Thursday, November 15, 2012

Manual Removal for Removing V9 virus (th.v9.com) - Step by Step Instruction

Does your browser keep redirecting to th.v9.com? Have tried every antivirus software and none of them work? Have no idea how to get rid of  V9 virus now. If so, this post will help you to remove  V9 virus step by step. Read more.

Learn more about V9.com

V9.com is not a newly released browser hijacker virus that has damaged many innocent computers. It is possible to get this virus via visiting malicious websites or opening spam email attachments. Some computer users may even realize some changes has been taken in their computer after downloading a free application from an unknown resource. When your computer is infected with this redirect virus, it would hijack your browser to the website: http://th.v9.com/us. It pretends itself as a good one that supplies a search engine, meanwhile, there also have many links for Facebook, Google, Bing, Yahoo, and so on. Moreover, it would mess up registry files in your computer as well as DNS settings. Once V9 virus sneaks into your computer, it will download many malicious Trojans, worms or malwares to damage your compromised computer. At the same time, your privacy is in big danger as the virus could open a back door for remote hacker. For the sake of protecting your computer before further damage, you should try your best to get rid of V9 virus as soon as possible. However, antivirus programs cannot handle this redirect virus alone, you could try other effective way to remove V9 virus completely and permanently. If you meet any trouble, please feel free to contact Tee Support certified professionals 24/7 online for the further help.

V9.com harmful properties

1.    V9.com will constantly redirect your internet connection and tell you that you are browsing unsafely.
2.    Your computer is acting slowly. V9.com slows down your system significantly. This includes starting up, shutting down, playing games, and surfing the web.
3.    Searches are redirected or your homepage and desktop are settings are changed. This is a symptom of a very serious V9.com infection.
4.    V9.com will shut down your other anti-virus and anti-spyware programs. It will also infect and corrupt your registry, leaving your computer totally unsafe.
5.    You are getting pestered with pop ups. V9.com infects your registry and uses it to launch annoying pop up ads out of nowhere.

V9.com Auto Removal:

Obviously, trying antivirus software has very low chance to get rid of V9.com. This threat protects itself by using the latest advanced technology to escape various antivirus detection and removal so even you have downloaded a bunch of antivirus software but with no good result.

V9.com Manual Removal:

V9.com has created a lot of registry entries and files to the system. To completely remove V9.com, you must find out all the malicious things' locations and delete them. But please be aware that manual removal is not an easy job because V9.com encrypts its files using Random names and makes them invisible sometimes. You need to have expert skills dealing with registry editor, program files, dll. files, processes. Otherwise, any mistake occurs could make your situation go from bad to worse.

Step one: Launch the Task Manager by pressing keys “CTRL + Shift + ESC”, search for V9.com processes and right-click to end them.

Step two: Click on the “Start” menu and then click on the “Search programs and files” box, Search for and delete these files created by V9.com:

%AllUsersProfile%\Application Data\.dll
%AllUsersProfile%\Application Data\.exe
C:\WINDOWS\system32\drivers\serial.sys
C:\Users\Vishruth\AppData\Local\Temp\random.xml
C:\windows\system32\drivers\mrxsmb.sys(random)
C:\WINDOWS\system32\drivers\redbook.sys(random

Step three: Open Registry Editor by navigating to “Start” Menu, type “Regedit” into the box and click “OK” to proceed. When Registry Editor is open, search and get rid of the following registry entries:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “ConsentPromptBehaviorAdmin” = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “ConsentPromptBehaviorUser” = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “EnableLUA” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net” = “2012-4-27_2″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “UID” = “tovvhgxtud”
HKEY_CURRENT_USER\Software\ASProtect
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution

Helpful video guide for manual removal

(Important Note: If you haven’t sufficient expertise in handling virus program files, processes, dll files and registry entries, you will take the risk of messing up your computer and making it crash down finally. If you need online professional tech support, click here to get: 24/7 Online Virus Removal Support.)

No comments:

Post a Comment