Browser is Redirected to – Hijacker Virus Manual Removal

Hijacked by virus now? Users should take caution that this site is not a legitimate one. It is just a scam aims to steal your money and lure you to pay for the non-existent London Olympics 2012 tickets. Once detect, you should remove the virus as soon as possible instead of handing over your money. Description: virus is affiliated with browser hijacker that is created by criminals and known to attack browsers like Firefox, Chrome and Internet Explorer. This site shows deceptive information, pretending to sell for London Olympics 2012 tickets. However, once the payment is made, the user will find out that it is just a scam. One of the victims even found the bank account of this scam company is based in the Czech Republic.

This threat is designed to force your web browser to this fake website constantly so as criminals can use the artificial traffic to boost affiliate payments. Besides, it is mainly used to trick unwary users to hand over their money and buy the tickets which don’t exist at all. By using this method, criminals can get money from the users even may steal their personal information. The other situation is when you click on the blue tab ‘Olympic Tickets – Buy Tickets for the London 2012 Olympics’, it will take you to other websites that pose as usual online transaction websites asking you to disclose your personal information and credit card details. In a word, this threat should be removed without a doubt.

Please take caution when you perform the manual guide below. Manual removal is a risky job, any mistake may lead to system crash immediately. If you need any help, please live chat with YooCare experts now.

Hijacker Manual Removal Guides:

1. Show hidden files and folders.

Open Folder Options by clicking the Start button, clicking Control Panel, clicking Appearance and Personalization, and then clicking Folder Options.
Click the View tab.
Under Advanced settings, click Show hidden files and folders, uncheck Hide protected operating system files (Recommended) and then click OK.

2. Open Registry entries. Find out the malicious files and entries and then delete all.

Attention: Always be sure to back up your PC before making any changes.

a. Press the “Start” button and then choose the option “Run”. In the “Open” field, type “regedit” and click the “OK” button.

b. All malicious files and registry entries that should be deleted:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[RANDOM]”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “[RANDOM].exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe”‘


Video Shows You How to Safely Modify Windows Registry Editor:

If you failed to remove this malware with the instructions above or need any assistant, you are welcome to contact YooCare experts to resolve all the problems completely.

Published by on July 27, 2012 9:16 am, last updated on July 27, 2012 9:16 am

Leave a Reply

Problems with your PC, Mac or mobile device?

Live Chat Now

Thanks for using YooCare Services!

Here're some of the support team members who are passionate about their works and support our customers 24/7.

As Seen On