{"id":6136,"date":"2015-05-07T10:15:51","date_gmt":"2015-05-07T10:15:51","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=6136"},"modified":"2018-05-29T11:58:29","modified_gmt":"2018-05-29T11:58:29","slug":"remove-priceminus-ads-by-priceminus-removal","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/remove-priceminus-ads-by-priceminus-removal\/","title":{"rendered":"Remove PriceMinus &#8211; &#8220;Ads by PriceMinus&#8221; Removal"},"content":{"rendered":"<p>Welcome! Just a quick post on the <strong>PriceMinus<\/strong> <strong>adware<\/strong>. PriceMinus seems to be a variant of <a title=\"Remove \u201cAds by SalePlus\u201d and \u201cAd by SalePlus\u201d\" href=\"http:\/\/www.freefixer.com\/b\/remove-ads-by-saleplus-and-ad-by-saleplus\/\"><strong>SalePlus<\/strong><\/a> that I blogged about some time ago. If PriceMinus is running on your computer, you will notice ads labeled &#8220;Ads by PriceMinus&#8221; inserted into Google search results and on other web sites.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/Ads-by-PriceMinus-on-web-site.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-6138\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/Ads-by-PriceMinus-on-web-site.png\" alt=\"Ads by PriceMinus on web site\" width=\"343\" height=\"191\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/Ads-by-PriceMinus-on-web-site.png 343w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/Ads-by-PriceMinus-on-web-site-300x167.png 300w\" sizes=\"(max-width: 343px) 100vw, 343px\" \/><\/a> <a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/Ads-by-PriceMinus-on-Google.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-6137\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/Ads-by-PriceMinus-on-Google.png\" alt=\"Ads by PriceMinus on Google\" width=\"467\" height=\"272\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/Ads-by-PriceMinus-on-Google.png 467w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/Ads-by-PriceMinus-on-Google-300x174.png 300w\" sizes=\"(max-width: 467px) 100vw, 467px\" \/><\/a><\/p>\n<p>You will also see new add-ons installed into Firefox and Internet Explorer. In my case, it was called <strong>PriceMinus 2.0<\/strong>.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/PriceMinus-2.0-Firefox-add-on.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-6145\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/PriceMinus-2.0-Firefox-add-on.png\" alt=\"PriceMinus 2.0 Firefox add-on\" width=\"495\" height=\"364\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/PriceMinus-2.0-Firefox-add-on.png 495w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/PriceMinus-2.0-Firefox-add-on-300x220.png 300w\" sizes=\"(max-width: 495px) 100vw, 495px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p>In my specific case, the installer file was digitally signed by\u00a0<a title=\"Rodion Veresev \u2013 33% Anti-Virus Detection Rate \u2013 MultiPlug\" href=\"http:\/\/www.freefixer.com\/b\/rodion-veresev-33-anti-virus-detection-rate-multiplug\/\">Rodion Veresev<\/a>. I&#8217;ve also seen \u0003<a title=\"Saul Perec VirusTotal Report \u2013 38% Detection Rate\" href=\"http:\/\/www.freefixer.com\/b\/saul-perec-virustotal-report\/\">Saul Perec<\/a>\u00a0\u00a0signing PriceMinus installer files.<\/p>\n<p>I&#8217;ll show how to remove PriceMinus in this blog post with the FreeFixer removal tool.<\/p>\n<p>PriceMinus is <strong>bundled<\/strong> in other software&#8217;s installers. Here&#8217;s how it appeared in the installer:<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/PriceMinus-installer.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-6140\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/PriceMinus-installer.png\" alt=\"PriceMinus installer\" width=\"484\" height=\"61\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/PriceMinus-installer.png 484w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/PriceMinus-installer-300x37.png 300w\" sizes=\"(max-width: 484px) 100vw, 484px\" \/><\/a><\/p>\n<p>Generally, you can avoid bundled software such as PriceMinus by being careful when installing software and declining the bundled offers in the installer.<\/p>\n<p>Here&#8217;s a screenshot of the adware&#8217;s web site, <strong>priceminus.info<\/strong>:<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/priceminus.info-web-site.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-6143\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/priceminus.info-web-site.png\" alt=\"priceminus.info web site\" width=\"467\" height=\"249\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/priceminus.info-web-site.png 467w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/priceminus.info-web-site-300x159.png 300w\" sizes=\"(max-width: 467px) 100vw, 467px\" \/><\/a><\/p>\n<p>Another program, called <a title=\"Remove BestAdBlocker Adware\" href=\"http:\/\/www.freefixer.com\/b\/remove-bestadblocker-adware\/\">BestAdBlocker<\/a> was also bundled side by side with PriceMinus. You probably want to remove\u00a0BestAdBlocker too.<\/p>\n<p>When I run into some new bundled software I always upload it to <a title=\"How To Scan a File for Viruses with VirusTotal\" href=\"http:\/\/www.freefixer.com\/b\/scan-files-for-viruses-virustotal\/\">VirusTotal<\/a> to see if the anti-malware programs there detect something suspicious. 36 of the 56 scanners detected the file. ClamAV classifies PriceMinus as <strong>Win.Trojan.Multiplug-3213<\/strong>, F-Secure calls it <strong>Gen:Variant.Application.Zusy<\/strong>, GData detects it as <strong>Gen:Variant.Application.Zusy.139555<\/strong>, Malwarebytes calls it <strong>PUP.Optional.MultiPlug.A<\/strong> and TrendMicro reports <strong>TROJ_GEN.R08NC0EE515<\/strong>.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/PriceMinus-anti-virus-report.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-6139\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/PriceMinus-anti-virus-report.png\" alt=\"PriceMinus anti-virus report\" width=\"700\" height=\"294\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/PriceMinus-anti-virus-report.png 700w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/PriceMinus-anti-virus-report-300x126.png 300w\" sizes=\"(max-width: 700px) 100vw, 700px\" \/><\/a><\/p>\n<p>All you need to do to remove PriceMinus is to check the PriceMinus files in the scan result and click the Fix button. You may have to restart your machine to complete the removal. Just select the PriceMinus files as shown in the screenshots below.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/PriceMinus-remove-ie.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-6142\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/PriceMinus-remove-ie.png\" alt=\"PriceMinus remove ie\" width=\"698\" height=\"358\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/PriceMinus-remove-ie.png 698w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/PriceMinus-remove-ie-300x153.png 300w\" sizes=\"(max-width: 698px) 100vw, 698px\" \/><\/a> <a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/PriceMinus-remove-firefox.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-6141\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/PriceMinus-remove-firefox.png\" alt=\"PriceMinus remove firefox\" width=\"460\" height=\"305\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/PriceMinus-remove-firefox.png 460w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/PriceMinus-remove-firefox-300x198.png 300w\" sizes=\"(max-width: 460px) 100vw, 460px\" \/><\/a><\/p>\n<p>Hope this helped you remove the PriceMinus adware.<\/p>\n<p>Do you also have PriceMinus on your computer? Any idea how it was installed? Please let me and the readers know by posting a comments. Thank you!<\/p>\n<p>Thanks for reading. Welcome back!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Welcome! Just a quick post on the PriceMinus adware. PriceMinus seems to be a variant of SalePlus that I blogged about some time ago. If PriceMinus is running on your computer, you will notice ads labeled &#8220;Ads by PriceMinus&#8221; inserted into Google search results and on other web sites. You will also see new add-ons &hellip; <a href=\"https:\/\/www.freefixer.com\/b\/remove-priceminus-ads-by-priceminus-removal\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Remove PriceMinus &#8211; &#8220;Ads by PriceMinus&#8221; Removal<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[3],"tags":[97,131],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/6136"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=6136"}],"version-history":[{"count":6,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/6136\/revisions"}],"predecessor-version":[{"id":6158,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/6136\/revisions\/6158"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=6136"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=6136"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=6136"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}