How to Remove Start.funmoods.com Hijacker Permanently? (Manual Removal Guide)

When using Google Search, no matter what link you want to click and open it, you’ll always be redirected to Start.funmoods.com? In order to solve this situation, you should read the following post carefully to completely get rid of this nasty redirect virus.

Start.funmoods.com Description:

Start.funmoods.com is a bogus search engine which is associated with browser hijacker virus. It may get into the system even by clicking malicious code or distribute unsafe advertising pop-ups, visiting pornographic website or downloading attachment from spam emails. Generally, this redirect virus tends to  hijack Internet Explorer, Mozilla Firefox as well as Google Chrome. After it is downloaded, it tracks user’s web browsing habits, records addresses of visited sites and sends collected data to a remote server. But what annoyed users is that every time when searching something on Google, you may still get the results. However, what happens next is out of the normal order because whichever link in the SERPs you push, you will be constantly going to the same page that has no relevant association you’re your query. Start.funmoods.com is designed as a phony search engine aiming to redirect web users and show them spam search results. What’s more, it shows different ads and provides links to lure users in clicking or downloading other malware to their computers without any awareness. It even may delete files and alter stored information and harvest private and other sensitive data. You should have this search engine hijacker removed once detected.

Screenshot of this hijacker:

Other symptoms that prove the presence of this redirect virus include:

Homepage is changed without any permission.
Desktop background is gone somehow.
Browser setting is modified.
Browsers like IE and Firefox works slowly.
Registry files are corrupted.

Start.funmoods.com Hijacker Manual Removal Guides:

1. Reboot your computer to safe mode with networking. As your computer restarts but before Windows launches, tap “F8” key constantly.

2. Show hidden files and folders.

3. Open Registry entries. Find out the malicious files and entries and then delete all.

Attention: Always be sure to back up your PC before making any changes.

a. Press the “Start” button and then choose the option “Run”. In the “Open” field, type “regedit” and click the “OK” button.

b. All malicious files and registry entries that should be deleted:
%TempDir%\[random].exe
%TempDir%\[random]
[random].exe in hard drive

HKEY_CURRENT_USER\ Software\ Microsoft \Windows\ CurrentVersion
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System ‘DisableTaskMgr’ = ’1?
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command “IsolatedCommand” = ‘”%1? %*’
HKEY_CURRENT_USER\Software\Classes\exefile “(Default)” = ‘Application’
HKEY_CURRENT_USER\Software\Classes\exefile “Content Type” = ‘application/x-msdownload’
HKEY_CURRENT_USER\Software\Classes\exefile\DefaultIcon “(Default)” = ‘%1?
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\.exe” /START “%1? %*’
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command “IsolatedCommand” = ‘”%1? %*’
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command “(Default)” = ‘”%1? %*’

Video Shows You How to Safely Modify Windows Registry Editor:

Manual removal of Start.funmoods.com requires Expertise, Please take care before performing the steps. If you failed to remove this Malware, you are welcome to contact PC expert to fix the problem.

Published by & last updated on August 18, 2012 4:20 am