Windows Problems Help Center

Thursday, January 8, 2015

Get Rid of fhkg1sm.com and upgradenow24.com Pop-ups - Removal Tips

Hello, I caught myself two malicious malware , do not know what.

1. fhkg1sm.com  
2. upgradenow24.com  

I get both not uninstalled by conventional means. Who knows maybe there is still a possibility to fix these troublemakers once and for all get rid of without " format C : \ " Thanks ever now. 

Description of fhkg1sm.com and upgradenow24.com 


fhkg1sm.com and upgradenow24.com are the malicious browser extensions which can be caused by potentially unwanted program (PUP) or adware on the computer. This kind of threat will detect attempt to download malicious files through HTTP requests. Attacker uses various mechanisms to target a user system and conduct malicious activity. Usually the malicious PUP or adware program can get into the computer by the following means:

1) It can be downloaded along with the unsafe files/drivers from an unreliable web sites;
2) It can be downloaded by opening email or downloading media files that contain the activation code of the program;
3) It is promoted through third-party applications like tools, download manager, File-sharing programs, multi-media software;
4)  It can come from the hacked social networking sites such as Facebook, Twitter, Yahoo and sites like that.

After installed on the computer successfully, the PUP or adware will change the computer and browser setting. There are many unwanted plug-ins or extensions will be added to your browser without your permission, including fhkg1sm.com and upgradenow24.com. The extensions are capable to change the browser setting and replace the default homepage and new tab. 

When you surf the Internet via browsers like Mozilla Firefox, Google Chrome, or Internet Explorer, fhkg1sm.com and upgradenow24.com will pop up on your screen automatically without your permission. Fhkg1sm.com and upgradenow24.com will display bogus warning messages to promote unwanted programs or service. You should not believe in any of them. You should close the pop-ups immediately and remove them completely. It is suggested to scan your computer with a powerful antivirus program like Spyhunter to check out the problem and remove viruses.  

Solutions to remove Fhkg1sm.com and upgradenow24.com   


Solution 1: Manually remove fhkg1sm.com and upgradenow24.com 


Step 1: Press Ctrl+Alt+Del keys together to pull up Window Task Manager and end suspicious processes:


Step 2: Disable any suspicious startup items

Windows Vista or Windows7: click start menu→type msconfig in the search bar → open System Configuration →Disable all possible startup items generated.





Step 3: Reset your browser setting


IE: 
Click Tools on the up right corner and select Internet Options.
Click on Advanced tab, press Reset button to reset IE to its default settings.

Firefox:
In the drop-down list of Firefox, go to Help and click on Troubleshooting Information.
Click on the Reset Firefox button to reset it.

Google Chrome: 
Click on the Chrome menu on the right of toolbar and then select Settings.
Scroll down to the bottom to click Show advanced settings.
Go down to the bottom and click Reset browser settings to reset Google Chrome to its default setting.


Step 3:  Remove files of Fhkg1sm.com and upgradenow24.com like the pictures showed:




Step 4: Go to the Registry Editor and remove all the infection registry entries listed here:

(Steps: Hit Win+R keys and then type regedit in Run box to search)


HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Safari.exe\shell\open\command "(Default)" = ""C:\Program Files\Safari\Safari.exe" http://www.<random>.com/?type=sc&ts=<timestamp>&from=tugs&uid=<hard drive id>"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\SEAMONKEY.EXE\shell\open\command "(Default)" = "C:\Program Files\SeaMonkey\seamonkey.exe http://www.<random>.com/?type=sc&ts=<timestamp>&from=tugs&uid=<hard drive id>"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main "Default_Page_URL" = "http://www.<random>.com/?type=hp&ts=<timestamp>&from=tugs&uid=<hard drive id>"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main "Default_Search_URL" = "http://www.<random>.com/web/?type=ds&ts=<timestamp>&from=tugs&uid=<hard drive id>&q={searchTerms}"

Method  2: Automatic Removal with SpyHunter



SpyHunter is a world-famous real-time malware protection and removal tool, which is designed to detect , remove and protect your PC from the latest malware attacks, such as Trojans, worms, rootkits, rogue viruses, browser hijacker, ransomware, adware, key-loggers, and so forth. To keep SpyHunter Anti-malware on your computer is an important way to protect your computer in a good condition. Please find the instruction as follow. 

Step 1: Press the following button to download SpyHunter.


Step 2: Save the file onto your computer and click on the Run button to install it.



Step 3: After finishing the installation processes,  scan your computer to find out potential threats.


Step 4: Tick Select all and then Remove to delete all threats.



Guide to download RegCure Pro to optimize PC 


If you are still worried about the left over of fhkg1sm.com and upgradenow24.com and want to clean all the unwanted registry entries,  it is recommended to use RegCure Pro.

Step 1. Install and launch RegCure Pro on your PC.




Step 2.  Select "Yes" to download and install RegCure Pro.

 

Step 3. Click "Next" to continue.


Step 4. RegCure Pro will open automatically on your screen.

RegCure Pro

 Step 5. RegCure Pro is scanning your PC for error.

 RegCure Pro2

Step 6. After scanning, choose the issues you want to fix. 

 

Note: Manual removal fhkg1sm.com and upgradenow24.com is a huge process and a risky method to cause irreversible man-made damage to your computer. If you don’t have sufficient expertise in dealing with the manual removal. You can download and Install Spyhunter to detect and remove viruses. You can also Download RegCure Pro to help you clean up unwanted registry entries and files to optimize the computer.

No comments:

Post a Comment