Monday, May 24, 2010

How to remove antispywareutilite.net and antispywareutilite.com browser hijackers

antispywareutilite.net and antispywareutilite.com are malicious websites, which Antispyware Soft shows you in order to trick you into thinking that the computer is infected with dangerous viruses and trojans. These sites stats:

Internet Explorer cannot display the webpage.:
Internet Explorer Warning - visiting this web site may harm your computer!

Most likely causes:
* The website contains exploits that can launch a malicious code on your computer
* Suspicious network activity detected
* There might be an active spyware running on your computer

What you can try:
Purchase for secure Internet surfing (Recommended).
Check your computer for viruses and malware.
More information

Screen shoot of the malicios website below:


antispywareutilite.net and antispywareutilite.com - browser hijackers

These websites is only a small part of the deceptive tactics used by Antispyware Soft in order to create the appearance of infecting your computer and thus force you to buy its full version. Antispyware Soft is a fake antispyware program, which looks like a real antispyware application, but in reality is unable to detect or remove any viruses and trojans nor will be protect your computer from legitimate future infections.

If you find that your computer is infected with this malware and your browser is redirected to antispywareutilite.net or antispywareutilite.com, then most important do not purchase anything from them. Ignore all that these web sites and the program gives you. Use the step by step Antispyware Soft removal guide or the instructions below to remove this malware from your system for free.

How to remove antispywareutilite.net and antispywareutilite.com browser hijackers


Download HijackThis from here, but before saving, in the Save dialog, rename HijackThis.exe to iexplore.exe and save it to your desktop.

Run HijackThis. In the main menu click to "Do a system scan only" button. Look for these lines and place a checkmark against each of the following, if still present


R1 – HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:5555
O4 – HKLM\..\Run: [{RANDOM}] %UserProfile%\Local Settings\Application Data\{RANDOM}\{RANDOM}tssd.exe
O4 – HKCU\..\Run: [{RANDOM}] %UserProfile%\Local Settings\Application Data\{RANDOM}\{RANDOM}tssd.exe


Make sure your Internet Explorer (or any other browser) is closed when you click Fix Checked! Close HijackThis.

Download Malwarebytes Anti-malware. Double click mbam-setup.exe to install the application. When installation is complete, make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. If an update is found, it will download and install the latest version.

Once the program has loaded you will see a screen like below.

Malwarebytes' Anti-Malware

Select "Perform Quick Scan", then click Scan. When the scan is done, click OK, then Show Results to view the results. You will see a list of malware that  Malwarebytes' Anti-Malware found on your computer. Note: list of malware may be different than what is shown in the screen below.

Malwarebytes' Anti-Malware - lists of malicious software


Make sure that everything is checked, and click Remove Selected. Once disinfection is finished, a log will open in Notepad and you may be prompted to Restart.

Note: if you can`t download or run these suggested program above, boot your computer in Safe mode with networking and repeat the above steps once again.

If the instructions does not help you, then ask for help in the Spyware removal forum.

2 comments:

  1. Thanks for the walk through, I was at my wits end with this little bitch :)

    ReplyDelete
  2. This worked! Can't thank you enough.

    ReplyDelete