Monday, December 16, 2013

How Can I Remove Permanently

I was so unlucky that made my PC be infected with a computer virus called According to the reports of the computer experts, belongs to the browser hijacker family which is a big threat to the infected PC.

I did suffer a lot since redirect virus installed into my PC. The first thing I noticed was that my favorite homepage has been changed without my permission. I tried to reset it back, but next time I boot the PC, the homepage was altered again. Then some strange icons and shortcuts appeared on my desktop and favorite bar. I was very stupid at that time and clicked these shortcuts. Wow, the web pages that I was redirected to were awful. Some of them are about the products promoting, others are full of pornographic contents and pictures. Here is a screenshot of virus.

I tried to remove browser hijacker from my PC via the automatically scan, but it seems that antivirus programs can not deal with this stubborn computer virus as this virus popped up again next time I boot the PC. Finally I completely get rid of redirect through the manual removal method, but it really took a long time to fix this issue. The guide is as below, if your PC is also infected with virus, you can take a shot.

Manually remove virus:

Step1: 1. End all the running processes 
Open Task Manager by Pressing Ctrl+Shift+Esc at the same time, choose Process icon and stop all the running processes.

Step 2.  Clear all the history records, temp files and cookies of infected browser
Take Internet Explorer as an example:
From the Tools menu in the upper right, click on Internet Options and choose General icon, and then select Delete Browsing History on exit, after that click OK to exit. 

Step 3. Remove add-ons:
Take Internet Explorer as an example:
1) Go to Tools → Manage Add-ons;
2) Choose Search Providers → choose 'Bing' search engine or 'Google' search engine and make it default.

3) Select Search Results and click Remove to remove it;
4)  Go to Tools → Internet Options, select General tab and click Use default button or enter your own website, e.g. Click OK to save the changes.
Step4: delete all the malicious files.
Click the Start button choose Control Panel, find out Appearance and Personalization, and then click Folder Options and choose the View tab. Under Advanced settings, click Show hidden files and folders, uncheck Hide protected operating system files (Recommended) and then click OK.

Clean all the malicious files about
%UserProfile%\Start Menu\Programs\\
%UserProfile%\Start Menu\Programs\\Uninstall
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS

 Step 5: Remove all registry entries as follows:
open Registry Editor by pressing Window+R keys together.(another way is clicking on the Start button and choosing Run option, then typing into Regedit and pressing Enter. ) 

Find out all registry entries as follows and delete all of them.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “CertificateRevocation” = ’0′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnonBadCertRecving” = ’0′

Video on how to remove browser hijacker:

If the manual guide is kinda difficult for you, please feel free to download automatic removal tool SpyHunter to drive the self-invited guest away.

Method two: Automatically remove with Spyhunter antivirus software:


Step 1: click the icon below to download automatic removal tool SpyHunter


Step 2: follow the instructions to install SpyHunter



Step 3: run SpyHunter to automatically detect and uninstall


Summary: Due to the changeable characters of, you cannot be too careful to distinguish the harmful files and registries from the system files and registries. If you have spend too much time in manual removing and still not make any progress, you can download and install Spyhunter antivirus software here to remove automatically for you.

No comments:

Post a Comment