Your computer is infected with malicious software? Do you have pop-ups on your PC?
If so, search this blog for removal instructions or browse computer threats by category.

Tuesday, December 30, 2014

How to Remove Unisales Ad Malware (Uninstall Guide)

Tell your friends:
Have you recently found a strange toolbar, unfamiliar home page or unisales ad on your PC when you logged in? I know I have. If you have, then, like me, you were unfortunate enough to have been on the receiving end of a bite from a potentially unwanted program!

And just like a nip from one of our four legged friends, these PUPs can be just as nasty. "Wait a moment!" I hear you say, what on earth are you talking about? I'm talking about Potentially Unwanted Programs – most commonly shortened to PUPs. A type of computer software program which sneaks its way on to your computer or laptop then displays a number of extremely irritating characteristics like never ending Unisales adverts.


Some Potentially Unwanted Programs are already loaded on your new computer when you buy it however the majority of them are installed when you download some software – usually free software. The Unisales will come as a bundle with the program that you are installing - and it takes some keen powers of observation to spot it and stop it in its tracks.

It really doesn't matter how reputable the software you are downloading is; like you, it too can be an unwitting victim of a Potentially Unwanted Program like Unisales.

So that's our first problem right there. We all download software on a regular basis – some of us more often than others, but all of us leaving ourselves open to risk whenever we do so. Therefore you need to know what to look out for – even if you do trust the publishers or website you are downloading from.

One important thing to do is to add an extra line of defense to your operating system by making sure you have the most up to date security patches from Microsoft installed on your PC as these offer very good protection against malware that has been installed in a 'drive by' installation.

Of course ensuring that your anti-virus and anti-malware software is current and running efficiently is also crucial. Having a really good anti-virus is important however, as many PUPs don't get picked up by lower end security software thanks to the Unisales's ability to create a desktop shortcut that fools some anti-viruses into thinking that you downloaded it yourself.

Don't forget, too, to ensure that any other software programs that you have installed on your computer are up to date as this will help plug any vulnerabilities.

One other vital thing you really need to do is to read the wording in End User License Agreements carefully when you're downloading software as the Unisales will normally be mentioned here. You may need to check or uncheck boxes that have been checked/unchecked in favor of the PUP so do watch for that too.

The good news is that most Potentially Unwanted Programs are fairly easy to remove and you can do this quickly and simply through the Windows 'remove' or 'uninstall' functions. However, Unisales is a bit more aggressive and it may be quite difficult to if from your computer completely. It re-installs bogus extensions and it hides its presence of the system to avoid removal. To remove this malware from your computer, please follow the steps in the removal guide below.

If you have any questions, please leave a comment down below. Good luck – and try not to get bitten!

Written by Michael Kaur, http://deletemalware.blogspot.com



Unisales Ads Removal Guide:


1. First of all, download anti-malware software and run a full system scan. It will detect and remove this infection from your computer. You may then follow the manual removal instructions below to remove the leftover traces of this malware. Hopefully you won't have to do that.





2. Remove Unisales related programs from your computer using the Add/Remove Programs control panel (Windows XP) or Uninstall a program control panel (Windows 7 and Windows 8).

Go to the Start Menu. Select Control PanelAdd/Remove Programs.
If you are using Windows Vista or Windows 7, select Control PanelUninstall a Program.



If you are using Windows 8, simply drag your mouse pointer to the right edge of the screen, select Search from the list and search for "control panel".



Or you can right-click on a bottom left hot corner (formerly known as the Start button) and select Control panel from there.



3. When the Add/Remove Programs or the Uninstall a Program screen is displayed, scroll through the list of currently installed programs and remove the following:
  • Unisales
  • Coupon Clicker
  • and any other recently installed application


Simply select each application and click Remove. If you are using Windows Vista, Windows 7 or Windows 8, click Uninstall up near the top of that window. When you're done, please close the Control Panel screen.

Remove Unisales related extensions from Google Chrome:

1. Click on Chrome menu button. Go to ToolsExtensions.



2. Click on the trashcan icon to remove Unisaales 2.0, Coupon Clicker, HD-Plus 3.5 and other extensions that you do not recognize.

If the removal option is grayed out then read how to remove extensions installed by enterprise policy.




Remove Unisales related extensions from Mozilla Firefox:

1. Open Mozilla Firefox. Go to ToolsAdd-ons.



2. Select Extensions. Click Remove button to remove Unisaales 2.0, Coupon Clicker, HD-Plus 3.5 and other extensions that you do not recognize.

Remove Unisales related add-ons from Internet Explorer:

1. Open Internet Explorer. Go to ToolsManage Add-ons. If you have the latest version, simply click on the Settings button.



2. Select Toolbars and Extensions. Click Remove/Disable button to remove the browser add-ons listed above.

21 comments:

Travis said...

what if they keep coming back?

Anonymous said...

I've found a chrome extension called "unoisaless" and it keeps coming back. Is it the same thing and it's changing its name?

danielle mclean said...

Mine keeps coming back.. I've used malware bytes to remove it so many times and as soon as it restarts my computer the extension appears again on chrome

steve said...

Yeah it keeps coming back every time i open chrome. any other ways of doing this?

Anonymous said...

is this a thing now? i cant remove it also

Anonymous said...

for those that have it keep coming back, you have to get into your start up programs and delete it from there. Go to "Start" then "Run" and type in "MSConfig" and hit enter. Then click on the tab "Startup" and you'll see a huge list of programs that start up on your computer before you can do anything about it. They start in the background and a lot of them are critical for your computer to have a normal boot up. So don't just go deleting everything in site on that list. Look for the things labeled like Unisales, or Unoisaless, or anything strange looking. You can also google what the normal list of boot up programs are supposed to be and then delete those that are not specified by microsoft on that list.

Anonymous said...

For Windows 7
Go to (C:) and open Program Data. Program Data might be hidden. So change the setting by clicking on "Organize", click on "Folder and Search options". A box will appear. Click on "View" at the top and there will be an option "Show hidden files and folders". This should show you the hidden files and "Program Data". Whenever someone uninstalls a file from Control Panel, the deleted file data is left behind in "Program Data". Organize the folder into "Date modified", this will show you the recent files you have deleted. Look for a folder that has a lengthy name and within that folder there will be a .txt file. If you open that file, there will be a really really really long single line with some words in it, the words dont make much sense. You have to delete this folder to completely uninstall unisale. I had two of those folders in "program data", so I dont remember the exact name of the file, it wont say unisales. The folder will name have random alphabetical words and may be some numerical numbers. After that or before doing this I also went into extensions and deleted and unchecked unisales. It all worked out for me.

Amy B said...

@Anonymous, thanks so much for the tip about checking the Program Data folder. I didn't even know it was there or how to get to it! Sure enough, I did find two folders with long, alphabetic and/or numeric names. Here are the names of the ones I had and deleted:

1883424416232827158
-and-
bbgjoikaccajpnoamliohaplelogbmip

I deleted them and did all the steps in the article above, so hopefully it worked. :)

Anonymous said...

I did exactly the same thing and it worked for me. Stupid malware bs! Thanks guys!!!

Anonymous said...

For Chrome I had to go to "settings > extensions" allow "Developper Mode" to locate where Unisales was installed and remove it manually.

The above guide and several anti-malware didn't work in my case.

Guillaume Higiro said...

Thanks to the Anonymous user who posted the comment above mine. I followed your advice and located the culprit folder where Unisales was launching from in the background. I have also deleted it manually. It had really caused a lot of harm to my company website. Thanks.

Anonymous said...

(Google chrome users) if after trying all it still comes back, then go in Settings>Extension and then click on the developer mode. it should then under the unisaales/uniosaales thingmajig it shoould show a blue underlined link bringing you to a sub folder in programs application, basically just delete the folder it brought you too and then restart your pc then everything should be fine.

Anonymous said...

going to programdata worked for me, thank you!

Anonymous said...

Hello Everyone,

Here is how i undid mine and worked.
I figured out how to remove these annoying ads.
Open a folder, go to Local disc "C" and under programme files look for a unoisaless and unisales and delete them.

C how you all go.
Cheers,
Caroline

swager said...

For Windows 7
Go to (C:) and open Program Data. Program Data might be hidden. So change the setting by clicking on "Organize", click on "Folder and Search options". A box will appear. Click on "View" at the top and there will be an option "Show hidden files and folders". This should show you the hidden files and "Program Data". Whenever someone uninstalls a file from Control Panel, the deleted file data is left behind in "Program Data". Organize the folder into "Date modified", this will show you the recent files you have deleted. Look for a folder that has a lengthy name and within that folder there will be a .txt file. If you open that file, there will be a really really really long single line with some words in it, the words dont make much sense. You have to delete this folder to completely uninstall unisale. I had two of those folders in "program data", so I dont remember the exact name of the file, it wont say unisales. The folder will name have random alphabetical words and may be some numerical numbers. After that or before doing this I also went into extensions and deleted and unchecked unisales. It all worked out for me.

Anonymous said...

The "Go to (C:) and open Program Data" worked for me. just delete the lengthy name folder.tnx sir!

Anonymous said...

Thank you so much, it works for me for deleting the folder in the program data.

Unknown said...

@Anonymous:Thank you so much sweetheart!!!!
It worked for me..
Though I m a tech It was quite difficult fr me to get rid of that shit..
Love you N B blessed!!!

From ,
Patty.

Anonymous said...

I'm on a Windows 8 and my problem is that I keep clicking remove in "add/remove" but here's the message I get, "to uninstall and add more money saving ads click yes, to simply uninstall without adding ads click no, or cancel."
I have tried a bunch of times and when I click it nothing happens. However, one thing that did happen every time I clicked it, is McAfee told me it had detected a virus and automatically removed the threat. Unfortunately, the ads were still present and the program is still showing up on my PC. It will not even pretend to un-install. I've gone ahead and followed some of the suggestions on this site: removed it from my Google Chrome and deleted it from my program files. I hope it works out.

Anonymous said...

Just recently removed this from a friend's computer. Another tip on how it can try to hide.

In chrome, it had created a profile, just Person 1, which cloud syncs extensions. Even if removed, upon opening chrome it would resync extensions. Delete profiles if it keeps coming back.

Anonymous said...

What Anonymous said a few lines above worked for me as well! You have my gratitude!