Hello there. Just a quick post on the Jelbrus Secure Web adware. If you have Jelbrus Secure Web installed and running on your computer, you will notice privoxy.exe and mlwps.exe running in the Windows Task Manager, a new services installed, pointing to privoxy.exe and mlwps.exe , changes in your LAN proxy settings and a new add-on installed in Internet Explorer called SecureWebBho.
There was no entry in the Add/Remove programs dialog for Jelbrus Secure Web when I tested it.
You may run into this adware infection if you are visiting sites, such as ThePirateBay.
I’ll show how to remove Jelbrus Secure Web in this blog post with the FreeFixer removal tool.
As always when I test some new software I uploaded it to VirusTotal to test if the anti-malwares there find anything fishy. 9% of the scanners detected the file. The Jelbrus Secure Web files are detected as TR/Trash.Gen by Avira, Backdoor.Win32.Bifrose.fsi (v) by AVware, Packed.Win32.Krap.hc by Kaspersky, Bloodhound.MalPE by Symantec and Backdoor.Win32.Bifrose.fsi (v) by VIPRE.
You probably came here looking for removal instructions for Jelbrus Secure Web and you can do so with the FreeFixer removal tool. Just check the Jelbrus Secure Web items as the screenshots below shows. You might have to restart your machine to complete the removal.
Hope that helped you with the removal.
I’ve also noticed a variant, which stores the files in a folder called “SmartComp Safe Network“:
- C:\Program Files (x86)\SmartComp Safe Network\
- C:\Program Files\SmartComp Safe Network\
For example, msnworker.exe.
Did you also find Jelbrus Secure Web on your machine? Any idea how it installed? Did you also get it from The Pirate Bay? Please share your story the comments below. Thanks!
Thanks for reading!