2014年10月30日星期四

Go Save 3.0 Extension Removal – How to Delete GoSave 3.0 Ads

Go Save 3.0 Extension Removal – How to Delete GoSave 3.0 Ads


http://blog.mitechmate.com/go-save-3-0-extension-removal-delete-gosave-3-0-ads/



Adware Removal Guide

ads by Go Save 3.0
Go Save 3.0 is an adware that infiltrates your PC with help of unknown free programs. As soon as hijacking your web browsers, it generates text ads, banner ads, popup ads and coupons ads to bombard you whenever you open a website. Go Save 3.0 allegedly claims that is was Installed by Enterprise Policy, and automatically checks the “Enabled” box and forbids you to disable or delete it. Even though you installs many antivirus programs to scan your PC, you will still have no luck to remove Go Save 3.0 and block ads by Go Save 3.0 from your browser.

From research, we find that Go Save 3.0 was created with advanced rootkit technology which helps its codes bypass firewall and antispyware, and it is able to change its codes’ name and path on the compromised PC constantly, thus your antispyware could hardly keep up to detect and remove all the malicious codes. Therefore, we have to use the effective manual solution that could always help we remove stubborn virus like Go Save 3.0 malware.
The following steps will guide you to remove Go Save 3.0 quickly, if you are not familiar with manual removal, you’d better get professional help from Online PC Expert:
MiTechMate Online PC Repair

More Problems Caused by Go Save 3.0

  • Go Save 3.0 strikingly slows down your system speed;
  • It takes a long time to complete system launching due to the startups added by Go Save 3.0;
  • Your computer encounters more system crash since Go Save 3.0 damages your important system files;
  • Go Save 3.0 disables many of your system programs;
  • Go Save 3.0 hides or deletes your files like MS Office documents, videos, images and music;
  • Go Save 3.0 adds, changes or replaces Keys and Values on your Registry, triggering various system errors;
  • Go Save 3.0 harasses you with annoying ads and displays page you haven’t requested;
  • Go Save 3.0 makes your firewall and antivirus software disabled;
  • Go Save 3.0 installs malicious programs without your permission.

Get Rid of Check Me Up redirect step by step now

(Please carefully read the notes before you start to remove any file :This guide is based on the first version of Check Me Up, but this infection keeps adding its features and updating its codes, files and locations, thus you may not be able to find out all its related files listed below. It requires expert skills and experience to identify all the files of Check Me Up infection, if you are not familiar with it, do not risk to delete any file by yourself, since you may disable your PC for deleting wrong files which are crucial for your system. This guide is just for reference, we do not promise it will work for all the victims of different PCs in varied situations and conditions. Any problem and consequence incurred by your mistake should be borne by yourself.)
Step 1: Stop Check Me Up relevant processes in the Windows Task Manager :
random.exe
On Windows XP
  • Press Ctrl+Alt+Del keys together to open Windows Task Manager ;
  • Under the Processes tab, right-click on the processes related with the virus and click End Process
taskmanager1
On Windows 7 / Windows Vista
  • Right-click on Task Bar and click click Task Manager;
  • Under the Processes tab, right-click on the processes related with the virus and click End Process
taskmanager2
taskmanager3
On Windows 8 / 8.1
  • Right-click on Task Bar and click click Task Manager;
  • Under the Processes tab, right-click on the processes related with the virus and click End Process
taskmanager4
Step 2: Uninstall Check Me Up associated programs or suspicious program from Control Panel:
(Unknown free software installed recently)
Windows 8 users
1. Press Windows key and I key together on your keyboard to open the Settings Charm Bar:
cp1

2. Click Control Panel on Settings Charm Bar and then click Uninstall a program in Control Panel:
cp2
cp3
3. Find out and Uninstall associated programs from the Programs and Features list:
cp4

Windows Vista and 7 users
1. Click Start button and then click Control Panel on the Start Menu:
cp5
2. Click Uninstall a program in Control Panel:
cp6
3. Find out and Uninstall associated programs from the Programs and Features list:
cp7

Windows XP users
1. Click Start button >> click Settings on Start Menu >> Click Control Panel
cp8

2. Click Add or Remove Programs in Control Panel and remove associated programs:
cp9
cp10

Step 3: Remove Check Me Up and other suspicious add-on, toolbar, extension from IE, Firefox and Chrome.
Internet Explorer (IE)
• Open Internet Explorer, click on the “gear icon” at the top right corner, then click on “Manager add-ons”.
• At the tab of “Toolbars and Extensions”, right click on unknown and suspicious extensions like Solid Savings, and click on “Disable” to uninstall the malicious add-ons.

* Mozilla Firefox
• Click the “Tools” at the top of the Firefox window and Select Add-on
Ads by GoSaveAd Options
• At the tab of “Extensions”, click on the “Remove” to uninstall unknown and suspicious extensions like Speed Analysis, BrowserProtect,and Webcake.

* Google Chrome
• Click to the Menu button on top right corner of Chrome >> select “Tools” and click “Extensions”;
• At the tab of “Extensions”, click on the Recycle Bin to uninstall unknown and suspicious extensions like Lucky Leap, Webcake and Searchnu.
Ads by GoSaveAd Options

Step 4: Set Your DNS as Google’s public DNS (8.8.8.8):
Step 5: Reset browser settings of Chrome, Firefox and Internet Explorer:
Google Chrome
Click on Chrome wrench icon >> click on Settings >> click on the Show Advanced Settings >> click on Reset Browser Settings.
reset1

Mozilla Firefox
Click on Firefox button >> locate Help >> click on Troubleshooting Information >> click onReset Firefox
reset2

Internet Explorer
Click on Tools >> select Internet Options >> click on Advanced tab >> click on Reset >> confirm the resetting.
reset3
Step 6: Clear browser cookies associated with Check Me Up:
*Google Chrome: Click on the Tools menu → select Options → Click “Under the bonnet” tab → locate “Privacy” section → browsing data” button → “Delete cookies and other site data” to delete all cookies from the list.
ck1
*Internet Explorer: Click “Tools” → Click “safety” → “delete browsing history” → Tick “cookies” box and click delete
ck2
*Firefox: Click “Tools” → Click “Options” → Click “Privacy” → Click “remove individual cookies”
ck3
Step 7: Press Windows + R on the keyboard, run msconfig, click Startup tab and disable Check Me Up if it is there
st1
st2
Step 8: Show all hidden files:
On Windows XP
  • Close all programs so that you are at your desktop.
  • Click on the Start button. This is the small round button with the Windows flag in the lower left corner.
  • Click on the Control Panel menu option.
  • When the control panel opens click on the Appearance and Personalization link.
  • Under the Folder Options category, click on Show Hidden Files or Folders.
  • Under the Hidden files and folders section, select the radio button labeled Show hidden filesfolders, or drives.
  • Remove the checkmark from the checkbox labeled Hide extensions for known file types.
  • Remove the checkmark from the checkbox labeled Hide protected operating system files (Recommended).
  • Press the Apply button and then the OK button.
hf1
On Windows 7 / Vista
  • Click and open Libraries
  • Under the Folder Options category of Tools , click on Show Hidden Files or Folders.
  • Under the Hidden files and folders section, select the radio button labeled Show hidden filesfolders, or drives.
  • Remove the checkmark from the checkbox labeled Hide extensions for known file types.
  • Remove the checkmark from the checkbox labeled Hide protected operating system files (Recommended).
  • Press the Apply button and then the OK button.
hf2
hf3
hf4
On Windows 8 /8.1
  • Click on Windows Explorer ;
  • Click on View tab;
  • Check the “Hidden Items” box
hf5
Step 9: Delete Check Me Up Virus associated files
%Temp%\Check Me Up.exe
%Appdata%\Check Me Up.reg 
%Allusersprofile%\[Random].ini
%Localappdata%\[Random].dll
%Systemroot%\System32\drivers\[Random].sys
%Localappdata%\Microsoft\Windows\Temporary Internet Files\Check Me Up
C:\Documents and Settings\[Account Name]\Local Settings\Temp\Check Me Up.exe  
Step 10: Open Registry Editor:
Method 1 (Available on Windows XP, Windows 7 /Vista, and Windows 8 /8.1):
  • Call out “Run” box by pressing “Windows” key + “R” key on your keyboard;
  • Type “Regedit” into the Run box and click OK to open Registry Editor
r1
r2
r3

Method 2 (Available on Windows 7/ Vista):
  • Click on Start button to open Start Menu
  • Type “Regedit” into the search box and click on Regedit to open Registry Editor
r5
r6
r7
Step 11: Terminate these Registry Entries created by Check Me Up.
 HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = ‘no’
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main “Use FormSuggest” = ‘yes’
HKEY_CURRENT_USER\Software\Microsoft\Installer\Products\random

没有评论:

发表评论