Tampilkan postingan dengan label Adware. Tampilkan semua postingan
Tampilkan postingan dengan label Adware. Tampilkan semua postingan

Selasa, 15 September 2015

Remove gangnamgame.net pop-up on startup (Uninstall Guide)

Adware is the name of a type of computer software program that shows you gangnamgame.net pop-up window whenever you start up your computer. It can be also detected as Gen.Variant.Kazy malware. Naturally, the main reason for this is to increase traffic to, and sales on, a designated website but it has another purpose to, and that is to generate a stream of revenue for the person who developed it. While this is all well and good for the developer, often the outlook can be not quite so rosy – or financially rewarding – for you and me. That's how adware usually works. However, to generate a stream of revenue probably isn't the main goal of gangnamgame.net pop-up. It's basically a blank page with embedded PSY - GANGNAM STYLE video. Maybe someone is just testing something or it could also be an attempt to manipulation stats since it the web page uses LiveInternet counter to track visitors. Anyway, no matter what's the reason behind this adware it's time to remove it!

The way in which gangnamgame.net adware works

First of all, it modifies Windows registry by adding a cmd.exe command which runs every time Windows starts. Secondly, it creates a start-up entry. As a result, black cmd.exe window pops up and opens the gangnamgame.org web page which redirects you to gangnamgame.net. The whole Windows registry modification looks like this:

Command: cmd.exe /c start http://gangnamgame.org&& exit
Location: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run

As you can see, the initial website is gangnamgame.org not gangnamgame.net but since it redirects very fast you can't really notice this.

Other problems with this adware

Pop up windows caused by an adware infection can be severely annoying and have a big knock on effect on your ability to use your computer. But that's not all and the real issue that many people have with adware is the fact that it has the ability to monitor which websites you look at. This is so that the programmer is able to customize the type of advertising they show you – once they know that you have been looking at new Nike sneakers, cheap flights to New York, or insurance broking services, you will then see adverts for the same type of products or providers. It's not only annoying but also potentially dangerous. Just imagine that it's not an embedded video any more but a malicious piece of code. Simply visiting such website is more than enough to infect your computer malware.

How can it generate a source of income for the developer?

As mentioned earlier, adware is often used to create revenue for the developer and this is often because they want to recoup the costs that they incurred when they developed another, usually more legitimate app or program. But as I said, the main goal of this particular adware is probably different than simply displaying ads. I'm not sure what exactly they are trying to achieve but I hope to find out soon.

However, I do not that gangnamgame.net adware will be packaged surreptitiously with that program or app and it is because they are making money off the adware, they are able to offer their real product (i.e. application, file, or software) at a low cost – and often even for free.

Does it fall under the malware umbrella?

It is true to say that there are some far more unpleasant types of malware – or malicious software – lurking on the internet, and adware is often discussed in conjunction with other malware programs but this can be a bit of a gray area. Gangnamgame.net programmers of course will tell you that it is not even close to being malware as it doesn't do you harm, but many people see it as just another online threat. Just bear in mind that if it is installed on your PC or phone is could destabilize your device’s security settings or tools and leave you vulnerable to something far more dangerous.

How to get rid of gangnamgame.net pop-up?

To stop annoying pop-ups on your computer, you can use Autoruns for Windows or open up Windows registry editor, search for gangnamgame.net or gangnamgame.org and delete all entries you find. You can also remove this pop-up window by removing the start-up entry in the Windows Task Scheduler. I recommend using Autoruns. Once the problem is fixed, scan your computer with anti-malware software. Why? Because very often this adware comes bundled with PUPs and even spyware. There might be malware on your computer that you didn't notice yet. If you have any questions, please leave a comment down below. Good luck and be safe online!

Written by Michael Kaur, http://deletemalware.blogspot.com



Gangnamgame.net Pop-up Removal Guide:


1. First of all, download recommended anti-malware software and run a full system scan. It will detect and remove this infection from your computer. You may then follow the manual removal instructions below to remove the leftover traces of this malware. Hopefully you won't have to do that.






2. Download Autoruns for Windows and save it to your Desktop.

3. Launch autoruns.exe program. From the menu, click Options and uncheck Hide Windows entries.



4. Go to the Logon tab and delete the key with the "gangnamgame.org" value. Possible registry entries: HKCU\Software\Microsoft\Windows\CurrentVersion\Run and HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run

Then go to the Image Hijacks tab and delete every entry you find that point gangnamgame.org.



5. Close Autoruns and reboot your computer when done.

6. Scan your computer with anti-malware software.

    Selasa, 08 September 2015

    Remove BSOD: ERROR 777 "CLUSTER ERRORS DETECTED" Scam Pop-up (Uninstall Guide)

    You are not alone if you have come across this fake BSOD saying "CLUSTER ERRORS DETECTED" ERROR 777 Failure operating system on your PC that you've never seen before but just where did this strange imposter come from and how did it get there in the first place? Welcome to the world of adware; the presumptuous software program that decides how and when it is going to install itself on your computer - whether you like it or not!

    How do adware programs get on to my computer?

    In the majority of cases they will be installed on your computer because you have downloaded it. This particular variant modifies Windows registry and displays a fake BSOD every time Windows starts. Here's how this fake BSOD looks like:


    0x000000CE DRIVER_UNLOADED_WITHOUT_CANCELLING_PENDING_OPERATIONS
    "CLUSTER ERRORS DETECTED" HARD DRIVE MAY NOT WORK PROPERLY
    BSOD: ERROR 777 Failure operating system
    Host: BLUE SCREEN ERROR Ox000000CE
    :Windows updates – failed
    :Windows Firewall – Turned off
    :System health – Critical

    Please contact Windows Support Center for Further Assistance
    (USA & Canada) Toll Free – 1-800-311-5947

    There's also another fake pop-up message that usually appears just a few minutes later and says:


    You're about to be signed out
    Error code 00XB10999. Windows might be infected with Trojan virus. Your financial information might be at risk.

    You probably guessed it, this adware promotes fake tech support services. It wants you to call 1-800-311-5947 and do want scammers say. DON'T! Otherwise, you will probably lose your money. Both pop-ups are fake and honestly they are rather confused. At first there's this 0x000000CE DRIVER_UNLOADED_WITHOUT_CANCELLING_PENDING_OPERATIONS error. Then it says something about hard drive "CLUSTER ERRORS DETECTED" HARD DRIVE MAY NOT WORK PROPERLY and then mentions BSOD: ERROR 777 Failure operating system error. But that's not all, Error code 00XB10999 is probably the main issue and it appears to be virus related. Obviously, scammers went a bit too far trying to scare users and as a result this fake BSOD message and other pop-ups are doomed to fail. I think most users realize it's a scam immediately. The only annoying part about this adware infection is that it actually restarts your computer every 10 minutes. It does this probably to imitate hard drive errors. Anyway, you can simply open your Task Manager and end the malicious process before it restarts your computer.

    Now hear me out before you start protesting that you most certainly did NOT download this adware because it is not completely your fault. You see adware programs are often packaged with other programs and when you download one of these programs you will also be downloading and installing the adware that is hiding in its shadows. In that way, the adware programs can infiltrate your computer without you being any the wiser.

    But what if I don't want to stop downloading?

    Of course, to say 'never download anything ever again' is a little bit farfetched. After all, we all need certain software programs in order to be able to do our jobs. So the question remains, how do you prevent an adware program from piggy backing on the app or program that you do want and installing itself on your machine?

    The problem is that even reputable programs can be hijacked by adware so it can be a totally hit and miss affair. One option is to use a piece of software called a sandbox. These are available for download (hopefully adware free!) on the internet and allow you to open the program or app in them before you download it on to your PC. The sandbox will stop the program from making any changes on your computer and also alert you to what those changes might be. That way you have the option of making an informed decision and deciding whether or not you want to transfer the program from out of the sandbox and onto your PC or, if you're not certain you trust it, you can abort the download.

    How to avoid "BSOD: ERROR 777 Failure operating system" and similar pop-ups

    To give yourself a better shot at preventing adware from installing itself on your computer you should also pay attention when you are actually downloading something by reading the End User License Agreement carefully. This should tell you if any hidden extras are included and so will allow you to check or uncheck boxes relating to add-ons. If your computer has been infected by this adware, please follow the steps in the removal guide below. If you have questions, please leave a comment down below. I will be more than happy to help you. Good luck and be safe online!

    Written by Michael Kaur, http://deletemalware.blogspot.com



    "CLUSTER ERRORS DETECTED" BSOD: ERROR 777 Scam Pop-up Removal Guide:


    1. First of all, download anti-malware software and run a full system scan. It will detect and remove this infection from your computer. You may then follow the manual removal instructions below to remove the leftover traces of this malware. Hopefully you won't have to do that.






    2. Remove adware related programs from your computer using the Uninstall a program control panel (Windows 7). Go to the Start Menu. Select Control PanelUninstall a Program.

    If you are using Windows 8 or 10, simply drag your mouse pointer to the right edge of the screen, select Search from the list and search for "control panel".



    Or you can right-click on a bottom left hot corner (formerly known as the Start button) and select Control panel from there.



    3. When the Add/Remove Programs or the Uninstall a Program screen is displayed, scroll through the list of currently installed programs and remove the following:
    • Magical Find
    • GoSave
    • Extag
    • SaveNewaAppz
    • and any other recently installed application


    Simply select each application and click Remove. If you are using Windows Vista, Windows 7 or Windows 8, click Uninstall up near the top of that window. When you're done, please close the Control Panel screen.


    Remove "CLUSTER ERRORS DETECTED" BSOD: ERROR 777 pop-up ads related extensions from Google Chrome:

    1. Click on Chrome menu button. Go to More ToolsExtensions.




    2. Click on the trashcan icon to remove Magical Find, Extag, Gosave, HD-Plus 3.5 and other extensions that you do not recognize.

    If the removal option is grayed out then read how to remove extensions installed by enterprise policy.



    3. Then select Settings. Scroll down the page and click Show advanced settings.


    4. Find the Reset browser settings section and click Reset browser settings button.


    5. In the dialog that appears, click Reset. That's it!


    Remove "CLUSTER ERRORS DETECTED" BSOD: ERROR 777 pop-up ads related extensions from Mozilla Firefox:

    1. Open Mozilla Firefox. Go to Tools MenuAdd-ons.




    2. Select Extensions. Click Remove button to remove Magical Find, Extag, Gosave, MediaPlayerV1, HD-Plus 3.5 and other extensions that you do not recognize.


    Remove "CLUSTER ERRORS DETECTED" BSOD: ERROR 777 pop-up ads related add-ons from Internet Explorer:

    1. Open Internet Explorer. Go to ToolsManage Add-ons. If you have the latest version, simply click on the Settings button.




    2. Select Toolbars and Extensions. Click Remove/Disable button to remove the browser add-ons listed above.

    Sabtu, 05 September 2015

    Remove "New Version of software available" Pop-up Adware (Uninstall Guide)

    New Version of software available pop-up window usually appears when you open your web browser and it can only be closed using Task Manager which is annoying as hell. Obviously, it's a fake software update pop-up caused by adware installed on your computer. It tries to install browser hijackers, potentially unwanted programs and other adware on your computer. If you got this pop-up as well close it and do not install anything. I added a few images below to illustrate how this adware pushes a browser hijacker called Cassiopesa. It is usually listed as Setup/Uninstall.exe in case you can't find it and close in Task Manager.


    As we use the internet and develop our online lives more and more, it comes as no real surprise to learn that cyber criminals too are evolving the ways they can use it to do their own dirty work and exploit our need for the internet. Whether they want to steal our identities, our information, our data or our money, one thing is for sure and that is that we need to be on our guard now more than ever before.


    Don't fall victim to "New Version of software available" pop-up and other adware

    From something like adware which is not seen as the deadliest of all the internet threats to malicious software programs such as Trojan Horses, there is an endless stream of increasingly sophisticated ways to trap and defraud us. But if adware is generally not seen as to be as lethal as some of its malware counterparts, does that mean we can simply forget about it and concentrate on the real bad boys instead?

    In a word, no. Brands and businesses of all shapes and sizes are using adware in an attempt to drive web traffic to their websites in the hope of increasing sales. And while that makes sense, after all advertising is not exactly a new concept, adware programmers are also using online adverts to earn money themselves. Adware can create a viable source of income for programmers who give away applications and programs for free and because of this they are desperate for us to install it on our computers. And they do this by sneaking adware onto our operating systems without us knowing about it. Most of the time adware programs display adverts trying to convince you into installing bogus programs. However, this particular variant mimics software update pop-up saying "new version of software available". Bad grammar and this pop-up window comping like out of no where should make everyone suspicious but unfortunately some users still fall victim to this scam.

    How to get rid of "New Version of software available" pop-up and related malware

    Having something thrust or foisted upon them can leave many people naturally dubious about the safety or innocence of adware and the more virulent strains can have a real knock on effect on the usage of your PC therefore you should get rid of it as quickly as possible.
    • Download a reputable adware removal tool (link bellow)
    • Back up your files and data to an external hard drive
    • Shut down then restart your PC while holding down the F8 key (this puts your PC into 'safety mode')
    • Run the adware removal program. This should tell you the name of the adware – which you can now uninstall from the Programs tab under your PC's Control Panel
    • To make sure you are definitely adware free, repeat the entire process
    For more details, please follow the steps in the removal guide below. If you have any questions, please leave a comment down below. Good luck and be safe online!

    Written by Michael Kaur, http://deletemalware.blogspot.com



    "New Version of software available" Pop-up Removal Guide:


    1. First of all, download anti-malware software and run a full system scan. It will detect and remove this infection from your computer. You may then follow the manual removal instructions below to remove the leftover traces of this malware. Hopefully you won't have to do that.






    2. Remove "New Version of software available" pop-up related programs from your computer using the Uninstall a program control panel (Windows 7). Go to the Start Menu. Select Control PanelUninstall a Program.

    If you are using Windows 8 or 10, simply drag your mouse pointer to the right edge of the screen, select Search from the list and search for "control panel".



    Or you can right-click on a bottom left hot corner (formerly known as the Start button) and select Control panel from there.



    3. When the Add/Remove Programs or the Uninstall a Program screen is displayed, scroll through the list of currently installed programs and remove the following:
    • Plus-HD
    • GoSave
    • Extag
    • SaveNewaAppz
    • and any other recently installed application


    Simply select each application and click Remove. If you are using Windows Vista, Windows 7 or Windows 8, click Uninstall up near the top of that window. When you're done, please close the Control Panel screen.


    Remove "New Version of software available" pop-up related extensions from Google Chrome:

    1. Click on Chrome menu button. Go to More ToolsExtensions.




    2. Click on the trashcan icon to remove Plus-HD, Extag, Gosave and other extensions that you do not recognize.

    If the removal option is grayed out then read how to remove extensions installed by enterprise policy.



    3. Then select Settings. Scroll down the page and click Show advanced settings.


    4. Find the Reset browser settings section and click Reset browser settings button.


    5. In the dialog that appears, click Reset. That's it!


    Remove "New Version of software available" pop-up related extensions from Mozilla Firefox:

    1. Open Mozilla Firefox. Go to Tools MenuAdd-ons.




    2. Select Extensions. Click Remove button to remove Plus-HD, Extag, Gosave, MediaPlayerV1 and other extensions that you do not recognize.


    Remove "New Version of software available" pop-up related add-ons from Internet Explorer:

    1. Open Internet Explorer. Go to ToolsManage Add-ons. If you have the latest version, simply click on the Settings button.




    2. Select Toolbars and Extensions. Click Remove/Disable button to remove the browser add-ons listed above.

    Jumat, 04 September 2015

    Stop pop-up ads and adware in Edge Browser

    How stop annoying adverts from taking over the new Microsoft Edge browser? I get this question a lot, especially when most users decided to upgrade to Windows 10. It becomes even more frustrating when people realize that they can't use ad blockers because Microsoft Edge doesn't support add-ons and extensions. As you may know, most pop-up ads are caused by adware. That's why you might need to remove adware first before blaming Edge browser for not doing enough to protect you from intrusive adverts. Adware, or Advertising Supported Software to give it its full name is something which you should be aware of even if you use Microsoft Edge. This is the name given to software programs that have been designed to display, or download, pop-up adverts onto your computer screen. Of course, advertising is a form of marketing – we all know that – and of course the reason for adware's existence is to generate a source of income for its programmer or owner. And while this is good news for programmers, advertisers and brands that use adware, where does that leave the likes of you and me? Can adware actually do us harm like so many of the other types of malicious software that are out there?

    The way that adware works

    Adware works in one of two ways and the adverts themselves will either appear as a pop-up window or they will be embedded in the Edge's interface. Adverts can be fairly discreet and sit neatly at the edges of a page of a website, or they can be in your face, thoroughly garish pop-up windows.


    There's probably no one who will argue that pop-up windows aren't the bane of a computer user's life – they can be annoying to the point of distraction! But is adware something other than just a nuisance and could it actually be doing you any damage?

    The issues with adware

    Many people take umbrage with adware thanks to the way that it monitors which websites you are looking at. You see, at the point of installation, adware will also install a component which enables the programmer to track which websites you visit and see which pages or products you look at upon those pages. They are then able to customize the type of adverts they show you based on what they perceive to be your tastes, needs or interests.

    It goes without saying that targeted adverts have a higher chance of tempting you to click on them to discover more, rather than adverts for completely random goods that you have no interest in whatsoever.

    Who makes adware and why?

    Well aside from the obvious reason why anyone creates any form of advertising, adware is also used by the software developers who make it to attempt to recover the costs they incurred when they developed another app or program. You will download their latest must have app or even a program that enables you to work smarter but unbeknown to you, the adware will be bundled with that program.

    Is adware dangerous?

    There are two sides to this ongoing argument. Many people don't worry too much about the existence of adware as they see it as a necessary evil if they want to be able to download free apps, files or programs. Other people however find the fact that it tracks your usage extremely intrusive and will argue that because the adware was packaged surreptitiously with another program to spy on you this makes it potentially dangerous.

    How do I stop pop-up adverts in Microsoft Edge?

    First of all, scan your computer with anti-malware software, especially if you are still not familiar with Windows 10. Adware's programmers are smart and try to hide malicious files on your computer making it difficult to find and remove each malicious file. To remove adware from your computer and stop the absolutely annoying ads, please follow the steps in the removal guide below. If you have any questions, please leave a comment down below. Good luck and be safe online!

    Written by Michael Kaur, http://deletemalware.blogspot.com




    Stop pop-up ads and adware in Edge Browser:


    1. End Edge browser task in Task Manager.

    2. Disconnect your computer from the Internet.

    3. Start Edge browser and just before the offending pop-up appears, press Ctrl+T (several times if necessary). This will allow you to get into Edge settings and clear cookies, etc. Next time you start all should be well. If you are still getting the annoying ads, do the following:

    a. Close Edge browser again.

    b. Navigate to

    C:\Users\[your-user-name]\AppData\Local\Packages\Microsoft.MicrosoftEdge_xxxxxx\AC\MicrosoftEdge\User\Default\Recovery\Active

    c. Delete everything on that directory and open Edge browser.

    4. Download anti-malware software and run a full system scan. It will detect and remove adware from your computer. You may then follow the manual removal instructions below to remove the leftover traces of this adware. Hopefully you won't have to do that.






    5. Remove adware related programs from your computer using the Uninstall a program control panel. Simply drag your mouse pointer to the right edge of the screen, select Search from the list and search for "control panel".



    Or you can right-click on a bottom left hot corner (formerly known as the Start button) and select Control panel from there.



    6. When the the Uninstall a Program screen is displayed, scroll through the list of currently installed programs and remove the following:
    • PlayGEM
    • GoSave
    • Extag
    • SaveNewaAppz
    • and any other recently installed application


    Simply select a suspicious application and click Uninstall up near the top of that window. When you're done, please close the Control Panel screen.

    Rabu, 02 September 2015

    Remove DNS-Keeper Ads Malware (Uninstall Guide)

    DNS-Keeper is adware from the same family as CloudScout and DNS Unlocker. Most of us have heard of adware – or advertising supported software - but if you're not one hundred percent sure what this type of malware actually is and what it can do, then continue reading and I will hopefully be able to unlock the mystery for you!

    DNS Keeper is a computer software program that has been designed to download or display adverts on the screen of your computer when you are online. The DNS-Keeper adverts may not all look alike – some can be simply sitting there at the edge of your screen waiting for you to click on them, while others show up in the guise of pop-up windows or banners. Whatever they look like, however, the curious thing you may soon discover is that the adverts you see are often showing you goods or services, or are for websites, that you have recently been looking at on the internet.

    How does DNS-Keeper adware know what I've been browsing online?

    Tailoring advert content to match your perceived requirements is something that adware excels at – and is in fact designed to do. And it is not just a coincidence and if you keep stumbling across the same old products time and time again you are right in thinking that somebody has their eye on you and knows just what it is you are looking at online.


    It has been specifically designed to monitor the way you use the internet. It tracks which websites you visit and then saves that data – it then relays this information back to the adware's developer. They, of course, now know what you've been searching for and looking at and are then able to show you targeted advertising.

    This might not seem like the biggest deal in the grand scheme of things – in fact it might even come across as quite helpful, but when you stop and think about it, not only is adware an invasion of your privacy, it's also pretty creepy too. What is more, it modifies your DNS settings which means that you no longer use your default ISP DNS server to access the internet. Instead, all your HTTP request go through a third party server and that's not the way you it should be to say the least.

    How does DNS-Keeper get on to a computer?

    Most of the time it is bundled with a program, application or other piece of software that you have downloaded. This can range from anything from a free peer to peer file, a lifestyle app or even a paid for software program. It doesn't matter and there is no guarantee that anything you download from the internet will be adware free. Or malware free, for that matter. The biggest problem about this adware is that most users don't even realize that they are going to install it and when later they start seeing DNS-Keeper ads on their computers they don't know what is going on.

    Why do developers create adware?

    Of course, as with any form of marketing, it's all about the money. Adverts are created, not just to drive sales (they also drive web traffic) but they are also a means for the developer to recoup the expense incurred in developing some original software that they give away for free.

    How can I protect myself from adware?

    Alongside the reputable anti-virus software that you already have installed (I hope!) download one of the many anti-malware programs too.

    How to get rid of DNS-Keeper ads?

    To remove this adware from your computer and stop DNS-Keeper ads, please follow the steps in the removal guide below. If you have any questions, please leave a comment down below. Good luck and be safe online!

    Written by Michael Kaur, http://deletemalware.blogspot.com



    DNS-Keeper Ads Removal Guide:


    1. First of all, download anti-malware software and run a full system scan. It will detect and remove this infection from your computer. You may then follow the manual removal instructions below to remove the leftover traces of this malware. Hopefully you won't have to do that.






    2. Remove DNS-Keeper related programs from your computer using the Uninstall a program control panel (Windows 7). Go to the Start Menu. Select Control PanelUninstall a Program.

    If you are using Windows 8 or 10, simply drag your mouse pointer to the right edge of the screen, select Search from the list and search for "control panel".



    Or you can right-click on a bottom left hot corner (formerly known as the Start button) and select Control panel from there.



    3. When the Add/Remove Programs or the Uninstall a Program screen is displayed, scroll through the list of currently installed programs and remove the following:
    • DNS-Keeper
    • GoSave
    • Extag
    • SaveNewaAppz
    • and any other recently installed application


    Simply select each application and click Remove. If you are using Windows Vista, Windows 7 or Windows 8, click Uninstall up near the top of that window. When you're done, please close the Control Panel screen.


    Remove DNS-Keeper related extensions from Google Chrome:

    1. Click on Chrome menu button. Go to More ToolsExtensions.




    2. Click on the trashcan icon to remove DNS-Keeper, Extag, Gosave, HD-Plus 3.5 and other extensions that you do not recognize.

    If the removal option is grayed out then read how to remove extensions installed by enterprise policy.



    3. Then select Settings. Scroll down the page and click Show advanced settings.


    4. Find the Reset browser settings section and click Reset browser settings button.


    5. In the dialog that appears, click Reset. That's it!


    Remove DNS-Keeper related extensions from Mozilla Firefox:

    1. Open Mozilla Firefox. Go to Tools MenuAdd-ons.




    2. Select Extensions. Click Remove button to remove DNS-Keeper, Extag, Gosave, MediaPlayerV1, HD-Plus 3.5 and other extensions that you do not recognize.


    Remove DNS-Keeper related add-ons from Internet Explorer:

    1. Open Internet Explorer. Go to ToolsManage Add-ons. If you have the latest version, simply click on the Settings button.




    2. Select Toolbars and Extensions. Click Remove/Disable button to remove the browser add-ons listed above.