Completely remove adwares and clean your web browsers

7. Clean the Registry (For experts only !)

For those who want to go further, you can also delete the registry keys created by the adware.

Warning : a bad manipulation in the registry can crash your computer!

For this, look into the following registry keys :

1. Programs running at startup (for the current user only)
   • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
   • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce
2. Programs running at startup (for all users of the computer)
   • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
   • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
   • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run
   • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce
3. Keys created by programs (concerning the current user only)
   • HKEY_CURRENT_USER\Software
4. Keys created by programs (applies to all users of the computer)
   • HKEY_LOCAL_MACHINE\SOFTWARE
   • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node

Note : The "Wow6432Node" key exists only if the architecture of your Windows is 64-bit.
In the case of a Windows x86, you only have 32-bit programs. Contrariwise, on Windows 64, you have 32 and 64 Bits programs. The 32-bit programs are in key "Wow6432Node" as they are launched in 32-bit compatibility.

Click "Yes" to delete the registry key PERMANENTLY and its subkeys.

8. Supprimer les fichiers inutiles

Go to "C:\Program Files" and "C:\Program Files (x86)", and remove the last traces of adware that are installed. In our case, we removed many folders as you can see in this picture. (It's best to uninstall the corresponding adware before deleting the corresponding program files)

Note : The "C:\Program Files (x86)" folder only exists if the architecture of your Windows is 64-bit. The reasons are the same as for the registry.

9. Analysis anti-malwares - Rogue Killer (Scan software)

Your operating system is now clean IN APPEARANCE. But this is often not the case, so nothing like anti-virus scans, anti-spyware and anti-malware software to remove the latest viruses on your machine. Namely, Anti-virus often have a small delay compared to the new virus.

Start with a very powerful scanning software. This software is a scan utility and not a Anti-virus you can use it in addition to your favorite Anti-virus.
Note : Never do a scan with Rogue Killer when Malware Bytes running as Rogue Killer cut the process of Malware Bytes. Malware Bytes is not an Anti-virus but from experience we know there are in conflict when you execute them simultaneously.

Now, RogueKiller is developed in 2 architectures : x86 (32-bit) and x64 (64 bit).

Download the correct one and launch the downloaded file. Then, click "Accept".

At startup, Rogue Killer checks if there are no viruses or other malware running. If it is, the Rogue Killer stop abruptly to stop their operation. It's at this point that Malware Bytes is stopped if running at this time. Then click Scan for anti-virus scan.
Once the scan is complete, click "Remove", Host Reset, Proxy Reset and then click DNS reset.

If Windows is really damaged, you can try to repair originals shortcuts by clicking "Shortcuts Reset".

10. Analysis anti-malwares - Malware Bytes (Scan software)

Download Malwarebytes Anti-Malware and run the downloaded file.

Uncheck "Enable Malware Bytes Test Anti-Malware PRO" to disable real-time protection and will not receive a message in 30 days telling you to buy the PRO version because it has expired.

At startup, Malware Bytes check for updates automatically. Click "Yes" to update the database of virus definitions.

If you get an error, make sure you are connected to the Internet. Otherwise, the update is performed automatically.

Select "Perform full scan" and click "Search".

Select the partitions and media (diskettes, memory cards, USB drives, CD / DVD, ...) to analyze and click "Search".

The analysis is performed and the number of elements detected is displayed in red if at least one element has been detected.

Once the analysis is complete, the message "Examination is completed normally. Click 'Show Results' to display all objects found" is displayed.
Click OK and then click "Show Results".

Right-click on an item and click on "Select all". PUPs are potentially dangerous programs or potentially unwanted programs. What is the role of adware. They are often detected as PUP by some anti-malware, anti-virus and other security software.

Then click "Remove Selected".

Either, Malware Bytes is display "All selected items were removed successfully".
Either it asks you to restart the computer : "Your computer must be restarted for the removal process ends. Would you like to restart now ?".

11. Analysis with your favorite Anti-virus

We recommend that you do a virus scan with the anti-virus you have installed on your computer. If you've never installed one, this is a very bad idea.
Here is an opportunity to correct this big mistake. Download Avast Free is the best free anti-virus. At launch, it will ask you to register for free, and ask to be renewed every year for free.

And finally, you can read our tutorial : "Windows - Clean Windows safe" to delete temporary files created by these adware.