February 2015 - Hawkdive

Saturday, February 28, 2015

How to start windows Installer,Print spooler, windows Audio or any other services in safe mode

Saturday, February 28, 2015 0

Safe mode starts Windows with a limited set of files and drivers. Startup programs don't run in safe mode, and only the basic drivers needed to start Windows are installed.

Start Windows Services in safe mode
Start Windows Services in safe mode
Safe mode is useful for troubleshooting problems with programs and drivers that might not start correctly or that might prevent Windows from starting correctly. If a problem doesn't reappear when you start in safe mode, you can eliminate the default settings and basic device drivers as possible causes. If a recently installed program, device, or driver prevents Windows from running correctly, you can start your computer in safe mode and then remove the program that's causing the problem.

Safe mode starts Windows with only the basic drivers and services listed here.


Devices and drivers that start in safe mode

  • Floppy disk drives (internal and USB)
  • Internal CD-ROM drives (ATA, SCSI)
  • External CD-ROM drives (USB)
  • Internal DVD-ROM drives (ATA, SCSI)
  • External DVD-ROM drives (USB)
  • Internal hard disk drives (ATA, SATA, SCSI)
  • External hard disk drives (USB)
  • Keyboards (USB, PS/2, serial)
  • Mice (USB, PS/2, serial)
  • VGA display cards (PCI, AGP)

Windows services that start in safe mode

  • Windows event log
  • Plug and Play
  • Remote procedure call (WPC)
  • Cryptographic Services
  • Windows Defender
  • Windows Management Instrumentation (WMI)

Network-related devices and services that start in safe mode with networking

  • Network adapters (wired Ethernet and wireless 802.11x)
  • Dynamic Host Configuration Protocol (DHCP)
  • DNS
  • Network connections
  • TCP/IP-NetBIOS Helper
  • Windows Firewall

Objective:- the objective of writing this article is to tell you how to start services in safe mode which does not by default load in safe mode.Sometimes we need to run these services in safe mode while doing troubleshooting as these services either have a conflict with any other services in normal mode or any Malware or virus stop these services from loading or running properly.


After reading this article you would be able to start windows installer service,windows Audio service and Print spooler service in safe mode so in other words you would be able to print in safe mode, you would be able to play audio in safe mode and you would be able to install or uninstall any software, drivers or security software in safe mode.


How to start windows installer service in safe mode


When the computer is in safe mode, the Windows Installer service isn’t started so most programs can’t be uninstalled. Since technicians do a lot of work in safe mode and being unable to uninstall is a huge problem. If you start the service manually, an error message will come up saying “Could not start the Windows Installer service on Local Computer. Error 1084: This service cannot be started in Safe Mode”. This method will do a registry tweak so that Windows Installer is made a safe service and it will launch the Windows Installer service.

So to start any service in safe mode you have to first make it a safe service by adding the name of the service in safe mode service list and then starting the service in safe mode.So in order to do this troubleshooting you need to be in safe mode first.please follow the below mentioned steps to start Windows installer service in safe mode.

Step 1. Go to run and type Regedit to open registry editor.

Step 2. In Registry Editor Navigate to the following location 

 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot

start windows installer in safe mode
List services in safe mode with networking


Step 3. Now if you expand SafeBoot key here you would find two keys named minimal and network so the minimal is for normal safe mode and network is for safe mode with networking.Here you have to expand the one according to your environment you are logged into if you have started the computer in safe mode with networking then expand Network otherwise minimal.

Step 4. Now here under Network create a key by right clicking on it and selecting new --> Key and name it MSIServer.

Start windows installer in safe mode
Start windows installer in safe mode

Step 5. Now open the String entry (Default) on the right hand side under MSIServer and under value data type Service click  OK and then close the registry editor.


Start Windows Installer in Safe Mode
Start Windows Installer in Safe Mode

Step 6.Now open command prompt as administrator by typing CMD at start search and then right click on the cmd and select run as administrator.

Step 7. Type command net start msiserver.



Windows installer service has now been started.You could also start windows installer service in safe mode by typing these two command in command prompt

Start windows installer in safe mode using command prompt

REG ADD "HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer" /VE /T REG_SZ /F /D "Service"


net start msiserver

Start windows installer in safe mode with Networking using command prompt


REG ADD "HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MSIServer" /VE /T REG_SZ /F /D "Service"

net start msiserver

Note :- This is exactly what a so called SafeMSI freeware does.It is nothing but a .bat file which you could also create by typing above written two commands in a notepad and saving it with any name you want and run it under safe mode to start windows installer in safe mode.

Similarly you could also start any other service in safe mode by adding it to safe service list in registry.Just make sure you know the short name of those services to add a key name for it just as MSIServer for windows installer and Audiosrv for windows Audio service.

How to start Audio Service in safe mode

To Start Audio service in safe mode you also need to start all of its dependent services first.Windows Audio service depends on these three services so add them to safe service list and then start these service from command prompt.


  1. Windows Audio Endpoint Builder (AudioEndpointBuilder)
  2. Multimedia Class Scheduler (MMCSS)
  3. Windows Audio (Audiosrv)

You could start these services in safe mode using command line by typing the following commands.

REG ADD "HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioEndpointBuilder" /VE /T REG_SZ /F /D "Service"

net start AudioEndpointBuilder

REG ADD "HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MMCSS" /VE /T REG_SZ /F /D "Service"

net start MMCSS

REG ADD "HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Audiosrv" /VE /T REG_SZ /F /D "Service"

net start Audiosrv.

Now after this you would be able to start audio.

Note :- Similarly to start Print Spooler service in safe mode, add Spooler to safe service list and start it.To do this using command type the following command

REG ADD "HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Spooler" /VE /T REG_SZ /F /D "Service"

net start spooler


Tips:- If you want a list of all drivers, driver groups and services starting in normal mode and their corresponding short names open services.msc and double click the service name and it will show you the short name of that service as shown in the picture below.


Start Audio Service in safe mode
Start Windows Audio Service in safe mode

Read More

Wednesday, February 18, 2015

Remove pop-ups and too much unwanted bogus Ads

Wednesday, February 18, 2015 1

List of Very Common pop-ups generating Adware, Browser hijacker and proxy virus 


If you are getting a lot of  pop-ups and advertisement on web pages and these pop-ups and advertisements are such a stubborn that they are not removed or blocked even after uninstalling them from Programs and features list.They show ads in block on every page you visit and sometimes the words written on webpages have an irrelevant link or the link had a different color than other original link or the words are Double Underlined that link to Ads which used to redirect to any sales lead web site or a website which generate pop-ups.

An example of such an ads is shown below.

Double underlined words Symtoms of pop-up generating Adware infections
Double underlined words Symtoms of Adware infections 


Pop ups shown by Pop-up generating Adware Object Browser
Ads Shown By Object Browser Adware

You tried all the steps from resetting the browsers to uninstalling all the unnecessary softwares from the program and features list and deleted all the browser addons from the browser,installed pop-up blocker,scanned the computer with Anti-Malware and Anti-virus but was still getting the pop-ups of advertisements.Some of those pop-ups are running in loop that as soon as I close them it pops up again.

After doing a lot of research and deep thinking I finally found a logical steps to remove all these kind of pop-up generating Adware,viruses and malware from the computer.The good thing is that every such kind of pop ups shows you the name of its generating software that where is it originating from as for example look at the picture above the unwanted ads that you see on bestbuy.com website is originating from Object Browser which I circled showing brought by Object Browser.So please check these ads carefully as it will show you the name of the software it is generating from.It may show the name followed by "Ads By Names of pop ups generating adware" or "name of the pop ups generating Adware followed by word Ads".An example of such an Ads are shown in the below pictures.

Ads by pop-ups generating Adware
Ads by pop-ups generating Adware
These pop-ups generating Adware always show different ads in different blocks on the browser. Below are some Ads block by pop ups generating Adware.

Ads block shown by ads and pop-ups generating Adware
Ads block shown by ads and pop-ups generating Adware

Ads block shown by ads and pop-ups generating Adware
Ads block shown by ads and pop-ups generating Adware-Browser Shop


Note: Please make a note that removing these Adware or viruses does not only need time and logical mind but also a quick responsive active person as sometime you have to delete them instantly after terminating there processes from task manager.

I have recently found very difficulty in removing the two adware cum proxy virus which are Finding update and Shopperz.

But I finally found the steps to remove them and this is the same logical steps you have to perform everytime you have any such problems.

Before starting the troubleshooting I want you a take a look at the list of some very common Viruses,Malwares,Adware,Browser Hijackers and proxy viruses and see if you are also infected with them.You could find this information easily by opening the task manager and look the processes list and see the names if it matches with any of these mentioned below or go to the C:\program Files , C:\Program Files (x86), C:\Program Data and see if you have any folder with such a name mentioned in the list of very common pop-ups generating Adware or malware.If you have it you are infected.

Please Don't install these below mentioned programs or if you have them remove them immediately as they may steal some of your personal sensitive information and send it to sales generating sources or may share this information on web for data collection or to fulfill the purpose of maeketing survey.

Check whether you have any of these Adware program or not, if yes remove them immediately using the steps mentioned on this page to get rid of pop-ups or unwanted ads.

List of very common Ads and pop-ups generating Adware, Browser hijackers and Malware

  1. Windows update/Finding update virus
  2. Zoomify
  3. Buzzdock
  4. Ace race
  5. Shopperz virus
  6. Update real Virus / solution real
  7. Searchprotect
  8. Conduit
  9. Hot deals
  10. Newspaper
  11. Onesoftwareperday/onecouponaday
  12. Deals
  13. Zombie news adware
  14. Genieo
  15. Safeweb adware
  16. Ask.com
  17. Featured deals
  18. Downlite
  19. Cheap deals
  20. Deals plugins
  21. Bonanza deal
  22. Deal keeper
  23. Web Guard
  24. Top deal
  25. Edeals pop
  26. Geniusbox
  27. Unchecky
  28. Wincheck
  29. Television Fanatic
  30. Fast Browser
  31. Wild Tangent Games
  32. Cinema-Plus-1.2
  33. Cinema Video 1.8V25.11
  34. Video mediaplay-air
  35. Browser defender
  36. FlashBeat
  37. HD-Plus 1.8
  38. Vplay
  39. Browser protect
  40. Browser protected by conduit
  41. Delta search
  42. Babylon
  43. Binkiland
  44. ytdownloader Deals
  45. LessTabs
  46. WebCake 3.0
  47. Yealt
  48. LyricsContainer
  49. Object Browser
  50. VideoSaver
  51. AddLyrics
  52. Privacy safe guard
  53. Unfriend checker
  54. Price peep today
  55. Coupon amazine
  56. TidyNetwork.com
  57. DownloadTerms 1.0
  58. Yontoo
  59. Dealio/ Dealio Toolbar
  60. Open Candy
  61. BS.ControlBar
  62. Core Temp
  63. CPU-Z
  64. CSmenu
  65. CutePDF Writer
  66. ClamWin
  67. Registry Reviver
  68. Free Process Freezer
  69. Driver Sweeper
  70. Facemoods toolbar
  71. ICQ toolbar
  72. Imminent
  73. Immunet
  74. Miro
  75. Moo0 Software
  76. PDF-XChange Viewer
  77. Photobie
  78. PhotoFiltre
  79. Quicksys RegDefrag
  80. RapidTyping
  81. Satellite Antenna Alignment
  82. Relevant Knowledge
  83. Crawler toolbar
  84. Browser App-11
  85. Spyware Terminator - Web Security Guard
  86. SUPER - OpenCandy
  87. Sweet Home 3D - Open Candy
  88. Trillian - Ask toolbar
  89. Tweak Me! - Nitro PDF Reader
  90. Unlocker - Bing toolbar
  91. USB Guardian - BestSecurityTips toolbar
  92. WebShot - OpenCandy
  93. Win7codecs - Bing toolbar
  94. Winamp - Winamp toolbar
  95. Windows 7 Codec Pack - Dealio toolbar
  96. Windows Essentials Codec Pack - Babylon toolbar
  97. WinSCP - OpenCandy
  98. XP Smoker - Bing toolbar
  99. AppRemover
  100. BDtoAVCHD
  101. Copernic Desktop Search
  102. DriverEasy
  103. FeedDemon
  104. FlashGet
  105. FormatFactory
  106. GetGo Download Manager
  107. Mipony
  108. NeoDownloader Lite
  109. PaperScan Free Edition
  110. UltraVNC
  111. Ask Toolbar
  112. DVDVideoSoft Toolbar
  113. MsgPlus! Toolbar
  114. Deamon Tools Toolbar
  115. Xp-AntiSpy Support
  116. Web Security Guard
  117. SweetIM
  118. AntiRun - GuardMail.ru toolbar
  119. Sandboxie
  120. Roboform
  121. Secure Password Manager - Wajam browser add-on
  122. Putty Enhanced - Babylon toolbar, Browser ads after installation
  123. Secure DNS
  124. Anonymous Surfing
  125. Browser Sandbox
  126. Covert Surveillance
  127. Data Loss Prevention
  128. Installs AVS Software Browser
  129. Comodo Firewall: Recommends Comodo Dragon, GeekBuddy
  130. Recommends AVS Registry Cleaner
  131. Secure Password Manager - Wajam browser add-on
  132. Rootkit Scanner
  133. Secure Shell
  134. Site Adviser
  135. Spam Blocker
  136. Trojan Scanner
  137. Update Monitor
  138. SuMo(RK) - RelevantKnowledge, Babylon toolbar, Complitly toolbar
  139. Auslogics Disk Defrag - Ask toolbar, Displays Auslogics BoostSpeed & Antivirus ads
  140. My Defragmenter - MyPhoneSupport desktop icon, Displays MyPhoneSupport & DriveShop ads.
  141. Wise Registry Cleaner - Recommends Wise Disk Cleaner, Displays WiseCare 365 ads
  142. SIW - OpenCandy
  143. Advanced Uninstaller Pro
  144. Xplorer2lite - xplorer2lite toolbar
  145. File Renamer
  146. Folder Hiding
  147. Folder Sync
  148. Cinema-Plus-1.2
  149. Plus-HD-V1.6
  150. Search Armor
  151. Cinema Video 1.8V10.01
  152. Cinema Video Plus 2.3cV20
  153. Cinema Video Plus 2.3c
  154. Trovi
  155. Codec-M
  156. Yontoo
  157. Torrenthandler
  158. ChatZum
  159. MyBrand.
  160. Anything ending with Community Toolbar
  161. MyBrand
  162. iStartSurf.com
  163. istart.websearches.com
  164. Searchme
  165. Slick Savings
  166.  Amazon Shopping Assistant
  167. Ebay Shopping Assistant
  168. Domain Error Assistant
  169. GoPhoto.it
  170. Omnibar
  171. Savekeep, SaVe keeep, Suave keepo
  172. jollywallet cash back
  173. Vidx, Viddxx, Vidox, Viidax, ViiDDx
  174. MacVX
  175. MacCaptain, MacPriceCut, SaveOnMac, Mac Global Deals
  176. MacDeals, MacSter, MacXcoupon, Shop Brain
  177. Awesome Screenshot
  178. Shopy Mate, FlashMall
  179. PalMall
  180. MacShop
  181. MacSmart
  182. News Ticker Remover
  183. Shopper Helper Pro
  184. Photo Zoom
  185. Best YouTube Downloader
  186. ArcadeYum
  187. Extended protection
  188. Video download helper
  189. Searchtab
  190. Set Search Settings
  191. Cinema Ploos
  192. Discount Cow
  193. V-bates
  194. PriceMeter
  195. Supra Savings
  196. weDownload Manager
  197. PureLead
  198. Search Assist
  199. Re-Markable
  200. Zombie Alert
  201. Wajam
  202. Coupon Server
  203. Lollipop
  204. BlockAndSurf
  205. vSafe Saver
  206. SupTab
  207. Software Updated Version
  208. DP1815
  209. Video Player
  210. Convert Files for Free
  211. BetterSurf
  212. Trusted Web
  213. PassShow
  214. LyricsBuddy-1
  215. PureLeads
  216. Media Player 1.1
  217. RRSavings
  218. Feven Pro 1.2
  219. Websteroids
  220. Savings Bull
  221. TidyNetwork
  222. Search Snacks
  223. MyPC Backup
  224. Re-markit
  225. GUI
  226. Icon Tools
  227. Onscreen Keyboard
  228. Partition Manager
  229. Program Launcher
  230. Themes
  231.  Type Setting
  232. Virtual Desktop
  233. Dexpot - OpenCandy
  234. Pando (file sharing p2p), Pando toolbar
  235. Displays upgrade ads,
  236. Pandion - Offers add-on, homepage/search engine change
  237. QIP Infium - Offers homepage/search engine change, Offers FF add-on
  238. Trillian Astra - Ask toolbar, Recommends Xobni plugin, Displays upgrade ad
  239.  Feed Demon Lite - Displays ads in deck
  240. Slimbrowser - Ask, Deals hunter, MySearch toolbars
  241. XRecode II
  242. MediaMonkey - Displays ads
  243. Picassa - Offers search engine change, Displays Google ads [services]
  244. Minilyrics - Displays product upgrade [Nagware]
  245. Screenshot Captor - Registration [Nagware]
  246. CoolPDF Reader - Displays MagicPDF ads
  247. BitComet
  248. Peazip
  249. IZArc
  250. RecipeHub
  251. Defraggler - Recommends Google Chrome
  252. Process Viewer
  253. Save eon
  254. CinPlus2.7cV18.01
  255. Bizigames.org
  256. zivlingamer.org
  257. Iminent Toolbar
  258. GameOver Zeus
  259. CryptoLocker
  260. MyStart IncrediBar
  261. Mapsgalaxy Toolbar
  262. Qvo6 Hijacker
  263. Browser Shop
  264. Lucky Leap
  265. Ad Options
  266. Browser Extension

How did I get these pop-ups generating Adware on my computer?

These pop-ups generating adware programs are commonly bundled with other free programs that you download off of the Internet.

Unfortunately, some free downloads do not adequately disclose that other software will also be installed and you may find that you have installed such an Adware without your knowledge. Most commonly these pop-ups generating adware are bundled within the installers from Cnet, Softonic, brothersoft, soft32 or other similar custom third-party installers.

You should always pay attention when installing software because often, a software installer includes optional installs, such as this Strong Signal adware.Be very careful what you agree to install.
Always opt for the custom installation and deselect anything that is not familiar, especially optional software that you never wanted to download and install in the first place.

Logical method to remove these unwanted ads pop-ups and Malicious program from your computer.


Please make a note that these pop-ups generating programs firstly set up their permanent existence into your system by saving a copy of them onto your hard drive in few different locations and scheduling a task to repeatedly check whether or not they are running and if not start the program immediately.

So we would start the troubleshooting with deleting the Scheduled task associated with them so that after I delete them they won't run again.And we will restart the compute in safe mode as most of the viruses and their services won't start in safe mode.


Steps 1. Delete the Schedule Task associated with pop-ups, Adware or any Malicious Program.

Follow the below mentioned steps to delete the scheduled task.

1. Restart the computer in safe mode and go to Control Panel then open Administrative Tools.
Administrative Tools
Administrative Tools

2. Under Administrative Tools open Task scheduler and click on task scheduler library and delete all the unknown task or the task associated with any Adware or Malware shown in the right pane.You can find task scheduler also in computer management under Administrative Tools.I usually delete all of them as they does not affect the computer's performance as most of them are for updating the software.

Schedule Task Removal-to remove pop-ups generating adware
Schedule Task Removal
3.  Just for the information if you click on any of the unknown task name or the one which have an alphanumeric name and then click on action tab at the bottom section as shown in the picture it will let you know what program this task starts and what does it do so if it belongs to anyone mentioned in the list of pop-ups generating adware, malware or anything which is related to pop-ups generating ads, remove it.

Schedule Task Removal-to remove pop-ups generating adware
Check the action of a Scheduled task
As we see in the above picture highlighted task starts a program CinPlus2.7cV18.01 which is a Adware or Spyware so delete this task.

Scheduled task that validate installation Schedule -to remove pop-ups generating adware
Scheduled task that validate installation

Step 2. Delete the associated files and script of pop-ups,Adware or malicious program.

Look for the above mentioned list of pop-ups generating Adware/Malware into the following location and delete them.


  • C:\Program Files
  • C:\Program Files(x86)
  • C:\Program Data
  • C:\Program Files\Common Files
  • %temp%
  • temp
  • C:\Users\User Name\AppData\Roaming
  • C:\Users\User Name\AppData\LocalLow
  • C:\Users\User Name\AppData\Local

You might not be able to delete one of them and it will show you the error message that file can not be deleted because it is being used or is open in another program.

File in use- while removing pop-ups generating adware
File in Use
to delete such a file, right-click the Taskbar or click CTRL + ALT + DEL anywhere in Windows and select Start Task Manager. Switch to the Processes tab, then browse for the application that was used to open it. For example, if you were viewing a video, look for Windows Media Player.

Once you find the process, right-click it and select End Process Tree. This will close all instances of the program, as some — like Chrome — might run more than one. So close all the instances of the program.

if you are still having trouble deleting a Pop-ups generating Malware Program it might be locked.Sometimes, the file remains locked, even though you close the program associated with it. You could manually unlock the file by closing Windows Explorer, then deleting it via the command line. But Sometimes even closing the explorer.exe does not work.In such a case download FileASSASSIN is an application that can delete any type of locked files that are on your computer. Whether the files are from a malware infection or just a particular file that will not delete – FileASSASSIN can remove it. The program uses advanced programming techniques to unload modules, close remote handles, and terminate processes to remove the particular locked file. Please use with caution as deleting critical system files may cause system errors.
Delete Locked file with FileASSASSIN-to remove pop-ups generating adware
Delete Locked file with FileASSASSIN 

To use FileASSASSIN simply browse the infected file and check all boxes and execute the program it will delete the file.

You could also use OpenedFilesView to displays the list of all opened files on your system. For each opened file, additional information is displayed: handle value, read/write/delete access, file position, the process that opened the file, and more...
Optionally, you can also close one or more opened files, or close the process that opened these files.So go through the opened files name in this software tool and look for any match with the list of pop-ups generating adware, malware mentioned above and close all the processes related to them.For a detailed information on OpenedFilesView Visit the Developers website.

OpenedFilesView-to remove pop-ups generating adware
OpenedFilesView
You could also use Microsoft’s own Process Explorer to view all the running processes.



Step 3. Delete the Start-up entry and  registry keys associated to any pop-ups generating Adware or Malware programs.

Start up entry actually initiate the Adware or Malware programs at the time of boot up.So open System Configuration utility from Administrative Tools in control panel and uncheck all the unnecessary and unknown startup items to block pop-ups from starting next time you reboot the computer.

System Configuration utility-to remove pop-ups generating adware
SystemConfiguration Utility

You could also use microsoft's Autorun for a better results because it displays all the processes and startup.Download Autoruns from Microsoft Technet website.
Extract the Zip file in a folder and open the Autoruns and uncheck the unnecessary or unknown items or delete the entry to stop its from starting at boot up.

Autoruns By sysinternals-to remove pop-ups generating adware
Autoruns By SysInternals


Step 4. Delete pop-ups generating Adware or Malware entry from registry.


  1. Open Registry Editor by typing Regedit at Run.
  2. Look for any traces of pop-ups generating Adware or Malware Software name under following location and Delete them if found.
HKEY_CURRENT_USER\SOFTWARE\
HKEY_LOCAL_MACHINE\SOFTWARE\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\


Look at the picture below where after expanding "HKEY_LOCAL_MACHINE\SOFTWARE\" I found FindingUpdate virus under Windows Update.FindingUpdate is a pop-ups generating Adware cum Proxy virus which changes the internet explorer browser's proxy within a fraction of second after you correct the proxy settings.

Pop-ups generating Adware FindingUpdate in Registry
Pop-ups generating Adware FindingUpdate in Registry

Note:- Above mentioned registry keys are just the main keys where an uninstaller removes the program from so there could be many more leftover entries of a pop-ups generating Adware or Malicious program that you need to find and delete if the first removal step does not help.So in order to remove any malicious program completely from the computer search through the registry by Pressing CTRL+F and type the name of the program or its process then delete the entry associated with the program or its process and keep searching by pressing F3 to go to next search entry.

Step 5. Scan you computer with Anti-malware and Adware Removal Tools.

1. Run the Norton Power Eraser - Unwanted Application Scan

  1. Download Norton Power Eraser.
  2. Click Save to Desktop.
  3. To run Norton Power Eraser, double-click the NPE.exe file.
  4. If the User Account Control window prompts, click Yes or Continue.
  5. Read the license agreement, and click Accept.
  6. In the Norton Power Eraser window, click the Advanced Options icon.
  7. In the Advanced window, next to Unwanted Application Scan, click Scan Now to scan your computer.
  8. When Norton Power Eraser completes the scan, the results are displayed in the Unwanted Apps Scan Complete window.
  9. In the Unwanted Apps Scan Complete window, next to the unwanted application or toolbar, click Uninstall.
  10. Follow the on-screen instructions.
  11. When the uninstall completes, restart the computer.
If Norton Power Eraser does not remove the unwanted toolbars, then manually remove them by using the Add/Remove Programs or Uninstall a Program in the Control Panel. Adware generally installs a new toolbar in your browsers and changes your default search engine setting to a third-party search engine. Depending on your browser, reset the browser settings to completely remove the unwanted toolbars and search engines.

OR Run the Norton Power Eraser scan

  1. Double-click the NPE.exe file, to run Norton Power Eraser.
  2. If the User Account Control window prompts, click Yes or Continue.
  3. Read the license agreement, and click Accept.
  4. In the Norton Power Eraser window, click the Scan for Risks icon.
  5. By default, Norton Power Eraser performs a Rootkit scan and requires a system restart. When you see a prompt to restart the computer, click Restart. If you do not want to include the Rootkit scan, go to Settings, and uncheck the option Include Rootkit scan (requires a computer restart).
  6. After the computer is restarted, the scan starts automatically. Follow the on-screen instructions.
  7. Wait for the scan to complete.
Norton Power Eraser-to remove pop-ups generating adware
Norton Power Eraser

2. Run AdwCleaner.

  1. Download AdwCleaner and save to your desktop.
  2. Important! Before starting AdwCleaner, close all open programs and internet browsers.
  3. Double click on AdwCleaner.exe to run the tool.
  4. Windows Vista/ 7/8 users right-click and select Run As Administrator.
  5. Click on the scan button.
    AdwCleaner-to remove pop-ups generating adware
    AdwCleaner Scan
  6. When the scan is completed click on the Clean button. 
    AdwCleaner Cleanup-to remove pop-ups generating adware
    AdwCleaner Cleanup
  7. Your desktop icons will be disappear, this is normal so don’t be worry about that.
  8. Press OK when asked to close all programs and follow the onscreen prompts.
    AdwCleaner Removal Process-to remove pop-ups generating adware
    AdwCleaner Removal Process
  9. Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
  10. Close the text file that opens after the restart, double click on adwcleaner.exe to run the tool.
  11. Click now on Uninstall, then confirm with yes to remove AdwCleaner from your computer.

3. Run HitmanPro 3 - Second Opinion Malware Scanner.

HitmanPro is designed to work alongside existing security programs without any conflicts. It scans the computer quickly (less than 5 minutes) and does not slow down the computer (except for the few minutes it is scanning). HitmanPro does not need to be installed. It can be run straight from a USB flash drive, a CD/DVD, local or network attached hard drive.

HitmanPro offers you a Free Scan for a second opinion. It is designed to check if your security measures work. If nothing is found (and we sincerely hope so), then you will never need a license. When a virus is found, then you will receive a free 30-day license to remove the threat.

Download HitmanPro3 (32 Bit)
Download HitmanPro3 (64 Bit)


  1. Download the HitmanPro3 from the above link and save it to Desktop.
  2. Run the downloaded file and Click next to scan.
    HitmanPro3-to remove pop-ups generating adware
    HitmanPro3
    HitmanPro3 Scanning- to remove pop-ups generating adware
    HitmanPro3 Scanning


After the scan in completed HitmanPro3 will show you the result so take a quick look on the files and entry found under threats detected list and ignore the one which you know, is secure or want to exclude and then click on next to delete or remove the threats detected.

HitmanPro3 Scan Result-to remove pop-ups generating adware
HitmanPro3 Scan Result


Note:- There are some other Virus and Adware removal tool too which you can use to remove such a stubborn
McAfee Stinger
MalwareBytes
E-Set Online Scanner
Rogue Killer

Step 5. Reset the browsers.

Google Chrome

Google Chrome has an option that will reset itself to its default settings. To find this option, open Chrome’s menu and select Settings. Perform a search for “reset browser” and you’ll see the Reset browser settings button.

Reset Chrome Browser to remove pop-ups generating Adware
Reset Chrome Browser

You could also just type chrome://settings/resetProfileSettings into Chrome’s address bar to pull up this page.Resetting the chrome will reset homepage,search engine, disable all extensions and also clears history,cookies and cached data.Pop-ups generating Adware normally install an extension in the browser which you could delete by going into the extensions menu under chrome settings menu or just type chrome://extensions/ in chrome address bar and delete all the unwanted extensions from browsers.


Reset Chrome to remove Pop-up generating Adware
Reset Chrome

Delete unwanted or unknown Extension to remove pop-ups generating Adware
Delete unwanted or unknown Extension to remove pop-ups generating Adware

Mozilla Firefox

Click the Firefox menu button, point to Help, and select Troubleshooting Information.

Reset Firefox to remove pop-ups generating adware
Firefox Trobleshooting

Click the Reset Firefox button on the Troubleshooting Information page.

Reset Firefox to remove pop-ups generating adware
Reset Firefox
Firefox will erase your extensions and themes, browser preferences, search engines, site-specific preferences, and other browser settings changed by any malicious program or pop-ups generating Adware. However, Firefox will attempt to preserve your bookmarks, history, passwords, form history, and cookies.

Reset Firefox to remove pop-ups generating adware
Reseting Firefox


The Reset feature accomplishes this by creating a new profile for you, copying this important data over. Your old profile will be placed on the desktop in a folder titled “Old Firefox Data.” If you lose important data in the reset, you can attempt to recover it from this folder. If you don’t need the folder, you’re free to delete it.

Internet Explorer


  1. Close all Internet Explorer windows that are currently open.
  2. Open the desktop, and then tap or click the Internet Explorer icon on the taskbar. Changing your settings will affect both Internet Explorer and Internet Explorer for the desktop.
  3. Tap or click the Tools button , and then tap or click Internet options.
  4. Tap or Click the Advanced tab, and then tap or click Reset.
  5. In the Reset Internet Explorer Settings dialog box, tap or click Reset.
  6. Reset Internet Explorer Settings to remove pop-ups generating adware
    Reset Internet Explorer Settings
  7. When Internet Explorer finishes applying default settings, tap or click Close, and then tap or click OK. You'll need to restart your PC for these changes to take effect.


Note:- Please make a note that some of the pop-ups generating Adware actually infect the Browser's shortcut so just right click on the Browser shortcut and select properties and check the Target whether it has any URL mentioned right after the source file location.If there is any URL delete it and Click Apply and Click Ok.

remove pop-ups generating adware link from Internet Explorer Shortcut properties
Internet Explorer Shortcut properties

Step 6. Run disk Cleanup.

Now last but not least after cleaning and deleting all the files and registry entry of pop-ups generating Adware, Viruses and Malware run disk cleanup by typing Cleanmgr on the Run dialog box to start the Disk Cleanup.
Cleanmgr-To remove leftover of Pop-up generating Adware
Command to run Disk Cleanup

Disk Cleanup then scan for unnecessary and junk files and show you the option to select what to delete.
Select all you want to delete (Leftover of Pop-ups generating Adware)
Select all you want to delete

Make sure that the Temporary Internet Files, Offline WebPages, Recycle Bin, and Downloaded Program Files are checked and click okay to delete the selections because sometimes the pop-ups generating Adware runs from downloads or temporary internet files.


Conclusion:- After doing all the troubleshooting I got to know that the Antivirus software are not very effective these days to remove all the threats but if you know the technique of removing viruses you could remove any kind of viruses be it pop-up generating Adware or proxy virus.

AdblockPlusNow after doing all the steps mentioned above you would have been removed all the potentially unwanted software (PUPs) or pop-up generating Adware from your computer but you could still see some ads or pop-ups which are actually generated by the website you visit to stop such an Pop-up or Ads install pop-up blocker, Adblock Plus in your browser.Adblock Plus is available for all the browser so you could install it in all of your browser.

Pop-up blocker
Pop-up blocker


***************End of the Article *****************

Incoming Search Terms

  1. List of proxy virus
  2. List of adware
  3. List of pop-ups generating Adware
  4. List of pop-ups generating virus
  5. List of Browser Hijacker
  6. List of Malware
  7. pop-ups generating proxy virus
  8. Remove unwanted pop-ups
  9. Remove Annoying ads
  10. pop-up blocker
  11. Remove Adware
  12. How to remove Ads from browser
  13. How to delete scheduled task
  14. Very common virus list
  15. How to remove virus manually
  16. List of very common pop-ups generating Adware

Read More