www.eventforyous.com is not a legitimate site which always disguises as a fake Facebook login page. Nowadays, this virus has hit many Facebook users and made them crazy. Criminals design this virus by offering attractive advertisement to let users click the link and open www.eventforyous.com. After that, innocent users will be asked to log in their Facebook account with this fake website. If you already logged in there using your facebook account, immediately change the password on your Facebook to create a precaution since this virus can damage your whole system once active.
This dangerous virus will target every computer users that range from individual, educational institutions, up to known organizations. It is affiliated with browser hijackers and the ZeroAccess Rootkit that can be used to steal private information or install rogue security programs. Furthermore, a browser hijacker can force the affected web browser to visit specific pages, change the homepage, default search engine, and other web browser settings as well as display annoying pop-up windows containing advertisements or websites with unsafe content. Hence, users must fix this issue immediately once found.
It is suggested users not enter any information to this spam site. Considering this malware can’t be fixed by any security tools, uses can use the manual guide below to fix this issue without any risk.
1. Show hidden files and folders.
Open Folder Options by clicking the Start button, clicking Control Panel, clicking Appearance and Personalization, and then clicking Folder Options.
Click the View tab.
Under Advanced settings, click Show hidden files and folders, uncheck Hide protected operating system files (Recommended) and then click OK.
2. Open Registry entries. Find out the malicious files and entries and then delete all.
Attention: Always be sure to back up your PC before making any changes.
a. Press the “Start” button and then choose the option “Run”. In the “Open” field, type “regedit” and click the “OK” button.
b. All malicious files and registry entries that should be deleted:
%Documents and Settings%\[UserName]\Application Data\[random]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\random.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\“UninstallString” = “‘%AppData%\[RANDOM]\[RANDOM].exe” -u
www.eventforyous.com can be downloaded via malicious drive-by-download scripts from corrupted porn and shareware / freeware websites, installed through spam email attachments, media downloads and social networks or executed by other threats on system. It is suggested users don’t spend time trying to change browser to stop these attacks, since browser hijackers will corrupt the local DNS (or Domain Name System) entries to accomplish their hijackers – therefore, these problems will remain embedded in your operating system even if you uninstall and reinstall all of your web browsers. Also don’t waste your time in downloading all kinds of anti-virus programs. No matter what scan you run, it can’t solve this issue as well. Quickly follow the manual guide above to get rid of this disaster now!
Published by Sarah Poehler on August 19, 2012 | Browser Hijacker Removal Guide