Did you just get a pop-up from rewardmen.country and wonder where it came from? Did the rewardmen.country ad appear to have been initiated from a web site that under normal circumstances don’t use aggressive advertising such as pop up windows? Or did the rewardmen.country pop-up show up while you clicked a link on one of the major search engines, such as Google, Bing or Yahoo?
Here’s a screenshot of the rewardmen.country pop-up ad when it showed up on my computer:
If you also see this on your machine, you probably have some adware installed on your machine that pops up the rewardmen.country ads. Contacting the owner of the web site would be a waste of time. They are not responsible for the ads. I’ll do my best to help you with the rewardmen.country removal in this blog post.
For those that are new to the blog: Not long ago I dedicated a few of my lab machines and intentionally installed a few adware programs on them. Since then I’ve been monitoring the behaviour on these machines to see what kinds of advertisements that are displayed. I’m also looking on other interesting things such as if the adware updates itself automatically, or if it installs additional unwanted software on the computers. I first noticed the rewardmen.country pop-up on one of these lab machines.
rewardmen.country resolves to the 220.127.116.11 IP address and bojzz.super-promo.rewardmen.country to 18.104.22.168. rewardmen.country was created on 2015-01-07.
So, how do you remove the rewardmen.country pop-up ads? On the machine where I got the rewardmen.country ads I had TinyWallet, BlockAndSurf and BrowserWarden installed. I removed them with FreeFixer and that stopped the rewardmen.country pop-ups and all the other ads I was getting in Mozilla Firefox.
The issue with this type of pop-up is that it can be popped up by many variants of adware, not just the adware running on my system. This makes it impossible to say exactly what you need to remove to stop the pop-ups.
Anyway, here’s my suggestion for the rewardmen.country ads removal:
The first thing I would do to remove the rewardmen.country pop-ups is to examine the programs installed on the machine, by opening the “Uninstall programs” dialog. You can open this dialog from the Windows Control Panel. If you are using one of the more recent versions of Windows you can just type in “uninstall” in the Control Panel’s search field to find that dialog:
Do you see something strange-looking in there or something that you don’t remember installing? Tip: Sort on the “Installed On” column to see if some program was installed approximately about the same time as you started getting the rewardmen.country pop-ups.
Then I would check the browser add-ons. Adware often show up under the add-ons menu in Google Chrome, Mozilla Firefox, Internet Explorer, Safari or Opera. Is there anything that looks suspicious? Something that you don’t remember installing?
I think you will be able to track down and uninstall the adware with the steps outlined above, but in case that did not work you can try the FreeFixer removal tool to identify and remove the adware. FreeFixer is a freeware tool that I started develop about 8 years ago. Freefixer is a tool designed to manually identify and remove unwanted software. When you’ve tracked down the unwanted files you can simply tick a checkbox and click on the Fix button to remove the unwanted file.
FreeFixer’s removal feature is not crippled like many other removal tools out there. It will not require you to purchase the program just when you are about to remove the unwanted files.
And if you’re having difficulties figuring out if a file is legitimate or unwanted in FreeFixer’s scan result, click on the More Info link for the file. That will open up your web browser with a page which contains additional details about the file. On that web page, check out the VirusTotal report which can be quite useful:
Here’s a video tutorial on how to remove the pop-ups with FreeFixer:
Did you find any adware on your machine? Did that stop the rewardmen.country ads? Please post the name of the adware you uninstalled from your machine in the comment below.