<style>/*<link href='https://www.blogger.com/dyn-css/authorization.css?targetBlogID=1136450937992139492&zx=3df1ce79-0ba9-4233-bb91-16ada4c2e341' media='none' onload='if(media!='all')media='all'' rel='stylesheet'/><noscript><link href='https://www.blogger.com/dyn-css/authorization.css?targetBlogID=1136450937992139492&zx=3df1ce79-0ba9-4233-bb91-16ada4c2e341' rel='stylesheet'/></noscript>
<meta name='google-adsense-platform-account' content='ca-host-pub-1556223355139109'/>
<meta name='google-adsense-platform-domain' content='blogspot.com'/>

<!-- data-ad-client=ca-pub-4624841575182921 -->

<link rel="stylesheet" href="https://fonts.googleapis.com/css2?display=swap&family=Roboto+Mono&family=Cutive+Mono"></head><body>*/</style>

Removing xfreeservice.com adware from Chrome

Abhay Singh

12 Feb, 2020

Removing xfreeservice.com
a.xfreeservice.com

b.xfreeservice.com

c.xfreeservice.com

and so on.

If your Google search results are filled with useless thumbnails and links are redirected through xfreeservice.com your Google Chrome is infected with a malicious javascript which probably came attached with one of the Chrome Extension.

Problem: Google Search results have thumbnails in front of them and links are redirected

through b.xfreeservice.com or c.xfreeservice.com. In some case, you are redirected to an entirely different page. Google search results are modified with affiliate links.

Solution: Remove any/all Chrome extensions that help with downloads.

Example: Downloader for Instagram, Video Downloader, Free Download Manager.

How?

There are very detailed insights on xfreeservice.com being malware or not here. Needless to say, there's indeed some undesired behaviour.

Is morrison.undercomputer.com malware?

Removal of xfreeservice.com in Chrome on Mac

The xfreeservice.com script is designed very well to ensure a Chrome user cannot always pinpoint it out.

If you open developers inspector in Google Search results infiltrated with xfreeservice.com links, the script hides all parts related to xfreeservice.com

Moreover, if you just modified any of your extensions xfreeservice.com will remain disabled for certain time.

<style>/*
<script type="text/javascript" src="https://www.blogger.com/static/v1/widgets/984859869-widgets.js"></script>
<script type='text/javascript'>
window['__wavt'] = 'AOuZoY4kv8NRsQbnlxZ8nq8EUe7xXix2qw:1732948297928';_WidgetManager._Init('//www.blogger.com/rearrange?blogID\x3d1136450937992139492','//www.shiftescape.com/2020/02/removing-xfreeservicecom-adware-from.html','1136450937992139492');
_WidgetManager._SetDataContext([{'name': 'blog', 'data': {'blogId': '1136450937992139492', 'title': 'Shift Escape', 'url': 'https://www.shiftescape.com/2020/02/removing-xfreeservicecom-adware-from.html', 'canonicalUrl': 'http://www.shiftescape.com/2020/02/removing-xfreeservicecom-adware-from.html', 'homepageUrl': 'https://www.shiftescape.com/', 'searchUrl': 'https://www.shiftescape.com/search', 'canonicalHomepageUrl': 'http://www.shiftescape.com/', 'blogspotFaviconUrl': 'https://www.shiftescape.com/favicon.ico', 'bloggerUrl': 'https://www.blogger.com', 'hasCustomDomain': true, 'httpsEnabled': true, 'enabledCommentProfileImages': true, 'gPlusViewType': 'FILTERED_POSTMOD', 'adultContent': false, 'analyticsAccountNumber': 'UA-86079725-1', 'encoding': 'UTF-8', 'locale': 'en-GB', 'localeUnderscoreDelimited': 'en_gb', 'languageDirection': 'ltr', 'isPrivate': false, 'isMobile': false, 'isMobileRequest': false, 'mobileClass': '', 'isPrivateBlog': false, 'isDynamicViewsAvailable': true, 'feedLinks': '\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22Shift Escape - Atom\x22 href\x3d\x22https://www.shiftescape.com/feeds/posts/default\x22 /\x3e\n\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/rss+xml\x22 title\x3d\x22Shift Escape - RSS\x22 href\x3d\x22https://www.shiftescape.com/feeds/posts/default?alt\x3drss\x22 /\x3e\n\x3clink rel\x3d\x22service.post\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22Shift Escape - Atom\x22 href\x3d\x22https://www.blogger.com/feeds/1136450937992139492/posts/default\x22 /\x3e\n\n\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22Shift Escape - Atom\x22 href\x3d\x22https://www.shiftescape.com/feeds/4151625903429697154/comments/default\x22 /\x3e\n', 'meTag': '', 'adsenseClientId': 'ca-pub-4624841575182921', 'adsenseHostId': 'ca-host-pub-1556223355139109', 'adsenseHasAds': true, 'adsenseAutoAds': false, 'boqCommentIframeForm': true, 'loginRedirectParam': '', 'view': '', 'dynamicViewsCommentsSrc': '//www.blogblog.com/dynamicviews/4224c15c4e7c9321/js/comments.js', 'dynamicViewsScriptSrc': '//www.blogblog.com/dynamicviews/2fafd358a4bcb2b4', 'plusOneApiSrc': 'https://apis.google.com/js/platform.js', 'disableGComments': true, 'interstitialAccepted': false, 'sharing': {'platforms': [{'name': 'Get link', 'key': 'link', 'shareMessage': 'Get link', 'target': ''}, {'name': 'Facebook', 'key': 'facebook', 'shareMessage': 'Share to Facebook', 'target': 'facebook'}, {'name': 'BlogThis!', 'key': 'blogThis', 'shareMessage': 'BlogThis!', 'target': 'blog'}, {'name': 'X', 'key': 'twitter', 'shareMessage': 'Share to X', 'target': 'twitter'}, {'name': 'Pinterest', 'key': 'pinterest', 'shareMessage': 'Share to Pinterest', 'target': 'pinterest'}, {'name': 'Email', 'key': 'email', 'shareMessage': 'Email', 'target': 'email'}], 'disableGooglePlus': true, 'googlePlusShareButtonWidth': 0, 'googlePlusBootstrap': '\x3cscript type\x3d\x22text/javascript\x22\x3ewindow.___gcfg \x3d {\x27lang\x27: \x27en_GB\x27};\x3c/script\x3e'}, 'hasCustomJumpLinkMessage': false, 'jumpLinkMessage': 'Read more', 'pageType': 'item', 'postId': '4151625903429697154', 'postImageThumbnailUrl': 'https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjRUAtBobFpNb3Bp6GuEvsqowVaPAWqllw5aCOeM_qSTR2_v4u2h_cUsoC9z4obb0cXaZzRiqjMIslAYQqXz5_6HlR70bmPjcLEBqXDJFj3KExuAMWMlZb_8Pxvv-DYnn58dHq-4a6TKNY/s72-c/image-736433.png', 'postImageUrl': 'https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjRUAtBobFpNb3Bp6GuEvsqowVaPAWqllw5aCOeM_qSTR2_v4u2h_cUsoC9z4obb0cXaZzRiqjMIslAYQqXz5_6HlR70bmPjcLEBqXDJFj3KExuAMWMlZb_8Pxvv-DYnn58dHq-4a6TKNY/s320/image-736433.png', 'pageName': 'Removing xfreeservice.com adware from Chrome', 'pageTitle': 'Shift Escape: Removing xfreeservice.com adware from Chrome', 'metaDescription': ''}}, {'name': 'features', 'data': {}}, {'name': 'messages', 'data': {'edit': 'Edit', 'linkCopiedToClipboard': 'Link copied to clipboard', 'ok': 'Ok', 'postLink': 'Post link'}}, {'name': 'template', 'data': {'name': 'custom', 'localizedName': 'Custom', 'isResponsive': true, 'isAlternateRendering': false, 'isCustom': true}}, {'name': 'view', 'data': {'classic': {'name': 'classic', 'url': '?view\x3dclassic'}, 'flipcard': {'name': 'flipcard', 'url': '?view\x3dflipcard'}, 'magazine': {'name': 'magazine', 'url': '?view\x3dmagazine'}, 'mosaic': {'name': 'mosaic', 'url': '?view\x3dmosaic'}, 'sidebar': {'name': 'sidebar', 'url': '?view\x3dsidebar'}, 'snapshot': {'name': 'snapshot', 'url': '?view\x3dsnapshot'}, 'timeslide': {'name': 'timeslide', 'url': '?view\x3dtimeslide'}, 'isMobile': false, 'title': 'Removing xfreeservice.com adware from Chrome', 'description': 'Blog about Game Development, Programming and Technology.', 'featuredImage': 'https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjRUAtBobFpNb3Bp6GuEvsqowVaPAWqllw5aCOeM_qSTR2_v4u2h_cUsoC9z4obb0cXaZzRiqjMIslAYQqXz5_6HlR70bmPjcLEBqXDJFj3KExuAMWMlZb_8Pxvv-DYnn58dHq-4a6TKNY/s320/image-736433.png', 'url': 'https://www.shiftescape.com/2020/02/removing-xfreeservicecom-adware-from.html', 'type': 'item', 'isSingleItem': true, 'isMultipleItems': false, 'isError': false, 'isPage': false, 'isPost': true, 'isHomepage': false, 'isArchive': false, 'isLabelSearch': false, 'postId': 4151625903429697154}}, {'name': 'widgets', 'data': [{'title': 'Pageviews from the past week', 'type': 'Stats', 'sectionId': 'upload-image', 'id': 'Stats1'}, {'title': 'Upload Image', 'type': 'Image', 'sectionId': 'upload-image', 'id': 'Image10'}, {'title': 'Shift Escape (Header)', 'type': 'Header', 'sectionId': 'upload-image', 'id': 'Header1'}, {'type': 'AdSense', 'sectionId': 'upload-image', 'id': 'AdSense1'}, {'type': 'AdSense', 'sectionId': 'upload-image', 'id': 'AdSense2'}, {'type': 'Attribution', 'sectionId': 'upload-image', 'id': 'Attribution1'}, {'title': 'Archives', 'type': 'BlogArchive', 'sectionId': 'upload-image', 'id': 'BlogArchive1'}, {'title': '', 'type': 'ReportAbuse', 'sectionId': 'upload-image', 'id': 'ReportAbuse1'}, {'title': '', 'type': 'PageList', 'sectionId': 'upload-image', 'id': 'PageList1'}, {'title': '', 'type': 'HTML', 'sectionId': 'upload-image', 'id': 'HTML1'}, {'title': 'Logo', 'type': 'HTML', 'sectionId': 'header-main', 'id': 'HTML10'}, {'title': 'Icons, Dark, Search', 'type': 'LinkList', 'sectionId': 'header-main', 'id': 'LinkList10'}, {'title': 'Menu', 'type': 'LinkList', 'sectionId': 'header-main', 'id': 'LinkList11'}, {'type': 'AdSense', 'sectionId': 'before-blog', 'id': 'AdSense3'}, {'title': 'Featured Post', 'type': 'FeaturedPost', 'sectionId': 'before-blog', 'id': 'FeaturedPost1', 'postId': '5308617035953002558'}, {'title': '', 'type': 'HTML', 'sectionId': 'before-post', 'id': 'HTML6'}, {'title': 'Blog Posts', 'type': 'Blog', 'sectionId': 'blog-post', 'id': 'Blog1', 'posts': [{'id': '4151625903429697154', 'title': 'Removing xfreeservice.com adware from Chrome', 'featuredImage': 'https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjRUAtBobFpNb3Bp6GuEvsqowVaPAWqllw5aCOeM_qSTR2_v4u2h_cUsoC9z4obb0cXaZzRiqjMIslAYQqXz5_6HlR70bmPjcLEBqXDJFj3KExuAMWMlZb_8Pxvv-DYnn58dHq-4a6TKNY/s320/image-736433.png', 'showInlineAds': false}], 'headerByline': {'regionName': 'header1', 'items': [{'name': 'share', 'label': ''}, {'name': 'author', 'label': 'By'}, {'name': 'timestamp', 'label': 'd MMM, yyyy'}]}, 'footerBylines': [{'regionName': 'footer1', 'items': [{'name': 'comments', 'label': 'Comment'}, {'name': 'icons', 'label': ''}]}, {'regionName': 'footer2', 'items': [{'name': 'labels', 'label': ''}]}], 'allBylineItems': [{'name': 'share', 'label': ''}, {'name': 'author', 'label': 'By'}, {'name': 'timestamp', 'label': 'd MMM, yyyy'}, {'name': 'comments', 'label': 'Comment'}, {'name': 'icons', 'label': ''}, {'name': 'labels', 'label': ''}]}, {'title': '', 'type': 'HTML', 'sectionId': 'ads-post', 'id': 'HTML4'}, {'type': 'AdSense', 'sectionId': 'ads-post', 'id': 'AdSense8'}, {'type': 'AdSense', 'sectionId': 'ads-post', 'id': 'AdSense7'}, {'type': 'AdSense', 'sectionId': 'ads-post', 'id': 'AdSense6'}, {'type': 'AdSense', 'sectionId': 'ads-post', 'id': 'AdSense5'}, {'type': 'AdSense', 'sectionId': 'ads-post', 'id': 'AdSense4'}, {'title': '#You may also like', 'type': 'HTML', 'sectionId': 'ads-post', 'id': 'HTML15'}, {'title': '', 'type': 'HTML', 'sectionId': 'after-blog', 'id': 'HTML2'}, {'type': 'AdSense', 'sectionId': 'after-blog', 'id': 'AdSense9'}, {'title': '', 'type': 'HTML', 'sectionId': 'sidebar-static', 'id': 'HTML7'}, {'title': 'Handy Links', 'type': 'LinkList', 'sectionId': 'sidebar-static', 'id': 'LinkList1'}, {'title': '#Recent Post', 'type': 'HTML', 'sectionId': 'sidebar-static', 'id': 'HTML19'}, {'title': '', 'type': 'HTML', 'sectionId': 'sidebar-static', 'id': 'HTML3'}, {'title': 'Categories', 'type': 'Label', 'sectionId': 'sidebar-static', 'id': 'Label10'}, {'title': 'Popular Posts', 'type': 'PopularPosts', 'sectionId': 'sidebar-sticky', 'id': 'PopularPosts10', 'posts': [{'title': 'How to drag and drop item in Unity3D', 'id': 5922872796105354321}, {'title': 'DNS Server Addresses to block ads or access blocked content', 'id': 3812133567694326845}, {'title': 'How to Convert Unreal Engine 5.1 Blueprint Project to C++ Project ', 'id': 4563910616889831367}, {'title': 'How to make download file button in react js', 'id': 4543464819147341494}, {'title': 'Unity Mobile Game Optimization Checklist', 'id': 9215975592307785960}]}, {'type': 'AdSense', 'sectionId': 'sidebar-sticky', 'id': 'AdSense10'}, {'title': 'About Us', 'type': 'HTML', 'sectionId': 'footer-widget', 'id': 'HTML21'}, {'title': 'Learn More', 'type': 'LinkList', 'sectionId': 'footer-widget', 'id': 'LinkList13'}, {'title': 'Copyright', 'type': 'HTML', 'sectionId': 'copyright', 'id': 'HTML23'}, {'title': 'SVG Icons', 'type': 'HTML', 'sectionId': 'jet-options', 'id': 'HTML24'}]}]);
_WidgetManager._RegisterWidget('_StatsView', new _WidgetInfo('Stats1', 'upload-image', document.getElementById('Stats1'), {'title': 'Pageviews from the past week', 'showGraphicalCounter': true, 'showAnimatedCounter': false, 'showSparkline': true, 'statsUrl': '//www.shiftescape.com/b/stats?style\x3dBLACK_TRANSPARENT\x26timeRange\x3dLAST_WEEK\x26token\x3dAPq4FmCwzw5yyqOG-X9TQlmU_qu6ZQldPlLW_TYwPeAjKZxAZ_eRM06iXwLywA9vjdq_XHj8VppDbn8XeWKIekBxYY5Vlv-LsA'}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_ImageView', new _WidgetInfo('Image10', 'upload-image', document.getElementById('Image10'), {'resize': false}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HeaderView', new _WidgetInfo('Header1', 'upload-image', document.getElementById('Header1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_AdSenseView', new _WidgetInfo('AdSense1', 'upload-image', document.getElementById('AdSense1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_AdSenseView', new _WidgetInfo('AdSense2', 'upload-image', document.getElementById('AdSense2'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_AttributionView', new _WidgetInfo('Attribution1', 'upload-image', document.getElementById('Attribution1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_BlogArchiveView', new _WidgetInfo('BlogArchive1', 'upload-image', document.getElementById('BlogArchive1'), {'languageDirection': 'ltr', 'loadingMessage': 'Loading\x26hellip;'}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_ReportAbuseView', new _WidgetInfo('ReportAbuse1', 'upload-image', document.getElementById('ReportAbuse1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_PageListView', new _WidgetInfo('PageList1', 'upload-image', document.getElementById('PageList1'), {'title': '', 'links': [{'isCurrentPage': false, 'href': 'https://www.shiftescape.com/p/sidebar.html', 'id': '7279145243760716765', 'title': 'Sidebar'}, {'isCurrentPage': false, 'href': 'https://www.shiftescape.com/p/about.html', 'id': '1192806162033082648', 'title': 'About'}, {'isCurrentPage': false, 'href': 'https://www.shiftescape.com/p/contact.html', 'id': '2527468589120520113', 'title': 'Contact'}, {'isCurrentPage': false, 'href': 'https://www.shiftescape.com/p/privacy-policy.html', 'id': '1579773307285555675', 'title': 'Privacy Policy'}, {'isCurrentPage': false, 'href': 'https://www.shiftescape.com/p/guest-posting.html', 'id': '8838182355795350266', 'title': 'Guest Post'}, {'isCurrentPage': false, 'href': 'https://www.shiftescape.com/p/resources.html', 'id': '8533005778209522809', 'title': 'Resources'}], 'mobile': false, 'showPlaceholder': true, 'hasCurrentPage': false}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML1', 'upload-image', document.getElementById('HTML1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML10', 'header-main', document.getElementById('HTML10'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList10', 'header-main', document.getElementById('LinkList10'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList11', 'header-main', document.getElementById('LinkList11'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_AdSenseView', new _WidgetInfo('AdSense3', 'before-blog', document.getElementById('AdSense3'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_FeaturedPostView', new _WidgetInfo('FeaturedPost1', 'before-blog', document.getElementById('FeaturedPost1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML6', 'before-post', document.getElementById('HTML6'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_BlogView', new _WidgetInfo('Blog1', 'blog-post', document.getElementById('Blog1'), {'cmtInteractionsEnabled': false, 'lightboxEnabled': true, 'lightboxModuleUrl': 'https://www.blogger.com/static/v1/jsbin/1575117483-lbx__en_gb.js', 'lightboxCssUrl': 'https://www.blogger.com/static/v1/v-css/1964470060-lightbox_bundle.css'}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML4', 'ads-post', document.getElementById('HTML4'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_AdSenseView', new _WidgetInfo('AdSense8', 'ads-post', document.getElementById('AdSense8'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_AdSenseView', new _WidgetInfo('AdSense7', 'ads-post', document.getElementById('AdSense7'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_AdSenseView', new _WidgetInfo('AdSense6', 'ads-post', document.getElementById('AdSense6'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_AdSenseView', new _WidgetInfo('AdSense5', 'ads-post', document.getElementById('AdSense5'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_AdSenseView', new _WidgetInfo('AdSense4', 'ads-post', document.getElementById('AdSense4'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML15', 'ads-post', document.getElementById('HTML15'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML2', 'after-blog', document.getElementById('HTML2'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_AdSenseView', new _WidgetInfo('AdSense9', 'after-blog', document.getElementById('AdSense9'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML7', 'sidebar-static', document.getElementById('HTML7'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList1', 'sidebar-static', document.getElementById('LinkList1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML19', 'sidebar-static', document.getElementById('HTML19'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML3', 'sidebar-static', document.getElementById('HTML3'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LabelView', new _WidgetInfo('Label10', 'sidebar-static', document.getElementById('Label10'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_PopularPostsView', new _WidgetInfo('PopularPosts10', 'sidebar-sticky', document.getElementById('PopularPosts10'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_AdSenseView', new _WidgetInfo('AdSense10', 'sidebar-sticky', document.getElementById('AdSense10'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML21', 'footer-widget', document.getElementById('HTML21'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList13', 'footer-widget', document.getElementById('LinkList13'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML23', 'copyright', document.getElementById('HTML23'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML24', 'jet-options', document.getElementById('HTML24'), {}, 'displayModeFull'));
</script>
</body>*/</style>