Hey you,
BE IN THE KNOW!

35,000 ransomware infections per month and you still believe you are protected?

Sign up to receive:

  • alerts
  • news
  • free how-to-remove guides

of the newest online threats - directly to your inbox:


Remove Teracreative Ads Caused by DNS Unlocker Completely

i42^cimgpsh_origA new ad-supported application has been reported to advertise heavily onto affected users’ computers. The software is reported to be intrusive and cause computer slow-downs as well as pop-ups and even browser redirects to third-party URLs. Users who have witnessed this ad-supported application are strongly advised to scan immediately their computer for all of the objects it creates on it and remove them using the instructions after this article.

Name Tereacreative Ads
Type PUP, adware.
Short Description The program collects different information and displays advertisements in various forms.
Symptoms The user may witness fake Java Update downloads as well as redirects to other potentially harmful domains and various pop-ups, banners, highlighted text, etc.
Distribution Method Via other PUPs like DNS Unlocker, installed by bundling or by visiting a suspicious third-party site that is advertising it.
Detection Tool Download Malware Removal Tool, to See If Your System Has Been Affected by Tereacreative Ads
User Experience Join our forum to discuss Tereacreative Ads.

Teracreative Ads – How Did I Get It

Affected users who have received ads that redirect to a domain, called 55.teracreative.com have reported after scanning their computers that these advertisements were caused by one of the most infamous ad-supported programs out there – DNS Unlocker.
This program is believed to be indirectly dangerous to your computer, since besides changing various settings on your browser, it may also modify your DNS settings to sniff network traffic. Malware researchers believe DNS Unlocker spreads via bundled installers, such as the one in the example below:

bundling-sensorstechforum

Such installers are usually of free programs users often download, like media players, torrent software, virtual drive managers and other useful freeware. Some third-party sites include installers of programs such as DNS Unlocker without minding they are shady. This is most likely done for profit and users are strongly advised to be extremely careful while installing new software.

Teracreative Ads In Detail

Once activated on your computer, DNS Unlocker may add Teracreative Ads as a browser extension to the following web browsers:

  • Google Chrome.
  • Mozilla Firefox.
  • Internet Explorer.
  • Safari.
  • Opera Browser.

After being added, the adware may also create hundreds of suspicious objects in the following location:

→ C:\Users\Felix\Appdata\Local\

The objects may have random alpha numerical names, such as the example below:

→ {2702412478-9BMA-4MS8-A67C-19419DA1218}

What is worse, is that this software may heavily modify the keys in the Windows Registry Editor, adding custom data and values. This is most likely done with the purpose of reverting the browser’s settings after the user has tried to reinstall or reset it to default. This is why users complain that after removing those extensions they have had no effect, and the ads were back. The targeted keys can be the following:

→ HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\Start Page
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Mozilla Firefox\
HKEY_LOCAL_MACHINE\SOFTWARE\Opera\
HKEY_LOCAL_MACHINE\SOFTWARE\Internet Explorer\

In addition to that, the software may also obtain certain user information such as:

  • Online clicks.
  • Online search history.
  • Browsing History.
  • Other user-entered information.

This information may be used by the ad-supported application to advertise different third-party content such as:

  • Pop-ups.
  • Browser redirects.
  • Taken over banner spaces.
  • Highlighted text.
  • Ad-supported search results by hoax search engines.

The main risks associated with this browser hijacker is that it may lead to dangerous third-party websites. Such sites may conceal different threats from the user:

  • Phishing scamming sites.
  • Fake tech support scams.
  • Drive-by download of malware caused by browser redirect.
  • Personal information theft via cookies by third-party sites.

When the website 55.teracreative.com was checked, it blocked us, due to “too many redirects” type of error:

too-many-redirects-error-sensorstechforum

Remove Teracreative Ads from Your Computer

Since these advertisements may cause headaches while removing because of the modified registry entries, Teracreative Ads creates. This means that after you reinstall or reset your web browser, the advertisements may reappear. Adblocking software does stop the ads but does not stop other functions of the program. This is why we strongly recommend using the methodological steps in the removal instructions below to remove this ad-supported application permanently.

Delete Tereacreative Ads from Windows and Your Browser

1.Remove or Uninstall Tereacreative Ads in Windows
2.Remove Tereacreative Ads from Your Browser

Remove Tereacreative Ads automatically by downloading an advanced anti-malware program.

1. Remove Tereacreative Ads with SpyHunter Anti-Malware Tool
2. Back up your data to secure it against attacks related to Tereacreative Ads in the future
Optional: Using Alternative Anti-Malware Tools
NOTE! Substantial notification about the Tereacreative Ads threat: Manual removal of Tereacreative Ads requires interference with system files and registries. Thus, it can cause damage to your PC. Even if your computer skills are not at a professional level, don’t worry. You can do the removal yourself just in 5 minutes, using a malware removal tool.

Vencislav Krustev

A network administrator and malware researcher at SensorsTechForum with passion for discovery of new shifts and innovations in cyber security. Strong believer in basic education of every user towards online safety.

More Posts - Website

Share on Facebook Share
Loading...
Share on Twitter Tweet
Loading...
Share on Google Plus Share
Loading...
Share on Linkedin Share
Loading...
Share on Digg Share
Share on Reddit Share
Loading...
Share on Stumbleupon Share
Loading...
Please wait...

Subscribe to our newsletter

Want to be notified when our article is published? Enter your email address and name below to be the first to know.