Remove unwanted apps that promote undertain.work and similar pages

What is undertain[.]work?

Generally, users do not open undertain[.]work or similar web pages intentionally - they are opened by browsers with potentially unwanted applications (PUAs) installed on them. These rogue apps are classified as PUAs because most users download and install them inadvertently. In addition to promoting sites such as undertain[.]work, PUAs often serve ads and gather data.

PUAs promote pages such as undertain[.]work by opening them in a new browser window or tab. The sites then load dubious content or open about two or three other untrusted sites. This depends on the geolocations of their visitors. Note that undertain[.]work and similar sites use 'clickbait' techniques to trick visitors into clicking the "Allow" button.

If clicked, this allows pages to show their notifications - undertain[.]work loads a notification stating that, if visitors click the button, they are able to start downloading a file. Generally, these sites show notifications with deceptive advertisements and/or links to other untrusted web pages.

Some examples of other pages similar to undertain[.]work are liveplayingnow[.]com, finvesterns[.]work and bargaret[.]work. As mentioned, PUAs can promote/open dubious addresses, serve advertisements, and gather various information.

PUAs serve banners, pop-ups, coupons, surveys or other ads that, if clicked, open untrusted websites or even cause download/installation of unwanted apps by running certain scripts. PUAs also collect browsing-related information such as IP addresses, website URLs visited, pages viewed, search queries, etc.

In some cases, they collect personal, sensitive information as well. The main purpose of data tracking performed by PUAs is to generate revenue for the developers. Developers sell the gathered data to third parties (potentially, cyber criminals) or in other ways.

People who download and install PUAs thus risk experiencing problems relating to online privacy, web browsing safety, or even becoming victims of identity theft.

Threat Summary:

Name	Ads by undertain.work
Threat Type	Push notifications ads, Unwanted ads, Pop-up ads.
Detection Names	ESET (Malware), Full List Of Detections (VirusTotal).
Serving IP Address	52.86.219.129
Symptoms	Seeing advertisements not originating from the sites you are browsing. Intrusive pop-up ads. Decreased Internet browsing speed.
Distribution Methods	Deceptive pop-up ads, potentially unwanted applications (adware).
Damage	Decreased computer performance, browser tracking - privacy issues, possible additional malware infections.
Malware Removal (Windows)	To eliminate possible malware infections, scan your computer with legitimate antivirus software. Our security researchers recommend using Combo Cleaner. ▼ Download Combo Cleaner To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by Rcs Lt, the parent company of PCRisk.com read more.

In summary, if a browser opens websites such as undertain[.]work (or other dubious, untrusted sites), it is very likely that a PUA is installed on the browser or operating system. Note that these apps are useless to regular users, even if they are advertised as useful, legitimate apps.

How did adware install on my computer?

Unwanted downloads and installations often occur when developers distribute PUAs by integrating them into the download/installation setups of other programs as "extra offers". This distribution method is known as "bundling". The offers can be declined in "Custom", "Advanced" and other similar settings of the setups (or by unticking certain checkboxes).

Many users fail to check and change these settings (or untick the checkboxes), thereby allowing PUAs to infiltrate together with the desired software. PUAs are also downloaded and installed by clicking deceptive advertisements (usually on untrusted sites) that execute certain scripts.

How to avoid installation of potentially unwanted applications

You are advised to download files and programs from official websites and via direct download links. Other tools and sources such as third party downloaders and installers, unofficial pages, and Peer-to-Peer networks (e.g., eMule, torrent clients) should not be used to download or install software.

Check all "Custom", "Advanced" and other similar settings (or available checkboxes) for offers to download and/or install unwanted apps. Do not click ads on dubious websites, since they can be designed to open bogus web pages or cause unwanted downloads and installations.

Remove any unwanted, suspicious extensions, plug-ins and add-ons installed on the browser, and software of this kind from the operating system. If your computer is already infected with rogue applications, we recommend running a scan with Combo Cleaner Antivirus for Windows to automatically eliminate them.

Appearance of undertain[.]work website (GIF):

Notifications by undertain[.]work:

Instant automatic malware removal: Manual threat removal might be a lengthy and complicated process that requires advanced IT skills. Combo Cleaner is a professional automatic malware removal tool that is recommended to get rid of malware. Download it by clicking the button below:
▼ DOWNLOAD Combo Cleaner By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by Rcs Lt, the parent company of PCRisk.com read more.

Quick menu:

• What is Ads by undertain.work?
• STEP 1. Remove spam notifications from Google Chrome
• STEP 2. Remove spam notifications from Google Chrome (Android)
• STEP 3. Remove spam notifications from Mozilla Firefox
• STEP 4. Remove spam notifications from Microsoft Edge
• STEP 5. Remove spam notifications from Safari (macOS)

Disable unwanted browser notifications:

Video showing how to disable web browser notifications:

Remove spam notifications from Google Chrome:

Click the Menu button (three dots) on the right upper corner of the screen and select "Settings". In the opened window select "Privacy and security", then click on "Site Settings" and choose "Notifications".

In the "Allowed to send notifications" list search for websites that you want to stop receiving notifications from. Click on the three dots icon near the website URL and click "Block" or "Remove" (if you click "Remove" and visit the malicious site once more, it will ask to enable notifications again).

Remove spam notifications from Google Chrome (Android):

Tap the Menu button (three dots) on the right upper corner of the screen and select "Settings". Scroll down, tap on "Site settings" and then "Notifications".

In the opened window, locate all suspicious URLs and tap on them one-by-one. Once the pop-up shows up, select either "Block" or "Remove" (if you tap "Remove" and visit the malicious site once more, it will ask to enable notifications again).

Remove spam notifications from Mozilla Firefox:

Click the Menu button (three bars) on the right upper corner of the screen. Select "Settings" and click on "Privacy & Security" in the toolbar on the left hand side of the screen. Scroll down to the "Permissions" section and click the "Settings" button next to "Notifications".

In the opened window, locate all suspicious URLs and block them using the drop-down menu or either remove them by clicking "Remove Website" at the bottom of the window (if you click "Remove Website" and visit the malicious site once more, it will ask to enable notifications again).

Remove spam notifications from Microsoft Edge:

Click the menu button (three dots) on the right upper corner of the Edge window and select "Settings". Click on "Cookies and site permissions" in the toolbar on the left hand side of the screen and select "Notifications".

Click three dots on the right hand side of each suspicious URL under "Allow" section and click "Block" or "Remove" (if you click "Remove" and visit the malicious site once more, it will ask to enable notifications again).

Remove spam notifications from Safari (macOS):

Click "Safari" button on the left upper corner of the screen and select "Preferences...". Select the "Websites" tab and then select "Notifications" section on the left pane.

Check for suspicious URLs and apply the "Deny" option using the drop-down menu or either remove them by clicking "Remove" at the bottom of the window (if you click "Remove" and visit the malicious site once more, it will ask to enable notifications again)

How to avoid browser notification spam?

Internet users should be very skeptical when being asked to allow notifications. While this is a useful feature that allows you to receive timely news from websites you like, deceptive marketers frequently abuse it.

Only allow notifications from websites that you fully trust. For added security - use an anti-malware application with a real-time web browsing monitor to block shady websites that tries to trick you into allowing spam notifications. We recommend using Combo Cleaner Antivirus for Windows.

▼ Show Discussion