Home » Blog » Cybersecurity » How to remove the Adserverplus virus – Adserverplus adware removal (block)
Adserverplus Popup

How to remove the Adserverplus virus – Adserverplus adware removal (block)

What is the Adserverplus virus (adware)?

Adserverplus Popup

The Adserverplus virus is a term for malware categorized as adware, that utilizes browser hijackers in order to display Adserverplus popup advertisements.Adserverplus installs as a Browser Helper Object (BHO) on separate internet browsers and displays advertisement for computer users connected to the internet. Adserverplus adware can easily be identified through the popup advertisements which display the name “Adserverplus”. Adserverplus generates random advertisements based on user information stored in active internet browsers. Adserverplus is also known to slow PC processes down and has been documented as the reason for various system crashes (blue screen).

How to remove Adserverplus popup malware

There are different options to block and remove Adserverplus popup spyware. We have outlined 3.

1. Automatic Removal – Removal Software and Tools

To automatically remove Adserverplus and third-party malware from your computer please use the Adserverplus removal instructions below.

1. Install the free or paid version of Malwarebytes Anti-Malware.

Purchase   Download

2. Once Malwarebytes is installed, run the Anti-Malware software.

3. On the first tab labeled “Scanner” select the Perform full scan option and click the Scan button to perform a full system scan. Malwarebytes will automatically detect Adserverplus an third-party malware infecting the computer system.

Malwarebytes Perform Full Scan

4. Once the malware scan is complete, Malwarebytes will prompt a notice stating malicious objects were detected. Select the malicious objects and click the Remove Selected button to completely remove the malicious files from your computer (the image below shows a file that is NOT selected) or click the Delete button to remove quarantined files.

Malwarebytes Gadgetbox

CCleaner

CCleaner can be used to automatically repair internet browser settings startup up settings, and uninstall Adserverplus software.

1. Install the free or paid version of CCleaner by Piriform.

Purchase CCleaner for $24.95*   Free Download

CCleaner Analyze Cleaner

2. Once installed, open the program and navigate to Cleaner > Windows/Applications and click the Analyze button. Afterwards, click the Run Cleaner button on the bottom right of the program interface.

CCleaner Startup

3. Next, navigate to Tools > Startup and search through each tab starting from windows, internet explorer, etc., all the way to Content Menu, for additional suspicious entries and click Disable and Delete once anything is found.

4. To automatically uninstall Adserverplus and unwanted programs, navigate to the Uninstall tab and search for Adserverplus software, etc. in the list of installed programs. Uninstall the programs as selected.

2. Manual Removal Instructions:

  1. Open Windows Task Manager by pressing Ctrl+shift+Esc and navigate to the “Processes” tab.
  2. Select the ad.adserverplus.com process and click the “End Process” button to stop Adserverplus popup from running.
  3. Manually search and delete directory files associated with Adserverplus adware:
%AppData%[trojan name]toolbardtx.ini%AppData%[trojan name]toolbarguid.dat

%AppData%[trojan name]toolbarlog.txt

%AppData%[trojan name]toolbarpreferences.dat

%AppData%[trojan name]toolbarstat.log

%AppData%[trojan name]toolbarstats.dat

%AppData%[trojan name]toolbaruninstallIE.dat

%AppData%[trojan name]toolbaruninstallStatIE.dat

%AppData%[trojan name]toolbarversion.xml
Remove registry files associated with Adserverplus:
  1. Open the start menu and type regedit into the search field and click Enter.
  2. In the Registry Editor search for the registry keys similar to – “HKEY_LOCAL_MACHINE-Software-ad.adserverplus.com” and delete by right clicking them.
HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{99079a25-328f-4bd4-be04-00955acaa0a7} “[trojan name] Toolbar”

HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}VersionIndependentProgID “[trojan name]IEHelper.UrlHelper”

HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}ProgID “[trojan name]IEHelper.UrlHelper.1″

HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{A40DC6C5-79D0-4ca8-A185-8FF989AF1115} “UrlHelper Class”

HKEY_LOCAL_MACHINESOFTWAREClasses[trojan name]IEHelper.DNSGuardCurVer

HKEY_LOCAL_MACHINESOFTWAREClasses[trojan name]IEHelper.DNSGuardCLSID

HKEY_LOCAL_MACHINESOFTWAREClasses[trojan name]IEHelper.DNSGuard

3. Internet Browser Advertisement Blocking

Instructions to properly block the Adserverplus popup virus on Mozilla FireFox, Google Chrome, Microsoft Internet Explorer, and Apple Safari.

Mozilla Firefox

Mozilla Firefox has a lot of issues concerning Adserverplus popups, more so than other internet browsers. We have detailed a few separate options to block advertisements as well as removing and installing Mozilla Firefox to remove Adserverplus popups.

Block Adserverplus popup advertisements

There are 2 options to block advertisements using Mozilla FireFox: Adblock Plus extension and using FireFox in attempt to block malicious URLs.

Install Adblock Plus extension: https://addons.mozilla.org/en-US/firefox/addon/adblock-plus/

Adblock Plus is a great tool to block or disable unwanted advertisements, though some users have detailed Adserverplus popups to run while Adblock Plus is initiated.

Block Infolinks on Firefox with AdBlock Plus
Block Adserverplus popup cookies

It’s difficult to identify URLs which Adserverplus uses to generate advertisements, though we have detailed the main URLs. If you use the 1st option, being the Adblock Plus extension option and Adserverplus popups appear, you will be able to detail which URLs are generating the ads through the Adblock Plus extension. These URLs can be used to block advertisements and cookies generating through those URLs.

  1. Access Mozilla FireFox
  2. From the Tools menu, select Options
  3. In the upper section of the Options window, click Privacy
  4. In the Cookies tab, click Exceptions
  5. In the new Exceptions – Cookies window, enter the malicious URLs (below) in the Address of Website field and click Disable.

Adserverplus popup URLS to enter:

  • adserverplus.com
  • ad.adserverplus.com
  • cloudfront.net
  • habboin.com
  • Ad.yieldmanager.com
  • Forum.91.com
How to remove and reinstall Mozilla FireFox

It is recommended to uninstall your version (or older versions) of FireFox and proceed with a new fresh install. Before you attempt this, make sure you have use of a second internet browser; our example includes the use of Microsoft Internet Explorer alongside FireFox. We also include details to save your current FireFox bookmarks.

  • Run Firefox and click Bookmarks.
  • Select Organize Bookmarks.
  • On the next window click “File” and select Export (Save the bookmark’s html file to your Desktop for later use in importing).
  • Now download and save the installer for the current version of FireFox – but DO NOT install it yet. Install Mozilla FireFox: Mozilla FireFox
  • Exit FireFox  and use Internet Explorer to continue with the below:
  • Uninstall FireFox, you can do so in Control Panel > Programs > Programs and Features > Uninstall a Program or uninstalling FireFox using a third party uninstaller such as: Revo Uninstaller.
  • Reboot/restart your system (Important).
  • After reboot, delete the below folders:
    • C:\Program Files\Mozilla Firefox
    • C:\users\UserName\AppData\Roaming\Mozilla\Firefox
  • Now re-install FireFox from the file previously downloaded (the one we instructed to download to your desktop).
  • Import your bookmarks file. The same way you exported the html file.

Please note, App Data files are by default hidden files on Window’s, to learn about showing hidden files read this short post.

Google Chrome

The most common way to block advertisements using Google Chrome is to install and use the free Adblock extension.

Also keep in mind, since Adserverplus popup uses browser helper objects, if this adware is currently active on Google Chrome you will be able to check its process in the task manager by navigating to Tools > Task Manager (or simply SHIFT+ESC) in an open Google Chrome window. You are also given the option to kill any suspicious processes.

Block Adserverplus popup advertisements
  1. Install Adblock: https://chrome.google.com/webstore/detail/gighmmpiobklfepjocnamgkkbiglidom
  2. Once installed, to block Adserverplus popup, right click the Ad Block icon and select “options“
  3. Navigate to the “Customize” tab
  4. Select “Block an ad by its URL“
  5. In the Domain of page to apply on text area enter the domains listed below (1 at a time)

Adserverplus popup URLS to enter:

  • adserverplus.com
  • ad.adserverplus.com
  • cloudfront.net
  • habboin.com
  • Ad.yieldmanager.com
  • Forum.91.com

Microsoft Internet Explorer

Microsoft Internet Explorer has great options to block and restrict URLs.

Restricted site option

Access: Tools (Alt-x) > Internet Options> Security > Restricted sites – Then click the “Sites” button and enter the URLs below.

Adserverplus popup URLS to enter:

  • adserverplus.com
  • ad.adserverplus.com
  • cloudfront.net
  • habboin.com
  • Ad.yieldmanager.com
  • Forum.91.com
Block Adserverplus popup cookies
  1. From the Tools menu of Internet Explorer, select Internet Options
  2. Select the Privacy tab, and then click Sites. The Per site privacy actions window will be displayed
  3. In the Per site privacy actions window, enter the URLS given above in the Address of Web site field
  4. Click Block

Apple Safari

Apple Safari is by far the most simple to block advertisers and cookies.

Block Adserverplus popup advertisements
  1. Click the general Safari menu icon and select Safari Preferences
  2. Select the Privacy tab, and check: Block cookies: “from third parties and advertisers”

Block cookies on Apple Safari

Jared Harrison

Jared Harrison is an accomplished tech author and entrepreneur, bringing forth over 20 years of extensive expertise in cybersecurity, privacy, malware, Google Analytics, online marketing, and various other tech domains. He has made significant contributions to the industry and has been featured in multiple esteemed publications. Jared is widely recognized for his keen intellect and innovative insights, earning him a reputation as a respected figure in the tech community.

More Reading

Post navigation

4 Comments

  • Hi, I just wanted to say thank you so much for posting this article, I’ve been having the most annoying adverts popping up which no anti-virus software could detect, I had to look at “Google pays me $250 an hour” and nonsense like that each time I open a new web page, but after following your instructions I don’t have that problem anymore.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

What is Birbware Ransomware and how do I remove it?

How to remove 2xx9 (Virus Removal Guide)

How to remove CryEye virus from Android (Ransomware)