Malware Removal Instructions

  • Subscribe to our RSS feed.
  • Twitter
  • StumbleUpon
  • Reddit
  • Facebook
  • Digg

Wednesday, 13 November 2013

Remove the do-search.com browser hijacker (Uninstall Guide)

Posted on 08:45 by Unknown
The do-search.com adware is a browser hijacker that changes your web browser's homepage and default search engine to "Do Search." Technically, it's no different than qvo6.com or dosearches.com browser hijackers. It changes the way you search from the omnibox (Chrome) and URL address bar (Firefox, IE). Adware that installs this browser hijacker appends the command line argument http://do-search.com/?type=hp&ts=[time stamp]&from=tugs&uid=[hardware ID] to web browser shortcuts which cause do-search.com web page to open when you launch your web browser. It also installs a web browser add-on called Extended Protection. This browser add-on will reset any changes you will make after each browser restart. Needles to say, creators of this browser hijacker did all they could to make it difficult to completely remove it. As a results, users complain that it keeps coming back.

do-search.com homepage

At the moment, Do Search browser hijacker redirects users to Yahoo search. Of course, it's probably has nothing to do with Yahoo, scammers may easily redirect users to any other search engine. The main goal of browser hijacker is pretty obvious - to display ads on the homepage. From what I've seen so far, a certain number of ads are used to pushe misleading products or services. To avoid installation of do-search.com, pay very close attention when installing applications from sofware download sites. To remove this browser hijacker and clean the affected shortcuts, please use the removal guide below. If you have questions or need help, please leave a comment below. Good luck and be safe online!

Written by Michael Kaur, http://deletemalware.blogspot.com


Do-search.com removal instructions:

1. First of all, download recommended anti-malware software and run a full system scan. It will detect and remove this infection from your computer. You may then follow the manual removal instructions below to remove the leftover traces of this browser hijacker. Hopefully you won't have to do that.





2. Uninstall do-search.com related programs from your computer using the Add/Remove Programs control panel (Windows XP) or Uninstall a program control panel (Windows 7 and Windows 8).

Go to the Start Menu. Select Control Panel → Add/Remove Programs.
If you are using Windows Vista or Windows 7, select Control Panel → Uninstall a Program.



If you are using Windows 8, simply drag your mouse pointer to the right edge of the screen, select Search from the list and search for "control panel".



Or you can right-click on a bottom left hot corner (formerly known as the Start button) and select Control panel from there.



3. When the Add/Remove Programs or the Uninstall a Program screen is displayed, scroll through the list of currently installed programs and remove:
  • eSave Security Control
  • Wsys Control
  • Desk 365
  • Extended Protection
As I said earlier, this application is never listed as 'DO SEARCH' in the currently installed programs list. So, either look for applications mentioned here or try to remember what software you installed recently. It's probably the culprit.



Simply select the application and click Remove. If you are using Windows Vista, Windows 7 or Windows 8, click Uninstall up near the top of that window. When you're done, please close the Control Panel screen.


Remove do-search.com from Google Chrome:

1. Click on Customize and control Google Chrome icon. Select Settings.




2. Click Set pages under the On startup.


Remove do-search.com by clicking the "X" mark as shown in the image below.

3. Click Show Home button under Appearance. Then click Change.

Select Use the New Tab page and click OK to save changes.

4. Click Manage search engines button under Search.

Select Google or any other search engine you like from the list and make it your default search engine provider.

Select do-search.com from the list and remove it by clicking the "X" mark as shown in the image below.

5. Right-click the Google Chrome shortcut you are using to open your web browser and select Properties.

6. Select Shortcut tab and remove "http://do-search.com...." from the Target field and click OK to save changes. Basically, there should be only the path to Chrome executable file.




Remove do-search.com from Mozilla Firefox:

1. Open Mozilla Firefox. In the URL address bar, type about:config and hit Enter.



Click I'll be careful, I promise! to continue.



In the search filter at the top, type: do-search.com

Now, you should see all the preferences that were changed by Do-Search. Right-click on the preference and select Reset to restore default value. Reset all found preferences!

4. Right-click the Mozilla Firefox shortcut you are using to open your web browser and select Properties.

5. Select Shortcut tab and remove "http://do-search.com...." from the Target field and click OK to save changes. Basically, there should be only the path to Firefox executable file.




Remove do-search.com in Internet Explorer:

1. Open Internet Explorer. Go to Tools → Manage Add-ons.



2. Select Search Providers. First of all, choose Live Search search engine and make it your default web search provider (Set as default).

3. Select do-search.com and click Remove to remove it. Close the window.

4. Right-click the Internet Explorer shortcut you are using to open your web browser and select Properties.

5. Select Shortcut tab and remove "http://do-search.com...." from the Target field and click OK to save changes. Basically, there should be only the path to Internet Explorer executable file.



6. Finally, go to Tools → Internet Options and restore your home page to default. That's it!
Email ThisBlogThis!Share to XShare to FacebookShare to Pinterest
Posted in Browser Hijackers | No comments
Newer Post Older Post Home

0 comments:

Post a Comment

Subscribe to: Post Comments (Atom)

Popular Posts

  • What is wrtc.exe and how to remove it?
    wrtc.exe - by Perion Network Ltd. What is wrtc.exe? wrtc.exe is a part of IncrediMail software, digitally signed by Perion Network Ltd. This...
  • Remove ShopperReports (Uninstall Guide)
    ShopperReports is defined as adware or a potentially unwanted program that displays marketing related results in a side pane of the browser...
  • Trojan.MBRlock, Внимание! Ваш компьютер заблокирован
    Trojan.MBRlock is a very disturbing piece of malicious code which infects the master boot record (MBR) and prevents Windows from starting. ...
  • False Positive: Ikarus and Comodo detecting TDSSKiller as a Trojan horse
    This awkward moment when you realize that your favorite rootkit removal utility is detected as malware. I probably wouldn't even have no...
  • Remove RiskTool.Win32.BitCoinMiner (Uninstall Guide)
    RiskTool.Win32.BitCoinMiner is a risk tool or potentially unwanted application that may use your computer's resources to generate bitco...
  • Remove Rattlingsearchsystem.com (Uninstall Guide)
    Rattlingsearchsystem.com is a ZeroAccess/Sirefef rootkit-related browser hijacker that redirects users to shady websites while searching on...
  • Remove TR/ATRAPS.Gen2, removal instructions
    Cyber crooks and third parties that buy stolen data are increasingly using more and more sophisticated techniques, in a variety of different...
  • Remove Ask Search and Ask Toolbar (Uninstall Guide)
    Ask Search and Ask Toolbar are very often incorrectly classified as virus/spyware that may cause search redirects. The majority of us pref...
  • How to remove 'TidyNetwork' adware virus from your computer
    As internet users most of us have seen those irritating little pop-up windows that are advertising something that we normally have little or...
  • Remove Windows Attention Utility (Uninstall Guide)
    Windows Attention Utility is a rogue security application that generates misleading warnings about nonexistent viruses and attempts to lure...

Categories

  • Adware
  • Answers
  • Antivirus software
  • Browser Hijackers
  • Cloud Computing
  • Fake Alerts
  • Giveaways
  • Hoax
  • How-To
  • IaaS
  • Internet
  • Malicious websites
  • Malware
  • PaaS
  • Parental Controls
  • Passwords
  • Phishing
  • Process Information
  • Ransomware
  • Rogue programs
  • Rootkits
  • SaaS
  • Security Advisories
  • Spam
  • Spyware
  • Trojans
  • Viruses
  • Web Browsers
  • Worms

Blog Archive

  • ▼  2013 (173)
    • ►  December (6)
    • ▼  November (13)
      • How to Remove Aartemis Portal Site (aartemis.com)
      • Connect Toolbar Removal Guide (Conduit)
      • Remove BuzzSearch ads, removal guide
      • Remove the do-search.com browser hijacker (Uninsta...
      • Remove jsf.jsticket.net pop-up virus (Removal Guide)
      • Remove wvd.proresync.net pop-up virus (Removal Guide)
      • Remove Deal Slider, removal guide
      • What is cltmngui.exe and how to remove it?
      • How can I get rid of dosearches.com on Chrome, Fir...
      • Remove pht.gzipserver.net pop-up virus (Removal Gu...
      • What is BrowserSafeguard.exe and how to remove it?
      • Is someone watching you through your webcam?
      • Remove BackgroundContainer.dll Error Message (Remo...
    • ►  October (11)
    • ►  September (20)
    • ►  August (4)
    • ►  July (17)
    • ►  June (31)
    • ►  May (25)
    • ►  April (15)
    • ►  March (17)
    • ►  February (7)
    • ►  January (7)
  • ►  2012 (86)
    • ►  November (2)
    • ►  October (4)
    • ►  September (6)
    • ►  August (6)
    • ►  July (11)
    • ►  June (1)
    • ►  May (5)
    • ►  April (7)
    • ►  March (7)
    • ►  February (17)
    • ►  January (20)
  • ►  2011 (239)
    • ►  December (8)
    • ►  November (18)
    • ►  October (21)
    • ►  September (24)
    • ►  August (28)
    • ►  July (32)
    • ►  June (16)
    • ►  May (23)
    • ►  April (15)
    • ►  March (16)
    • ►  February (9)
    • ►  January (29)
  • ►  2010 (2)
    • ►  December (2)
Powered by Blogger.

About Me

Unknown
View my complete profile