Windows Problems Help Center

Friday, December 26, 2014

Remove http://mom-ex.tekblue.net/crossdomain.xml - Stop Malicious Website Blocked Popup

My antivirus is coming up with the Malicious Website Blocked popup repeatedly. Domain is fff5ee.com and hxxp://mom-ex.tekblue.net/crossdomain.xml, Process: C:\Windows\SysWOW64\dllhost.exe. Any help would be appreciated. If someone can help let me know what to download and try it would be greatly appreciated. Thanks in advance.

Description of http://mom-ex.tekblue.net/crossdomain.xml 


http://mom-ex.tekblue.net/crossdomain.xml are the malicious browser extension which can be caused by potentially unwanted program (PUP) on the computer. Once the computer is infected with http://mom-ex.tekblue.net/crossdomain.xml, it will make some changes to the target computer:

It injects malicious files and registry entries to the infected computer;
It may steal users’ personal information and bring in other threats;.
It will hijacker your browsers and display bunch of ads link on your browsers;
It sets itself as the homepage and redirects users to its domain and search engine;
It installs malicious plug-in or extension to browsers in order to take control of the browsers;
It will take up high CPU which slows the PC down, sometimes to make it crash and freeze.

It is suggested to remove http://mom-ex.tekblue.net/crossdomain.xml as soon as possible. And  it is highly recommended to scan your computer with a powerful anti-virus like Spyhunter to find out other threats and remove them.

How to avoid being entangled by virus like http://mom-ex.tekblue.net/crossdomain.xml?


1. Never click on a link or attachment in an email that you are not positive is from a trusted source;
2. Beware of internet pop-ups;
3. Set up your Windows Update to automatically download patches and upgrades;
4. Be wary of files with a double extension such as .txt.vb or .jpg.exe.
5. Install real-time anti-spyware protection and Keep anti-malware applications current.
6. Don’t get access to illegal online contents such as gambling or porn.

Solutions to remove Http://mom-ex.tekblue.net/crossdomain.xml   


Solution 1: Manually remove http://mom-ex.tekblue.net/crossdomain.xml 


Step 1: Press Ctrl+Alt+Del keys together to pull up Window Task Manager and end suspicious processes:


Step 2: Disable any suspicious startup items

Windows Vista or Windows7: click start menu→type msconfig in the search bar → open System Configuration →Disable all possible startup items generated.





Step 3: Reset your browser setting


IE: 
Click Tools on the up right corner and select Internet Options.
Click on Advanced tab, press Reset button to reset IE to its default settings.

Firefox:
In the drop-down list of Firefox, go to Help and click on Troubleshooting Information.
Click on the Reset Firefox button to reset it.

Google Chrome: 
Click on the Chrome menu on the right of toolbar and then select Settings.
Scroll down to the bottom to click Show advanced settings.
Go down to the bottom and click Reset browser settings to reset Google Chrome to its default setting.


Step 3:  Remove files of Http://mom-ex.tekblue.net/crossdomain.xml like the pictures showed:




Step 4: Go to the Registry Editor and remove all the infection registry entries listed here:

(Steps: Hit Win+R keys and then type regedit in Run box to search)


HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Safari.exe\shell\open\command "(Default)" = ""C:\Program Files\Safari\Safari.exe" http://www.<random>.com/?type=sc&ts=<timestamp>&from=tugs&uid=<hard drive id>"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\SEAMONKEY.EXE\shell\open\command "(Default)" = "C:\Program Files\SeaMonkey\seamonkey.exe http://www.<random>.com/?type=sc&ts=<timestamp>&from=tugs&uid=<hard drive id>"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main "Default_Page_URL" = "http://www.<random>.com/?type=hp&ts=<timestamp>&from=tugs&uid=<hard drive id>"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main "Default_Search_URL" = "http://www.<random>.com/web/?type=ds&ts=<timestamp>&from=tugs&uid=<hard drive id>&q={searchTerms}"

Method  2: Automatic Removal with SpyHunter



SpyHunter is a world-famous real-time malware protection and removal tool, which is designed to detect , remove and protect your PC from the latest malware attacks, such as Trojans, worms, rootkits, rogue viruses, browser hijacker, ransomware, adware, key-loggers, and so forth. To keep SpyHunter Anti-malware on your computer is an important way to protect your computer in a good condition. Please find the instruction as follow. 

Step 1: Press the following button to download SpyHunter.


Step 2: Save the file onto your computer and click on the Run button to install it.



Step 3: After finishing the installation processes,  scan your computer to find out potential threats.


Step 4: Tick Select all and then Remove to delete all threats.



Guide to download RegCure Pro to optimize PC 


If you are still worried about the left over of http://mom-ex.tekblue.net/crossdomain.xml and want to clean all the unwanted registry entries,  it is recommended to use RegCure Pro.

Step 1. Install and launch RegCure Pro on your PC.




Step 2.  Select "Yes" to download and install RegCure Pro.

 

Step 3. Click "Next" to continue.


Step 4. RegCure Pro will open automatically on your screen.

RegCure Pro

 Step 5. RegCure Pro is scanning your PC for error.

 RegCure Pro2

Step 6. After scanning, choose the issues you want to fix. 

 

Note: Manual removal http://mom-ex.tekblue.net/crossdomain.xml is a huge process and a risky method to cause irreversible man-made damage to your computer. If you don’t have sufficient expertise in dealing with the manual removal. You can download and Install Spyhunter to detect and remove viruses. You can also Download RegCure Pro to help you clean up unwanted registry entries and files to optimize the computer.

No comments:

Post a Comment