Category Archives: pop-ups

Remove ale.coupthree.com Pop-Up Ads

December 4, 2014adware, pop-ups208.43.241.245, Coup Pop-UpRoger Karlsson

Does this sound like what you are seeing right now? You see pop-up ads from ale.coupthree.com while browsing sites that mostly don’t advertise in pop-up windows. The pop-ups manage to circumvent the built-in pop-up blockers in Google Chrome, Mozilla Firefox, Internet Explorer, Safari or Opera. Maybe the ale.coupthree.com popups appear when clicking search results from the Google search engine? Or does the pop-ups appear even when you’re not browsing?

Here is a screenshot on the ale.coupthree.com pop-up from my computer:

In my case, the pop-up sometimes redirected to adcash.com, which then redirect me again to the actual advert, but in most cases the browser remained at ale.coupthree.com and showed various types of ads, mostly casino/gambling related.

If this sounds like what you are seeing on your system, you almost certainly have some adware installed on your system that pops up the ale.coupthree.com ads. Contacting the site owner would be a waste of time. The advertisements are not coming from them. I’ll try help you with the ale.coupthree.com removal in this blog post.

Those that have been visiting this blog already know this, but here we go: Some time ago I dedicated some of my lab computers and deliberately installed a few adware programs on them. Since then I have been following the actions on these machines to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the adware updates itself, or if it downloads and installs additional unwanted software on the computers. I first found the ale.coupthree.com pop-up on one of these lab systems.

ale.coupthree.com resolves to the 208.43.241.245 IP address. Here’s a bunch of other domains resolving that server according to YouGetSignal.com’s reverse IP:

article.wn.com
control.staticlyrics.com
dvl.cooloideas.com
enl.trepage.net
gip.driverdiv.net
gir.driveropti.net
gys.mappingdo.net
jxs.mappingjava.net
jxw.javadrive.net
nsl.mapticket.net
vei.screedkeywaybrookite.com

So, how do you remove the ale.coupthree.com pop-up ads? On the machine where I got the ale.coupthree.com ads I had TinyWallet, BrowserWarden and BlockAndSurf installed. I removed them with FreeFixer and that stopped the ale.coupthree.com pop-ups and all the other ads I was getting in Mozilla Firefox.

BlockAndSurf was the adware that caused the pop-ups in my case. The pop-up was labelled “Ads by BlockAndSurf“.

What label did your pop-up ad have? Please share by posting a comment below.

The problem with pop-ups such as this one is that it can be popped up by many variants of adware. I think that adware such as SpeedCheck, CheckMeUp, SaferSurf and NewPlayer can also be responsible for the ale.coupthree.com popups. And there are probably other variants too. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

To remove the ale.coupthree.com pop-up ads you need to review your system for adware or other types of unwanted software and uninstall it. Here’s my suggested removal procedure:

The first thing I would do to remove the ale.coupthree.com pop-ups is to examine the programs installed on the machine, by opening the “Uninstall programs” dialog. You can reach this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows you can just type in “uninstall” in the Control Panel’s search field to find that dialog:

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:

Do you see something dubious in there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if something was installed approximately about the same time as you started getting the ale.coupthree.com pop-ups.

Then you can examine you browser add-ons. Adware often appear under the add-ons dialog in Mozilla Firefox, Google Chrome, Internet Explorer or Safari. Is there anything that looks suspicious? Something that you don’t remember installing?

I think most users will be able to find and remove the adware with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the adware. FreeFixer is a freeware tool that I started develop about 8 years ago. Freefixer is a tool designed to manually track down and remove unwanted software. When you’ve identified the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not locked like many other removal tools out there. It will not require you to purchase the program just when you are about to remove the unwanted files.

And if you’re having difficulties figuring out if a file is clean or adware in FreeFixer’s scan report, click on the More Info link for the file. That will open up a web page which contains more information about the file. On that web page, check out the VirusTotal report which can be quite useful:

FreeFixer More Info link example — An example of FreeFixer’s “More Info” links. Click for full size.

Here’s a video tutorial which shows FreeFixer in action removing the adware that caused the ale.coupthree.com pop-up ads:

Are you a Mac or Linux user and get the ale.coupthree.com pop ups? What did you do to stop the pop-up in your browser? Please share in the comments below. Thanks!

Did this blog post help you to remove the ale.coupthree.com pop-up ads? Please let me know or how I can improve this blog post.

Thank you!

How To Remove adservercentral.com Pop-Up Ads

December 2, 2014adware, pop-ups207.34.202.27, 209.15.247.29Roger Karlsson

Did you just get a popup or new tab from adservercentral.com and wonder where it came from? Did the adservercentral.com ad appear to have been popped up from a web site that under normal circumstances don’t use aggressive advertising such as pop-up windows? Or did the adservercentral.com pop-up show up while you clicked a link on one of the big search engines, such as Google, Bing or Yahoo?

Here is a screenshot on the adservercentral.com pop-up from my machine:

If this description sounds like your story, you probably have some adware installed on your system that pop up the adservercentral.com ads. So there’s no use contacting the site owner. The ads are not coming from them. I’ll try help you with the adservercentral.com removal in this blog post.

Those that have been visiting this blog already know this, but here we go: Some time ago I dedicated some of my lab machines and intentionally installed a few adware programs on them. I have been observing the behaviour on these machines to see what kinds of ads that are displayed. I’m also looking on other interesting things such as if the adware updates itself automatically, or if it downloads additional unwanted software on the systems. I first spotted the adservercentral.com pop-up on one of these lab machines.

adservercentral.com was created on 2002-10-22. adservercentral.com resolves to the 207.34.202.27 IP address and promo2.adservercentral.com to 209.15.247.29.

So, how do you remove the adservercentral.com pop-up ads? On the machine where I got the adservercentral.com ads I had TinyWallet, BrowserWarden and BlockAndSurf installed. I removed them with FreeFixer and that stopped the adservercentral.com pop-ups and all the other ads I was getting in Firefox.

BlockAndSurf was the adware that caused the pop-ups in my case. I know this since the pop-up ad had a label with the adware name: “Brought to you by BlockAndSurf“.

What label did your pop-up ad have? Please share in the comments area below.

If you are wonder if there are many others out there also getting the adservercentral.com ads, the answer is probably yes. Check out the traffic rank from Alexa:

The issue with this type of pop-up is that it can be launched by many variants of adware. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

Anyway, here’s my suggestion for the adservercentral.com ads removal:

The first thing I would do to remove the adservercentral.com pop-ups is to examine the software installed on the machine, by opening the “Uninstall programs” dialog. You can open this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows you can just type in “uninstall” in the Control Panel’s search field to find that dialog:

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:

Do you see something suspicious listed there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if something was installed about the same time as you started observing the adservercentral.com pop-ups.

Then I would check the browser add-ons. Adware often show up under the add-ons dialog in Firefox, Chrome, Internet Explorer or Safari. Is there anything that looks suspicious? Anything that you don’t remember installing?

I think you will be able to track down and uninstall the adware with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the adware. FreeFixer is a freeware tool that I started develop many years ago. Freefixer is a tool designed to manually track down and remove unwanted software. When you’ve found the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not crippled like many other removal tools out there. It will not require you to purchase the program just when you are about to remove the unwanted files.

And if you’re having issues figuring out if a file is clean or adware in the FreeFixer scan report, click on the More Info link for the file. That will open up your web browser with a page which contains more information about the file. On that web page, check out the VirusTotal report which can be very useful:

Did you find any adware on your machine? Did that stop the adservercentral.com ads? Please post the name of the adware you uninstalled from your machine in the comment below.

Thank you!

Remove secureadcenter.com Pop-Up Ads

December 2, 2014adware, pop-ups188.138.75.165Roger Karlsson

Does this sound familiar? You see pop-up ads or new tabs from secureadcenter.com while browsing websites that typically don’t advertise in pop-up windows. The pop-ups manage to evade the built-in pop-up blockers in Firefox, Chrome, Internet Explorer or Safari. Maybe the secureadcenter.com pop-ups appear when clicking search results from Google? Or does the pop-ups appear even when you’re not browsing?

Here’s a screenshot of the secureadcenter.com pop-up ad when it showed up on my system:

There it gets stuck for me. It continues to display the “loading…” progress bar, but nothing happens.

If this description sounds like your system, you most likely have some adware installed on your machine that pop up the secureadcenter.com ads. Contacting the site owner would be a waste of time. The ads are not coming from them. I’ll try help you to remove the secureadcenter.com pop ups in this blog post.

For those that are new to the blog: A little while back I dedicated some of my lab computers and deliberately installed some adware programs on them. I’ve been following the actions on these systems to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the adware updates itself automatically, or if it downloads additional unwanted software on the computers. I first noticed the secureadcenter.com pop-up on one of these lab computers.

secureadcenter.com was registered on 2013-12-03. secureadcenter.com resolves to the 188.138.75.165 IP address.

So, how do you remove the secureadcenter.com pop-up ads? On the machine where I got the secureadcenter.com ads I had Salus, PriceFountain, TinyWallet and BuyNSave installed. I removed them with FreeFixer and that stopped the secureadcenter.com pop-ups and all the other ads I was getting in Mozilla Firefox. Sorry, I don’t know which of them was responsible for the pop-up/new tab.

If you are wonder if there are many others out there also getting the secureadcenter.com ads, the answer is probably yes. Check out the traffic rank from Alexa:

Rank 13k is means its getting lots of traffic. It seems it gets lots of traffic from Sweden.

The issue with this type of pop-up is that it can be launched by many variants of adware. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

To remove the secureadcenter.com pop-up ads you need to examine your machine for adware or other types of unwanted software and uninstall it. Here’s my suggested removal procedure:

The first thing I would do to remove the secureadcenter.com pop-ups is to examine the software installed on the machine, by opening the “Uninstall programs” dialog. You can reach this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows you can just type in “uninstall” in the Control Panel’s search field to find that dialog:

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:

Do you see something suspicious in there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if something was installed approximately about the same time as you started observing the secureadcenter.com pop-ups.

The next thing to check would be your browser’s add-ons. Adware often turn up under the add-ons menu in Firefox, Chrome, Internet Explorer or Safari. Is there anything that looks suspicious? Something that you don’t remember installing?

I think most users will be able to identify and remove the adware with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the adware. FreeFixer is a freeware tool that I started develop many years ago. It’s a tool designed to manually track down and remove unwanted software. When you’ve tracked down the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not crippled like many other removal tools out there. It won’t require you to pay for the program just when you are about to remove the unwanted files.

And if you’re having difficulties figuring out if a file is legitimate or adware in the FreeFixer scan result, click on the More Info link for the file. That will open up a web page which contains additional information about the file. On that web page, check out the VirusTotal report which can be very useful:

Did you find any adware on your machine? Did that stop the secureadcenter.com ads? Please post the name of the adware you uninstalled from your machine in the comment below.

Thank you!

Remove display-buy.com Pop-Up Ads

November 27, 2014adware, pop-ups54.204.151.128, akamaihd.net, bannersdontwork.com, hrtnvk.com, mcafeestore.com, srshql.comRoger Karlsson

Did you just get a new tab or a pop-up from display-buy.com and ponder where it came from? Did the display-buy.com ad appear to have been launched from a web site that under normal circumstances don’t use aggressive advertising such as pop-up windows? Or did the display-buy.com pop-up show up while you clicked a link on one of the major search engines, such as Google, Bing or Yahoo.?

Here’s how the display-buy.com pop-up looked like when I got it on my machine:(Sorry for the watermarks. Need to add them to prevent the most blatant attempts of other bloggers using my screenshots without attribution)

Does this sounds like what you are seeing, you almost certainly have some adware installed on your system that pop up the display-buy.com ads. So don’t send angry emails to the site you were browsing, the advertisements are presumably not coming from them, but from the adware on your computer. I’ll try help you to remove the display-buy.com in this blog post.

For those that are new to the blog: Some time ago I dedicated a few of my lab computers and deliberately installed a few adware programs on them. Since then I’ve been following the actions on these computers to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the adware updates itself automatically, or if it installs additional unwanted software on the systems. I first noticed the display-buy.com pop-up on one of these lab machines.

display-buy.com was registered on 2013-08-06. display-buy.com resolves to the 54.204.151.128 address. It appears to be a dedicated server.

So, how do you remove the display-buy.com pop-up ads? On the machine where I got the display-buy.com ads I had TinyWallet, BrowserWarden and BlockAndSurf installed. I removed them with FreeFixer and that stopped the display-buy.com pop-ups and all the other ads I was getting in Mozilla Firefox.

It seems as display-buy.com is getting quite a lot of traffic, based on Alexa’s traffic rank:

The site had a traffic spike in February/March then again a big spike in October. The 25K traffic rank shows that it get quite a lot of traffic.

Alexa also have some info which the “Upstream Sites” are: bannersdontwork.com, akamaihd.net, mcafeestore.com, hrtnvk.com and srshql.com.

The issue with this type of pop-up is that it I think it can be launched by many variants of adware. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

To remove the display-buy.com pop-up ads you need to examine your machine for adware or other types of unwanted software and uninstall it. Here’s my suggested removal procedure:

Examine what programs you have installed in the Add/Remove programs dialog in the Windows Control Panel. Do you see something that you don’t remember installing or that was recently installed? Do you see any of the three adware programs I mentioned above?
You can also check the browser add-ons. Same thing here, do you see anything that you don’t remember installing?
If that didn’t help, I’d recommend a scan with FreeFixer to manually track down the adware. FreeFixer is a freeware tool that I’m working on that scans your computer at lots of locations, such as browser add-ons, processes, Windows services, recently modified files, etc. If you want to get additional details about a file in the scan result, you can click the More Info link for that file and a web page will open up with a VirusTotal report which will be very useful to determine if the file is safe or malware:
An example of FreeFixer’s “More Info” links. Click for full size.

Did this blog post help you to remove the display-buy.com pop-up or new tab ads? Please let me know or how I can improve this blog post.

Thank you!

Remove topwebsiteconnect.xyz Pop-Up Survey Ads

November 27, 2014pop-ups, surveyRoger Karlsson

Did you just get interrupted by a pop-up surveys from topwebsiteconnect.xyz ?. You are not alone. I also get the topwebsiteconnect.xyz pop-ups while browsing. Do the surveys also find a way round the pop-up blocker in Google Chrome, Mozilla Firefox, Internet Explorer, Safari or Opera. Then read on.

Here is a screenshot on the topwebsiteconnect.xyz pop-up survey from my machine:

(Sorry for the watermarks. Need to add them to prevent the most blatant attempts of other bloggers using my screenshots without attribution)

Does this sounds like your story, you presumably have some adware installed on your computer that pop up the topwebsiteconnect.xyz ads. So there’s no use contacting the site owner. The ads are not coming from them. I’ll try help you to remove the topwebsiteconnect.xyz surveys in this blog post.

Those that have been visiting this blog already know this, but here we go: Some time ago I dedicated some of my lab machines and deliberately installed a few adware programs on them. I have been monitoring the behaviour on these computers to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the adware auto-updates, or if it installs additional unwanted software on the machines. I first found the topwebsiteconnect.xyz pop-up on one of these lab systems.

topwebsiteconnect.xyz was registered on 2014-11-19.

So, how do you remove the topwebsiteconnect.xyz pop-up ads? On the machine where I got the topwebsiteconnect.xyz ads I had BuyNSave, TinyWallet and BlockAndSurf installed. I removed them with FreeFixer and that stopped the topwebsiteconnect.xyz pop-ups and all the other ads I was getting in Mozilla Firefox.

The issue with this type of pop-up is that it can be launched by many variants of adware. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

To remove the topwebsiteconnect.xyz pop-up ads you need to check your machine for adware or other types of unwanted software and uninstall it. Here’s my suggested removal procedure:

The first thing I would do to remove the topwebsiteconnect.xyz pop-ups is to examine the programs installed on the machine, by opening the “Uninstall programs” dialog. You can find this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows Operating System you can just type in “uninstall” in the Control Panel’s search field to find that dialog:

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:

Do you see something dubious in there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if some program was installed approximately about the same time as you started observing the topwebsiteconnect.xyz pop-ups.

The next thing to check would be your browser’s add-ons. Adware often appear under the add-ons dialog in Google Chrome, Mozilla Firefox, Internet Explorer, Safari or Opera. Is there anything that looks suspicious? Anything that you don’t remember installing?

I think you will be able to track down and remove the adware with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the adware. FreeFixer is a freeware tool that I started develop many years ago. Freefixer is a tool designed to manually identify and remove unwanted software. When you’ve identified the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not crippled like many other removal tools out there. It will not require you to purchase the program just when you are about to remove the unwanted files.

And if you’re having difficulties determining if a file is legit or adware in FreeFixer’s scan report, click on the More Info link for the file. That will open up a web page which contains more information about the file. On that web page, check out the VirusTotal report which can be quite useful:

Did this blog post help you to remove the topwebsiteconnect.xyz pop-up ads? Please let me know or how I can improve this blog post.

Thank you!

Remove ask.couplose.com Pop-Up Ads

November 27, 2014adware, freefixer, pop-ups208.43.241.245, Coup Pop-UpRoger Karlsson

Does this sound familiar? You see pop-up ads from ask.couplose.com while browsing websites that usually don’t advertise in pop-up windows. The pop-ups manage to find a way round the built-in pop-up blockers in Mozilla Firefox, Google Chrome, Internet Explorer or Safari. Maybe the ask.couplose.com pop-ups appear when clicking search results from a Google search? Or does the pop-ups appear even when you’re not browsing?

Here’s how the ask.couplose.com pop-up looked like when I got it on my machine.

(I know, lots of watermarks. Have to do it to stop the copy-cats.)

Does this sounds like your computer, you almost certainly have some adware installed on your system that pop up the ask.couplose.com ads. Don’t flame the people that owns the website you were at, the ads are almost certainly not coming from that website, but from the adware that’s running on your computer. I’ll do my best to help you remove the ask.couplose.com in this blog post.

For those that are new to the blog: Not long ago I dedicated some of my lab computers and deliberately installed a few adware programs on them. I have been monitoring the behaviour on these computers to see what kinds of ads that are displayed. I’m also looking on other interesting things such as if the adware updates itself automatically, or if it downloads and installs additional unwanted software on the machines. I first found the couplose.com pop-up on one of these lab systems.

ask.couplose.com resolves to the 208.43.241.245 address. ask.couplose.com was registered on 2014-09-18.

So, how do you remove the ask.couplose.com pop-up ads? On the machine where I got the ask.couplose.com ads I had TinyWallet, BuyNSave and BlockAndSurf installed. I removed them with FreeFixer and that stopped the ask.couplose.com pop-ups and all the other ads I was getting in Mozilla Firefox.

BlockAndSurf was the adware that caused the pop-ups in my case. I know this since the pop-up ad had a label with the adware name: “BlockAndSurf“.

What label did your pop-up ad have? Please share in the comments area below.

The issue with this type of pop-up is that it can be launched by many variants of adware. I think that adware such as NewPlayer, Salus, CheckMeUp and SaferSurf can also be responsible for the couplose.com popups. And there are probably other variants too. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

Anyway, here’s my suggestion for the ask.couplose.com ads removal:

Check what programs you have installed in the Add/Remove programs dialog in the Windows Control Panel. Do you see something that you don’t remember installing or that was recently installed?
You can also examine the add-ons you installed in your browsers. Same thing here, do you see something that you don’t remember installing?
If that didn’t help, I’d recommend a scan with FreeFixer to manually track down the adware. FreeFixer is a freeware tool that I’m working on that scans your computer at lots of locations, such as browser add-ons, processes, Windows services, recently modified files, etc. If you want to get additional details about a file in the scan result, you can click the More Info link for that file and a web page will open up with a VirusTotal report which will be very useful to determine if the file is safe or malware:
An example of FreeFixer’s “More Info” links. Click for full size.

Here’s a video tutorial which shows FreeFixer in action removing adware causing pop-up ads:

Are you a Mac or Linux user and get the ask.couplose.com pop-ups? What did you do to stop the pop-up in your browser? Please share in the comments below. Thanks!

Did you find any adware on your machine? Did that stop the ask.couplose.com ads? Please post the name of the adware you uninstalled from your machine in the comment below.

Thank you!

Remove prizetrick.xyz Pop-Up Surveys

November 27, 2014pop-ups, surveyRoger Karlsson

Hello everyone. Just a short post before lunch. Found yet another of these survey pop-ups, this time it’s prizetrick.xyz.

If you get this pop-up on your machine, you probably have some adware on your machine. You can track down the adware with FreeFixer and remove it. That will stop the prizetrick.xyz pop-ups.

Now, lunch 😉

Remove fastworldconnect.xyz Pop-Up Survey Ads

November 26, 2014pop-ups, survey104.207.156.103, 184.73.247.179Roger Karlsson

Does this sound like your story? You see pop-up surveys from fastworldconnect.xyz while browsing web sites that mostly don’t advertise in pop-up windows. The pop-ups manage to sidestep the built-in pop-up blockers in Google Chrome, Mozilla Firefox, Internet Explorer or Safari.

Here’s how the fastworldconnect.xyz pop-up looked like when I got it on my computer:

If this description sounds like your computer, you apparently have some adware installed on your machine that pop up the fastworldconnect.xyz surveys. I’ll do my best to help you remove the fastworldconnect.xyz in this blog post.

If you have been reading this blog already know this, but if you are new: Recently I dedicated some of my lab computers and deliberately installed a few adware programs on them. Since then I’ve been observing the behaviour on these computers to see what kinds of adverts that are displayed. I’m also looking on other interesting things such as if the adware auto-updates, or if it installs additional unwanted software on the computers. I first observed the fastworldconnect.xyz pop-up surveys on one of these lab systems.

k9kzz.rewardzone.fastworldconnect.xyz resolves to 104.207.156.103, and fastworldconnect.xyz to 184.73.247.179. The domain was registered just a few days ago.

So, how do you remove the fastworldconnect.xyz pop-up ads? On the machine where I got the fastworldconnect.xyz ads I had BuyNSave, BlockAndSurf and TinyWallet installed. I removed them with FreeFixer and that stopped the fastworldconnect.xyz pop-ups and all the other ads I was getting in Firefox.

The issue with this type of pop-up survey is that it can be launched by many variants of adware. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

To remove the fastworldconnect.xyz pop-up surveys you need to review your system for adware or other types of unwanted software and uninstall it. Here’s my suggested removal procedure:

Check what programs you have installed in the Add/Remove programs dialog in the Windows Control Panel. Do you see something that you don’t remember installing and that was recently installed?
You can also review the add-ons that you have in your browser. Same thing here, do you see something that you don’t remember installing?
If that does not help, I’d recommend a scan with FreeFixer to manually track down the adware. FreeFixer is a freeware tool that I’m working on that scans your computer at lots of locations, such as browser add-ons, processes, Windows services, recently modified files, etc. If you want to get additional details about a file in the scan result, you can click the More Info link for that file and a web page will open up with a VirusTotal report which will be very useful to determine if the file is safe or malware:
An example of FreeFixer’s “More Info” links. Click for full size.

Did this blog post help you to remove the fastworldconnect.xyz pop-up ads? Please let me know or how I can improve this blog post.

Thank you!

Remove aft.coupplayoff.com Pop-Up Ads

November 25, 2014adware, pop-ups37.58.101.203, Coup Pop-UpRoger Karlsson

Did you just get a pop up from aft.coupplayoff.com and ponder where it came from? Did the aft.coupplayoff.com ad appear to have been launched from a web site that under normal circumstances don’t use aggressive advertising such as pop-up windows? Or did the aft.coupplayoff.com pop-up show up while you clicked a link on one of the major search engines, such as Google, Bing or Yahoo?

Here’s how the aft.coupplayoff.com pop-up looked like when I got it on my computer:

(I know, lots of watermarks. Have to do it to stop the copy-cats.)

I got the pop-up in Firefox, but it can also appear in Chrome and Internet Explorer. Does this sounds like your experience, you probably have some adware installed on your system that pop up the aft.coupplayoff.com ads.

For those that are new to the blog: Not long ago I dedicated some of my lab machines and deliberately installed some adware programs on them. I’ve been following the behaviour on these computers to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the adware auto-updates, or if it downloads additional unwanted software on the machines. I first found the aft.coupplayoff.com pop-up on one of these lab systems.

So, how do you remove the aft.coupplayoff.com pop-up ads? On the machine where I got the aft.coupplayoff.com ads I had BrowserWarden, BuyNSave and BlockAndSurf installed. I removed them with FreeFixer and that stopped the aft.coupplayoff.com pop-ups and all the other ads I was getting in Mozilla Firefox.

aft.coupplayoff.com resolves to 37.58.101.203. The domain was created 2014-09-18.

BlockAndSurf was the adware that caused the pop-ups in my case. The pop-up was labelled “Ads by BlockAndSurf“.

What label did your pop-up ad have? Please share in the comments area.

The issue with this type of pop-up is that it can be launched by many variants of adware. I think that adware such as Salus, CheckMeUp and NewPlayer can also be responsible for the aft.coupplayoff.com popups. And there are probably other variants too. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

Anyway, here’s my suggestion for the aft.coupplayoff.com ads removal:

The first thing I would do to remove the aft.coupplayoff.com pop-ups is to examine the programs installed on the machine, by opening the “Uninstall programs” dialog. You can reach this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows you can just type in “uninstall” in the Control Panel’s search field to find that dialog:

Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:

Do you see something strange-looking in there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if some program was installed approximately about the same time as you started seeing the aft.coupplayoff.com pop-ups.

I think you will be able to identify and uninstall the adware with the two steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the adware. FreeFixer is a freeware tool that I started develop about 8 years ago. FreeFixer is a tool designed to manually identify and uninstall unwanted software. When you’ve tracked down the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.

FreeFixer’s removal feature is not crippled like many other removal tools out there. It won’t require you to pay for the program just when you are about to remove the unwanted files.

And if you’re having issues deciding if a file is legitimate or malware in the FreeFixer scan result, click on the More Info link for the file. That will open up a web page which contains additional details about the file. On that web page, check out the VirusTotal report which can be quite useful:

Are you a Mac or Linux user and get the aft.coupplayoff.com pop-ups? What did you do to stop the pop-up in your browser? Please share in the comments below. Thank you!

Did this blog post help you to remove the aft.coupplayoff.com pop-up ads? Please let me know or how I can improve this blog post.

Thank you!

How To Remove quickworldonline.xyz Pop-Up Surveys Ads

November 25, 2014pop-ups, surveyRoger Karlsson

If you are getting pop-up surveys from quickworldonline.xyz you probably have some adware on your machine. I’d recommend a scan with FreeFixer to track down and remove the adware.

What adware did you remove from your machine? Did that stop the quickworldonline.xyz pop-up surveys?

Thanks for reading!