A new ad-supported application has been reported to advertise heavily onto affected users’ computers. The software is reported to be intrusive and cause computer slow-downs as well as pop-ups and even browser redirects to third-party URLs. Users who have witnessed this ad-supported application are strongly advised to scan immediately their computer for all of the objects it creates on it and remove them using the instructions after this article.
|Short Description||The program collects different information and displays advertisements in various forms.|
|Symptoms||The user may witness fake Java Update downloads as well as redirects to other potentially harmful domains and various pop-ups, banners, highlighted text, etc.|
|Distribution Method||Via other PUPs like DNS Unlocker, installed by bundling or by visiting a suspicious third-party site that is advertising it.|
|Detection Tool||Download Malware Removal Tool, to See If Your System Has Been Affected by Tereacreative Ads|
|User Experience||Join our forum to discuss Tereacreative Ads.|
Teracreative Ads – How Did I Get It
Affected users who have received ads that redirect to a domain, called 55.teracreative.com have reported after scanning their computers that these advertisements were caused by one of the most infamous ad-supported programs out there – DNS Unlocker.
This program is believed to be indirectly dangerous to your computer, since besides changing various settings on your browser, it may also modify your DNS settings to sniff network traffic. Malware researchers believe DNS Unlocker spreads via bundled installers, such as the one in the example below:
Such installers are usually of free programs users often download, like media players, torrent software, virtual drive managers and other useful freeware. Some third-party sites include installers of programs such as DNS Unlocker without minding they are shady. This is most likely done for profit and users are strongly advised to be extremely careful while installing new software.
Teracreative Ads In Detail
Once activated on your computer, DNS Unlocker may add Teracreative Ads as a browser extension to the following web browsers:
- Google Chrome.
- Mozilla Firefox.
- Internet Explorer.
- Opera Browser.
After being added, the adware may also create hundreds of suspicious objects in the following location:
The objects may have random alpha numerical names, such as the example below:
What is worse, is that this software may heavily modify the keys in the Windows Registry Editor, adding custom data and values. This is most likely done with the purpose of reverting the browser’s settings after the user has tried to reinstall or reset it to default. This is why users complain that after removing those extensions they have had no effect, and the ads were back. The targeted keys can be the following:
→ HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\Start Page
HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences
In addition to that, the software may also obtain certain user information such as:
- Online clicks.
- Online search history.
- Browsing History.
- Other user-entered information.
This information may be used by the ad-supported application to advertise different third-party content such as:
- Browser redirects.
- Taken over banner spaces.
- Highlighted text.
- Ad-supported search results by hoax search engines.
The main risks associated with this browser hijacker is that it may lead to dangerous third-party websites. Such sites may conceal different threats from the user:
- Phishing scamming sites.
- Fake tech support scams.
- Drive-by download of malware caused by browser redirect.
- Personal information theft via cookies by third-party sites.
When the website 55.teracreative.com was checked, it blocked us, due to “too many redirects” type of error:
Remove Teracreative Ads from Your Computer
Since these advertisements may cause headaches while removing because of the modified registry entries, Teracreative Ads creates. This means that after you reinstall or reset your web browser, the advertisements may reappear. Adblocking software does stop the ads but does not stop other functions of the program. This is why we strongly recommend using the methodological steps in the removal instructions below to remove this ad-supported application permanently.