Js/Adware.Agent.AW ads: what it is and how to remove it
Js/Adware.Agent.AW is an ESET detection for adware connecting to malicious servers. It displays intrusive ads and redirects to dangerous websites.
Facts checked October 8, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.
Automatic
Get a free scan and check if your PC is infected.
Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.
A scan of the PC is a quick way to confirm that nothing installed is behind the a.xfreeservice.com redirects.
Do it yourself · free Remove Js/Adware.Agent.AW ads yourself 4 steps, about 12 minutes, no software needed.
Start the steps
Js/Adware.Agent.AW ads: summary
| Name | Js/Adware.Agent.AW |
|---|---|
| Type | It's a generic AV detection name, which points out to the adware or PUP on the system |
| Related server | a.xfreeservice.com |
| Symptoms | If this adware infiltrates the machine, it triggers an excessive amount of ads, popups, banners, in-text links, as well as web browsers redirects to suspicious websites. The web browser runs slower, software sometimes freezes |
| Danger | The adware itself does not pose harm to the machine directly. However, AV engine flags it due to connection to suspicious servers, data tracking, and potentially harmful advertising |
| Detection names | No Microsoft detection name is known |
| Removal | Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged. Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free. |
Show 9 more facts
| Distribution | Not recorded in the old report |
|---|---|
| Damage | Not recorded in the old report |
| Evidence | 5 write-ups by security sites; details still limited |
| Domains | a.xfreeservice.com |
| Ads shown as | Redirects through ad pages |
| Browsers | Chrome, Edge and Firefox |
| First seen | 8 June 2020 |
| Microsoft Defender name | Adware:JS/Agent.A!MTB |
| Facts checked | 5 October 2026 |
Is Js/Adware.Agent.AW ads dangerous?
From our report of Oct 2026 · outdated details corrected in October 2026
Js/Adware.Agent.AW is a generic name of adware that settled down on Google Chrome and other web browsers
Usually, a pop-up warning shows up when a PC user is searching the web using Google or Bing search (less frequently in Yahoo or DuckDuckGo) on the Google Chrome web browser. Anyway, the idea behind this detection is the same - the device is infected with a Potentially Unwanted Program (PUP), namely adware.
Js/Adware.Agent.AW Chrome detection warns users about unauthorized attempts to connect to a.xfreeservice.com (https:// a.xfreeservice.com/partner/8oB939m/index.php) server. It means that the adware-typer application is regularly arranging web browsers redirects to potentially dangerous websites that may be involved in malware distribution, data harvesting, or phishing attacks . Such and similar adware programs have to be quarantined without a delay to prevent virus infections or privacy violations.
In most cases, this detection is an alarm that the system contains an adware-program, which has hijacked the web browser (Google Chrome, Mozilla Firefox, etc.) and is initiating schematic advertising activities.
According to the reports , the problem prevails in Google and Bing search engines, while other search engines like Yahoo, DuckDuckGo, Baidu, Yandex, Ecosia, and others seem not to be affected.
The Js/Adware.Agent.AW virus detection is reported when browsing via Google Chrome in particular. That's because the problem is usually triggered by Chrome-based extensions, such as AdBlock, YoutubeAdBlock, YTD Video Downloader, Vimeo Video Downloader, and others. Such and similar ad-supported extensions are programmed to connect to the a.xfreeservice.com server, which seems to be malicious and is immediately blocked by the AV engine that has a real-time protection feature.
Aside from attempts to connect to unwanted servers, the Js/Adware.Agent.AW virus may try to push unwanted ads in various diverse forms, such as banners, pop-ups, full-page ads, and similar. Besides, it may be the reason why the web browser keeps redirecting to suspicious websites that contain false claims that you're a lucky visitor who is on the verge of winning some valuable prize.
The Js/Adware.Agent.AW redirects can expose users to potentially dangerous websites that contain rogue software downloads, promote fake software updates, or use stealthy cookies that harvest your IP address, geolocation, or even some pieces of Personally Identifiable Information (PII) without notifying users about that.
However, if you are using another security tool, it may try to warn you about Js/Adware.Agent.AW virus using another generic name. The most common references to this infection are as follows:
Anyway, it's important not to ignore the Js/Adware.Agent.AW virus warnings because having an unwanted program on the machine can cause various inconveniences while web browsing or even serve as backdoor access to more malicious cyber infections.
However, sometimes people won't be able to remove Js/Adware.Agent.AW virus from the machine because it's not there. This detection, though rarely, can be a false-positive. It means that the security software that you are using contains a false virus database, which reports non-existent cyber threats. If you suspect this detection to be a false positive, you should disable the current AV software and download an alternative security program.
If it reports adware-related detection, you should initiate Js/Adware.Agent.AW removal without a delay. You can do that with the help of your AV tool. When it delivers an adware detection, set the software to remove PUPs from the machine. After that, clean your web browser and fix malware damage using tool.
If, however, Js/Adware.Agent.AW virus removal fails, you should manually check the list of installed applications and get rid of each suspicious/unknown entry from your machine. The problem is typically triggered by ad-block extensions, so delete PUPs from the programs' list and then eliminate suspicious extensions from Chrome and other web browsers. A full guide on how to do that is provided at the end of this article.
- Adware:JS/Agent.A!MTB
- Js/Adware.Agent.AA
- JS:Adware.Lnkr.A
- JS:Adware.Agent.VTZ
- Adware.Agent.Win32
From our report of Oct 2026 · not reviewed since
More from our earlier report on Js/Adware.Agent.AW
- Js/Adware.Agent.AW is a generic threat detection name , which is usually delivered by ESET security software.
- The detection is usually delivered by ESET security software
- You can remove Js/Adware.Agent.AW adware from the machine using the AV engine that reports its presence.
- PUPs change some registry entries, install unwanted entries on the machine, and initiate other tasks that eventually cause web browser's malfunctioning and weaken system's security.
- Thus, to fix the damage, scan the machine with or similar security tool
- Js/Adware.Agent.AW is a generic detection name that is typically delivered by ESET anti-virus software.
- Usually, Js/Adware.Agent.AW ESET notification emerges when the user is trying to initiate regular web browsing activities.
- This particular detection name is used by ESET antivirus exclusively.
How Js/Adware.Agent.AW ads got into your browser
From our report of Oct 2026 · not reviewed since
There are various categories of cyber threats.
Some of them are extremely malicious (trojans, spyware, ransomware, etc.) and their infiltration can hardly be foreseen. However, infiltration of a dangerous piece of software can be prevented by not visiting suspicious websites, downloading software from official websites, not using P2P services, avoid torrenting websites, regularly updating software, and having a professional AV security suite installed.
However, less dangerous applications, such as adware, browser hijackers, and PUPs are being distributed in a legitimate way, though stealthy enough to make people download them without realizing their presence. Ad-supported programs are typically distributed by bundling. This method is closely related to freeware, i.e. freeware providers pack their apps along with unwanted programs and spread them as a single unit.
Please note that unwanted apps are pre-selected, so accepting the installation of the main freeware installer grants access to the entire bundle. Luckily, it's possible to decompose the bundle. You should opt for the Advanced or Custom installation option and unmark checkmarks saying that you agree with the installation of extensions, add-ons, plug-ins, or whatnot.
Check your browser and PC
Js/Adware.Agent.AW detection names
If Windows Security shows Adware:JS/Agent.A!MTB, it has found Js/Adware.Agent.AW or a file that belongs to it.
Write the name down before you click Remove: it is the most useful search term later, and you will need it if you report the incident.
A family name in the label is more informative than a heuristic one. Our page on why one threat has many antivirus names lists the common formats and what each part means.
- Address:
a.xfreeservice.com
How to remove Js/Adware.Agent.AW ads
How to remove the Js/Adware.Agent.AW extension
Do the browser steps in every browser and profile on the PC, then check Windows for the program that installed the extension.
Step 1: Remove extensions you did not add
Js/Adware.Agent.AW often works through an extension, so go through the extension list of each browser:
chrome://extensionsedge://extensions- Extensions and themes in Firefox
Switch suspicious extensions off one at a time and reload the page where the problem shows, then remove the one that stops it, and any other you did not add.
Remember the other browsers and profiles on the PC. If Remove is missing or greyed out, a policy forces the extension, which the policy step deals with. Windows 11 and Windows 10 show the same pages.
Chrome on Windows 11: More > Extensions > Manage extensions. Full procedure with screenshots: Remove a browser extension
Step 2: Uninstall programs you did not mean to install
Open Settings > Apps > Installed apps in Windows 11, or Settings > Apps > Apps & features in Windows 10, and sort the list by install date. Look at what appeared around the day the problem started and uninstall every program you do not recognise or did not choose.
Free converters, PDF and video tools, "system optimizers" and unknown browsers are the usual carriers of Js/Adware.Agent.AW. If a name is unclear, search for it before you remove it, so you do not uninstall a driver or a Windows component.
Full procedure with screenshots: Uninstall a program or app in Windows On uGetFix
Step 3: Reset the browser
Finish the browser part with a reset, which puts the search engine, start page, new tab page and site permissions back to their defaults and switches extensions off. Chrome: Settings > Reset settings > Restore settings to their original defaults.
Edge: Settings > Reset settings. Firefox: Help > More troubleshooting information > Refresh Firefox, which also removes its extensions. Your bookmarks and saved passwords are kept, and the menus are the same on Windows 11 and Windows 10.
Chrome on Windows 11: Settings > Reset settings. Full procedure with screenshots: Reset a browser and fix a hijacked search engine
Step 4: Scan the PC, then run the offline scan
Open Windows Security > Virus & threat protection > Scan options, run a Full scan and remove everything it finds. Then select Microsoft Defender Antivirus (offline scan) and click Scan now: the PC restarts and scans before Windows loads, which finds files that hide while Windows runs.
Save your work first, because the offline scan takes about 15 minutes. Both scans are built into Windows 11 and Windows 10, and a second scanner from another vendor is a useful extra opinion.
Windows 11: Windows Security > Virus & threat protection > Scan options. Full procedure with screenshots: Run a Microsoft Defender Offline scan
Instructions for each browser and system
The detailed steps for every browser and system this guide covers. Open the one you use.
Uninstall from Windows
If you are having problems because of Js/Adware.Agent.AW virus, follow this guide to stop intrusive adware performance.
Uninstall from Windows 10/8:
- Type Control Panel into the Windows search box and open the result.
- Under Programs, select Uninstall a program.
Uninstall from Windows 7/XP:
- Click on Windows Start > Control Panel (Windows XP users should click on Add/Remove Programs).
- In Control Panel, select Programs > Uninstall a program.
Remove the unwanted program:
- In the Programs and Features window, look for any recently installed suspicious entries, select them, and click Uninstall.
- If User Account Control appears, click Yes to confirm, then complete the removal.
Remove from Google Chrome
The detection dubbed as Js/Adware.Agent.AW Chrome is usually bound to the Chrome web browser and Gooogle search. That's because it is usually triggered by Chrome-based extensions. If you are facing this problem, check the list of extensions and disable the ones that seem suspicious.
Delete malicious extensions from Google Chrome:
- Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
- In the newly opened window, you will see all the installed extensions. Uninstall all suspicious extensions related to the unwanted program by clicking Remove.
Clear cache and web data from Chrome:
- Click on Menu and pick Settings.
- Under Privacy and security, select Clear browsing data.
- Select Browsing history, Cookies and other site data, as well as Cached images and files.
- Click Clear data.
Change your homepage:
- Click menu and choose Settings.
- Look for a suspicious site in the On startup section.
- Click on Open a specific or set of pages and click on three dots to find the Remove option.
Reset Google Chrome:
If the previous methods did not help you, reset Google Chrome to eliminate all the unwanted components:
- Click on Menu and select Settings.
- In the Settings, scroll down and click Advanced.
- Scroll down and locate Reset and clean up section.
- Now click Restore settings to their original defaults.
- Confirm with Reset settings.
Remove from Microsoft Edge
Delete unwanted extensions from MS Edge:
- Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
- From the list, pick the extension and click on the Gear icon.
- Click Remove.
Clear cookies and other browser data:
- Click on the Menu (three horizontal dots at the top-right of the browser window) and select Settings > Privacy, search, and services..
- Under Clear browsing data, pick Choose what to clear.
- Select Cookies and other site data and Cached images and files. (apart from passwords, although you might want to include Media licenses as well, if applicable) and click on Clear.
Restore new tab and homepage settings:
- Click the menu icon and choose Settings.
- Then find On startup section.
- Click Remove next to any suspicious startup page.
Reset MS Edge if the above steps did not work:
- Press on Ctrl + Shift + Esc to open Task Manager.
- Click on More details arrow at the bottom of the window.
- Select Details tab.
- Now scroll down and locate every entry with Microsoft Edge name in it. Right-click on each of them and select End Task to stop MS Edge from running.
Delete extensions from MS Edge (Chromium):
- Open Edge and click select Settings > Extensions.
- Delete unwanted extensions by clicking Remove.
Clear cache and site data:
- Click on Menu and go to Settings.
- Select Privacy, search and services.
- Under Clear browsing data, pick Choose what to clear.
- Under Time range, pick All time.
- Select Clear now.
Reset Chromium-based MS Edge:
- Click on Menu and select Settings.
- On the left side, pick Reset settings.
- Select Restore settings to their default values.
- Confirm with Reset.
- This will disable extensions and reset startup pages but will not delete bookmarks, saved passwords, or browsing history.
Remove from Mozilla Firefox (FF)
Remove dangerous extensions:
- Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
- Select Add-ons.
- In here, select the unwanted extension and click Remove.
Reset the homepage:
- Click three horizontal lines at the top right corner to open the menu.
- Choose Settings.
- Under Home, set your preferred homepage and new tab settings.
Clear cookies and site data:
- Click Menu and pick Settings.
- Go to Privacy & Security section.
- Scroll down to locate Cookies and Site Data.
- Click on Clear Data...
- Select Cookies and Site Data and Temporary cached files and pages, then click Clear.
Reset Mozilla Firefox
If clearing the browser as explained above did not help, reset Mozilla Firefox:
- Open Mozilla Firefox browser and click the Menu.
- Go to Help and then choose Troubleshooting Information.
- Under Give Firefox a tune up section, click on Refresh Firefox...
- Once the pop-up shows up, confirm the action by pressing on Refresh Firefox.
Delete from Safari
Remove dangerous extensions:
- Open Safari, click Safari in the menu at the top-left of the screen, and select Preferences.
- Go to the Extensions tab, look for any suspicious entries, and click Uninstall to remove them.
Clear history and website data:
- Click Safari in the menu and pick Clear History.
- Set Clear to all history and confirm with Clear History.
Reset Safari:
- Click Safari in the menu and select Preferences > Advanced.
- Enable Show Develop menu in menu bar.
- From the menu bar, click Develop and select Empty Caches.
Delete from macOS
Mac OS X can also get infected by Js/Adware.Agent.AW related malware. If the system is showing suchlike detection, find an ad-supported program on your machine and get rid of it.
Remove the unwanted application:
- From the menu bar, select Go > Applications.
- In the Applications folder, look for any suspicious entries, then drag them to Trash (or right-click and pick Move to Trash).
Delete leftover files and folders:
- Select Go > Go to Folder.
- Enter /Library/Application Support and remove any suspicious folders related to the unwanted program.
- Repeat the same check in the /Library/LaunchAgents and /Library/LaunchDaemons folders, deleting any suspicious entries.
- Finally, empty the Trash to permanently remove the leftovers.
Reset Internet Explorer
Remove dangerous add-ons:
- Open Internet Explorer, click on the Gear icon (IE menu) on the top-right corner of the browser
- Pick Manage Add-ons.
- You will see a Manage Add-ons window. Here, look for suspicious plugins. Click on these entries and select Disable.
Change your homepage if it was altered:
- Open IE and click on the Gear icon.
- Select Internet Options.
- In the General tab, delete the Home page address and replace it by your preferred one (for example, Google.com).
- Click Apply and then select OK.
Delete temporary files:
- Press on the Gear icon and select Internet Options.
- Under Browsing history, click Delete...
- Select relevant fields and press Delete.
Reset Internet Explorer:
- Click on Gear icon > Internet options and select Advanced tab.
- Select Reset.
- In the new window, check Delete personal settings and select Reset.
Do not let government spy on you
The government has many issues in regards to tracking users' data and spying on citizens, so you should take this into consideration and learn more about shady information gathering practices.
Avoid any unwanted government tracking or spying by going totally anonymous on the internet.
You can choose a different location when you go online and access any material you want without particular content restrictions. You can easily enjoy internet connection without any risks of being hacked by using VPN.
Control the information that can be accessed by government any other unwanted party and surf online without being spied on. Even if you are not involved in illegal activities or trust your selection of services, platforms, be suspicious for your own security and take precautionary measures by using the VPN service.
Backup files for the later use, in case of the malware attack
Computer users can suffer from data losses due to cyber infections or their own faulty doings.
Ransomware can encrypt and hold files hostage, while unforeseen power cuts might cause a loss of important documents. If you have proper up-to-date backups, you can easily recover after such an incident and get back to work. It is also equally important to update backups on a regular basis so that the newest information remains intact - you can set this process to be performed automatically.
When you have the previous version of every important document or project you can avoid frustration and breakdowns. It comes in handy when malware strikes out of nowhere. Use for the data restoration process.
From our report of Oct 2026 · not reviewed since
Get rid of Js/Adware.Agent.AW related adware to stop advertising and connections to dangerous servers
Js/Adware.Agent.AW removal is not a difficult task to accomplish.
This detection signals an adware-type program on the machine, which seeks to collect clicks, increase visitors' rate to affiliated websites, or downloads of third-party apps. Although it's non-malicious in its nature, the adware can be very intrusive or sometimes lead to virus infection. Luckily, their removal is not that difficult as it may seem.
According to the NoVirus.uk team, it's best to set a security tool to remove Js/Adware.Agent.AW virus from the machine completely. For that, click on the pop-up warning brought by security software and select quarantine or remove option. After that, make sure to delete unwanted Chrome extensions or, at best, reset the web browser's settings to default.
If you are not sure which apps are causing the Js/Adware.Agent.AW a.xfreeservice.com redirects, then restart your machine into Safe Mode with Networking and set the security tool to scan the machine again. Detele all PUPs without hesitation and then restore your machine's performance with the help of tool.
Questions about Js/Adware.Agent.AW ads
What is Js/Adware.Agent.AW detection?
It is a generic threat detection name delivered by ESET antivirus software. The detection signals an adware or potentially unwanted program on your system. Usually a pop-up warning appears when you search using Google or Bing on Google Chrome.
This detection specifically warns about unauthorized attempts to connect to a.xfreeservice.com server, which is flagged as malicious. The underlying issue is adware attempting to redirect your browser to potentially dangerous websites.
Does Js/Adware.Agent.AW cause direct harm to my computer?
No, the adware itself does not pose direct harm to your machine. However, the antivirus flags it due to its connection to suspicious servers, data tracking activities, and potentially harmful advertising.
The adware triggers excessive pop-ups, banners, in-text links, and redirects. Your browser will run slower and software sometimes freezes. While non-malicious in nature, it severely compromises your browsing experience and privacy.
Where does Js/Adware.Agent.AW come from?
It is typically distributed through ad-supported browser extensions like AdBlock, YoutubeAdBlock, YTD Video Downloader, and Vimeo Video Downloader. These Chrome-based extensions are programmed to connect to the a.xfreeservice.com server.
PUPs spread silently bundled with freeware installations. When you accept the main freeware installer's terms, you often unknowingly accept the bundled adware. Declining the installation of extensions during Advanced setup can prevent this.
Why does ESET flag Js/Adware.Agent.AW but other antivirus programs don't?
This detection name is used exclusively by ESET antivirus. Other security tools may warn about the same infection using different generic names. The detection classification varies because each antivirus vendor uses their own naming conventions.
If another security tool finds adware-related detection on your machine, you should initiate removal without delay. This doesn't indicate false alarm; it simply means multiple vendors detected the threat.
How can I tell if this is a false positive?
Very rarely, this detection can be a false positive if your security software contains an incorrect virus database. If you suspect this, disable your current antivirus and download an alternative security program.
If it reports adware-related detection, then removal is necessary. If neither tool detects adware, the initial detection was likely false. However, given that the adware actually attempts to connect to suspicious servers, genuine infections are more common than false positives.
How do I remove Js/Adware.Agent.AW adware?
Set your ESET antivirus to remove PUPs from your machine and complete a full scan. Select the quarantine or remove option when prompted. After antivirus removal, manually clean your web browser and fix remaining damage using additional cleanup tools.
Check your installed applications and delete each suspicious or unknown entry. Browser extensions are most problematic, so remove PUPs from Chrome and other browsers' extension lists.
Why do I still see ads after my antivirus removed it?
PUPs change registry entries and install unwanted system entries that antivirus alone cannot fully repair. Even after antivirus removal, browser damage remains. You must manually clean your web browser by resetting it to default settings.
Clear all browsing data, cookies, and cached files. Delete suspicious browser extensions completely. Restart your computer into Safe Mode with Networking for a complete system scan if ads persist after these steps.
How can I prevent this adware in the future?
Download software only from official websites and never use P2P services or torrenting websites. Always select Advanced or Custom installation options when installing freeware.
Uncheck all pre-selected boxes offering to install extensions, add-ons, or other bundled programs. Install professional antivirus software with PUP detection enabled. Regularly update your software and browser extensions from official sources only.
Will Fortect remove Js/Adware.Agent.AW?
Fortect scans Windows for malware and unwanted programs and repairs the system files and settings they change, and its free scan shows what it finds on your PC before you decide anything.
For Js/Adware.Agent.AW, follow the plan above as well: the browser steps take back permissions and settings that no scanner treats as a threat, and uninstalling the program that brought it removes the source.
Run Microsoft Defender's full scan and, if anything was found, its offline scan as a second opinion. If the symptoms are gone after the plan and both scans are clean, there is nothing more to do.
Sources
- F-Secure: Generic Detection (read October 5, 2026)
- Force Point: What is Phishing? (read October 5, 2026)
- Google Chrome Help: Use notifications to get alerts (no longer online) (read October 5, 2026)
- FTC: How to recognize, remove and avoid malware (read October 5, 2026)
- Microsoft Learn: Microsoft Defender Offline (read October 5, 2026)
- Malwarebytes Labs: Popcash malvertising leads to CryptoWall 3.0 (read October 8, 2026)