Remove mnh.winnerical.com from Firefox, Chrome and Internet Explorer

This page shows how to remove mnh.winnerical.com from Mozilla Firefox, Google Chrome and Internet Explorer.

Did you just interrupt your work because you noticed mnh.winnerical.com in your browser’s status bar? You are not alone. I also got the mnh.winnerical.com status bar message while browsing. Please read on…

Here is how the mnh.winnerical.com statusbar message looked like on my machine:

mnh.winnerical.com status bar

Here are some of the statusbar messages you may see in your browser’s statusbar:

  • Waiting for mnh.winnerical.com…
  • Transferring data from mnh.winnerical.com…
  • Looking up mnh.winnerical.com…
  • Read mnh.winnerical.com
  • Connected to mnh.winnerical.com…

Does this sound like your story, you presumably have some potentially unwanted program installed on your machine that makes the mnh.winnerical.com domain appear in your web browser. So there’s no use contacting the owner of the site you were browsing. The mnh.winnerical.com status bar messages are not coming from them. I’ll do my best to help you remove the mnh.winnerical.com message in this blog post.

If you have been spending some time on this blog already know this, but if you are new: Not long ago I dedicated some of my lab machines and deliberately installed a few potentially unwanted programs on them. I have been monitoring the behaviour on these machines to see what kinds of advertisements, if any, that are displayed. I’m also looking on other interesting things such as if the potentially unwanted program auto-updates, or if it downloads and installs additional software on the machines. I first found mnh.winnerical.com in Mozilla Firefox’s status bar on one of these lab machines.

mnh.winnerical.com was created on 2014-08-30. winnerical.com resolves to 104.28.8.12. winnerical.com resolves to the same IP address. Here’s some info from the WHOIS database:

Registrant Name: Amir  Kabensky
Registrant Street: Almog  51
Registrant City: Rehovot
Registrant State/Province: Rehovot
Registrant Postal Code: 76668
Registrant Country: IL

So, how do you remove mnh.winnerical.com from your browser? On the machine where mnh.winnerical.com showed up in the status bar I had installed. I removed them with FreeFixer and that stopped the browser from loading data from mnh.winnerical.com.

The problem with status bar messages like the one described in this blog post is that it can be caused by many variants of potentially unwanted programs. I think that potentially unwanted programs such as istartsurf, Movie Wizard and MedPlayerNewVersion can also be responsible for mnh.winnerical.com appearing in the browser. And there are probably other variants too. This makes it impossible to say exactly what you need to remove to stop the status bar messages.

Anyway, here’s my suggestion for the mnh.winnerical.com removal:

  1. Examine what programs you have installed in the Add/Remove programs dialog in the Windows Control Panel. Do you see anything that you don’t remember installing or that was recently installed?
  2. You can also review the add-ons you installed in your web browsers. Same thing here, do you see something that you don’t remember installing?
  3. If that didn’t help, you can give FreeFixer a try. FreeFixer is built to assist users when manually tracking down potentially unwanted programs. It is a freeware utility that I’ve been working since 2006 and it scans your machine at lots of locations where unwanted software is known to hook into your computer. If you would like to get additional details about a file in FreeFixer’s scan result, you can just click the More Info link for that file and a web page with a VirusTotal report will open up, which can be very useful to determine if the file is safe or malware:

    FreeFixer More Info link example
    An example of FreeFixer’s “More Info” links. Click for full size.

Did you find any potentially unwanted program on your machine? Did that stop mnh.winnerical.com? Please post the name of the potentially unwanted program you uninstalled from your machine in the comment below.

Thank you!

Leave a Reply

Your email address will not be published.