Can’t get rid of “You shall not pass” Virus that appeared on your computer? All the browsers ( Internet Explorer, Firefox, Google Chrome) have been hijacked, It effects from Windows 7, Windows Vista, Windows XP to Windows 8. How do resolve this problem?

What is “You shall not pass” Virus – How to Remove?

The “You shall not pass” Virus is a browser hijacker that attacks PC users who are running Windows. It changes the default browser in Google Chrome, Mozilla Firefox, or Internet Explorer and When user is trying to enter Google and Youtube a photo with Gandalf appears and says that i shall not pass. It is very similar to hijackers that redirected Internet users to Sirefef.gen!csweetpacks virus or delta search engine. Once installed, it will redirect the user to the page with “Youshallnotpass” on the content that controlled by the organization behind the hijacker. Unsuspecting users might not realize it for the first couple of times, but it will become evident fairly quickly that their normal Google, FaceBook, Yahoo, or Bing search pages have been replaced. When users try to load Google then a picture of Gandalf comes up and the writing above it says ” You shall not pass” Virus. The same thing happened on Bing, many other websites work and you don’t know what to do.

If a search is attempted from the new page the users are taken to pages that have nothing to do with the search request. The pages are full of banner ads, text links, sponsored ads, and annoying pop up ads that don’t stop, like “You shall not pass” Virus appeared on the page every time you opened website. The hackers have one goal in mind when they send the users to these pages, and that is to scare users to buy something. All of the warnings and offers on the pages they control are affiliate links and pay per click advertisements that pay them each time a user clicks on them to bypass the issue they received. As they don’t want to make trouble in the future. As  last, many computer users became the  victims of this malware. Its strategy is to send as much volume to such Adware as possible and hope that users generate clicks. Obviously the user is going to think something is wrong after a couple searches do not return any relevant results. This is why the is an ongoing problem. They have to continually infect new users in an attempt to keep that money rolling in. You need to resolve “You shall not pass” Virus problem immediately.

Note: To save your computer, Live Chat with YooSecurity Expert Now. You can follow the manual removal guide below to get your problem fixed. (For advanced computer users)

Screenshot of “You shall not pass” Virus


Malicious Thing Pops up On All My Search Engines, How Dangerous Is My Computer?

The real danger lies in the “You shall not pass” Virus’s ability to grant the hackers remote access to the computer. They also attempt to steal login information to email accounts and social media accounts. If they gain access to these they can then send out information so it looks like it is coming from the user. They will send out links and ask everyone to click on them, for which they are financially compensated for, or they will send out a carefully crafted message stating that the user is in trouble and they need money sent by western union. They are quite elaborate scams and unfortunately many people fall for them!

Manual Removal Step by Step Guide

So, now that you know how dangerous the “You shall not pass” Virus is, what can you do to prevent it? Well, running daily system scans using an updated anti-virus program is a great start. Also, just be aware of your browsing and don’t click on links that look suspicious. If you happen to get infected by this attack simply follow the removal instructions below.

Step A: Open Windows Task Manager to end process related to the domain. To do that, press Ctrl+Alt+Del keys at the same time to pull up Window Task Manager.

Step B: Open Control Panel from Start menu and search for Folder Options. Go to Folder Options window, under View tab, tick Show hidden files and folders and non-tick Hide protected operating system files (Recommended) and then click OK.

Step C: Press Windows+R keys to pull up Run box and type in regedit to open Registry Editor.

Step D: Delete all these associating files and registry entries of “You shall not pass” Virus in Registry Editor as below:

%AppData%\[random thing]
%AllUsersProfile%\Programs\{random thing}\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = “”.exe.dll

Video On How To Remove Webpage Hijacker Virus:


“You shall not pass” Virus is a nasty malware. This is why it is so important to always know exactly what is being installed on the computer. While this isn’t a very harmful virus, it could be, and some of the most dangerous computer attacks are spread this very same way. Always opt for the custom installation, as this option will allow just the installation of the intended program and the others will not be installed. This is becoming a growing trend among hackers, and because of the large number of free downloads every day (in the hundreds of millions) it has become a very effective way to infect millions of computers daily. Along with safe browsing and downloading, it is a good habit to run a virus scan on the computer as often as possible. We suggest daily for complete protection., and always make sure that the software is up to date.

Kindly Reminder: Have no clue on how to get rid of “You shall not pass” Virus? Please contact YooSecurity Online Experts now to save your computer from all the troubles and future consequences.

Published by Tony Shepherd & last updated on May 20, 2013 12:35 pm

Leave a Reply