Tuesday, July 2, 2013

Remove Hao123 virus. Get rid of Hao123 toolbar

Hao123 toolbar is a potentially harmful application which causes annoying problems to infected computer. Hao123 toolbar virus can hijack browser and redirect search results to unwanted websites, it displays spam content and advertisements to gain financial benefits for its developers. It changes home page and the most worst thing, Hao123 toolbar will make your computer slow down and even causes frequent browser crashes. This program can be installed on your computer without your consent, you might be a victim of this software if you have been downloading freeware softwares, visiting compromised websites or following links in spam emails. Some people download Hao123 search toolbar themselves but soon after having this program, they realize its a crap. If you are willing to remove Hao123 toolbar, you have to follow the steps below, remember, mostly this malware dose not go away if you just try to unisntall it through control panel.

Disadvantages and risks of having Hao123 Search Toolbar:
  • It may change & corrupt default settings of browsers like Firefox, Chrome or Internet explorer
  • Changes home page and displays unwanted pop-ups advertisements
  • Causes frequent web redirects to wrong websites, hijacks search engine settings and leads to unexpected webpages
  • Keeps record of browsing activities and interests
  • Collects Personal user information which may include sensitive financial data such as logins, usernames, accounts
  • It may bring further infections are direct the user to infectious sites
  • Makes the browser run slow, uses a big part of system resources
Want to get rid of Browser Hijack Hao123 Search Toolbar?:
To manually remove Hao123 Search Toolbar, follow the instructions.
First of all, Uninstall the program. (Skip to the next step if the application is not listed in Control Panel).
“Start > Settings > Control Panel. Now Locate and open “Add or Remove Programs” or “PROGRAMS AND FEATURES”. Find “Hao123 Search Toolbar”. Now click Uninstall/Remove.
Now remove the program from Browser.
Internet Explorer users:
Click “Tools” (if on Internet Explorer 9, click gear icon), Then “Manage Add-ons”. Look for Hao123 Search Toolbar. Disable if found any.
Block pop-ups of Hao123 Search Toolbar
To stop pop-ups from malware,
Click on TOOLS > POP-UP BLOCKER, then click TURN ON POP-UP BLOCKER. and then go to POP-UP BLOCKER SETTINGS. (Type any website you wish to block popups from)
 Firefox users:
Go to “Tools” (at the top), > “Add-ons” > “Extensions” and disable “Hao123 Search Toolbar”
 Chrome Users:
Click “Tools/Settings” (Wrench incon), > “Add-ons” > “Extensions” and disable any file associate with malware.

 Still Spyware Hao123 Search Toolbar lurking in the system? Remove manually
Stop processes of this malware:
Open Task Manager to stop processes.
Remove associated registry settings:
HKEY_CLASSES_ROOT\urlsearchhook.toolbarurlsearchhook
HKEY_LOCAL_MACHINE\software\classes\urlsearchhook.toolbarurlsearchhook
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions,
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnonBadCertRecving” = ’0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop “NoChangingWallPaper” = ’1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = ’1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = ’1
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = ‘no’
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main “Use FormSuggest” = ‘yes’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced “ShowSuperHidden” = 0
Delete Hao123 Search Toolbar infected files:
%Profile%\Local Settings\Temp\
%ProgramFiles%\
%UserProfile%\

No comments:

Post a Comment