Scribd
Upload
92 views5 pages

Hold Together The and R. Type Appwiz - CPL - : Start Key

This document provides steps to remove the Hohosearch malware from a system, including checking for suspicious programs in Control Panel and msconfig, editing the hosts file, changing browser shortcut properties, removing add-ons and extensions in different browsers, deleting virus process directories and registry entries, and using a malware removal tool if needed. It warns to carefully identify files before deleting to avoid damaging the system.

Uploaded by

Syah Yunus
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
92 views5 pages

Hold Together The and R. Type Appwiz - CPL - : Start Key

This document provides steps to remove the Hohosearch malware from a system, including checking for suspicious programs in Control Panel and msconfig, editing the hosts file, changing browser shortcut properties, removing add-ons and extensions in different browsers, deleting virus process directories and registry entries, and using a malware removal tool if needed. It warns to carefully identify files before deleting to avoid damaging the system.

Uploaded by

Syah Yunus
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
You are on page 1/ 5

 Do not skip this  

– Hohosearch may have hidden some of its files.


Hold together the Start Key and R. Type appwiz.cpl –
> OK.

You are now in the Control Panel. Look for suspicious entries. Uninstall
it/them.
Type msconfig in the search field and hit enter. A window will pop-up:

Startup —> Uncheck entries that have “Unknown” as Manufacturer.

Hold the Start Key and R –  copy + paste the following and


click OK:
notepad %windir%/system32/Drivers/etc/hosts
A new file will open. If you are hacked, there will be a bunch of other IPs connected
to you at the bottom. Look at the image below:
If there are suspicious IPs below “Localhost” – write to us in the comments.

Right click on the browser’s shortcut —> Properties.


NOTE: We are showing Google Chrome, but you can do this for Firefox and IE (or
Edge).

Properties —–> Shortcut. In Target, remove everything after .exe.
  Remove Hohosearch from Internet Explorer:
Open IE, click    —–> Manage Add-ons.
Find the malware —> Disable. Go to   —–> Internet Options —
> change the URL to whatever you use (if hijacked) —> Apply.

 Remove Hohosearch from Firefox:
Open Firefox, click     ——-> Add-ons —-> Extensions.

Find the browser hijacker/malware —> Remove.

Remove Hohosearch from Chrome:
Close Chrome. Navigate to:
 C:/Users/!!!!USER NAME!!!!/AppData/Local/Google/Chrome/User Data. There
is a Folder called “Default” inside:

Rename it to Backup Default. Restart Chrome.


 At this point the malware is gone from Chrome, but complete the entire guide
or it may reappear on a system reboot.

Press CTRL + SHIFT + ESC simultaneously. Go to the Processes Tab. Try to


determine which ones are a virus. Google them or ask us in the comments.
WARNING! READ CAREFULLY BEFORE
PROCEEDING!
This is the most important and difficult part. If you delete the wrong file, it
may damage your system irreversibly. If you can not do this,  

 >> Download SpyHunter - a professional Hohosearch.com scanner


and remover.
Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you'll need to purchase
its full version. More information about SpyHunter and steps to uninstall.

Right click on each of the virus processes separately and select Open


File Location. End the process after you open the folder, then delete the
directories you were sent to.

Type Regedit in the windows search field and press Enter.


Inside, press CTRL and F together and type the virus’s Name. Right
click and delete any entries you find with a similar name. If they don’t show this
way, go manually to these directories and delete/uninstall them:
 HKEY_CURRENT_USER—-Software—–Random Directory. It could be any
one of them – ask us if you can’t discern which ones are malicious.
HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion
—Run– Random
HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—-
Random
Remember to leave us a comment if you run into any trouble!

You might also like