Oh Jesus, my homepage has been replaced by a fake WSearch. I don’t know what happened. When I opened my Mozilla Firefox, I could see some tool bar has been installed there. I really don’t need those things. This makes my browser run slowly and  it looks very complicated. If I tried to search something via Google and clicked the search results, it won’t open the real page that I clicked. It will show some other websites. What can I do to fix this?

Fake WSearch Introduction

Fake WSearch, we define it as a web browser redirect virus or browser hijack virus since this fake search engine can hijack your Internet browser easily. This web site looks like the same as some ordinary web sites such as Google.com or MSN.com. The difference is that Google.com is a very famous search engine site which has a large quantity of users all over the world. It’s legit obviously to all. And using Google or not is completely decided by yourself. However, Fake WSearch is not like this one. According to the survey, almost every one is unwilling to use such search engine site. They are forced to use it. What does this mean? In fact, It is a website with some virus that change your homepage and redirects you to the site, replacing your searching results.

Fake WSearch redirect virus or browser hijacker comes with many viruses includes Trojan horses, malware or cankered links. It’s nothing different from those famous search sites with a virtuous interface. When you get infected by this browser hijacker, it may not bring you to the forefront because you may think that it just changed your homepage and even you will regard it as one assistant for you to do some search more easily. If you really think so, you are all wet. The offensive Fake WSearch Internet browser hijacker will drag you into the abyss of pain. The redirect virus may not just change your homepage to other web sites, but also can bring in much other virus such as Trojan, malware and fake virus.

Here I must mention, the redirected websites are all full of danger and even if you use Fake WSearch to search for something, you can’t get what you need. It just shows some malicious links to you. When your browser is hijacked by redirect virus, your computer will always pop up some strange things. When you visit some informal websites, you may be attacked by this browser hijacker stealthily. Fake WSearch takes the same way as many Trojans do to invade your computer. Don’t leave it in your computer as a huge threat!

To make your computer healthy, Live Chat with YooSecurity Expert Now, or you can follow the manual removal guide below to get your problem fixed. (For advanced computer users)

Key sentences to judge if your computer has been infected with Redirect Virus

A. Your computer is something not normal as usual such as running very slowly.

B. When you open the Task Manager, you can find some strange progress which you never found before.

C. Every time you open your browser, you are redirected to some odd web pages.

D. Your browser runs more and more slowly.

E. It always pops up some irritating advertisements even if you don’t want.

Best Way to Remove this Fake WSearch Redirect Virus Step by Step

Step 1: Press CTRL+ALT+DEL or CTRL+SHIFT+ESC. Open the Windows Task Manager.
If that didn’t work, try another way. Press the Start button and click on the Run option. This will start the Run tool. Type in taskmgr and press OK. This should start the Windows Task Manager

Step 2: Within the Windows Task Manager click on the Processes tab. Find the process by name. random.exe. Then scroll the list to find required process. Select it with your mouse or keyboard and click on the End Process button. This will kill the process.

Step 3: Delete malicious registry entries related to fake WSearch redirect virus.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\random
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run\random
HKEY_CURRENT_USER\Software\Microsoft\Installer\Products\365KDFSHSFD06Y435 “(Default)”=”1?
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\“UninstallString” = “‘%AppData%\[RANDOM]\[RANDOM].exe” -u
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\“ShortcutPath” = “‘C:\Documents and Settings\All Users\Application Data\365KDFSHSFD06Y435.exe” -u’”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce “365KDFSHSFD06Y435” = “‘C:\Documents and Settings\All Users\Application Data\RANDOM.exe’

Step 4: Remove malicious files of Fake WSearch virus

C:\WINDOWS\assembly\GAC_64\Desktop.ini
C:\Windows\assembly\GAC_32\Desktop.ini
C:\WINDOWS\system32\ping.exe

Video of Key Steps on How to Modify or Change Windows Registry to Remove Fake WSearch:

As what you can see, Fake WSearch is really a very horrible virus which can finally destroy your computer system. And please don’t consider auto delete method since there is no such anti-virus can really remove it completely. Don’t download free software to take a chance. This can only waste your time and bring in much more viruses. All the instructions above are prepared for those who have much computer knowledge and are familiar with this kind for virus. Before you start to do the removal work, please consider it seriously. On the other hand, all the instructions above aim at the common infection situation. As for Fake WSearch virus, there are many variables according to different computers. What’s worse, as time goes by, it may start its variation. Just like what is mentioned above, this virus infection is a cascaded infection. The related files may be changed. Unless you have much knowledge about this virus, it’s very hard for you to do the removal work.

Note:If you failed to remove Fake WSearch virus with the method above, please consult YooSecurity certified professionals to remove it completely.

Published by Leo R. Oscar & last updated on August 12, 2013 12:02 pm

Leave a Reply