How to remove Google Redirect

Virus (Removal Instructions)

If every time you do a search and click a result link,you end up on some random
page, even though the link shows youd be going elsewhere,then weve got a bad
news for you,your computer is infected with malware.
A Google redirect is often caused by a rootkit which will hijack your search
results and redirect you to a web site from which the malware writers collect
affiliate revenue.
This infection is designed specifically to make money. It generates web traffic,
collects sales leads for other dubious sites, and tries to fool the victim into paying
for useless software. If those tricks dont work it can kick up the threat level by
downloading additional malicious or misleading programs.
In the below guide,youll find instructions how to remove the Google redirect virus
and other malware that you have on your machine.
Google Redirect Virus Removal
Instructions
STEP 1: Remove Google redirect virus wit
!as"ers#$ T%SS!iller
The most likely cause for your Google redirection is rootkit or a aster !oot
"ecord infection.In this first step, we will run a system scan with #aspersky
T$%%#iller to remove this infection.
&. 'lease download the latest official version of #aspersky T$%%#iller.
!&SPERS!' T%SS!I((ER %)*+()&% (I+!(This link will automatically
download Kaspersky TDSSKiller on your computer.)
(. !efore you can run #aspersky T$%%#iller, you first need to rename it so
that
you can get it to run. To do this, right)click on the T$%%#iller.e*e icon and
select Rename.
+dit the name of the file from T$%%#iller.e*e to ie,"lore-e,e, and then
double)click on it to launch.
,. #aspersky T$%%#iller will now start and display the welcome screen and
we will need to click on Change Parameters.
-. In the new open window,we will need to enable Detect TDLS !ile system,
then click on )!.
.. /e*t,we will need to start a scan so youll need to press the Start
Scan button.
0. #aspersky T$%%#iller will now scan your computer for any bootkits
infection.
1. 2hen the scan has finished it will display a result screen stating whether
or not the infection was found on your computer. If it was found it will display
a screen similar to the one below.
3. To remove the infection simply click on the .ontinue button and
T$%%#iller will attempt to clean the infection.A reboot will be re4uire to
completely remove any infection from your system.
STEP /: Remove te malicious 0iles 0rom $our
com"uter wit 1alware2$tes .ameleon
alwarebytes 5hameleon is a powerful utility from alwarebytes, that will stop
any m malicious process from running and remove its malicious files from your
computer.
&. %ownload 1alware2$tes .ameleon from the below link and e,tract
it to a folder in a convenient location.
1&(*&RE3'TES .H&1E(E)+ %)*+()&% (I+! (This link will open a
new we" page !rom where you can download #alware"ytes Chameleon)
(. ake certain that your infected computer is connected to the internet and
then open the alwarebytes 5hameleon folder and double)click
on svcost-e,e.
I4 alwarebytes 5hameleon will not open, double)click on the other
renamed files until you find one will work, which will be indicated by a black
$6%7command prompt window.
,. 4ollow te onscreen instructions to press a key to continue and
5hameleon will proceed to download and install alwarebytes Anti)alware
for you.
-. 6nce it has done this, it will update alwarebytes Anti)alware, and youll
need to click )! when it says that the database was updated successfully.
.. 1alware2$tes &nti51alware will now attem"t to #ill all te malicious
"rocess associated with Google redirect virus.'lease be aware that this
process can take up to &8 minutes, so please be patient.
0. /e*t, alwarebytes Anti)alware will automatically open and "er0orm a
6uic# scan for Google redirect virus malicious files as shown below.
1. 9pon completion of the scan, click on Sow Result
3. :ou will now be presented with a screen showing you the malware
infections that alwarebytes Anti)alware has detected.
ake sure that everything is .ec#ed (tic#ed),then click on the Remove
Selected button.
;. After your computer restarts, open 1alware2$tes &nti5
1alware and "er0orm a 4ull S$stem scan to verify that there are no
remaining threats
STEP 7 : Remove te malicious registr$ #e$s
added 2$ te Google redirect virus
In most cases any Google redirect virus will add some malicious registry keys to
your 2indows installation,to remove them we will need to perform a scan with
"ogue#iller.
&. 'lease download te latest o00icial version o0 Rogue!iller.
R)G8E!I((ER %)*+()&% (I+! (This link will automatically download
RogueKiller on your computer)
(. %ou2le clic# on Rogue!iller-e,e to start this utility and then wait 0or te
Prescan to com"lete.This should take only a few seconds and then you
can clic# te Start 2utton to perform a system scan.
,. After the scan has completed, "ress te %elete 2utton to remove any
malicious registry keys.
STEP 9: Remove Google redirect root#it wit
HitmanPro
&. $ownload the latest official version of <itman'ro from the below link.
HIT1&+PR) %)*+()&% (I+!(This link will open a download page in a
new window !rom where you can download $itmanPro)
(. %ou2le clic# on te "reviousl$ downloaded 0ileto start the <itman'ro
installation.
I4 you are e*periencing problems while trying to starting <itman'ro, you
can use the =orce %reach> mode.To start this program in ?orce !reach
mode, old down te le0t .TR(5#e$ wen $ou start HitmanPro and all
non)essential processes are terminated, including the malware process.
@<ow to start <itman'ro in ?orce !reach mode A BideoC
,. 5lick on +e,t to install <itman'ro on your system.
-. The setup screen is displayed, from which you can decide whether you
wish to install <itman'ro on your machine or just perform a one)time scan,
select a option then click on +e,t to start a system scan.
.. <itman'ro will start scanning your system for malicious files as seen in
the image below.
0. 6nce the scan is complete,youll see a screen which will display all the
malicious files that the program has found.5lick on +e,t to remove this
malicious files.
1. 5lick &ctivate 0ree license to start the free ,8 days trial and remove the
malicious files.
3. <itman'ro will now start removing the infected objects.If this program will
ask you to restart your computer,please allow this re4uest.
STEP :: Remove te residual damage 0rom $our
2rowser
&. :ou can download Adw5leaner from the below link.
&%*.(E&+ER %)*+(&)% (I+! @This link will automatically download
&dwCleaner on your computerC
(. !efore starting this utility,close all open programs and internet browsers.
,. $ouble click on adwcleaner-e,e to run the tool.
-. 5lick on %elete,then confirm each time with )#.
.. :our computer will be rebooted automatically. A te*t file will open after the
restart.
0. /+DT,double click on adwcleaner-e,e to run the tool.
1. 5lick on 8ninstall,then confirm with $es to remove this utility from your
computer.
STEP ;: %ou2le cec# 0or an$ le0t over in0ections
on $our com"uter
STEP &: Run a scan wit Eset )nline Scanner-
&. $ownload +%+T 6nline %canner utility.
ESET )nline Scanner %ownload (in# (This link will automatically
download 'S'T (nline Scanner on your computer.)
(. $ouble click on the +set installer program @esetsmartinstallerEenu.e*eC.
,. 5heck 'es< I acce"t te Terms o0 8se
-. 5lick the Start button.
.. 5heck Scan arcives
0. 'ush the Start button.
1. +%+T will then download updates for itself, install itself, and begin
scanning your computer. 'lease be patient as this can take some time.
3. 2hen the scan completes, push 4inis
STEP 3: Run a scan wit Emsiso0t Emergenc$ !it-
&. 'lease download the latest official version of +msisoft +mergency #it.
E1SIS)4T E1ERGE+.' !IT %)*+()&% (I+! (This link will open a
download page in a new window !rom where you can download 'msiso!t
'mergency Kit)
(. After the download process will finish , youll need
to un"ac# Emsiso0tEmergenc$!it-=i" and then double
click onEmergenc$!itScanner-2at
,. A pop)up will prompt you to update +msisoft +mergency #it , please click
the ='es> button.After the 9pdate process has completed , put the mouse
cursor over the =1enu> tab on the left and click)on =Scan P.=.
-. %elect =%mart scan> and click)on the below =%5A/> button.2hen the scan
will be completed , you will be presented with a screen showing you the
malware infections that +msisoft +mergency #it has detected.ake sure
that everything is .ec#ed (tic#ed) and click on the F6uarantine selected
o2>ectsF button.
/e*t,we will remove the tools that weve used in our malware removal process.
!as"ers#$ T%SS!iller<&dw.leaner and Rogue!iller can be removed by
deleting the utilities.
2e strongly recommend that you keep 1alware2$tes &nti51alware and
HitmanPro installed on your machine and run regular scans with this tools.If you
however,wish to remove them,you can go into the &dd or Remove
"rograms and uninstall this two on)demand scanners.
I0 $ou are still e,"eriencing "ro2lems wile tr$ing to remove
Google redirect virus 0rom $our macine< "lease start
a new tread in our 1alware Removal
&ssistance 0orum-