninstall programs” dialog. You can reach this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows you can just type in “uninstall” in the Control Panel’s search field to find that dialog:
Uninstall a program search

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:
Uninstall a program dialog

Do you see something dubious listed there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if something was installed about the same time as you started seeing the guy.brifyghfytify.com status bar messages.

The next thing to check would be your web browser’s add-ons. Potentially unwanted program often appear under the add-ons menu in Mozilla Firefox, Google Chrome, Internet Explorer or Safari. Is there anything that looks suspicious? Anything that you don’t remember installing?
Firefox add-ons manager

I think most users will be able to find and uninstall the potentially unwanted program with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the potentially unwanted program. FreeFixer is a freeware tool that I started develop about 8 years ago. It’s a tool built to manually find and remove unwanted software. When you’ve identified the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not locked down like many other removal tools out there. It will not require you to pay a fee just when you are about to remove the unwanted files.

And if you’re having a hard time determining if a file is clean or potentially unwanted in FreeFixer’s scan result, click on the More Info link for the file. That will open up a web page which contains more details about the file. On that web page, check out the VirusTotal report which can be quite useful:

FreeFixer More Info link example
An example of FreeFixer’s “More Info” links. Click for full size.

Did you find any potentially unwanted program on your machine? Did that stop guy.brifyghfytify.com? Please post the name of the potentially unwanted program you uninstalled from your machine in the comment below.

Thank you!

Remove foxi69.tlscdn.com from Firefox, Chrome and Internet Explorer

This page shows how to remove foxi69.tlscdn.com from Mozilla Firefox, Google Chrome and Internet Explorer.

Did you just see foxi69.tlscdn.com in the statusbar of your browser and wonder where it came from? Or did foxi69.tlscdn.com show up while you search for something on one of the major search engines, such as the Google.com search engine?

Here are some of the status bar messages you may see in your browser’s status bar:

  • Waiting for foxi69.tlscdn.com…
  • Transferring data from foxi69.tlscdn.com…
  • Looking up foxi69.tlscdn.com…
  • Read foxi69.tlscdn.com
  • Connected to foxi69.tlscdn.com…

If this sounds like what you are seeing on your computer, you probably have some potentially unwanted program installed on your computer that makes the foxi69.tlscdn.com domain appear in your browser. So there’s no use contacting the owner of the site you were browsing. The foxi69.tlscdn.com status bar messages are not coming from them. I’ll do my best to help you remove the foxi69.tlscdn.com message in this blog post.

I found foxi69.tlscdn.com on one of the lab machines where I have some potentially unwanted programs running. I’ve talked about this in some of the previous blog posts. The potentially unwanted programs was installed on purpose, and from time to time I check if something new has appeared, such as pop-up windows, new tabs in the browsers, injected ads on web site that usually don’t show ads, or if some new files have been saved to the hard-drive.

foxi69.tlscdn.com resolves to the 198.7.58.94 IP address.

So, how do you remove foxi69.tlscdn.com from your web browser? On the machine where foxi69.tlscdn.com showed up in the status bar I had TinyWallet, BlockAndSurf and BrowserWarden installed. I removed them with FreeFixer and that stopped the browser from loading data from foxi69.tlscdn.com.

The issue with status bar messages such as this one is that it can be caused by many variants of potentially unwanted programs, not just the potentially unwanted program on my computer. This makes it impossible to say exactly what you need to remove to stop the status bar messages.

To remove foxi69.tlscdn.com you need to examine your system for potentially unwanted programs and uninstall them. Here’s my suggested removal procedure:

  1. Check what programs you have installed in the Add/Remove programs dialog in the Windows Control Panel. Do you see something that you don’t remember installing or that was recently installed?
  2. You can also review the add-ons you installed in your browsers. Same thing here, do you see something that you don’t remember installing?
  3. If that didn’t help, you can give FreeFixer a try. FreeFixer is built to assist users when manually tracking down potentially unwanted programs. It is a freeware utility that I’ve been working since 2006 and it scans your computer at lots of locations where unwanted software is known to hook into your computer. If you would like to get additional details about a file in FreeFixer’s scan result, you can just click the More Info link for that file and a web page with a VirusTotal report will open up, which can be very useful to determine if the file is safe or malware:

    FreeFixer More Info link example
    An example of FreeFixer’s “More Info” links. Click for full size.

Did you find any potentially unwanted program on your machine? Did that stop foxi69.tlscdn.com? Please post the name of the potentially unwanted program you uninstalled from your machine in the comment below.

Thank you!

Remove api.crtinv.com From Chrome, Firefox and Internet Explorer

This page shows how to remove api.crtinv.com from Mozilla Firefox, Google Chrome and Internet Explorer.

Did you just interrupt your work because you noticed a connection api.crtinv.com in your browser?

Here is how the api.crtinv.com showed up in my network log on my computer:

api.crtinv.com connection

The crtinv.com connection appeared while I did a Google search.

Here are some of the status bar messages you may see in your browser’s status bar:

  • Waiting for api.crtinv.com…
  • Transferring data from api.crtinv.com…
  • Looking up api.crtinv.com…
  • Read api.crtinv.com
  • Connected to api.crtinv.com…

Does this sound like what you see your system, you almost certainly have some adware installed on your computer that makes the api.crtinv.com domain appear in your web browser. So there’s no idea contacting the owner of the site you currently were browsing. The api.crtinv.com status bar notifications are not coming from them. I’ll do my best to help you remove the api.crtinv.com message in this blog post.

I found api.crtinv.com on one of the lab computers where I have some adware running. I’ve talked about this in some of the previous blog posts. The adware was installed on purpose, and from time to time I check if something new has appeared, such as pop-up windows, new tabs in the browsers, injected ads on website that usually don’t show ads, or if some new files have been saved to the hard-drive.

Both api.crtinv.com and crtinv.com resolve to the 8.25.35.149 IP address. Domains By Proxy LLC protects the information about the owner.

So, how do you remove api.crtinv.com from your web browser? On the machine where api.crtinv.com showed up in the status bar I had Taplika and Clock Hand installed. I removed them with FreeFixer and that stopped the browser from loading data from api.crtinv.com.

The problem with this type of status bar message is that it can be caused by many variants of adware. This makes it impossible to say exactly what you need to remove to stop the status bar messages.

Anyway, here’s my suggestion for the api.crtinv.com removal:

The first thing I would do to remove api.crtinv.com is to examine the programs installed on the machine, by opening the “Uninstall programs” dialog. You can open this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows you can just type in “uninstall” in the Control Panel’s search field to find that dialog:
Uninstall a program search

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:
Uninstall a program dialog

Do you see something suspicious in there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if something was installed approximately about the same time as you started observing the api.crtinv.com status bar messages.

The next thing to check would be your browser’s add-ons. Adware often appear under the add-ons dialog in Mozilla Firefox, Google Chrome, Internet Explorer or Safari. Is there anything that looks suspicious? Something that you don’t remember installing?
Firefox add-ons manager

I think you will be able to track down and uninstall the adware with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the adware. FreeFixer is a freeware tool that I started develop about 8 years ago. Freefixer is a tool built to manually find and remove unwanted software. When you’ve found the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not locked like many other removal tools out there. It won’t require you to pay a fee just when you are about to remove the unwanted files.

And if you’re having issues deciding if a file is legit or adware in the FreeFixer scan report, click on the More Info link for the file. That will open up a web page which contains more details about the file. On that web page, check out the VirusTotal report which can be quite useful:

FreeFixer More Info link example
An example of FreeFixer’s “More Info” links. Click for full size.

Did this blog post help you to remove api.crtinv.com? Please let me know or how I can improve this blog post.

Thank you!

Remove ply.wayreview.com From Your Browser

This page shows how to remove ply.wayreview.com from Mozilla Firefox, Google Chrome and Internet Explorer.

Sound familiar? You see ply.wayreview.com in your web browser’s status bar while browsing sites that generally don’t load any content from third party domains. Maybe the ply.wayreview.com domain show up when performing a search at the Google.com search engine?

Here is how the ply.wayreview.com statusbar message looked like on my computer. It appeared while searching on Google:

ply.wayreview.com statusbar

Here are some of the status bar messages you may see in your browser’s status bar:

  • Waiting for ply.wayreview.com…
  • Transferring data from ply.wayreview.com…
  • Looking up ply.wayreview.com…
  • Read ply.wayreview.com
  • Connected to ply.wayreview.com…

If you also see this on your machine, you presumably have some potentially unwanted program installed on your system that makes the ply.wayreview.com domain appear in your browser. So there’s no use contacting the owner of the site you were browsing. The ply.wayreview.com status bar messages are not coming from them. I’ll do my best to help you with the ply.wayreview.com removal in this blog post.

I found ply.wayreview.com on one of the lab machines where I have some potentially unwanted programs running. I’ve talked about this in some of the previous blog posts. The potentially unwanted programs was installed on purpose, and from time to time I check if anything new has appeared, such as pop-up windows, new tabs in the browsers, injected ads on website that usually don’t show ads, or if some new files have been saved to the hard-drive.

ply.wayreview.com was created on 2014-07-29. ply.wayreview.com resolves to the 50.22.215.24 IP address and wayreview.com to 162.255.119.154. The domain is protected by WhoisGuard INC.

So, how do you remove ply.wayreview.com from your browser? On the machine where ply.wayreview.com showed up in the status bar I had WebWaltz, YTDownloader, SpeedChecker and PriceFountain installed. I removed them with FreeFixer and that stopped the browser from loading data from ply.wayreview.com.

The issue with status bar messages like the one described in this blog post is that it can be caused by many variants of potentially unwanted programs. This makes it impossible to say exactly what you need to remove to stop the status bar messages.

Anyway, here’s my suggestion for the ply.wayreview.com removal:

  1. What software do you have installed if you look in the Add/Remove programs dialog in the Windows Control Panel? Something that you don’t remember installing yourself or that was recently installed?
  2. How about your browser add-ons. Anything in the list that you don’t remember installing?
  3. If that did not help, you can give FreeFixer a try. FreeFixer is built to assist users when manually tracking down potentially unwanted programs. It is a freeware utility that I’ve been working since 2006 and it scans your computer at lots of locations where unwanted software is known to hook into your computer. If you would like to get additional details about a file in FreeFixer’s scan result, you can just click the More Info link for that file and a web page with a VirusTotal report will open up, which can be very useful to determine if the file is safe or malware:

    FreeFixer More Info link example
    An example of FreeFixer’s “More Info” links. Click for full size.

Did you find any potentially unwanted program on your machine? Did that stop ply.wayreview.com? Please post the name of the potentially unwanted program you uninstalled from your machine in the comment below.

Thank you!

Remove api.webwaltz.net and apiwebwaltznet-a.akamaihd.net from Firefox, Chrome and Internet Explorer

This page shows how to remove apiwebwaltznet-a.akamaihd.net and api.webwaltz.net from Mozilla Firefox, Google Chrome and Internet Explorer.

Did you just see apiwebwaltznet-a.akamaihd.net in the status bar of your browser and ask yourself where it came from? Or did apiwebwaltznet-a.akamaihd.net show up while you search for something on one of the major search engines, such as the Google.com search engine?

Here are some of the status bar messages you may see in your browser’s status bar:

  • Waiting for apiwebwaltznet-a.akamaihd.net…
  • Transferring data from apiwebwaltznet-a.akamaihd.net…
  • Looking up apiwebwaltznet-a.akamaihd.net…
  • Read apiwebwaltznet-a.akamaihd.net
  • Connected to apiwebwaltznet-a.akamaihd.net…

Does this sound like your experience, you apparently have some potentially unwanted program installed on your system that makes the apiwebwaltznet-a.akamaihd.net domain appear in your browser. So there’s no use contacting the owner of the site you were browsing. The apiwebwaltznet-a.akamaihd.net status bar messages are not coming from them. I’ll try help you with the apiwebwaltznet-a.akamaihd.net removal in this blog post.

I found apiwebwaltznet-a.akamaihd.net and api.webwaltz.net on one of the lab computers where I have some potentially unwanted programs running. I’ve talked about this in some of the previous blog posts. The potentially unwanted programs was installed on purpose, and from time to time I check if anything new has appeared, such as pop-up windows, new tabs in the browsers, injected ads on web site that usually don’t show ads, or if some new files have been saved to the hard-drive.

apiwebwaltznet-a.akamaihd.net resolves to the 23.62.6.88 address. api.webwaltz.net resolves to 70.186.131.239.

Update 2015-03-19: Noticed a connection to wwwwebwaltznet-a.akamaihd.net too.

So, how do you remove apiwebwaltznet-a.akamaihd.net from your browser? On the machine where apiwebwaltznet-a.akamaihd.net showed up in the status bar I had PriceFountain, SpeedChecker, YTDownloader and WebWaltz installed. I removed them with FreeFixer and that stopped the web browser from loading data from apiwebwaltznet-a.akamaihd.net. Most likely, WebWaltz was responsible for the apiwebwaltznet-a connection.

The problem with status bar messages like this one is that it can be caused by many variants of potentially unwanted programs. This makes it impossible to say exactly what you need to remove to stop the status bar messages.

So, what can be done to solve the problem? To remove apiwebwaltznet-a.akamaihd.net you need to check your machine for potentially unwanted programs and uninstall them. Here’s my suggested removal procedure:

The first thing I would do to remove apiwebwaltznet-a.akamaihd.net is to examine the programs installed on the machine, by opening the “Uninstall programs” dialog. You can find this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows you can just type in “uninstall” in the Control Panel’s search field to find that dialog:
Uninstall a program search

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:
Uninstall a program dialog

Do you see something shady listed there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if some program was installed about the same time as you started observing the apiwebwaltznet-a.akamaihd.net status bar messages.

Then you can examine you browser add-ons. Potentially unwanted program often appear under the add-ons menu in Google Chrome, Mozilla Firefox, Internet Explorer, Safari or Opera. Is there anything that looks suspicious? Something that you don’t remember installing?
Firefox add-ons manager

I think you will be able to identify and remove the potentially unwanted program with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the potentially unwanted program. FreeFixer is a freeware tool that I started develop about 8 years ago. It’s a tool designed to manually find and remove unwanted software. When you’ve identified the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not crippled like many other removal tools out there. It won’t require you to pay a fee just when you are about to remove the unwanted files.

And if you’re having problems determining if a file is safe or potentially unwanted in FreeFixer’s scan result, click on the More Info link for the file. That will open up a web page which contains more information about the file. On that web page, check out the VirusTotal report which can be very useful:

FreeFixer More Info link example
An example of FreeFixer’s “More Info” links. Click for full size.

Did this blog post help you to remove apiwebwaltznet-a.akamaihd.net? Please let me know or how I can improve this blog post.

Thank you!

Remove cr.install-daddy.com from Firefox, Chrome and Internet Explorer

This page shows how to remove cr.install-daddy.com from Mozilla Firefox, Google Chrome and Internet Explorer.

Does this sound like your story? You see cr.install-daddy.com in your browser’s status bar or in your network log while browsing at websites that mostly don’t load any content from third party domains. Perhaps the cr.install-daddy.com domain show up when performing a search at the Google.com search engine?

Here’s a screen capture of cr.install-daddy.com when it showed up on my system:

cr.install-daddy.com connection

The following are some of the status bar notifications you may see in your browser’s status bar:

  • Waiting for cr.install-daddy.com…
  • Transferring data from cr.install-daddy.com…
  • Looking up cr.install-daddy.com…
  • Read cr.install-daddy.com
  • Connected to cr.install-daddy.com…

If this sounds like what you are seeing on your machine, you almost certainly have some adware installed on your machine that makes the cr.install-daddy.com domain appear in your browser. So there’s no use contacting the owner of the site you were browsing. The cr.install-daddy.com statusbar messages are not coming from them. I’ll do my best to help you remove the cr.install-daddy.com message in this blog post.

If you have been reading this blog already know this, but if you are new: Some time ago I dedicated a few of my lab machines and knowingly installed a few adware programs on them. Since then I have been monitoring the behaviour on these machines to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the adware updates itself automatically, or if it downloads additional unwanted software on the machines. I first noticed the cr.install-daddy.com in Mozilla Firefox’s statusbar on one of these lab computers.

install-daddy.com resolves to 192.31.186.37 and cr.install-daddy.com to the 69.16.175.10 IP address. cr.install-daddy.com was registered on 2013-06-13. Unfortunately I cannot see the WHOIS info, since it is protected by WHOISGUARD, INC.

So, how do you remove cr.install-daddy.com from your web browser? On the machine where cr.install-daddy.com showed up in the status bar I had TornTV installed. I removed it with FreeFixer and that stopped the web browser from loading data from cr.install-daddy.com.

The problem with this type of status bar message is that, or at least I think so, it can be caused by many variants of adware, not just TornTV. This makes it impossible to say exactly what you need to remove to stop the status bar messages.

Anyway, here’s my suggestion for the cr.install-daddy.com removal:

The first thing I would do to remove cr.install-daddy.com is to examine the software installed on the machine, by opening the “Uninstall programs” dialog. You can open this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows you can just type in “uninstall” in the Control Panel’s search field to find that dialog:
Uninstall a program search

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:
Uninstall a program dialog

Do you see something strange-looking in there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if some program was installed about the same time as you started observing the cr.install-daddy.com status bar messages. Do you see TornTV listed there?

Then I would check the browser add-ons. Adware often appear under the add-ons dialog in Google Chrome, Mozilla Firefox, Internet Explorer, Safari or Opera. Is there anything that looks suspicious? Something that you don’t remember installing? TornTV in the list?
Firefox add-ons manager

I think you will be able to track down and uninstall the adware with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the adware. FreeFixer is a freeware tool that I’ve developed since 2006. Freefixer is a tool designed to manually identify and remove unwanted software. When you’ve tracked down the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not locked down like many other removal tools out there. It will not require you to pay for the program just when you are about to remove the unwanted files.

And if you’re having problems determining if a file is legitimate or adware in the FreeFixer scan result, click on the More Info link for the file. That will open up a web page which contains additional information about the file. On that web page, check out the VirusTotal report which can be very useful:

FreeFixer More Info link example
An example of FreeFixer’s “More Info” links. Click for full size.

Did this blog post help you to remove cr.install-daddy.com? Please let me know or how I can improve this blog post.

Thank you!

Remove hdapp1006-a.akamaihd.net from Chrome, Firefox and Internet Explorer

This page shows how to remove hdapp1006-a.akamaihd.net from Mozilla Firefox, Google Chrome and Internet Explorer.

Sound familiar? You see hdapp1006-a.akamaihd.net in your web browser’s status bar or in the network log while browsing on sites that mostly don’t load any content from third party domains. Perhaps the hdapp1006-a.akamaihd.net domain appear when performing a search at the Google search engine?

Here’s a screen capture of hdapp1006-a.akamaihd.net when it showed up on my system in the network log when I did a Google search:

hdapp1006-a.akamaihd.net connection

When I visited the web site, I was greeted with the following message:

Thank you for your interest in Easyinline. This product has been discontinued.

The following are some of the status bar messages you may see in your browser’s status bar:

  • Waiting for hdapp1006-a.akamaihd.net…
  • Transferring data from hdapp1006-a.akamaihd.net…
  • Looking up hdapp1006-a.akamaihd.net…
  • Read hdapp1006-a.akamaihd.net
  • Connected to hdapp1006-a.akamaihd.net…

If this sounds like what you are seeing on your system, you almost certainly have some adware or some other type of potentially unwanted software installed on your computer that makes the hdapp1006-a.akamaihd.net domain appear in your web browser. Contacting the owner of the site you were browsing would be a waste of time. They are not responsible for the hdapp1006-a.akamaihd.net status bar notifications. I’ll try help you to remove the hdapp1006-a.akamaihd.net status bar messages in this blog post.

For those that are new to the blog: Some time ago I dedicated a few of my lab computers and deliberately installed some adware programs on them. Since then I have been tracking the behaviour on these computers to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the adware auto-updates, or if it installs additional unwanted software on the machines. I first spotted the hdapp1006-a.akamaihd.net in Mozilla Firefox’s status bar on one of these lab machines.

hdapp1006-a.akamaihd.net resolves to 23.62.7.40.

So, how do you remove hdapp1006-a.akamaihd.net from your web browser? On the machine where hdapp1006-a.akamaihd.net showed up in the status bar I had Taplika and Clock Hand installed. I removed them with FreeFixer and that stopped the browser from loading data from hdapp1006-a.akamaihd.net.

The issue with status bar messages like the one described in this blog post is that it can be caused by many variants of adware, not just the adware running on my system. This makes it impossible to say exactly what you need to remove to stop the statusbar messages.

So, what can be done? To remove hdapp1006-a.akamaihd.net you need to examine your machine for adware or other types of unwanted software and uninstall it. Here’s my suggested removal procedure:

The first thing I would do to remove hdapp1006-a.akamaihd.net is to examine the programs installed on the machine, by opening the “Uninstall programs” dialog. You can find this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows Operating System you can just type in “uninstall” in the Control Panel’s search field to find that dialog:
Uninstall a program search

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:
Uninstall a program dialog

Do you see something suspicious listed there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if some program was installed approximately about the same time as you started getting the hdapp1006-a.akamaihd.net status bar messages.

Then you can examine you web browser add-ons. Adware often appear under the add-ons dialog in Google Chrome, Mozilla Firefox, Internet Explorer or Safari. Is there anything that looks suspicious? Something that you don’t remember installing?
Firefox add-ons manager

I think most users will be able to identify and remove the adware with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the adware. FreeFixer is a freeware tool that I started develop about 8 years ago. It’s a tool designed to manually find and uninstall unwanted software. When you’ve identified the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not locked down like many other removal tools out there. It won’t require you to pay a fee just when you are about to remove the unwanted files.

And if you’re having a hard time determining if a file is safe or unsafe in FreeFixer’s scan report, click on the More Info link for the file. That will open up a web page which contains additional details about the file. On that web page, check out the VirusTotal report which can be very useful:

FreeFixer More Info link example
An example of FreeFixer’s “More Info” links. Click for full size.

Did you find any adware on your machine? Did that stop hdapp1006-a.akamaihd.net? Please post the name of the adware you uninstalled from your machine in the comment below.

Thank you!