
Solimba is a bundled executable program. It was created to be launched as a promotional tool to get advertisements loaded on a user’s system, upon installation. As a bundle, Solimba offers installation of various programs, with the objective of promoting various products and services. It utilizes unethical techniques, as in the case with adware tactics to influence or for want of a better word, hijack an Internet Browser to affect a website’s result on a search results page. In this assessment, Solimba distributed ads on Internet Explorer, Chrome, and Mozilla browsers, by hijacking various Internet Browsers to change the user's experience. (Images are shown below)
Technical details about Solimba PUP include:
Digital Signature: POPELER SYSTEM, S.L.
Entry Point: 0x0000C1DC
Solimba PUP is all about the ads. Once this executable is installed, it penetrates your computer system and sends ads all over your Internet Browser – Chrome, Internet Explorer, Mozilla Firefox, and the likes.
For this assessment of Solimba.exe PUP, two installations were carried through. In layman's terms, I actually installed Solimba on two occasions to decipher the true nature of the PUP. It was shocking to find that both installations revealed different bundled programs and advertisements. In the first instance (as shown below), Solimba proved more aggressive in featuring ads for revenue advancements.
Solimba employed aggressive advertising techniques
It’s important to note that hijacked results resulting from the installation of Solimba. This affected the results of the website on the Internet browser to boost its ranking, even without the use of a search engine. The advertisement displayed on the Internet Explorer search page routes the user to a software installation website. The utility tool in question was a “Windows 8.1 PC Repair” tool used to identify threats present on the Windows 8.1 OS.
The advertisement displayed on the Chrome Browser search page routes the user to a health and beauty magazine website. This site advocates health and beauty, especially issues concerning weight loss. Several ads were visible on-site, displaying products to assist people in losing weight.
During my installation of Solimba, the installation wizard underscored that four programs would be downloaded. These programs included N8Fanclub.com_KinoniRemoteDesktop, Lolliscan, PaceItUp, and SearchProtect. Interestingly, only two programs from the list were apparent or obvious. An N8Fanclub.com_KinoniRemoteDesktop file was made on the Desktop and SearchProtect was seen in “All Programs”, along with files stored on the computer’s Local Drive. The other programs that were “supposedly” installed remained concealed. A test was done to determine whether these were counted as extensions or add-ons to the varying web browsers but nothing was found on any of the tested browsers – Google Chrome, Internet Explorer, and Mozilla Firefox.
When this file was initially found on the Desktop, a rootkit came to mind. A rootkit was used as a means to an end. Whoever was on the receiving end of this unwanted file would be able to connect to an infiltrated system without the knowledge of the user. After running the file to determine its behavior, nothing much happened. A message appeared indicating that the software couldn’t execute on the computer. That was pretty tricky since, to begin with, I didn’t place that specific file on the desktop but it came along with the territory and so I had to accept it.
Further research online into N8Fanclub.com_KinoniRemoteDesktop proved very rewarding. A search of the entire file name was not able to do the trick so I had to do research on both terms separately. After landing on N8Fanclub.com, I was nicely asked to disable my adblocker.
There seemed nothing harmful about the site. However, due to the fact that it was not what I initially installed, the program was an unwanted program. That’s exactly what Solimba does. It installs several other programs that were not requested by the user in an attempt to make money from advertising. The mere fact that this program got installed meant that it was to promote an online service.
was a separate program. It was combined with N8Fanclub as a way to allow users to use their PC computer “as if they were sitting in front of it.” A user would be able to make use of a full web browser, watch Flash videos, play games, and even use office applications. This would be done from the user’s Nokia device. This is an advertisement at its best.
This program did not allow me to see much since it didn’t leave a physical trace behind. However, during the installation, Lolliscan was listed as one of the four programs that would be installed. Overall, Lolliscan supposedly should be able to save people money since this form of the ad focuses on showing coupons when visiting sites such as Amazon. While this seems like a good deal, this ad will invade your personal space and distribute pop-ups at the most inopportune times.
As the name states, PaceItUp is software added to a browser with the intent to speed your computer. Quite the contrary, PaceItUp does the total opposite since it installs bundled programs that slow down a computer system. PaceItUp is also known for displaying ads and tracking what the user does on his/her computer system.
It’s known for hijacking your computer’s homepage. In fact, this addition is very stubborn and often possesses a challenge when a request to uninstall is made.
The second installation of Solimba also had its own dose of bundles to display. In comparison to the first installation, two programs from the bundle were different while two remained the same.
two additional programs were installed along with the second installation of this bundle. These were dubbed Optimizer Pro and GamesDesktop. SearchProtect and N8Fanclub.com_KinoniRemoteDesktop remained triumphant and unbeatable. They were repeated within the installation.
To completely remove Solimba from your computer, click here to download and install Spyhunter.
PrivacyAssistant is a browser extension developed by SearchAssistant.net. These extensions allegedly offer users a safer way to browse the internet and some other tools to customize the home page with background wallpapers and one-click links that can be added. While all this may sound appealing, PrivacyAssistant also monitors your browser activity, search quarries, clicks, visits, and possibly personal information.
This extension changes your default home page to SearchAssistant.com and rerouting all searches through its search portal, displaying sponsored links instead of your typical search results. While active you may see unwanted ads and even pop-up ads appearing while browsing the internet.
Several anti-virus programs have classified this extension as a Browser Hijacker, and are, therefore, for security reasons, not recommended to keep on your computer.
Instaling and removing applications from your Windows can sometimes leave some traces that are unpleasant and can cause annoyances. One of these annoyances is the program in the startup section of the task manager.
If you ever opened task manager and went into the startup section trying to disable some of the startup items on your Windows boot there might be a chance that you have experienced and seen a program without any icon or information about it just sitting there.
This is due to some applications being removed from the system but for some reason, it still shows itself in startup and it is quite annoying. So here we will show you how to get rid of this annoyance so your startup is clean again without junk in it.
The first thing of course is to open the task manager itself and navigate to the startup tab. Inside the startup tab right-click on the column header and tick or enable Startup type and command line. Now you will see the location of the supposed file (that is missing or you could just go there by right-clicking on the item, but here it is greyed).
99% of the time startup type will be registry since the file is missing, if it was a file fix would be just to simply delete the file in the folder but since it was installed and not properly removed registry key is still present but the file cannot be found. After confirmation that the file is indeed missing and that the startup type is registry open the registry editor by typing Regedit in search and pressing enter.
Inside Registry editor navigate to: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. Inside on right part, you will see all auto-start entries added by installed applications.
Locate one that is causing issues by comparing its path with the path inside the task manager command line and delete the key. Once the key is deleted right-click on RUN on the left part and choose HKEY_LOCAL_MACHINE to quickly jump on that key location and repeat the process of key deletion if needed. HKEY_LOCAL_MACHINE will delete startup entry for all users and sometimes entry will not be present here since the application is not installed for all users or there are no other users on the machine.
After the procedure is finished, reboot your systems in order to apply changes.
SweetIM Toolbar for Internet Explorer is a browser add-on which adds various shortcuts to your browsers for easy access. This toolbar also changes your homepage to home.sweetim.com. The toolbar is typically bundled with the free Sweet Instant Messenger program and does not necessarily get uninstalled when Instant Messenger is removed from the user’s PC. Additionally, if the home page and search settings were modified by this toolbar, they need to be manually reverted back by the user.
This extension injects various ads into your browser search results and changes your default search engine. While you are browsing the internet, this software records your website surfing data, clicks, and possibly private information. Several Anti-virus programs have classified SweetIM Toolbar as a potentially unwanted application and are not recommended to keep.