Remove omt.coolideasa.com Pop-Up Ads caused by Adware

Did you just get a pop-up from omt.coolideasa.com and wonder where it came from? Did the omt.coolideasa.com ad appear to have been initiated from a web site that under normal circumstances don’t use aggressive advertising such as pop-up windows? Or did the omt.coolideasa.com pop-up show up while you clicked a link on one of the major search engines, such as Google, Bing or Yahoo?

Here’s how the omt.coolideasa.com pop-up looked like when I got it on my system:

omt.coolideasa.com pop-up

If you also see this on your system, you probably have some adware installed on your system that pops up the omt.coolideasa.com ads. So don’t flame the people that runs the website you were at, the advertisements are probably not coming from that site, but from the adware that’s running on your system. I’ll do my best to help you remove the omt.coolideasa.com pop-up in this blog post.

If you have been spending some time on this blog already know this, but if you are new: Not long ago I dedicated some of my lab computers and wilfully installed a few adware programs on them. Since then I have been following the behaviour on these computers to see what kinds of ads that are displayed. I’m also looking on other interesting things such as if the adware updates itself automatically, or if it installs additional unwanted software on the computers. I first found the omt.coolideasa.com pop-up on one of these lab computers.

omt.coolideasa.com was registered on 2014-11-23. omt.coolideasa.com resolves to the 208.43.241.247 address. I checked the IP in YouGetSignal’s reverse whois and the following domains also came up:

  • control.staticlyrics.com
  • gir.driveropti.net
  • gys.mappingdo.net
  • jcn.mapmapping.net
  • jdl.findpre.net
  • jdr.pathtri.net
  • jsn.donecore.net
  • makecashmonies.com
  • nes.makefind.net
  • rou.resyncload.net
  • www.textsfromlastnight.com

So, how do you remove the omt.coolideasa.com pop-up ads? On the machine where I got the omt.coolideasa.com ads I had TinyWallet, BrowserWarden and BlockAndSurf installed. I removed them with FreeFixer and that stopped the omt.coolideasa.com pop-ups and all the other ads I was getting in Firefox.

The problem with this type of pop-up is that it can be popped up by many variants of adware. This makes it impossible to say exactly what you need to remove to stop the pop-ups.

So, what can be done? To remove the omt.coolideasa.com pop-up ads you need to review your computer for adware or other types of unwanted software and uninstall it. Here’s my suggested removal procedure:

  1. What software do you have installed if you look in the Add/Remove programs dialog in the Windows Control Panel? Something that you don’t remember installing yourself or that was recently installed?
  2. You can also examine the browser add-ons. Same thing here, do you see something that you don’t remember installing?
  3. If that didn’t solve the problem, you can give FreeFixer a try. FreeFixer is built to assist users when manually tracking down adware and other types of unwanted software. It is a freeware utility that I’ve been working since 2006 and it scans your system at lots of locations where unwanted software is known to hook into your machine. If you would like to get additional details about a file in FreeFixer’s scan result, you can just click the More Info link for that file and a web page with a VirusTotal report will open up, which can be very useful to determine if the file is safe or malware:

    FreeFixer More Info link example
    An example of FreeFixer’s “More Info” links. Click for full size.

Here’s a video tutorial which shows FreeFixer in action removing the adware that caused the omt.coolideasa.com pop-up ads:

Are you a Mac or Linux user and get the omt.coolideasa.com pop-ups? What did you do to stop the pop-up in your browser? Please share in the comments below. Thank you!

Did you find any adware on your machine? Did that stop the omt.coolideasa.com ads? Please post the name of the adware you uninstalled from your machine in the comment below.

Thank you!