When using Google Search, no matter what link you want to click and open it, you’ll always be redirected to Start.funmoods.com? In order to solve this situation, you should read the following post carefully to completely get rid of this nasty redirect virus.
Start.funmoods.com is a bogus search engine which is associated with browser hijacker virus. It may get into the system even by clicking malicious code or distribute unsafe advertising pop-ups, visiting pornographic website or downloading attachment from spam emails. Generally, this redirect virus tends to hijack Internet Explorer, Mozilla Firefox as well as Google Chrome. After it is downloaded, it tracks user’s web browsing habits, records addresses of visited sites and sends collected data to a remote server. But what annoyed users is that every time when searching something on Google, you may still get the results. However, what happens next is out of the normal order because whichever link in the SERPs you push, you will be constantly going to the same page that has no relevant association you’re your query. Start.funmoods.com is designed as a phony search engine aiming to redirect web users and show them spam search results. What’s more, it shows different ads and provides links to lure users in clicking or downloading other malware to their computers without any awareness. It even may delete files and alter stored information and harvest private and other sensitive data. You should have this search engine hijacker removed once detected.
Homepage is changed without any permission.
Desktop background is gone somehow.
Browser setting is modified.
Browsers like IE and Firefox works slowly.
Registry files are corrupted.
1. Reboot your computer to safe mode with networking. As your computer restarts but before Windows launches, tap “F8″ key constantly.
2. Show hidden files and folders.
Open Folder Options by clicking the Start button, clicking Control Panel, clicking Appearance and Personalization, and then clicking Folder Options.
Click the View tab.
Under Advanced settings, click Show hidden files and folders, uncheck Hide protected operating system files (Recommended) and then click OK.
3. Open Registry entries. Find out the malicious files and entries and then delete all.
Attention: Always be sure to back up your PC before making any changes.
a. Press the “Start” button and then choose the option “Run”. In the “Open” field, type “regedit” and click the “OK” button.
b. All malicious files and registry entries that should be deleted:
[random].exe in hard drive
HKEY_CURRENT_USER\ Software\ Microsoft \Windows\ CurrentVersion
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System ‘DisableTaskMgr’ = ’1?
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command “IsolatedCommand” = ‘”%1? %*’
HKEY_CURRENT_USER\Software\Classes\exefile “(Default)” = ‘Application’
HKEY_CURRENT_USER\Software\Classes\exefile “Content Type” = ‘application/x-msdownload’
HKEY_CURRENT_USER\Software\Classes\exefile\DefaultIcon “(Default)” = ‘%1?
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\.exe” /START “%1? %*’
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command “IsolatedCommand” = ‘”%1? %*’
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command “(Default)” = ‘”%1? %*’
Manual removal of Start.funmoods.com requires Expertise, Please take care before performing the steps. If you failed to remove this Malware, you are welcome to contact PC expert to fix the problem.
Published by Sarah Poehler, last updated on August 18, 2012 4:20 am | Browser Hijacker Removal Guide