Browser hijacker redirect to malicious site?  I’ve got a problem … when i want to go to www.facebook.com my computer go to 63ce2138.qqc.co i don’t know what I have to do. Does Norton fix this virus? well, it’s time to learn something to handle it now.

Overview of http://63ce2138.qqc.co/notfound/ Redirect Virus

Http://63ce2138.qqc.co/notfound/ is a malicious browser hijacker that is released by cyber criminals to visit your computer without your permission, and this virus is related to linkbucks virus. You might be very surprised how did the virus infect your computer secretly? In fact, you suffer from such a horrific experience every time you visit harmful websites, open junk emails or download free items from dangerous web pages unwarily. Any of these careless actions may result your computer in a risky situation for the redirect virus does great harm to it aggressively. Once the http://63ce2138.qqc.co/notfound/ virus sneaks into your PC, it takes control of it rapidly. In detail, the hijacker redirects your favorite websites to dangerous web pages and triggers many disgusting pop ups on your screen terribly. It also changes your homepage and adjusts your browser settings at random. When you surf the web, you’ll get very poor Internet connection. Moreover, the redirect virus is so tricky that it steals your precious personal information and other sensitive information for illegal actions. It manages to gather your information by recording your browser history and computer data casually. Generally, the http://63ce2138.qqc.co/notfound/ browser hijacker ruins your system and corrupts your files seriously. It sharply slows down your system performance and causes great mess to your computer unpredictably. Emergency as the case is, it is highly suggested that you should take steps to completely remove the stubborn virus from your computer promptly. Never be mercy to remove it completely from your computer for your sake!

To make your computer healthy, Live Chat with YooSecurity Expert Now, or you can follow the manual removal guide below to get your problem fixed. (For advanced computer users)

A photo of http://63ce2138.qqc.co/notfound/ Redirect Virus

How to deal with http://63ce2138.qqc.co/notfound/ from Windows XP, Windows Vista or Windows 7

No luck that your computer has been hijacked by this virus? Just tried to get on to Facebook, and got this message: http://63ce2138.qqc.co/notfound/. Which is the same as what was happening last night. What it did first was redirect Google to a linkbucks site and now computer users can use Google but it redirects Facebook to 63ce2138.qqc.co site which is also linkbucks. It also appears on user’s other two laptops in the same network environment and a Samsung tablet as well. Many of them use Eset32,and Malwarebytes,but none of them found anything. Google Chrome, Firefox, IE – redirect you to http://63ce2138.qqc.co/, chrome – Error 102 net error connection refused, the server refused the connection, how to fix it? The effectively way to get rid of this virus is manual removal. As manual removal is a safe and effective way, so it is helpful, but it is just for advanced computer users.

Basic steps to manually remove 63ce2138.qqc.co infection

Press Ctrl+Alt+Del keys together and stop all processes of the Trojan in the Windows Task Manager.

Let’s open the Registry Editor, search and remove registry entries generated by the browser hijacker.

All associated files of http://63ce2138.qqc.co/notfound/ should be removed.

C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
C:\WINDOWS\System32\spoolsv.exe
C:\Program Files\Auslogics\Auslogics BoostSpeed\BoostSpeed.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll{18df081c-e8ad-4283-a596-fa578c2ebdc3}
C:\program files\divx\divx plus web player\ie\divxhtml5\DivXHTML5.dll{326e768d-4182-46fd-9c16-1449a49795f4}

Video Tutorial On How to Modify or Change Windows Registry:

Registry Entries That Generated By The 63ce2138.qqc.co Infection

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1
HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List
“%windir%\\Network Diagnostic\\xpnetdiag.exe”=
“%windir%\\system32\\sessmgr.exe”=
“c:\\Program Files\\Messenger\\msmsgs.exe”=
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\random thing
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\

Note: Please feel free to get YooCare/YooSecurity 24/7 online support anytime you get stuck or when you feel it’s tough to clean out http://63ce2138.qqc.co/notfound/ redirect virus.

Published by Matt Johnston & last updated on November 14, 2012 2:13 pm

Leave a Reply