Wednesday, February 20, 2013

Remove Eazel.com as the bad marketing affects your convenience

Eazel.com (http://english.eazel.com) forces users to see its content. This may happen each time system gets loaded so that browser may get started specifically to open this very important website. It is to be noted that such a forced start-up of Internet navigation tool is subject to settings on affected PC.
Removal of Eazel.com is not too complicated. It is just that a number of security tools abandon the issue under the pretext it is but a potentially unwanted program that can be easily uninstalled.
Alas, uninstalling does not remove Eazel.com browser virus. The only way to clean your computer memory and kill the parasite is with free scanner available here.

Eazel.com language versions:
 http://english.eazel.com/
http://deutsch.eazel.com/
http://french.eazel.com/
http://portuguese.eazel.com/
http://spanish.eazel.com/

Eazel.com domain \ servers tech detils:
Soluciones Corporativas IP (SCIP) Whois Server v 2.0

Domain Name:
 EAZEL.COM

Domain Status:
 Active

 Registrar of Record: DonDominio (SCIP)
 Registrar URL: www.dondominio.com

 Record last updated: 19/07/2012
 Record created: 14/11/2003
 Record expires: 18/07/2021

Registrant:
 Name: Vittalia Internet SL
 Organization: Vittalia Internet SL
 Email:
 Address: Avda de las Nieves 37
 City: Mostoles
 State: Madrid
 Postal Code: 28935
 Country: ES
 Phone: +34.663958078
 Fax:

Admin Contact:
 Name: Vittalia Internet SL
 Organization: Vittalia Internet SL
 Email:
 Address: Avda de las Nieves, 37
 City: Mostoles
 State: Madrid
 Postal Code: 28935
 Country: ES
 Phone: +34.663958078
 Fax:

Tech Contact:
 Name: Vittalia Internet SL
 Organization: Vittalia Internet SL
 Email:
 Address: Avda de las Nieves, 37
 City: Mostoles
 State: Madrid
 Postal Code: 28935
 Country: ES
 Phone: +34.663958078
 Fax:

Nameservers list:
 ns1-214.akam.net
 ns1-248.akam.net
 eur2.akam.net
 eur6.akam.net
 aus1.akam.net
 usw2.akam.net
 use9.akam.net

Monday, November 26, 2012

Ecostartpage.com

Ecostartpage.com displays traits of a website sponsored by redirect malware. It burdens users with its appearances, for people do not deliberately and consciously ask browser to open the page.
In spite of that most of the website loadings are arranged through malicious modification of browser and Internet settings, it is not correct to indentify the removal of Ecostartpage.com with changing browser settings, since a significant number of redirects is made due to immediate commands of the redirector.
Free scanner available here is a tool to get rid of Ecostartpage.com browser hijacker and other infections disclosed in the course of memory examination. 



Ecostartpage.com domain and server details:
Domain Name:     ecostartpage.com
Registrar:       Name.com LLC
Protected Domain Services Customer ID: NCR-4314932
Expiration Date: 2014-11-16 12:44:24
Creation Date:   2012-11-16 12:44:24

Name Servers:
        ns1dnx.name.com
        ns2btz.name.com
        ns3jkl.name.com
        ns4ghm.name.com

Domain privacy provided by Protected Domain Services. For more information see
www.protecteddomainservices.com

REGISTRANT CONTACT INFO
Protected Domain Services - Customer ID: NCR-4314932
P.O. Box 6197
Denver
CO
80206
US
Phone:         +1.3037474010
Email Address:

ADMINISTRATIVE CONTACT INFO
Protected Domain Services - Customer ID: NCR-4314932
P.O. Box 6197
Denver
CO
80206
US
Phone:         +1.3037474010
Email Address:

TECHNICAL CONTACT INFO
Protected Domain Services - Customer ID: NCR-4314932
P.O. Box 6197
Denver
CO
80206
US
Phone:         +1.3037474010
Email Address:

BILLING CONTACT INFO
Protected Domain Services - Customer ID: NCR-4314932
P.O. Box 6197
Denver
CO
80206
US
Phone:         +1.3037474010
Email Address: 

Tuesday, October 2, 2012

Search.smartsuggestor.com

Search.smartsuggestor.com loads despite you do not order so. The loading is powered by hijacker aimed at generating traffic to this page.
It is not the page itself that a hijacker infection wants you to visit. The url is but a bridge that links uses to the content the hackers have been contracted to promote.
Such a malvertisement affects your browsing experience, slows down Internet connection speed, as well as overall characteristics of your computer system. Needless to say, every user wants to open only the pages that are user’s deliberate choice to open. There is no way to satisfy that wish until after the removal of Search.smartsuggestor.com redirects.
Click here to explore the web without visiting forced destinations – apply free scanner in order to detect and remove Search.smartsuggestor.com hijacker. 


Search.smartsuggestor.com ddomain \ hosting details:
 Domain Name: SMARTSUGGESTOR.COM
Registrar: MONIKER

Registrant [3943346]:
 Nicole Payawal
 Think Tank Labs LLC
 620 Newport Center Drive, Suite 1100
 Newport Beach
 CA
 92660
 US

Administrative Contact [3943346]:
 Nicole Payawal
 Think Tank Labs LLC
 620 Newport Center Drive, Suite 1100
 Newport Beach
 CA
 92660
 US
 Phone: +1.8889332570

Billing Contact [3943346]:
 Nicole Payawal
 Think Tank Labs LLC
 620 Newport Center Drive, Suite 1100
 Newport Beach
 CA
 92660
 US
 Phone: +1.8889332570

Technical Contact [3943346]:
 Nicole Payawal
 Think Tank Labs LLC
 620 Newport Center Drive, Suite 1100
 Newport Beach
 CA
 92660
 US
 Phone: +1.8889332570

Domain servers in listed order:

 NS71.DOMAINCONTROL.COM
 NS72.DOMAINCONTROL.COM

 Record created on: 2010-11-27 16:58:33.0
 Database last updated on: 2012-08-24 15:49:52.92
 Domain Expires on: 2012-11-27 16:58:34.0

Tuesday, September 4, 2012

Remove Search.sweetim.com and SweetIM, sweet pair of tools for intrusive advertisement, even though associated with certain valuable features

Search.sweetim.com and SweetIM, website for getting list of links relevant to keywords criteria, and a toolbar for instant access to such features and services as instant web-search, advanced emoticons, email, are often mentioned as one and same issue.
The website and toolbar do not directly violate any regulations and laws whatsoever. It might happen, some users are happy to get them on their PCs, with the page loaded as a start point for web-navigation. If so, there is no need to get rid of search.sweetim.com and SweetIM, and you will enjoy default search engine that redirects to the above url, if the requested keyword is entered directly into address bar; the same url as a start page; toolbar limiting space of your current browser tab.
If that does not suite you, moreover, if you find the way the browser extension and website approached your PC is not quite fair, click here to start free scan and remove Search.sweetim.com and SweetIM, sweet tandem of annoying url and browser extension.


Search.sweetim.com domain tech details:

Registrant:
   Domains By Proxy, LLC

   Registered through: GoDaddy.com, LLC (http://www.godaddy.com)
   Domain Name: SWEETIM.COM

   Domain servers in listed order:
      DNS11.COTDNS.NET
      DNS12.COTDNS.NET



Tuesday, July 31, 2012

Btsearch.name

Btsearch.name decides for users when its pages are to be loaded into browser. Furthermore, it decides which websites are not to be visited by users as its appearance often occurs on the background of banning popular pages e.g. Google. In particular, removal of Btsearch.name is vividly discussed as extermination of Google search malware. Malware of such type blocks links specified by Google in response to the keyword entered by user and opens website it sponsors instead.
It is to be noted that tricks with Google are but a part of the hijacker’s payload. There are more reasons to get rid of Btsearch.name than browser disinfection – click here to start free computer examination by up-to-date antimalware to target browser redirect viruses and other threats relevant to your PC.

Btsearch.name screenshot:

Btsearch.name tech\domain details:
Domain Name:     btsearch.name
Registrar:       Name.com LLC

Expiration Date: 2013-02-07 11:22:22
Creation Date:   2012-02-07 11:22:22

Name Servers:
        ns1.name.com
        ns2.name.com
        ns3.name.com
        ns4.name.com

REGISTRANT CONTACT INFO
adparad
Yuiry Yakovenko
Shevchenko 10
Kiev
Kiev
02011
UA
Phone:         +380.937182123
Email Address:

ADMINISTRATIVE CONTACT INFO
adparad
Yuiry Yakovenko
Shevchenko 10
Kiev
Kiev
02011
UA
Phone:         +380.937182123
Email Address:

TECHNICAL CONTACT INFO
adparad
Yuiry Yakovenko
Shevchenko 10
Kiev
Kiev
02011
UA
Phone:         +380.937182123
Email Address:

BILLING CONTACT INFO
adparad
Yuiry Yakovenko
Shevchenko 10
Kiev
Kiev
02011
UA
Phone:         +380.937182123
Email Address: 

Monday, July 9, 2012

2d05eb2e.qqc.co (Linkbucks redirect)

2d05eb2e.qqc.co (Linkbucks) is featured with spam links mass-mailed with instant messengers and e-mail. Nevertheless, the major profit of its incoming traffic is made of its addicts.
The addicts are computers hijacked by the infection. The infection makes of them a sort of addicts to the url as the infected PCs get their browser programmed to load the website in question at given intervals.
To get rid of 2d05eb2e.qqc.co, one needs to resolve two issues: extermination of a malicious code from Internet browser (1) deletion of the code installer (2). Removal of 2d05eb2e.qqc.co related issues is available on free scan terms upon following this link



2d05eb2e.qqc.co tech details:


Domain Name:                                 QQC.CO
Domain ID:                                   D3480764-CO
Sponsoring Registrar:                        GODADDY.COM, INC.
Sponsoring Registrar IANA ID:                146
Registrar URL (registration services):       www.godaddy.com
Domain Status:                               clientDeleteProhibited
Domain Status:                               clientRenewProhibited
Domain Status:                               clientTransferProhibited
Domain Status:                               clientUpdateProhibited
Registrant ID:                               CR68493570
Registrant Name:                             Domain Administrator
Registrant Address1:                         10811 Washington Blvd 250
Registrant City:                             Culver City
Registrant State/Province:                   California
Registrant Postal Code:                      90232
Registrant Country:                          United States
Registrant Country Code:                     US
Registrant Phone Number:                     +1.3107364563
Registrant Email:                           
Administrative Contact ID:                   CR68493572
Administrative Contact Name:                 Domain Administrator
Administrative Contact Address1:             10811 Washington Blvd 250
Administrative Contact City:                 Culver City
Administrative Contact State/Province:       California
Administrative Contact Postal Code:          90232
Administrative Contact Country:              United States
Administrative Contact Country Code:         US
Administrative Contact Phone Number:         +1.3107364563
Administrative Contact Email:               
Billing Contact ID:                          CR68493573
Billing Contact Name:                        Domain Administrator
Billing Contact Address1:                    10811 Washington Blvd 250
Billing Contact City:                        Culver City
Billing Contact State/Province:              California
Billing Contact Postal Code:                 90232
Billing Contact Country:                     United States
Billing Contact Country Code:                US
Billing Contact Phone Number:                +1.3107364563
Billing Contact Email:                      
Technical Contact ID:                        CR68493571
Technical Contact Name:                      Domain Administrator
Technical Contact Address1:                  10811 Washington Blvd 250
Technical Contact City:                      Culver City
Technical Contact State/Province:            California
Technical Contact Postal Code:               90232
Technical Contact Country:                   United States
Technical Contact Country Code:              US
Technical Contact Phone Number:              +1.3107364563
Technical Contact Email:                    
Name Server:                                 NS1.PKDOMAINS.NET
Name Server:                                 NS2.PKDOMAINS.NET
Name Server:                                 NS3.PKDOMAINS.NET
Created by Registrar:                        GODADDY.COM, INC.
Last Updated by Registrar:                   GODADDY.COM, INC.
Domain Registration Date:                    Fri Dec 03 23:37:23 GMT 2010
Domain Expiration Date:                      Sun Dec 02 23:59:59 GMT 2012
Domain Last Updated Date:                    Mon Sep 26 22:06:27 GMT 2011

Wednesday, June 27, 2012

Cps.servefeed.info

Cps.servefeed.info is the destination of annoying popups. Cps.servefeed.info popups results from malicious elements installed on your PC. Theese elements may also redirect your searches and replace Google results links. Download Spyware Doctor to get rid of Cps.servefeed.info popups.


Cps.servefeed.info tech details:
Reverse Whois:
"WhoisGuard" was found in about 1,536,356 other domains
NS History:
2 changes on 3 unique name servers over 1 year.
IP History:
6 changes on 4 unique IP addresses over 1 years.
Whois History:
31 records have been archived since 2011-10-31 .
Reverse IP:
735,570 other sites hosted on this server.
Log In or Create a FREE account to start monitoring this domain name

Domain ID:D43861356-LRMS
Domain Name:SERVEFEED.INFO
Created On:30-Oct-2011 14:54:59 UTC
Last Updated On:29-Dec-2011 20:36:55 UTC
Expiration Date:30-Oct-2012 14:54:59 UTC
Sponsoring Registrar:eNom, Inc. (R126-LRMS)
Status:CLIENT TRANSFER PROHIBITED
Registrant ID:dc63e5a03d89202b
Registrant Name:WhoisGuard  Protected
Registrant Organization:WhoisGuard
Registrant Street1:11400 W. Olympic Blvd. Suite 200
Registrant Street2:
Registrant Street3:
Registrant City:Los Angeles
Registrant State/Province:CA
Registrant Postal Code:90064
Registrant Country:US
Registrant Phone:+1.6613102107
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:
Admin ID:4d153209581031ae
Admin Name:WhoisGuard  Protected
Admin Organization:WhoisGuard
Admin Street1:11400 W. Olympic Blvd. Suite 200
Admin Street2:
Admin Street3:
Admin City:Los Angeles
Admin State/Province:CA
Admin Postal Code:90064
Admin Country:US
Admin Phone:+1.6613102107
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:
Billing ID:dc63e5a03d89202b
Billing Name:WhoisGuard  Protected
Billing Organization:WhoisGuard
Billing Street1:11400 W. Olympic Blvd. Suite 200
Billing Street2:
Billing Street3:
Billing City:Los Angeles
Billing State/Province:CA
Billing Postal Code:90064
Billing Country:US
Billing Phone:+1.6613102107
Billing Phone Ext.:
Billing FAX:
Billing FAX Ext.:
Billing Email:
Tech ID:be51e176e65fad0f
Tech Name:WhoisGuard  Protected
Tech Organization:WhoisGuard
Tech Street1:11400 W. Olympic Blvd. Suite 200
Tech Street2:
Tech Street3:
Tech City:Los Angeles
Tech State/Province:CA
Tech Postal Code:90064
Tech Country:US
Tech Phone:+1.6613102107
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:
Name Server:DNS1.NAME-SERVICES.COM
Name Server:DNS2.NAME-SERVICES.COM
Name Server:DNS3.NAME-SERVICES.COM
Name Server:DNS4.NAME-SERVICES.COM
Name Server:DNS5.NAME-SERVICES.COM
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:

Monday, June 25, 2012

Search.gboxapp.com

Search.gboxapp.com has been found in the scripts of redirect and browser changing infections. The scripts instruct those viruses to modify users browsing experiences by interfering into web-surfing and changing browser interface.
The latter includes attachment of annoying toolbar into browser windows. The toolbar uninstalling is blocked by the malware. Even if it let you remove Search.gboxapp.com browser extension for a few days, sooner or later the virus restores the unwanted add-on.
Free scanner available here is a reasonable substitution to laborious and tricky manual removal of Search.gboxapp.com issue – follow the suggested link to dispose of the intrusive browser extension and redirect.

Search.gboxapp.com snapshot:



Search.gboxapp.com tech details:
Registrant:
   webpick ltd

   Registered through: GoDaddy.com, LLC (http://www.godaddy.com)
   Domain Name: GBOXAPP.COM

   Domain servers in listed order:
      DANA.NS.CLOUDFLARE.COM
      IVAN.NS.CLOUDFLARE.COM

Tuesday, June 12, 2012

Googledoubleclicks.com

Googledoubleclicks.com is associated with Google Redirect Malware. It may infect your browser and redirect to random web-sites with advertisment conten (like Googledoubleclicks). It also may replace search engine results and seriously slow your PC. Download Spyware Doctor to disable Googledoubleclicks redirections and eliminate related threats.


Googledoubleclicks.com tech details:
Registration Service Provided By: WEBST.RU
Contact: +7.9139079575
Website: http://webst.ru/

Domain Name: GOOGLEDOUBLECLICKS.COM

Registrant:
    ClickSOL Inc
    Jonathon C. Camp        ()
    4644 Harley Vincent Drive
    East Claridon
    Ohio,44033
    US
    Tel. +440.6355168

Creation Date: 22-Mar-2012 
Expiration Date: 22-Mar-2013

Domain servers in listed order:
    ns1.googledoubleclicks.com
    ns2.googledoubleclicks.com

Administrative Contact:
    ClickSOL Inc
    Jonathon C. Camp        ()
    4644 Harley Vincent Drive
    East Claridon
    Ohio,44033
    US
    Tel. +440.6355168

Technical Contact:
    ClickSOL Inc
    Jonathon C. Camp        ()
    4644 Harley Vincent Drive
    East Claridon
    Ohio,44033
    US
    Tel. +440.6355168

Billing Contact:
    ClickSOL Inc
    Jonathon C. Camp        ()
    4644 Harley Vincent Drive
    East Claridon
    Ohio,44033
    US
    Tel. +440.6355168

Thursday, June 7, 2012

Services-search.me

http://services-search.me is a typical redirect destination. Browser redirections to Services-search.me and other web-sites results from rootkits secretely installed on your PC. We recommend to use Spyware Doctor in order to detect and remove rootkits and stop search engine links redirecting you to Services-search.me and similiar malicious web-sites.

Services-search.me screenshot:


Services-search.me tech (domain\server) details:
Domain ID:D3839162-ME
Domain Name:SERVICES-SEARCH.ME
Domain Create Date:26-Jan-2012 13:36:19 UTC
Domain Last Updated Date:26-Mar-2012 20:50:12 UTC
Domain Expiration Date:26-Jan-2013 13:36:19 UTC
Last Transferred Date:
Sponsoring Registrar:Directi Internet Solutions d/b/a PublicDomainRegistry.com R28-ME
Created by:Directi Internet Solutions d/b/a PublicDomainRegistry.com R28-ME
Last Updated by Registrar:Afilias R54-ME
Domain Status:CLIENT TRANSFER PROHIBITED
Registrant ID:FR-11bff57eb7f1
Registrant Name:Domain Admin
Registrant Organization:PrivacyProtect.org
Registrant Address:ID#10760, PO Box 16
Registrant Address2:Note - All Postal Mails Rejected, visit Privacyprotect.org
Registrant Address3:
Registrant City:Nobby Beach
Registrant State/Province:
Registrant Country/Economy:AU
Registrant Postal Code:QLD 4218
Registrant Phone:+45.36946676
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant E-mail:
Admin ID:FR-11bff57eb7f1
Admin Name:Domain Admin
Admin Organization:PrivacyProtect.org
Admin Address:ID#10760, PO Box 16
Admin Address2:Note - All Postal Mails Rejected, visit Privacyprotect.org
Admin Address3:
Admin City:Nobby Beach
Admin State/Province:
Admin Country/Economy:AU
Admin Postal Code:QLD 4218
Admin Phone:+45.36946676
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin E-mail:
Tech ID:FR-11bff57eb7f1
Tech Name:Domain Admin
Tech Organization:PrivacyProtect.org
Tech Address:ID#10760, PO Box 16
Tech Address2:Note - All Postal Mails Rejected, visit Privacyprotect.org
Tech Address3:
Tech City:Nobby Beach
Tech State/Province:
Tech Country/Economy:AU
Tech Postal Code:QLD 4218
Tech Phone:+45.36946676
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech E-mail:
Nameservers:BIZZHOSTS2.MARS.ORDERBOX-DNS.COM
Nameservers:BIZZHOSTS2.EARTH.ORDERBOX-DNS.COM
Nameservers:BIZZHOSTS2.VENUS.ORDERBOX-DNS.COM
Nameservers:BIZZHOSTS2.MERCURY.ORDERBOX-DNS.COM