Thursday, July 4, 2013

Remove redirect virus – Manual Removal Discrition

If you search the site of , it is ok. However, if comes on your search bar by itself, you have to be attention because your PC is definitely infected by redirect virus. takes over all your browsers including Internet Explorer, Google Chrome, Mozilla Firefox and so on. Once infected, your homepage will be taken by If you try to search something from, you won’t get your wanted answer. Instead, it will take you to web pages that are filled up with commercial advertisements. You are annoyed by because it disturbs you surfing the Internet.

You may have tried way to get rid of, but in vain. You may have tried to reset your home page and remove it from toolbar, but no luck. slips into your computer sneakily. To settle down on your PC, it drops its own files with random codes. Your system files and default settings will be changed. What is more, will open back door to other virus such as Trojan and worms. Your computer will perform poorly with it. In a word, is bad for your computer. If your PC is infected by, you have to remove it immediately from your computer before it causes much more damages.

Potential Problems Caused by

1. takes place your homepage;

2. redirects you to malicious websites;

3. modifies your browser settings;

4. drops its files into your computer and brings other infection to your PC;

5. degrades your computer performance.

Step-by-step Guide to Remove Manually

Step 1: Disable start up items about

For Windows Xp: Click Start menu -> click Run -> type: msconfig in the Run box -> click Ok to open the System Configuration Utility -> Disable all possible startup items generated.

For Windows Vista or Windows7: click start menu->type msconfig in the search bar -> open System Configuration Utility -> Disable all possible startup items generated.

Step 2: Show hidden files and folders.

Open Folder Options by clicking the Start button, clicking Control Panel, clicking Appearance and Personalization, and then clicking Folder Options. Click the View tab. Under Advanced settings, click Show hidden files and folders, uncheck Hide protected operating system files (Recommended) and then click Ok

Step 3: Delete all files related to





Step 4: Open registry editor.

click “Start” menu, hit “Run”, then type “regedit” click “OK”.

Step 5: Remove registry entries associated with

HKEY_CLASSES_ROOT\ah\shell\open\command "IsolatedCommand"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = ""%LocalAppData%\<random 3 chars>.exe -a "C:\Program Files\Mozilla Firefox\firefox.exe""
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = ""%LocalAppData%\<random 3 chars>.exe" -a "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = ""%LocalAppData%\<random 3 chars>.exe" -a "C:\Program Files\Internet Explorer\iexplore.exe""
HKEY_CURRENT_USER\Software\Classes\.exe "(Default)" = '<random>'
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = "%LocalAppData%\<random 3 chars>.exe" -a "%1" %*

Note: If you haven’t sufficient expertise in dealing with program files, processes, .dll files and registry entries, it may lead to mistakes damaging your system permanently after you delete crucial computer files by mistake. Please contact 24/7 professional online experts to get help.

No comments:

Post a Comment