Tuesday, July 9, 2013

Remove Revenuehits.com virus. stop popups & redirect

Revenuehits popup virus and Revenuehits.com redirect problem is caused by a stubborn browser hijacker. Its only target is promoting Revenuehits.com spam. This little bug can infect your computer silently and then stealthily it will alter your browser settings. Its common targets are homepage and search engine settings. If you take a look at browser setup, you,ll find that http://Revenuehits.com or www.Revenuehits.com is listed to be your startpage and also to be your default websearch system, these changes have been done (by virus) although you did not make those changes. Anyhow, from now on, your search results will redirect to Revenuehits.com page that will display misleading information and commercial advertisements. As we know, the Revenuehits.com virus is created by cyber criminals only for getting financial advantages, this virus will steal your sensitive information which may leak your credit card, banking account details and other logins. We recommend you to uninstall Revenuehits.com malware and permanently block its activities on your PC.
Disadvantages and risks of having Revenuehits.com:
  • It may change & corrupt default settings of browsers like Firefox, Chrome or Internet explorer
  • Changes home page and displays unwanted pop-ups advertisements
  • Causes frequent web redirects to wrong websites, hijacks search engine settings and leads to unexpected webpages
  • Keeps record of browsing activities and interests
  • Collects Personal user information which may include sensitive financial data such as logins, usernames, accounts
  • It may bring further infections are direct the user to infectious sites
  • Makes the browser run slow, uses a big part of system resources
Want to get rid of Browser Hijack Revenuehits.com?:
To manually remove Revenuehits.com, follow the instructions.
First of all, Uninstall the program. (Skip to the next step if the application is not listed in Control Panel).
“Start > Settings > Control Panel. Now Locate and open “Add or Remove Programs” or “PROGRAMS AND FEATURES”. Find “Revenuehits.com”. Now click Uninstall/Remove.
Now remove the program from Browser.
Internet Explorer users:
Click “Tools” (if on Internet Explorer 9, click gear icon), Then “Manage Add-ons”. Look for Revenuehits.com. Disable if found any.
Block Revenuehits.com pop-ups
To stop pop-ups from malware,
Click on TOOLS > POP-UP BLOCKER, then click TURN ON POP-UP BLOCKER. and then go to POP-UP BLOCKER SETTINGS. (Type any website you wish to block popups from)
 Firefox users:
Go to “Tools” (at the top), > “Add-ons” > “Extensions” and disable “Revenuehits.com”
 Chrome Users:
Click “Tools/Settings” (Wrench incon), > “Add-ons” > “Extensions” and disable any file associate with malware.
Still Spyware Revenuehits.com lurking in the system? Remove manually
Stop processes of this malware:
Open Task Manager to stop processes.
Remove associated registry settings:
HKEY_CLASSES_ROOT\urlsearchhook.toolbarurlsearchhook
HKEY_LOCAL_MACHINE\software\classes\urlsearchhook.toolbarurlsearchhook
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions,
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnonBadCertRecving” = ’0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop “NoChangingWallPaper” = ’1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = ’1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = ’1
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = ‘no’
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main “Use FormSuggest” = ‘yes’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced “ShowSuperHidden” = 0
Delete Revenuehits.com infected files:
%Profile%\Local Settings\Temp\
%ProgramFiles%\
%UserProfile%\

No comments:

Post a Comment