Showing posts with label Adware. Show all posts
Showing posts with label Adware. Show all posts

Sunday, August 14, 2011

Remove FREEzeFrog (Uninstall Guide)

FREEzeFrog is classified as adware because it displays advertisements related to your browsing habits and recent searches in Google or pretty much any other web search engine. Ads are pulled randomly from online ad servers so it can make your computer run slower. Besides, it can make you feel uncomfortable if it might be able to steal your personal information. FREEzeFrog offer engine comes bundled with popular open source programs: OpenOffice, 7zip, Pidgin and VLC Media Player located at freezefrog.com however, it could be promoted on other websites as well.



In order to install any of these free programs downloaded from the FREEzeFrog's website you need to agree to the FREEze Frog offer engine, ShopperReports and QuestScan. And if you clicked "Next", you basically agreed with the following statement:
Based on keywords from your browser, FREEzeFrog will show you labeled advertisements in a separate browser window or a temporary slider.


So, if you recently got infected with this adware, you probably didn't read the license agreement carefully. OpenOffice, 7zip and other programs mentioned in this article can be and should be downloaded from the official websites. There is no need to downloaded software distributions bundled with ads. Official websites:
Hopefully, you should be able to remove FREEzeFrog adware using Control Panel's Add/Remove feature. You should also scan your computer with anti-malware program. Please follow the removal instructions below. And if you need any help removing this adware from your computer, please leave a comment below. Good luck and be safe online!


FREEzeFrog removal instructions:

1. Go to the Start Menu. Select Control PanelAdd/Remove Programs.
If you are using Windows Vista or Windows 7, select Control PanelUninstall a Program.



2. Search for FREEzeFrog in the list. Select the program and click Remove button.
If you are using Windows Vista/7, click Uninstall up near the top of that window.



3. Restart your computer. FREEzeFrog should be gone. If it's still on your computer, please delete files listed below manually. Then download free anti-malware software from the list below and run a full system scan.
NOTE: in some cases the rogue program may block anti-malware software. Before saving the selected program onto your computer, you may have to rename the installer to iexplore.exe or winlogon.exe With all of these tools, if running Windows 7 or Vista they MUST be run as Auto Infoistrator. Launch the program and follow the prompts. Don't forget to update the installed program before scanning.


Associated FREEzeFrog files and registry values:

Files:
  • C:\Program Files\FREEzeFrog\bin\2.0.6.0
  • C:\Program Files\FREEzeFrog\bin\2.0.6.0\copyright.txt
  • C:\Program Files\FREEzeFrog\bin\2.0.6.0\FREEzeFrogSA.exe
  • C:\Program Files\FREEzeFrog\bin\2.0.6.0\FREEzeFrogSACB.exe
  • C:\Program Files\FREEzeFrog\bin\2.0.6.0\FREEzeFrogSAHook.dll
  • C:\Program Files\FREEzeFrog\bin\2.0.6.0\FREEzeFrogUninstaller.exe
  • C:\WINDOWS\Prefetch\FREEZEFROGSA.EXE-2C7DD3D1.pf
Registry values:
  • HKEY_CURRENT_USER\Software\freezefrogsa
  • HKEY_LOCAL_MACHINE\SOFTWARE\FREEzeFrog
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\FREEzeFrogSA
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "FREEzeFrogSA"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FREEzeFrogSA
Share this information with your friends:

Wednesday, August 10, 2011

Remove SocialSkinz (Uninstall Guide)

SocialSkinz is a web browser add-on that allows you to personalize your Facebook account, add custom background themes and skins. This add-on is classified as adware because it collects information about your browsing habits (not personal information) for marketing purposes without your consent. It then uses the collected information to display targeted ads depending on your computer usage and areas of interest. SocialSkinz add-on injects advertisements into Facebook pages. However, it's worth mentioning that Brockway Media, Inc. (developers of this add-on) makes it clear that their software is ad-supported to keep it completely free. Adware:Win32/SocialSkinz is visible as a toolbar "SocialSkinz" Internet Explorer and Mozilla Firefox. It doesn't work with other web browsers. When visiting Facebook, SocialSkinz displays a user-selected image on both sides of the web page. During installation, you can choose to use their custom 404 error search option that redirects you to notfound.explore.cm and set default home page to start.explore.cm. You should be able to remove SocialSkinz adware using Control Panel's Add/Remove feature. If you still have it on your computer, please follow the removal instructions below. If you have any questions, just leave a comment. Good luck and be safe online!




SocialSkinz removal instructions:

1. Go to the Start Menu. Select Control PanelAdd/Remove Programs.
If you are using Windows Vista or Windows 7, select Control PanelUninstall a Program.



2. Search for SocialSkinz Toolbar in the list. Select the program and click Remove button.
If you are using Windows Vista/7, click Uninstall up near the top of that window.



3. Restart your computer. SocialSkinz should be gone. If it's still on your computer, please follow the removal instructions bellow to remove the remains.


Remove SocialSkinz Toolbar in Internet Explorer:

1. Open Internet Explorer. Go to ToolsManage Add-ons.



2. Select Toolbars and Extensions. Uninstall/disable everything related to SocialSkinz from the list: SocialSkinz, plugin, TBSB04741.



3. Go to ToolsInternet Options. Select General tab and click Use default button or enter your own website, e.g. gooog.com instead of start.explore.cm. Click OK to save the changes. And that's it.






Remove Facemoods Toolbar in Mozilla Firefox:

1. Open Mozilla Firefox. Go to ToolsAdd-ons.



2. Select Extensions. Choose SocialSkinz and Plugin add-ons, click Disable button as shown in the image below. Then uninstall both add-ons.



3. Go to ToolsOptions. Under the General tab reset the startup homepage. That's it.




Associated SocialSkinz files and registry values:

Files:
  • C:\Program Files\SocialSkinz
  • C:\Documents and Settings\[UserName]\Application Data\Toolbar4
Registry values:
  • HKCU\SOFTWARE\{D76756D1-E961-406C-9353-55A0AB42DADC}
  • HKCU\SOFTWARE\Bloinked
  • HKCU\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{8E114B8E-C041-4063-A432-EBBF454E9057}
  • HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\EXT\STATS\{8E114B8E-C041-4063-A432-EBBF454E9057}
  • HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\EXT\STATS\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
  • HKCU\SOFTWARE\TBSB04741
  • HKLM\SOFTWARE\Classes\CLSID\{1C950DE5-D31E-42FB-AFB9-91B0161633D8}
  • HKLM\SOFTWARE\Classes\CLSID\{3BDF4CE9-E81D-432B-A55E-9F0570CE811F}
  • HKLM\SOFTWARE\Classes\CLSID\{57CADC46-58FF-4105-B733-5A9F3FC9783C}
  • HKLM\SOFTWARE\Classes\CLSID\{8E114B8E-C041-4063-A432-EBBF454E9057}
  • HKLM\SOFTWARE\Classes\CLSID\{9F34B17E-FF0D-4FAB-97C4-9713FEE79052}
  • HKLM\SOFTWARE\Classes\CLSID\{A9A56B8E-2DEB-4ED3-BC92-1FA450BCE1A5}
  • HKLM\SOFTWARE\Classes\CLSID\{AE338F6D-5A7C-4D1D-86E3-C618532079B5}
  • HKLM\SOFTWARE\Classes\CLSID\{C339D489-FABC-41DD-B39D-276101667C70}
  • HKLM\SOFTWARE\Classes\CLSID\{CA3EB689-8F09-4026-AA10-B9534C691CE0}
  • HKLM\SOFTWARE\Classes\CLSID\{D433A9D0-8267-40CB-8AD5-24F22FA5373F}
  • HKLM\SOFTWARE\Classes\CLSID\{D565B35E-B787-40FA-95E3-E3562F8FC1A0}
  • HKLM\SOFTWARE\Classes\CLSID\{D89031C2-10DA-4C90-9A62-FCED012BC46B}
  • HKLM\SOFTWARE\Classes\CLSID\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
  • HKLM\SOFTWARE\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}
  • HKLM\SOFTWARE\Classes\Interface\{0FA32667-9A8A-4E9C-902F-CA3323180003}
  • HKLM\SOFTWARE\Classes\Interface\{2A42D13C-D427-4787-821B-CF6973855778}
  • HKLM\SOFTWARE\Classes\Interface\{3D8478AA-7B88-48A9-8BCB-B85D594411EC}
  • HKLM\SOFTWARE\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}
  • HKLM\SOFTWARE\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}
  • HKLM\SOFTWARE\Classes\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}
  • HKLM\SOFTWARE\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}
  • HKLM\SOFTWARE\Classes\Interface\{6B458F62-592F-4B25-8967-E6A350A59328}
  • HKLM\SOFTWARE\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}
  • HKLM\SOFTWARE\Classes\Interface\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}
  • HKLM\SOFTWARE\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}
  • HKLM\SOFTWARE\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}
  • HKLM\SOFTWARE\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}
  • HKLM\SOFTWARE\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}
  • HKLM\SOFTWARE\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}
  • HKLM\SOFTWARE\Classes\Interface\{FCC9CDD3-EFFF-11D1-A9F0-00A0244AC403}
  • HKLM\SOFTWARE\Classes\TYPELIB\{4509D3CC-B642-4745-B030-645B79522C6D}
  • HKLM\SOFTWARE\Classes\TYPELIB\{4509D3CC-B642-4745-B030-645B79522C6D}\1.0
  • HKLM\SOFTWARE\Classes\TYPELIB\{B87F8B63-7274-43FD-87FA-09D3B7496148}
  • HKLM\SOFTWARE\Classes\TYPELIB\{B87F8B63-7274-43FD-87FA-09D3B7496148}\1.0
  • HKLM\SOFTWARE\Classes\TYPELIB\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}
  • HKLM\SOFTWARE\Classes\TYPELIB\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}\1.0
  • HKLM\SOFTWARE\Classes\TYPELIB\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}
  • HKLM\SOFTWARE\Classes\TYPELIB\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}\1.0
  • HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
  • HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{8E114B8E-C041-4063-A432-EBBF454E9057}
  • HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
  • HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SocialSkinz Toolbar
Share the knowledge:

Friday, August 5, 2011

How to Remove Findxplorer (Uninstall Guide)

Findxplorer is adware/BHO that changes default search provider when searching directly from address/URL bar in your web browser. It returns very limited and sponsored search results. Whenever a user searches something directly from his web browser address bar this adware redirects him to findxplorer.com and displays paid search results but unfortunately not the most relevant. Besides, Findxplorer changes the way you search. I mean it can be really frustrating, especially when you use Google Chrome web browser and you search directly from the address bar which is very convenient and suddenly you get entirely different and very often unrelated search results. Findxplorer is actually the same type of infection as ResultUrl that was described in out previous post. Hopefully, you shouldn't have any problems removing Findxplorer from your computer. If you need help removing this adware from your computer, please leave a comment below. Good luck and be safe online!




Findxplorer removal instructions:

1. Go to the Start Menu. Select Control PanelAdd/Remove Programs.
If you are using Windows Vista or Windows 7, select Control PanelUninstall a Program.



2. Search for Findxplorer in the list. Select the program and click Change/Remove button.
If you are using Windows Vista/7, click Uninstall up near the top of that window.



Alternate removal: run C:\Program Files\FindXplorer\uninstall.exe

3. Download free anti-malware software from the list below and run a full system scan.
NOTE: With all of these tools, if running Windows 7 or Vista they MUST be run as Auto Infoistrator. Launch the program and follow the prompts. Don't forget to update the installed program before scanning.


Remove Findxplorer in Mozilla Firefox:

1. Open Mozilla Firefox. Go to ToolsAdd-ons.



2. Select Extensions. Choose FindXplorer and click Uninstall button.




Associated Findxplorer files and registry values:

Files:
  • C:\Program Files\FindXplorer\findxplorer.dll
  • C:\Program Files\FindXplorer\findxplorer.exe
  • C:\Program Files\FindXplorer\uninstall.exe
  • C:\Documents and Settings\All Users\Application Data\FindXplorer\findxplorer115.exe
Registry values:
  • HKEY_LOCAL_MACHINE\SOFTWARE\FindXplorer
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FindXplorer
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_FINDXPLORER_SERVICE
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\FindXplorer Service
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FindXplorer Service
Share this information with your friends:

How to Remove Resulturl (Uninstall Guide)

Resulturl is classified as adware/BHO and potentially unwanted application by Norton, Kaspersky, Avast! and numerous other anti-virus software vendors in the market today. Paid and often very limited search results are probably the main reasons why it's detected as adware. Each time a user searches Google or any other search engine directly from the web address/URL bar it gets redirected to resulturl.com. Resulturl is configured to start automatically when Windows starts. It installs Mozilla Firefox Resulturl add-on and adds additional search provider in Internet Explorer. You should be able to remove Resulturl adware using Control Panel's Add/Remove feature. However, if you need help removing this adware from your computer, please leave a comment below. Good luck and be safe online!




Resulturl removal instructions:

1. Go to the Start Menu. Select Control PanelAdd/Remove Programs.
If you are using Windows Vista or Windows 7, select Control PanelUninstall a Program.



2. Search for ResultUrl in the list. Select the program and click Change/Remove button.
If you are using Windows Vista/7, click Uninstall up near the top of that window.



Alternate removal: run C:\Program Files\ResultUrl\uninstall.exe

3. Download free anti-malware software from the list below and run a full system scan.
NOTE: With all of these tools, if running Windows 7 or Vista they MUST be run as Auto Infoistrator. Launch the program and follow the prompts. Don't forget to update the installed program before scanning.


Remove Resulturl in Internet Explorer:

1. Open Internet Explorer. Go to ToolsManage Add-ons.



2. Select Search Providers. Select ResultUrl and click Remove button to remove it.




Remove Resulturl in Mozilla Firefox:

1. Open Mozilla Firefox. Go to ToolsAdd-ons.



2. Select Extensions. Choose Resulturl and click Uninstall button.




Associated Resulturl files and registry values:

Files:
  • C:\Program Files\ResultUrl
  • C:\Program Files\ResultUrl\ResultUrl_deleted_
  • C:\Program Files\ResultUrl\ResultUrl_deleted_\resulturl.dll
  • C:\Program Files\ResultUrl\ResultUrl_deleted_\resulturl.exe
  • C:\Program Files\ResultUrl\resulturl.dll
  • C:\Program Files\ResultUrl\resulturl.exe
  • C:\Program Files\ResultUrl\uninstall.exe
  • C:\Documents and Settings\All Users\Application Data\ResultUrl\resulturl191.exe
Registry values:
  • HKEY_LOCAL_MACHINE\SOFTWARE\ResultUrl
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ResultUrl
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_RESULTURL_SERVICE
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ResultUrl Service
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_RESULTURL_SERVICE
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ResultUrl Service
Share the knowledge:

Wednesday, August 3, 2011

Remove Coupon Alert Toolbar (Uninstall Guide)

Coupon Alert Toolbar is classified as adware or potentially unwanted application by Kaspersky, NOD32, Avast! and some other anti-virus programs. It's not a virus. Coupon Alert Toolbar displays notifications about money-saving coupons when they become available or when you visit your favorite retail websites. You can also search for coupons right from the toolbar in Internet Explorer or Mozilla Firefox. The toolbar drops several executable files on your computer and one of those exe files runs automatically when Windows starts. Coupon Alert Toolbar is developed by the same company that develops My Web Search products. CouponAlert can be downloaded from couponalert.com but it can also come bundled with other freeware. You can uninstall Coupon Alert Toolbar using Control Panel's Add/Remove feature. However, if you have problems removing this toolbar from your web browsers, please follow the removal instructions below. Good luck and be safe online!




Coupon Alert Toolbar removal instructions:

1. Go to the Start Menu. Select Control PanelAdd/Remove Programs.
If you are using Windows Vista or Windows 7, select Control PanelUninstall a Program.



2. Search for Coupon Alert in the list. Select the program and click Change/Remove button.
If you are using Windows Vista/7, click Uninstall up near the top of that window.



3. Download free anti-malware software from the list below and run a full system scan.
NOTE: With all of these tools, if running Windows 7 or Vista they MUST be run as Auto Infoistrator. Launch the program and follow the prompts. Don't forget to update the installed program before scanning.


Remove Coupon Alert Toolbar in Internet Explorer:

1. Open Internet Explorer. Go to ToolsManage Add-ons.



2. Select Toolbars and Extension. Choose Coupon Alert, Toolbar BHO, Search Assistant BHO from the list and click on Disable button.



3. Select Search Providers. Select My Web Search and click Remove button to remove it.




Remove Coupon Alert Toolbar in Mozilla Firefox:

1. Open Mozilla Firefox. Go to ToolsAdd-ons.



2. Select Extensions. Choose Scour Toolbar and click Disable button. Then uninstall the toolbar.




Associated Coupon Alert Toolbar files and registry values:

Files:
  • C:\Program Files\CouponAlert_2p
  • C:\Program Files\CouponAlert_2p\bar
  • C:\Program Files\CouponAlert_2p\bar\1.bin
  • C:\Program Files\CouponAlert_2p\bar\1.bin\chrome\2pffxtbr.jar
  • C:\Program Files\CouponAlert_2p\bar\1.bin\2pauxstb.dll
  • C:\Program Files\CouponAlert_2p\bar\1.bin\2pbar.dll
  • C:\Program Files\CouponAlert_2p\bar\1.bin\2pbarsvc.exe
  • C:\Program Files\CouponAlert_2p\bar\1.bin\2pbrmon.exe
  • C:\Program Files\CouponAlert_2p\bar\1.bin\2pbrstub.dll
  • C:\Program Files\CouponAlert_2p\bar\1.bin\2pdatact.dll
  • C:\Program Files\CouponAlert_2p\bar\1.bin\2pdlghk.dll
  • C:\Program Files\CouponAlert_2p\bar\1.bin\2pdyn.dll
  • C:\Program Files\CouponAlert_2p\bar\1.bin\2pfeedmg.dll
  • C:\Program Files\CouponAlert_2p\bar\1.bin\2phighin.exe
  • C:\Program Files\CouponAlert_2p\bar\1.bin\2phtml.dll
  • C:\Program Files\CouponAlert_2p\bar\1.bin\2phtmlmu.dll
  • C:\Program Files\CouponAlert_2p\bar\1.bin\2phttpct.dll
  • C:\Program Files\CouponAlert_2p\bar\1.bin\2pidle.dll
  • C:\Program Files\CouponAlert_2p\bar\1.bin\2pieovr.dll
  • C:\Program Files\CouponAlert_2p\bar\1.bin\2pimpipe.exe
  • C:\Program Files\CouponAlert_2p\bar\1.bin\2pmedint.exe
  • C:\Program Files\CouponAlert_2p\bar\1.bin\2pmlbtn.dll
  • C:\Program Files\CouponAlert_2p\bar\1.bin\2pmsg.dll
  • C:\Program Files\CouponAlert_2p\bar\1.bin\2pPlugin.dll
  • C:\Program Files\CouponAlert_2p\bar\1.bin\2pradio.dll
  • C:\Program Files\CouponAlert_2p\bar\1.bin\2pregfft.dll
  • C:\Program Files\CouponAlert_2p\bar\1.bin\2pregiet.dll
  • C:\Program Files\CouponAlert_2p\bar\1.bin\2pscript.dll
  • C:\Program Files\CouponAlert_2p\bar\1.bin\2pskin.dll
  • C:\Program Files\CouponAlert_2p\bar\1.bin\2pskplay.exe
  • C:\Program Files\CouponAlert_2p\bar\1.bin\2pSrcAs.dll
  • C:\Program Files\CouponAlert_2p\bar\1.bin\2ptpinst.dll
  • C:\Program Files\CouponAlert_2p\bar\1.bin\2puabtn.dll
  • C:\Program Files\CouponAlert_2p\bar\1.bin\CHROME.MANIFEST
  • C:\Program Files\CouponAlert_2p\bar\1.bin\INSTALL.RDF
  • C:\Program Files\CouponAlert_2p\bar\1.bin\LOGO.BMP
  • C:\Program Files\CouponAlert_2p\bar\1.bin\NP2pStub.dll
  • C:\Program Files\CouponAlert_2p\bar\1.bin\T8RES.DLL
  • C:\Program Files\CouponAlert_2p\bar\Cache\0007A46B.bmp
  • C:\Program Files\CouponAlert_2p\bar\Cache\00074EE9
  • C:\Program Files\CouponAlert_2p\bar\Cache\00075AC0.bmp
  • C:\Program Files\CouponAlert_2p\bar\Cache\00075BE9.bmp
  • C:\Program Files\CouponAlert_2p\bar\Cache\00075D02.bmp
  • C:\Program Files\CouponAlert_2p\bar\Cache\00075E2B.bmp
  • C:\Program Files\CouponAlert_2p\bar\Cache\00075F92.bmp
  • C:\Program Files\CouponAlert_2p\bar\Cache\00079C8C
  • C:\Program Files\CouponAlert_2p\bar\Cache\000756C8.bmp
  • C:\Program Files\CouponAlert_2p\bar\Cache\000760BB.bmp
  • C:\Program Files\CouponAlert_2p\bar\Cache\000757B3.bmp
  • C:\Program Files\CouponAlert_2p\bar\History\search3
  • C:\Program Files\CouponAlert_2p\bar\IE9Mesg\COMMON.T8S
  • C:\Program Files\CouponAlert_2p\bar\Message\COMMON.T8S
  • C:\Program Files\CouponAlert_2p\bar\Settings\prevcfg2.htm
  • C:\Program Files\CouponAlert_2p\bar\Settings\s_pid.dat
  • C:\Program Files\CouponAlert_2p\bar\Settings\s_w1.dat
  • C:\Program Files\CouponAlert_2p\bar\Settings\s_w2.dat
  • C:\Program Files\CouponAlert_2p\bar\Settings\setting3.htm
  • C:\Program Files\CouponAlert_2p\CouponAlert_2p
  • C:\Program Files\CouponAlert_2p\CouponAlert_2p\Cache
  • C:\Program Files\CouponAlert_2p\CouponAlert_2p\Cache\CouponAlertBtn.html
  • C:\Program Files\CouponAlert_2p\CouponAlert_2p\Cache\CouponAlertNewDealsBtn.html
  • C:\Program Files\CouponAlert_2p\CouponAlert_2p\Cache\GrouponBtn.html
  • C:\Program Files\CouponAlert_2p\CouponAlert_2p\Cache\PopupProperties100064904.html
  • C:\Program Files\CouponAlert_2p\CouponAlert_2p\Cache\PopupProperties200820798.html
  • C:\Program Files\CouponAlert_2p\CouponAlert_2p\Cache\Radio.html
Registry values:
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "CouponAlert_2p Browser Plugin Loader"
  • HKEY_CLASSES_ROOT\CouponAlert_2p.DynamicBarButton
  • HKEY_CLASSES_ROOT\CouponAlert_2p.DynamicBarButton\CurVer
  • HKEY_CLASSES_ROOT\CouponAlert_2p.DynamicBarButton.1
  • HKEY_CLASSES_ROOT\CouponAlert_2p.FeedManager
  • HKEY_CLASSES_ROOT\CouponAlert_2p.FeedManager\CurVer
  • HKEY_CURRENT_USER\Software\CouponAlert_2p
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\&Search "tbedits.couponalert.com/one-toolbaredits/menusearch.jhtml?s=[]"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CouponAlert_2p.DynamicBarButton
  • HKEY_LOCAL_MACHINE\SOFTWARE\CouponAlert_2p
  • \HKEY_LOCAL_MACHINE\SOFTWARE\CouponAlert_2p\bar
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CouponAlert_2pbar Uninstall
  • HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\Extensions "2pffxtbr@CouponAlert_2p.com"
  • HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@CouponAlert_2p.com/Plugin
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_COUPONALERT_2PSERVICE
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CouponAlert_2pService
Share the knowledge:

Tuesday, June 28, 2011

Remove QuestScan (Uninstall Guide)

QuestScan is defined as adware by some anti-virus software applications (Avira, AVG, Ikarus). It is bundled with Hotbar and other free software. We were unable to find a traditional setup executable of Quest Scan. Whenever you are searching for any keyword on the address bar of your web browser it is redirected to questscan.com search engine instead of searching for results in the Google or any other default search engine. It displays very limited and commercial results most of the time. Many users will likely find this a confusing experience because QuestScan changes the way you search the web. Besides, many users don't even know what QuestScan is. That's usually because only a small number of users will actually read the EULA or they will not fully understand they are consenting to the installation of advertising software. On the other hand, there's a great chance that such information is not always clearly presented. So, it is suggested to always look upon the files you are installing in your computer. Another problem is that some users find it difficult to remove QuestScan. If you are facing this problem with your web browser, please follow the steps in the removal guide below to remove QuestScan from your compute completely. If you have any further questions or concerns, please leave a comment below. Good luck and be safe online!




QuestScan removal instructions:

1. Go to the Start Menu. Select Control PanelAdd/Remove Programs.
If you are using Windows Vista or Windows 7, select Control PanelUninstall a Program.



2. Search for QuestScan in the list. Select the program and click Remove button.
If you are using Windows Vista/7, click Uninstall up near the top of that window.



Alternate removal: run C:\Program Files\QuestScan\uninstall.exe

3. Scan your computer with recommend anti-malware software (STOPzilla) to remove the leftovers of this adware from your computer.

It's possible that an infection is blocking STOPzilla from properly installing. Before saving the selected program onto your computer, you may have to rename the installer to iexplore.exe or winlogon.exe. Don't forget to update the installed program before scanning.


Remove QuestScan in Internet Explorer:

1. Open Internet Explorer. Go to ToolsManage Add-ons.



2. Select Search Providers. Select QuestScan and click Remove button to remove it.




Remove QuestScan in Mozilla Firefox:

1. Open Mozilla Firefox. Go to ToolsAdd-ons.



2. Select Extensions. Choose QuestScan Toolbar and click Uninstall button.




Associated QuestScan files and registry values:

Files:
  • C:\Program Files\QuestScan\QuestScan_deleted_
  • C:\Program Files\QuestScan\questscan.dll
  • C:\Program Files\QuestScan\questscan.exe
  • C:\Program Files\QuestScan\uninstall.exe
  • C:\Documents and Settings\All Users\Application Data\QuestScan\questscan143.exe
Registry values:
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\QuestScan
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\QuestScan
  • HKEY_LOCAL_MACHINE\SOFTWARE\QuestScan
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\QuestScan Service
Share the knowledge:

Thursday, June 16, 2011

Remove ShopperReports (Uninstall Guide)

ShopperReports is defined as adware or a potentially unwanted program that displays marketing related results in a side pane of the browser. It's not a virus. Whenever you search for something, it may give you a list of related products on the left-hand side of your computer screen.



ShopperReports may occasionally display pop-up windows with advertisements. This adware is usually integrated into or bundled with a other programs, e.g., freeware or shareware. Adware does not make a product free of charge; it comes with a price - advertisements.



Most of the time, users have the option to not install it. On the other hand, some users are not having problems with adware at all. It's up to you whether or not to remove ShopperReports. But we think that if you didn't go looking for it, you should uninstall it. Besides, some users believe that Shopper Reports causing the major problems with they web browsers or even makes their computers run slower. You can uninstall ShopperReports by going to the "Add or Remove Programs (Windows XP)" or "Uninstall a Program (Windows Vista/7)" section in your Control Panel. But what if its not listed? Please follow the steps in the removal guide below to remove ShopperReports from your computer completely. If you have any questions, please leave a comment below. Good luck and be safe online!


ShopperReports removal instructions:

1. Go to the Start Menu. Select Control PanelAdd/Remove Programs.
If you are using Windows Vista or Windows 7, select Control PanelUninstall a Program.



2. Search for ShopperReports in the list. Select the program and click Remove button.
If you are using Windows Vista/7, click Uninstall up near the top of that window.



3. Restart your computer.

4. Download free anti-malware software from the list below and run a full system scan.
NOTE: in some cases the rogue program may block anti-malware software. Before saving the selected program onto your computer, you may have to rename the installer to iexplore.exe or winlogon.exe With all of these tools, if running Windows 7 or Vista they MUST be run as Auto Infoistrator. Launch the program and follow the prompts. Don't forget to update the installed program before scanning.

5. New threats appear every day. In order to protect your PC from such (new) infections we strongly recommend you to use ESET Smart Security.

ShopperReports should be gone. If it's still on your computer, please follow the removal instructions bellow to remove the remains.


Remove ShopperReports in Internet Explorer:

1. Open Internet Explorer. Go to ToolsManage Add-ons.



2. Select Toolbars and Extensions. Uninstall/disable everything related to ShopperReports from the list.




Remove ShopperReports in Mozilla Firefox:

1. Open Mozilla Firefox. Go to ToolsAdd-ons.



2. Select Extensions. Choose ShopperReports and click Uninstall button.


Associated ShopperReports files and registry values:

Files:
  • C:\Program Files\ShoppingReport2\Uninst.exe
  • C:\Program Files\ShoppingReport2\Bin\2.7.34\ShoppingReport.dll
  • C:\Documents and Settings\[UserName]\Application Data\ShoppingReport2
  • C:\Documents and Settings\[UserName]\Application Data\ShoppingReport2\cs
  • C:\Documents and Settings\[UserName]\Application Data\ShoppingReport2\cs\Config.xml
  • C:\Documents and Settings\[UserName]\Application Data\ShoppingReport2\cs\db\Aliases.dbs
  • C:\Documents and Settings\[UserName]\Application Data\ShoppingReport2\cs\db\Sites.dbs
  • C:\Documents and Settings\[UserName]\Application Data\ShoppingReport2\cs\dwld\WhiteList.xip
  • C:\Documents and Settings\[UserName]\Application Data\ShoppingReport2\cs\report\aggr_storage.xml
  • C:\Documents and Settings\[UserName]\Application Data\ShoppingReport2\cs\report\send_storage.xml
  • C:\Documents and Settings\[UserName]\Application Data\ShoppingReport2\cs\res1\WhiteList.dbs
Registry values:
  • HKEY_CURRENT_USER\Software\ShoppingReport2
  • HKEY_CLASSES_ROOT\ShoppingReport2.HbAx
  • HKEY_CLASSES_ROOT\ShoppingReport2.HbAx.1
  • HKEY_CLASSES_ROOT\ShoppingReport2.HbInfoBand
  • HKEY_CLASSES_ROOT\ShoppingReport2.HbInfoBand.1
  • HKEY_CLASSES_ROOT\ShoppingReport2.IEButton
  • HKEY_CLASSES_ROOT\ShoppingReport2.IEButton.1
  • HKEY_CLASSES_ROOT\ShoppingReport2.RprtCtrl
Share the knowledge:

Thursday, May 26, 2011

How to Remove ScanQuery (Uninstall Guide)

ScanQuery redirects users to scanquery.com when they type search terms in the top search/URL box. It’s defined as adware or potentially unwanted application by most of the known anti-virus vendors. ScanQuery search results are very limited. What is more, it changes the way you search. Whenever you want to search something up you have to open your favorite search engine, e.g., google.com and type in your search term rather than just typing it into the search bar. If you got ScanQuery installed on your computer, then you probably were not paying attention and clicked through the installer of freeware software without noticing that you had agreed to those changes. ScanQuery is configured to start automatically when Windows starts. Reinstalling your web browser won’t fix the problem. You need to remove ScanQuery from your Add/Remove (Uninstall) programs application. For more information, please follow the removal instructions below. Also, you can remove ScanQuery files manually rather easily. If you need help removing this adware from your computer, please leave a comment below. Good luck and be safe online!




ScanQuery removal instructions:

1. Go to the Control PanelAdd or Remove Programs (Windows XP) / Programs and Features (Windows Vista/7).

2. Select ScanQuery and click the Change/Remove button (Windows XP) / Uninstall button (Windows Vista/7) to uninstall ScanQuery frm your computer.



3. Restart your computer. ScanQuery should be gone.

4. Download free anti-malware software from the list below and run a full system scan.
NOTE: With all of these tools, if running Windows 7 or Vista they MUST be run as Auto Infoistrator. Launch the program and follow the prompts. Don't forget to update the installed program before scanning.


Optional step for Mozilla Firefox users:

ScanQuery installs an add-on for Mozilla Firefox.

1. Go to ToolsAdd-ons.



2. Select Extensions. If there is a ScanQuery add-on, please click the Uninstall button to remove it.




You can also delete ScanQuery manually. Associoted files and registry values are listed below.

Associated ScanQuery files and registry values:

Windows XP:
  • C:\Documents and Settings\All Users\Application Data\ScanQuery\scanquery131.exe
  • C:\Program Files\ScanQuery\ScanQuery_deleted_
  • C:\Program Files\ScanQuery\scanquery.dll
  • C:\Program Files\ScanQuery\scanquery.exe
  • C:\Program Files\ScanQuery\uninstall.exe
Windows Vista/7:
  • C:\ProgramData\scanquery131.exe
  • C:\Program Files\ScanQuery\ScanQuery_deleted_
  • C:\Program Files\ScanQuery\scanquery.dll
  • C:\Program Files\ScanQuery\scanquery.exe
  • C:\Program Files\ScanQuery\uninstall.exe
Registry values:
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ScanQuery
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ScanQuery
  • HKEY_LOCAL_MACHINE\SOFTWARE\ScanQuery
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SCANQUERY_SERVICE
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ScanQuery Service
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_SCANQUERY_SERVICE
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\ScanQuery Service
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ScanQuery Service
Share the knowledge: