{"id":1952,"date":"2014-10-04T16:30:37","date_gmt":"2014-10-04T16:30:37","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=1952"},"modified":"2018-05-29T12:02:00","modified_gmt":"2018-05-29T12:02:00","slug":"remove-protectedbrowsing","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/remove-protectedbrowsing\/","title":{"rendered":"How to remove ProtectedBrowsing adware"},"content":{"rendered":"

Just wanted to write a short post before going back to coding on FreeFixer<\/a>. Found another adware<\/strong> called ProtectedBrowsing<\/strong> right now.<\/p>\n

If ProtectedBrowsing is installed on your machine, you will find ads labeled Ad by ProtectedBrowsing<\/strong> and\u00a0green links inserted into web pages saying Click to Continue by ProtectedBrowsing<\/strong>.<\/p>\n

\"Ad<\/a> \"Ad<\/a> \"ad<\/a>\"Click<\/a><\/p>\n

You will also see a notification message from the system tray saying\u00a0Proxy Protection Enabled<\/strong> and an icon in the system tray. New processes will appear in the Windows Task Manager:\u00a0bservice.exe, bservice64.exe, wd.exe, pwdg.exe and proc.exe. ProtectedBrowsing also adds a new entry “54.204.28.26 baefoldjnepdncjikpmjiamfbjgicfol”<\/strong>\u00a0 in the HOSTS file. I’ll show how to remove ProtectedBrowsing in this blog post with the FreeFixer removal tool.<\/p>\n

\"Pproxy<\/a> \"ProtectedBrowsing<\/a><\/p>\n

\"oops,<\/a><\/p>\n

\"bservice.exe<\/a><\/p>\n

ProtectedBrowsing also installs add-ons in your browsers. Here’s two\u00a0screenshots showing the adware in Chrome<\/strong> and Firefox<\/strong>:<\/p>\n

\"ProtectedBrowsing<\/a> \"ProtectedBrowsing<\/a><\/p>\n

ProtectedBrowsing is bundled<\/strong> with a number of downloads. Bundling means that software is included in other software’s installers.<\/p>\n

Generally, you can avoid bundled software such as ProtectedBrowsing by being careful when installing software and declining the bundled offers in the installer.<\/p>\n

When I test some new bundled software I always upload it to VirusTotal to test if the anti-virus scanners there find something fishy. I uploaded FrameworkBHO.dll<\/strong> which is digitally signed by Gratifying Apps<\/strong>. The detection rate is very low. Only 1 of the scanners detected the file. AVG names ProtectedBrowsing as Generic.D4C<\/strong>.<\/p>\n

\"protectedbrowser<\/a><\/p>\n

Removing ProtectedBrowsing<\/strong> is pretty easy with FreeFixer<\/a>. Here’s a few screenshots from the removal that should help you: A restart of your system may be required to complete the removal. Problem fixed.<\/p>\n

\"wd.exe<\/a> \"ProtectedBrowsing<\/a> \"ProtectedBrowsing<\/a> \"ProtectedBrowsing<\/a> \"bservice.exe<\/a> \"bhelper64.dll<\/a> \"bhelper64.dll<\/a> \"bench<\/a> \"54.204.28.26<\/a><\/p>\n

To remove the ProtectedBrowsing Chrome extension, open up the Settings menu in Chrome and click on Extensions in the left pane.<\/p>\n

Hope this helped you remove the ProtectedBrowsing adware.<\/p>\n

Do you also have ProtectedBrowsing on your machine? Any idea how it installed? Please share your story the comments below. Thanks!<\/p>\n

Thanks for reading!<\/p>\n","protected":false},"excerpt":{"rendered":"

Just wanted to write a short post before going back to coding on FreeFixer. Found another adware called ProtectedBrowsing right now. If ProtectedBrowsing is installed on your machine, you will find ads labeled Ad by ProtectedBrowsing and\u00a0green links inserted into web pages saying Click to Continue by ProtectedBrowsing. You will also see a notification message … Continue reading How to remove ProtectedBrowsing adware<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[3,16],"tags":[174],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/1952"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=1952"}],"version-history":[{"count":4,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/1952\/revisions"}],"predecessor-version":[{"id":1976,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/1952\/revisions\/1976"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=1952"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=1952"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=1952"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}