Click on screenshot to zoom
Danger level 7
Type: Adware
Common infection symptoms:
  • Annoying Pop-up's
  • Shows commercial adverts

If you notice that you get redirected to questionable promotional sites while browsing the web, it is possible that has found a way to hijack your browser. This is indeed a Russian adware server that poses as a news website with a search engine on the front. However, this adware server may be able to send location sensitive third-party websites and advertisements to your screen. Unfortunately, these contents could be potentially unreliable and thus pose a threat to your system security. We have discovered dozens of identical adware servers in the past months, including,,, and, which are sometimes also classified as browser hijackers because of their capability to show up in your browser as your home page. Since you may be exposed to the questionable promotions of this adware server by being infected with malware, such as adware, we suggest that after you remove from your computer, you also scan your system with a reliable malware scanner to be able to hunt down all related and unrelated threats as well.

If you ever encounter advertising and promoted websites via this adware server, there are basically two possible ways for you to do so. First, it is possible that you click on a corrupt third-party ad or link on a suspicious website and get redirected to this questionable server. When a certain alphabetical code is appended to the URL, you will be redirected accordingly to the matching website or advertisement. This is why you need to be cautious with your clicks and you should stop visiting suspicious pages altogether. You may not even know that you are viewing such a dangerous page, for example, when you are downloading free program from torrent or freeware pages. These are among the websites that are mostly filled with unsafe third-party contents. Other websites include online gambling, gaming, and pornographic pages. One click on the wrong content and you could open potentially harmful pages on new tabs or in new browser windows after being redirected to this adware server. In this case, you can easily delete by closing the browser window if you are lucky enough not to have any related or other malware threats on board.

But, unfortunately, this is not the only way to be exposed to this server. It can also be used by malware infections, such as adware programs, that are capable of redirection. We have found that InstallMonster bundles are ones that can pack such threats and spread this adware server and its questionable promotions. Of course, it is quite likely that such a bundle contains a couple of other malware infections (browser hijackers, fake alerts, Trojans, etc) as well as potentially unwanted programs. Therefore, this adware server may not be the only one to worry about and to take care of. You can download such a bundle when you use shady torrent and freeware pages for downloading free software or when you visit suspicious pages we have mentioned before. If you engage with any third-party content on these pages, it is likely that you drop a bunch of malware threats onto your system. Of course, it is also possible that your system is infected with adware and that is how you are exposed to an unsafe third-party ad (pop-up or banner) and clicking on it may drop a bundle containing an infection related to this threat. This is exactly why it is important that after you delete, you check your system for other infections.

As we have said, this adware server pretends to be a Russian news website that, in reality, may simply steal its articles from other pages to serve as a cover. This website can also promote questionable third-party ads that may pose a threat to your virtual security if you were to engage with them. We do not advise you to use the web search function either as you could end up on modified search results pages including potentially unreliable promoted ads and links. But this is all the surface since this adware server can do way more than that; it can redirect you to all kinds of third-party websites and advertisements even considering your location. Obviously, the creators of this adware server make money by generating web traffic to promoted pages. However, there is no guarantee that you will always land on trustworthy sites. If you, by any chance, were to end up on a malicious page, you could drop more serious malware threats onto your computer or even get scammed. If you do not want to harm your system or your bank account, we suggest that you remove right away.

This adware server can be triggered by setting up scheduled tasks on your system. It is possible that, for example, every hour your default browser opens with a promoted site. Thus, it is important that first you try to identify all these tasks and delete them. Then, you can reset your browsers to make sure that no malicious extension or setting remains that could be responsible for the redirection. Please follow our instructions below if you want to take down this threat manually. You can also check your installed programs list for suspicious programs because you may be able to identify adware threats. However, if you want to be more effective, we suggest that you install a reliable anti-malware program, such as SpyHunter.

Remove suspicious scheduled tasks

  1. Open the Task Manager by tapping Ctrl+Shift+Esc.
  2. Choose the Start-up tab.
  3. Select the malicious program and click Disable.
  4. Close the Task Manager.
  5. Tap Win+E.
  6. Locate the %WINDIR%\Tasks and %WINDIR%\System32\Tasks folders.
  7. Delete the task related to this threat.
  8. Empty the Recycle bin.
  9. Tap Win+Q and type regedit. Hit the Enter key.
  10. Delete the possibly related value names in these entries:
  11. Close the editor.

How to reset your browsers

Google Chrome

  1. Tap Alt+F and select Settings.
  2. At the bottom, click Advanced.
  3. At the bottom, click Reset.
  4. In the confirmation window, press Reset.

Mozilla Firefox

  1. Tap Alt+H and select Troubleshooting Information.
  2. Click Refresh Firefox at the top.
  3. Press Refresh Firefox in the confirmation window.

Internet Explorer

  1. Tap Alt+T and choose Internet Options.
  2. On the Advanced tab, press Reset.
  3. Select Delete personal settings and press Reset.
  4. Press Close.
Download Spyware Removal Tool to Remove*
  • Quick & tested solution for removal.
  • 100% Free Scan for Windows

Post comment — WE NEED YOUR OPINION!

Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.