How to Get Rid of the MyWebSearch Redirect

MyWebSearch Redirect can change your Internet settings.

MyWebSearch Redirect, sometimes referred to as Win32/Toolbar.MywebSearch, is a Trojan that has the capability of redirecting your Internet searches. In addition to redirecting your Internet searches, the MyWebSearch Redirect virus will attempt to procure your financial information by getting you to purchase a fake antivirus program. Moreover, MyWebSearch Redirect may slow your computer, change your Internet settings, add shortcuts to your desktop, and flood your computer with popup advertisements.

Instructions

End Infected Processes

1. Press Ctrl + Alt + Delete.

2. Click on the \"Task Manager,\" and then click on the \"Processes\" tab.

3. End the following processes. To end a process, right-click on it and select \"End Process.\"<br /><br />\"ProgramFiles\\[RANDOM NAME]\\rhccv9j0e1b1.exe\"<br />\"ProgramFiles\\[RANDOM NAME]\\Uninstall.exe\"<br />\"System\\[RANDOM NAME].exe\"

Delete Infected DLL Files

1. Click on the \"Start\" menu.\"

2. Click on \"Run.\"

3. Type \"cmd\" (without the quotation marks) into the open box and click \"OK.\" The Command Prompt will open.

4. Type the following into the Command Prompt. Be sure to press Enter after each line. <br /><br />\"regsvr32 /u MFC71.dll\"<br />\"regsvr32 /u MFC71ENU.dll\"<br />\"regsvr32 /u msvcp71.dll\"<br />\"regsvr32 /u msvcr71.dll\"<br />\"regsvr32 /u rhccv9j0e1b1.dll\"

Delete Infected Registry Values

1. Click on the \"Start\" menu.

2. Click \"Run.\"

3. Type \"regedit\" (without the quotation marks) into the open box and click \"OK.\" The Registry Editor will open.

4. Locate the following registry values in the left-pane of the \"Registry Editor\" and delete them. To delete a registry value, right-click on it and select \"Delete.\"<br /><br />\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\\[RANDOM NAME] = C:\\Program Files\\[RANDOM NAME]\\[RANDOM NAME].exe”<br />\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\User Agent\\Post Platform\\AntivirXP0 = AntivirXP08?<br />\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\[RANDOM NAME] HKEY_LOCAL_MACHINE\\SOFTWARE\\[RANDOM NAME] HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\[RANDOM NAME]\"

Delete Infected Files

1. Click on the \"Start\" menu.

2. Click on \"Search Files and Folders.\"

3. Search for and delete the following files. To delete a file, right-click on it and select \"Delete.\"<br /><br />\"UserProfile\\Application Data\\Microsoft\\Internet Explorer\\Quick Launch\\Antivirus XP 2008.lnk\"<br />\"C:\\Documents and Settings\\All Users\\Desktop\\Antivirus XP 2008.lnk\"<br />\"C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Antivirus XP 2008\\Antivirus XP 2008.lnk\"<br />\"C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Antivirus XP 2008\\How to Register Antivirus XP 2008.lnk\"<br />\"C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Antivirus XP 2008\\License Agreement.lnk\"<br />\"C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Antivirus XP 2008\\Register Antivirus XP 2008.lnk\"<br />\"C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Antivirus XP 2008\\Uninstall.lnk\"<br />\"C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Antivirus XP 2008.lnk\" \"ProgramFiles\\[RANDOM NAME]\\database.dat\"<br />\"ProgramFiles\\[RANDOM NAME]\\license.txt\"

Delete Infected Directories

1. Click on the \"Start\" menu.

2. Click on \"Run.\"

3. Type \"cmd\" (without the quotation marks) into the box and click \"OK.\" The Command Prompt will open.

4. Type the following into the Command Prompt and then press ENTER. <br /><br />\"rm -r antivirusxp2008\"

References

• FasterPCCleanClean: How to Remove Win32/Toolbar.MywebSearch