Your computer is infected with malicious software? Do you have pop-ups on your PC?
If so, search this blog for removal instructions or browse computer threats by category.

Wednesday, April 30, 2014

How do I remove virus?

Tell your friends:
If you are constantly getting pop-ups then your computer is infected with adware, SavingsBull or LyricsSay, for instance. Actually, there are many different adware programs that display pop-up ads from various web servers including You will have to identify the adware program that is causing these pop-ups yourself or use anti-malware tools to detect it automatically because there are way too many programs that could display those annoying and potentially harmful pop-ups on your computer. If you look at the image below you will see that in my case it was a program called Webexp Enhanced. I bet yours will be different. It would be really difficult to find and list each and every adware program here. Thankfully, most of the time, you can identify the offending piece if code very easily. Please note that has nothing to do with adware campaigns or intrusive and misleading pop-ups. It's a popular service, unfortunately even among scammers. To stop annoying pop-ups on your computer, please follow the removal guide below.

Here's an example of a pop-up you will get when your computer is infected with adware. You can find the name of your adware program at the top-right corner of the pop-up. As you can see, in this example, it says 'Ads by Webexp Enhanced' which means that you need to uninstall this adware program from your computer if you want to permanently stop pop-ups. pop-up virus
As you can see, the pop-up from says that my software may be out of date. What software? Who knows. At least we can safely assume that this is a very lame attempt to trick you into installing more adware on your computer. Such pop-ups are very misleading because they do not even check your PC for updates.

What is more, this particular variant uses a download manager to download DomaIQ installer when in fact you can download any update directly from official websites. The software downloader is detected as Adware.Downware.1676, Win32/OutBrowse, DomainIQ by multiple anti-virus scanners, scans results. As you may already know, such software downloaders offer users to install additional software, mostly toolbars, browser hijackers and adware. Don't use third-party software downloaders and if you must then read everything very carefully and decline any offer you may get. Otherwise, you will probably end up with adware on your computer.

Written by Michael Kaur, virus removal instructions:

1. First of all, download anti-malware software and run a full system scan. It will detect and remove this infection from your computer. You may then follow the manual removal instructions below to remove the leftover traces of this malware. Hopefully you won't have to do that.

2. Remove related programs from your computer using the Add/Remove Programs control panel (Windows XP) or Uninstall a program control panel (Windows 7 and Windows 8).

Go to the Start Menu. Select Control PanelAdd/Remove Programs.
If you are using Windows Vista or Windows 7, select Control PanelUninstall a Program.

If you are using Windows 8, simply drag your mouse pointer to the right edge of the screen, select Search from the list and search for "control panel".

Or you can right-click on a bottom left hot corner (formerly known as the Start button) and select Control panel from there.

3. When the Add/Remove Programs or the Uninstall a Program screen is displayed, scroll through the list of currently installed programs and remove the following:
  • LyricsSay
  • Websteroids
  • SavingsBull
  • HD-Plus 3.5
  • and any other recently installed application

Simply select each application and click Remove. If you are using Windows Vista, Windows 7 or Windows 8, click Uninstall up near the top of that window. When you're done, please close the Control Panel screen.

Remove virus from Google Chrome:

1. Click on Chrome menu button. Go to ToolsExtensions.

2. Click on the trashcan icon to remove LyricsSay, Websteroids, SavingsBull, HD-Plus 3.5 and other extensions that you do not recognize.

Remove virus from Mozilla Firefox:

1. Open Mozilla Firefox. Go to ToolsAdd-ons.

2. Select Extensions. Click Remove button to remove LyricsSay, Websteroids, SavingsBull, HD-Plus 3.5 and other extensions that you do not recognize.

Remove virus from Internet Explorer:

1. Open Internet Explorer. Go to ToolsManage Add-ons. If you have the latest version, simply click on the Settings button.

2. Select Toolbars and Extensions. Click Remove/Disable button to remove the browser add-ons listed above.