Hello readers. Another day, another blog post. Today I wanted to talk about a Adware called UniSales and thought I should give you some removal instructions. UniSales appears to be a variant of BuyNSave that I wrote about previously. If UniSales is installed on your computer, you will see ads labeled Ads by unisales added into Google’s search results, new add-ons called “Unisales” installed into Firefox and Internet Explorer, pop-up windows labeled “Ads by unisales” and overlay ads, also tagged “Ads by unisales”.
I’ll show how to remove UniSales in this blog post with the FreeFixer removal tool.
UniSales is distributed by a tactic called bundling. Bundling means that a piece of software is included in other software’s installers. Here’s how it appeared in the installer:
Generally, you can avoid bundled software such as UniSales by being careful when installing software and declining the bundled offers in the installer.
When I stumble upon some new bundled software I always upload it to VirusTotal to verify if the anti-virus programs there detect something interesting. 29% of the anti-virus scanners detected the file. ESET-NOD32 names UniSales as a variant of Win32/AdWare.MultiPlug.BN, F-Secure calls it Gen:Variant.Adware.Graftor.153998, McAfee detects it as Artemis!7E61FEF6948F and McAfee-GW-Edition names it BehavesLike.Win32.Adware.hm.
I’m sure you’d like to remove UniSales, and that’s pretty straightforward with FreeFixer. Select the UniSales files, as shown in the screenshots below, click Fix, and restart your machine and the problem should be gone.
Hope this helped you remove the UniSales Adware.
I stumbled upon UniSales while testing out some downloads that are known to bundled lots of unwanted software. Any idea how you got UniSales on your computer? Please let me and the readers know by posting a comments. Thanks a bunch!
Did you just get a pop-up from dlvr.adne.tv and wonder where it came from? Did the dlvr.adne.tv ad appear to have been launched from a web site that under normal circumstances don’t use aggressive advertising such as pop-up windows? Or did the dlvr.adne.tv pop-up show up while you clicked a link on one of the big search engines, such as Google, Bing or Yahoo?
Here’s how the dlvr.adne.tv pop-up looked like when I got it on my system:
Does this sound like what you see your system, you almost certainly have some adware installed on your system that pops up the adne.tv ads. Contacting the owner of the web site would be a waste of time. They are not responsible for the ads. I’ll do my best to help you with the dlvr.adne.tv removal in this blog post. This is done by uninstall the unwanted adware from your machine.
If you have been spending some time on this blog already know this, but if you are new: Not long ago I dedicated some of my lab machines and intentionally installed some adware programs on them. I’ve been following the behaviour on these systems to see what kinds of adverts that are displayed. I’m also looking on other interesting things such as if the adware auto-updates, or if it downloads additional unwanted software on the systems. I first observed the dlvr.adne.tv pop-up on one of these lab computers.
dlvr.adne.tv resolves to the 162.210.196.231 IP address. dlvr.adne.tv was created on 2011-02-08. The WHOIS info is protected by Domains By Proxy LLC.
So, how do you remove the dlvr.adne.tv pop-up ads? On the machine where I got the dlvr.adne.tv ads I had TinyWallet, BrowserWarden and BlockAndSurf installed. I removed them with FreeFixer and that stopped the dlvr.adne.tv pop-ups and all the other ads I was getting in Mozilla Firefox.
If you are wonder if there are many others out there also getting the dlvr.adne.tv ads, the answer is probably yes. Check out the traffic rank from Alexa:
The problem with pop-ups like the one described in this blog post is that it can be launched by many variants of adware, not just the adware that’s installed on my machine. This makes it impossible to say exactly what you need to remove to stop the pop-ups.
Anyway, here’s my suggestion for the dlvr.adne.tv ads removal:
The first thing I would do to remove the dlvr.adne.tv pop-ups is to examine the software installed on the machine, by opening the “Uninstall programs” dialog. You can find this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows you can just type in “uninstall” in the Control Panel’s search field to find that dialog:
Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:
Do you see something dubious in there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if some program was installed approximately about the same time as you started observing the dlvr.adne.tv pop-ups.
Then I would check the browser add-ons. Adware often show up under the add-ons menu in Google Chrome, Mozilla Firefox, Internet Explorer or Safari. Is there anything that looks suspicious? Something that you don’t remember installing?
I think you will be able to identify and remove the adware with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the adware. FreeFixer is a freeware tool that I started develop many years ago. Freefixer is a tool built to manually identify and remove unwanted software. When you’ve identified the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.
FreeFixer’s removal feature is not crippled like many other removal tools out there. It won’t require you to purchase the program just when you are about to remove the unwanted files.
And if you’re having a mess figuring out if a file is clean or malware in FreeFixer’s scan report, click on the More Info link for the file. That will open up your browser with a page which contains additional information about the file. On that web page, check out the VirusTotal report which can be quite useful:
An example of FreeFixer’s “More Info” links. Click for full size.
Here’s a video tutorial on how to remove the pop-ups with FreeFixer:
Did this blog post help you to remove the dlvr.adne.tv pop-up ads? Please let me know or how I can improve this blog post.
Thank you!
Update 2015-03-13: Added Alexa traffic rank for the adne.tv domain.
Sound familiar? You see pop-up ads from ane.couphit.com while browsing websites that usually don’t advertise in pop-up windows. The pop-ups manage to circumvent the built-in pop-up blockers in Google Chrome, Mozilla Firefox, Internet Explorer or Safari. Perhaps the ane.couphit.com pop-ups show up when clicking search results from Google? Or does the popups appear even when you’re not browsing?
Here is how the ane.couphit.com ad looked like on my machine:
If this description sounds like your experience, you almost certainly have some adware installed on your machine that pops up the ane.couphit.com ads. There’s no use contacting the owners of the site you currently were browsing. The advertisements are not coming from them. I’ll try help you with the ane.couphit.com removal in this blog post.
I found the ane.couphit.com pop-up on one of the lab machines where I have some adware running. I’ve talked about this in some of the previous blog posts. The adware was installed on purpose, and from time to time I check if something new has appeared, such as pop-up windows, new tabs in the browsers, injected ads on website that usually don’t show ads, or if some new files have been saved to the hard-drive.
ane.couphit.com was registered on 2014-09-18. ane.couphit.com resolves to 208.43.241.244.
So, how do you remove the ane.couphit.com pop-up ads? On the machine where I got the ane.couphit.com ads I had TinyWallet, BrowserWarden and BlockAndSurf installed. I removed them with FreeFixer and that stopped the ane.couphit.com pop-ups and all the other ads I was getting in Firefox.
BlockAndSurf was the adware that caused the pop-ups in my case.
It seems as ane.couphit.com is getting quite a lot of traffic, based on Alexa’s traffic rank:
The issue with this type of pop-up is that it can be initiated by many variants of adware. This makes it impossible to say exactly what you need to remove to stop the pop-ups.
Anyway, here’s my suggestion for the ane.couphit.com ads removal:
The first thing I would do to remove the ane.couphit.com pop-ups is to examine the programs installed on the machine, by opening the “Uninstall programs” dialog. You can reach this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows OS you can just type in “uninstall” in the Control Panel’s search field to find that dialog:
Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:
Do you see something suspect listed there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if something was installed approximately about the same time as you started getting the ane.couphit.com pop-ups.
Then you can examine you browser add-ons. Adware often show up under the add-ons menu in Google Chrome, Mozilla Firefox, Internet Explorer, Safari or Opera. Is there something that looks suspicious? Anything that you don’t remember installing?
I think most users will be able to identify and uninstall the adware with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the adware. FreeFixer is a freeware tool that I started develop about 8 years ago. It’s a tool designed to manually track down and uninstall unwanted software. When you’ve found the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.
FreeFixer’s removal feature is not crippled like many other removal tools out there. It won’t require you to pay for the program just when you are about to remove the unwanted files.
And if you’re having issues determining if a file is legit or malware in the FreeFixer scan report, click on the More Info link for the file. That will open up a web page which contains additional details about the file. On that web page, check out the VirusTotal report which can be very useful:
An example of FreeFixer’s “More Info” links. Click for full size.
Here’s a video tutorial showing FreeFixer in action removing the ane.couphit.com pop-up ads:
Are you a Mac or Linux user and get the ane.couphit.com pop-ups? What did you do to stop the pop-up in your browser? Please share in the comments below. Thank you!
Did you find any adware on your machine? Did that stop the ane.couphit.com ads? Please post the name of the adware you uninstalled from your machine in the comment below.
Does this sound like your story? You see pop-up ads from ain.couptwo.com while browsing websites that typically don’t advertise in pop-up windows. The pop ups manage to escape the built-in pop-up blockers in Google Chrome, Mozilla Firefox, Internet Explorer, Safari or Opera. Maybe the ain.couptwo.com pop-ups show up when clicking search results from Google? Or does the pop-ups appear even when you’re not browsing?
Here’s how the ain.couptwo.com pop-up looked like when I got it on my system:
Does this sound like your system, you probably have some adware installed on your computer that pops up the ain.couptwo.com ads. So there’s no idea contacting the owner of the site you were browsing. The advertisements are not coming from them. I’ll do my best to help you with the ain.couptwo.com removal in this blog post.
Those that have been reading this blog already know this, but for new visitors: Not long ago I dedicated some of my lab machines and wilfully installed a few adware programs on them. Since then I have been tracking the behaviour on these systems to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the adware auto-updates, or if it downloads and installs additional unwanted software on the computers. I first noticed the ain.couptwo.com pop-up on one of these lab machines.
ain.couptwo.com resolves to 208.43.241.247. ain.couptwo.com was created on 2014-09-18.
So, how do you remove the ain.couptwo.com pop-up ads? On the machine where I got the ain.couptwo.com ads I had TinyWallet, BrowserWarden and BlockAndSurf installed. I removed them with FreeFixer and that stopped the ain.couptwo.com pop-ups and all the other ads I was getting in Firefox.
BlockAndSurf was the adware that caused the pop-ups in my case.
The problem with this type of pop up is that it can be popped up by many variants of adware. This makes it impossible to say exactly what you need to remove to stop the pop-ups.
Anyway, here’s my suggestion for the ain.couptwo.com ads removal:
What software do you have installed if you look in the Add/Remove programs dialog in the Windows Control Panel? Something that you don’t remember installing yourself or that was recently installed?
You can also review the add-ons you installed in your browsers. Same thing here, do you see anything that you don’t remember installing?
If that didn’t solve the problem, you can give FreeFixer a try. FreeFixer is built to assist users when manually tracking down adware and other types of unwanted software. It is a freeware utility that I’ve been working since 2006 and it scans your system at lots of locations where unwanted software is known to hook into your computer. If you would like to get additional details about a file in FreeFixer’s scan result, you can just click the More Info link for that file and a web page with a VirusTotal report will open up, which can be very useful to determine if the file is safe or malware:
An example of FreeFixer’s “More Info” links. Click for full size.
Here you can see FreeFixer in action removing the adware that caused the ain.couptwo.com pop-up ads:
Are you a Mac or Linux user and get the ain.couptwo.com popups? What did you do to stop the pop-up in your browser? Please share in the comments below. Thank you very much!
Did you find any adware on your machine? Did that stop the ain.couptwo.com ads? Please post the name of the adware you uninstalled from your machine in the comment below.
Thank you!
Update 2014-12-18: I’ve been documenting this type of pop-ups. I’m calling them “Coup Pop-Ups“, since they often use “Coup” in the domain name. For example, couptwo.com and coupthree.com. But what about one, four, five, six, etc? I think the following domains are registered by the same company, and that we might see them in pop-ups in the future:
Did you just get interrupted by a pop-up ad from dbd.cooldeas.com? You are not alone. I also get the dbd.cooldeas.com pop-ups while browsing. Do the pop-ups also circumvent the pop-up blocker in Google Chrome, Mozilla Firefox, Internet Explorer or Safari. Then read on…
Here’s a screenshot of the dbd.cooldeas.com pop-up ad when it showed up on my system:
If you also see this on your computer, you most likely have some adware installed on your machine that pops up the dbd.cooldeas.com ads. So don’t blame the people that owns the web site you were at, the ads are most likely not coming from that site, but from the adware that’s running on your computer. I’ll do my best to help you remove the dbd.cooldeas.com pop up in this blog post.
If you have been following this blog already know this, but if you are new: Not long ago I dedicated some of my lab machines and intentionally installed a few adware programs on them. Since then I’ve been following the actions on these computers to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the adware auto-updates, or if it downloads and installs additional unwanted software on the computers. I first found the dbd.cooldeas.com pop-up on one of these lab computers.
dbd.cooldeas.com was created on 2014-11-23. dbd.cooldeas.com resolves to 208.43.241.245.
So, how do you remove the dbd.cooldeas.com pop-up ads? On the machine where I got the dbd.cooldeas.com ads I had TinyWallet, BlockAndSurf and BrowserWarden installed. I removed them with FreeFixer and that stopped the dbd.cooldeas.com pop-ups and all the other ads I was getting in Firefox.
BlockAndSurf was the adware that caused the pop-ups in my case.
The issue with this type of pop-up is that it can be launched by many variants of adware, not just the adware on my computer. This makes it impossible to say exactly what you need to remove to stop the pop-ups.
Anyway, here’s my suggestion for the dbd.cooldeas.com ads removal:
What software do you have installed if you look in the Add/Remove programs dialog in the Windows Control Panel? Something that you don’t remember installing yourself or that was recently installed?
You can also review the add-ons that you have in your browser. Same thing here, do you see something that you don’t remember installing?
If that didn’t solve the problem, you can give FreeFixer a try. FreeFixer is built to assist users when manually tracking down adware and other types of unwanted software. It is a freeware utility that I’ve been working since 2006 and it scans your computer at lots of locations where unwanted software is known to hook into your machine. If you would like to get additional details about a file in FreeFixer’s scan result, you can just click the More Info link for that file and a web page with a VirusTotal report will open up, which can be very useful to determine if the file is safe or malware:
An example of FreeFixer’s “More Info” links. Click for full size.
Here’s a video tutorial showing FreeFixer in action removing the dbd.cooldeas.com pop-up ads:
Did this blog post help you to remove the dbd.cooldeas.com pop-up ads? Please let me know or how I can improve this blog post.
Sound familiar? You see pop-up ads from ad124m.adk2.net while browsing on sites that typically don’t advertise in pop-up windows. The pop-ups manage to escape the built-in pop-up blockers in Google Chrome, Mozilla Firefox, Internet Explorer, Safari or Opera. Perhaps the ad124m.adk2.net pop-ups appear when clicking search results from Google? Or does the pop-ups show up even when you’re not browsing?
Here is how the ad124m.adk2.net ad looked like on my system:
If this sounds like what you are seeing on your machine, you apparently have some adware installed on your system that pops up the ad124m.adk2.net ads. Contacting the owner of the website would be a waste of time. They are not responsible for the advertisements. I’ll do my best to help you with the ad124m.adk2.net removal in this blog post.
For those that are new to the blog: Not long ago I dedicated some of my lab machines and deliberately installed a few adware programs on them. I have been following the actions on these systems to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the adware auto-updates, or if it downloads and installs additional unwanted software on the systems. I first found the ad124m.adk2.net pop-up on one of these lab systems.
ad124m.adk2.net was created on 2013-09-30. ad124m.adk2.net resolves to 130.211.172.187. Here’s the traffic rank for adk2.net:
So, how do you remove the ad124m.adk2.net pop-up ads? On the machine where I got the ad124m.adk2.net ads I had TinyWallet, BrowserWarden and BlockAndSurf installed. I removed them with FreeFixer and that stopped the ad124m.adk2.net pop-ups and all the other ads I was getting in Mozilla Firefox.
The issue with pop-ups like the one described in this blog post is that it can be popped up by many variants of adware, not just the adware that’s installed on my system. This makes it impossible to say exactly what you need to remove to stop the pop-ups.
Anyway, here’s my suggestion for the ad124m.adk2.net ads removal:
What software do you have installed if you look in the Add/Remove programs dialog in the Windows Control Panel? Something that you don’t remember installing yourself or that was recently installed?
How about your add-ons you installed in your browsers. Anything in the list that you don’t remember installing?
If that didn’t help, I’d recommend a scan with FreeFixer to manually track down the adware. FreeFixer is a freeware tool that I’m working on that scans your computer at lots of locations, such as browser add-ons, processes, Windows services, recently modified files, etc. If you want to get additional details about a file in the scan result, you can click the More Info link for that file and a web page will open up with a VirusTotal report which will be very useful to determine if the file is safe or malware:
An example of FreeFixer’s “More Info” links. Click for full size.
Here you can see FreeFixer in action removing the adware that caused pop-up ads:
Did you find any adware on your machine? Did that stop the ad124m.adk2.net ads? Please post the name of the adware you uninstalled from your machine in the comment below.
Having a hard time with pop-up surveys from slavesail.xyz? If so, you might have adware installed on your machine. I got the slavesail.xyz pop ups in Firefox, but they can appear if you are using Chrome, Internet Explorer, Safari or Opera too.
Here is how the slavesail.xyz ad looked like on my machine:
Does this sound like what you see your computer, you almost certainly have some adware installed on your computer that pops up the slavesail.xyz ads. There’s no use contacting the owners of the web site you were browsing. The ads are not coming from them. I’ll try help you with the slavesail.xyz removal in this blog post.
For those that are new to the blog: Not long ago I dedicated some of my lab systems and intentionally installed some adware programs on them. I have been monitoring the actions on these computers to see what kinds of adverts that are displayed. I’m also looking on other interesting things such as if the adware updates itself automatically, or if it downloads and installs additional unwanted software on the computers. I first spotted the slavesail.xyz pop-up on one of these lab machines.
slavesail.xyz was registered on 2014-12-03. hhezz.super-promo.slavesail.xyz resolves to the 173.255.219.8 address and slavesail.xyz to 184.73.247.179.
So, how do you remove the slavesail.xyz pop-up ads? On the machine where I got the slavesail.xyz ads I had TinyWallet, BrowserWarden and BlockAndSurf installed. I removed them with FreeFixer and that stopped the slavesail.xyz pop-ups and all the other ads I was getting in Firefox.
BlockAndSurf was the adware that caused the pop-ups in my case. I know this since the pop-up ad had a label with the adware name: “Ads by BlockAndSurf“.
What label did your pop-up ad have? Please share by posting a comment below.
The issue with pop-ups like this one is that it can be popped up by many variants of adware, not just the adware on my system. This makes it impossible to say exactly what you need to remove to stop the pop-ups.
So, what should done to solve the problem? To remove the slavesail.xyz pop-up ads you need to review your machine for adware or other types of unwanted software and uninstall it. Here’s my suggested removal procedure:
The first thing I would do to remove the slavesail.xyz pop-ups is to examine the programs installed on the machine, by opening the “Uninstall programs” dialog. You can open this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows you can just type in “uninstall” in the Control Panel’s search field to find that dialog:
Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:
Do you see something strange-looking listed there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if something was installed approximately about the same time as you started observing the slavesail.xyz pop-ups.
Then I would check the browser add-ons. Adware often show up under the add-ons menu in Chrome, Firefox, Internet Explorer or Safari. Is there something that looks suspicious? Something that you don’t remember installing?
I think you will be able to identify and remove the adware with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the adware. FreeFixer is a freeware tool that I started develop about 8 years ago. It’s a tool designed to manually find and uninstall unwanted software. When you’ve tracked down the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.
FreeFixer’s removal feature is not crippled like many other removal tools out there. It won’t require you to pay a fee just when you are about to remove the unwanted files.
And if you’re having difficulties deciding if a file is clean or adware in FreeFixer’s scan report, click on the More Info link for the file. That will open up your web browser with a page which contains additional information about the file. On that web page, check out the VirusTotal report which can be very useful:
An example of FreeFixer’s “More Info” links. Click for full size.
Here you can see FreeFixer in action removing the adware that caused pop-up ads:
Did this blog post help you to remove the slavesail.xyz pop-up ads? Please let me know or how I can improve this blog post.
Did you just get a pop-up survey from notebookarm.xyz and wonder where it came from? Did the notebookarm.xyz ad appear to have been initiated from a web site that under normal circumstances don’t use aggressive advertising such as pop-up windows? Or did the notebookarm.xyz pop-up show up while you clicked a link on one of the major search engines, such as Google, Bing or Yahoo?
Here’s how the notebookarm.xyz pop-up survey looked like when I got it on my machine:
If this sounds like what you are seeing on your computer, you most likely have some adware installed on your computer that pops up the notebookarm.xyz ads. Don’t flame the people that runs the site you were at, the ads are probably not coming from that website, but from the adware that’s installed on your machine. I’ll try help you to remove the notebookarm.xyz pop-up surveys in this blog post.
If you have been following this blog already know this, but if you are new: Some time ago I dedicated some of my lab computers and intentionally installed a few adware programs on them. Since then I’ve been following the behaviour on these computers to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the adware updates itself automatically, or if it downloads and installs additional unwanted software on the machines. I first noticed the notebookarm.xyz pop-up on one of these lab systems.
notebookarm.xyz was registered on 2014-12-03. ki6zz.super-promo.notebookarm.xyz resolves to the 50.116.45.187 address and notebookarm.xyz to 184.73.247.179.
So, how do you remove the notebookarm.xyz pop-up ads? On the machine where I got the notebookarm.xyz ads I had TinyWallet, BlockAndSurf and BrowserWarden installed. I removed them with FreeFixer and that stopped the notebookarm.xyz pop-ups and all the other ads I was getting in Mozilla Firefox.
The problem with this type of pop-up is that it can be initiated by many variants of adware, not just the adware on my system. This makes it impossible to say exactly what you need to remove to stop the pop-ups.
Anyway, here’s my suggestion for the notebookarm.xyz ads removal:
What software do you have installed if you look in the Add/Remove programs dialog in the Windows Control Panel? Something that you don’t remember installing yourself or that was recently installed?
You can also check the add-ons you have in your browsers. Same thing here, do you see something that you don’t remember installing?
If that does not help, you can give FreeFixer a try. FreeFixer is built to assist users when manually tracking down adware and other types of unwanted software. It is a freeware utility that I’ve been working since 2006 and it scans your machine at lots of locations where unwanted software is known to hook into your machine. If you would like to get additional details about a file in FreeFixer’s scan result, you can just click the More Info link for that file and a web page with a VirusTotal report will open up, which can be very useful to determine if the file is safe or malware:
An example of FreeFixer’s “More Info” links. Click for full size.
Here’s a video tutorial on how to remove the pop-ups with FreeFixer:
Did this blog post help you to remove the notebookarm.xyz pop-up ads? Please let me know or how I can improve this blog post.
Did you just get a popup survey from fingerbedroom.xyz and wonder where it came from? Did the fingerbedroom.xyz ad appear to have been initiated from a web site that under normal circumstances don’t use aggressive advertising such as pop-up windows? Or did the fingerbedroom.xyz pop-up show up while you clicked a link on one of the major search engines, such as Google, Bing or Yahoo?
Here’s a screenshot of the fingerbedroom.xyz pop-up survey when it showed up on my computer:
If this sounds like what you are seeing on your machine, you probably have some adware installed on your machine that pops up the fingerbedroom.xyz surveys. So there’s no use contacting the site owner for the site you were at. The ads are not coming from them. I’ll do my best to help you remove the fingerbedroom.xyz pop up in this blog post.
If you have been following this blog already know this, but if you are new: Some time ago I dedicated a few of my lab computers and intentionally installed some adware programs on them. Since then I have been observing the behaviour on these machines to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the adware updates itself automatically, or if it installs additional unwanted software on the computers. I first found the fingerbedroom.xyz pop-up on one of these lab systems.
fingerbedroom.xyz resolves to the 184.73.247.179 IP address and lcezz.super-promo.fingerbedroom.xyz to 50.116.45.187. fingerbedroom.xyz was created on 2014-12-03.
So, how do you remove the fingerbedroom.xyz pop-up ads? On the machine where I got the fingerbedroom.xyz ads I had TinyWallet, BlockAndSurf and BrowserWarden installed. I removed them with FreeFixer and that stopped the fingerbedroom.xyz pop-ups and all the other ads I was getting in Firefox.
The issue with pop-ups such as this one is that it can be initiated by many variants of adware. This makes it impossible to say exactly what you need to remove to stop the pop-ups.
So, what should done to solve the problem? To remove the fingerbedroom.xyz pop-up ads you need to examine your computer for adware or other types of unwanted software and uninstall it. Here’s my suggested removal procedure:
What software do you have installed if you look in the Add/Remove programs dialog in the Windows Control Panel? Something that you don’t remember installing yourself or that was recently installed?
You can also check the add-ons you installed in your browsers. Same thing here, do you see something that you don’t remember installing?
If that didn’t help, you can give FreeFixer a try. FreeFixer is built to assist users when manually tracking down adware and other types of unwanted software. It is a freeware utility that I’ve been working since 2006 and it scans your computer at lots of locations where unwanted software is known to hook into your computer. If you would like to get additional details about a file in FreeFixer’s scan result, you can just click the More Info link for that file and a web page with a VirusTotal report will open up, which can be very useful to determine if the file is safe or malware:
An example of FreeFixer’s “More Info” links. Click for full size.
Here’s a video tutorial on how to remove the pop-ups with FreeFixer:
Are you a Mac or Linux user and get the fingerbedroom.xyz pop-ups? What did you do to stop the pop-up in your browser? Please share in the comments below. Thank you!
Did you find any adware on your machine? Did that stop the fingerbedroom.xyz ads? Please post the name of the adware you uninstalled from your machine in the comment below.
Did you just get a pop-up from prg.coolappsa.com and wonder where it came from? Did the prg.coolappsa.com ad appear to have been launched from a web site that under normal circumstances don’t use aggressive advertising such as pop-up windows? Or did the prg.coolappsa.com pop-up show up while you clicked a link on one of the major search engines, such as Google, Bing or Yahoo?
Here’s how the prg.coolappsa.com pop-up looked like when I got it on my computer:
When I first spotted the pop-up, it redirected to adcash.com, which then redirected to the actual ad.
If you also see this on your system, you most likely have some adware installed on your system that pops up the prg.coolappsa.com ads. There’s no use contacting the owners of the site you currently were browsing. The ads are not coming from them. I’ll try help you with the prg.coolappsa.com removal in this blog post.
Those that have been spending some time on this blog already know this, but for new visitors: A little while back I dedicated a few of my lab computers and intentionally installed a few adware programs on them. Since then I’ve been tracking the behaviour on these machines to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the adware updates itself, or if it installs additional unwanted software on the computers. I first spotted the prg.coolappsa.com pop-up on one of these lab computers.
prg.coolappsa.com was registered on 2014-11-23. prg.coolappsa.com resolves to the 208.43.241.244 address. According to YouGetSignal.com’s reverse ip lookup, the following domains is also resolving to the same IP:
control.staticlyrics.com
dss.drivefor.net
gir.driveropti.net
gym.macpath.net
jco.mappre.net
nsl.mapticket.net
So, how do you remove the prg.coolappsa.com pop-up ads? On the machine where I got the prg.coolappsa.com ads I had TinyWallet, BlockAndSurf and Browser Warden installed. I removed them with FreeFixer and that stopped the prg.coolappsa.com pop-ups and all the other ads I was getting in Mozilla Firefox.
BlockAndSurf was the adware that caused the pop-ups in my case. The pop-up was labelled “BlockAndSurf“.
What label did your pop-up ad have? Please share in the comments area below.
The bad news with pop-ups like this one is that it can be initiated by many variants of adware. I think that adware such as CheckMeUp, New Player, Salus and SaferSurf can also be responsible for the prg.coolappsa.com popups. And there are probably other variants too. This makes it impossible to say exactly what you need to remove to stop the pop-ups.
So, what can be done? To remove the prg.coolappsa.com pop-up ads you need to examine your computer for adware or other types of unwanted software and uninstall it. Here’s my suggested removal procedure:
The first thing I would do to remove the prg.coolappsa.com pop-ups is to examine the software installed on the machine, by opening the “Uninstall programs” dialog. You can find this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows you can just type in “uninstall” in the Control Panel’s search field to find that dialog:
Click on the “Uninstall a program” link and the Uninstall programs dialog will open up:
Do you see something suspicious listed there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if some program was installed about the same time as you started getting the prg.coolappsa.com pop-ups.
Then I would check the browser add-ons. Adware often appear under the add-ons menu in Mozilla Firefox, Google Chrome, Internet Explorer or Safari. Is there anything that looks suspicious? Anything that you don’t remember installing?
I think you will be able to track down and uninstall the adware with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the adware. FreeFixer is a freeware tool that I started develop about 8 years ago. Freefixer is a tool built to manually track down and uninstall unwanted software. When you’ve found the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.
FreeFixer’s removal feature is not locked like many other removal tools out there. It will not require you to pay for the program just when you are about to remove the unwanted files.
And if you’re having difficulties determining if a file is legit or adware in FreeFixer’s scan report, click on the More Info link for the file. That will open up a web page which contains more details about the file. On that web page, check out the VirusTotal report which can be very useful:
An example of FreeFixer’s “More Info” links. Click for full size.
Here’s a video guide showing how to remove the prg.coolappsa.com pop-up ads with FreeFixer:
Did this blog post help you to remove the prg.coolappsa.com pop-up ads? Please let me know or how I can improve this blog post.
