Remove Ads by AddonJet From Chrome/Firefox/IE (Nov. 2017 Update)

Keep in mind, SpyHunter’s malware & virus scanner is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.


This article aims to help users remove Ads by AddonJet from Chrome, Firefox, Internet Explorer and Safari, as well as their respective system. It is possible to encounter the virus as “brought by Addonjet” instead, but in reality it is completely the same thing.

ads by addonjet

If you suddenly started seeing a lot of advertisements on every page you open then it’s likely because your computer has been infected by Ads by AddonJet. This application is categorized as Adware software and displaying unwanted Ads is what is characteristic of Adware in general.

You may have already noticed the slowdown Ads by AddonJet will cause to your computer. Your CPU has to download and render the Ads in addition to the content of every page you are about to open. This split system resources and causes a delay in display speed. if you have an older machine or your internet speed is poor (weak Wi-Fi signal is the most common reason in these days) these delays might even transform into program non-responsiveness. Unfortunately this is only a mild side effect of having Ads by AddonJet on board. The danger is real and it is lurking under the surface of the Ads you are seeing, as well as hidden in any executable file you are offered to download.

Don’t click on any Ads, don’t download any files offered by Ads by AddonJet

Generally the main goal of Ads by AddonJet is to generate revenue for its creator by making you watch the Ads. Unfortunately hackers and developers of viruses use the service of Ad-displaying programs like Ads by AddonJet in order to distribute the viruses they make. Even more common are the PUPs (Potentially Unwanted Programs) that circulate around the web. PUPs are a form of bloatware – programs with limited or zero actual functionality that sell themselves to unsuspecting customers by giving reports about non-existing problems.

Most PUPs sell themselves by scare tactics. They will present themselves with a trial containing a free scanner. This scanner doesn’t even do anything most of the time – it is pre-programmed to show you some massive problem with your computer. It could be viruses, it could be registry errors, it could be HDD health issues and a hundred other problems. If you make the mistake of paying the program will just remove the warning messages without actually doing anything else.

brought by addonjet

Viruses are most often installed as a supposed update or patch for another program, or as a system requested file. Remember that Ads by AddonJet may show you Ads that are basically indistinguishable for system messages and those Ads will demand that you install something like a:

  • Missing plug-in
  • Required video player or codec to view online media
  • Update an important program like Flash/Java

All of this is just a scam to make your download and install the infected file. Don’t installing anything like this until you get rid of Ads by AddonJet first.

SUMMARY:

Name Addon Jet
Type Adware
Danger Level Medium.
Symptoms Unwanted Ads and Toolbars, search engine redirects.
Distribution Method Software bundles, Email attachments, online Ads, infected torrent files.
Detection Tool We generally recommend SpyHunter or a similar anti-malware program that is updated daily.

Ads by AddonJet Removal

If you are a Windows user, continue with the guide below.

If you are a Mac user, please use our How to remove Ads on Mac guide.

If you are an Android user, please use our Android Malware Removal guide.


Step1

Some of the steps will likely require you to exit the page. Bookmark it for later reference.

Reboot in Safe Mode (use this guide if you don’t know how to do it).

Step2

WARNING! READ CAREFULLY BEFORE PROCEEDING!

We get asked this a lot, so we are putting it here: Removing parasite manually may take hours and damage your system in the process. 

Keep in mind, SpyHunter’s malware & virus scanner is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.

If for some reason it doesn't remove parasite, go to "Spyware HelpDesk" ----> "Select Problem Type" -----> "Unremoved Parasit.e"

Press CTRL + SHIFT + ESC at the same time and go to the Processes Tab (the “Details” Tab on Win 8 and 10). Try to determine which processes are dangerous. 

malware-start-taskbar

Right click on each of them and select Open File Location. Then scan the files with our free online virus scanner:

Drag and Drop Files Here to Scan
Maximum file size: 128MB.

This scanner is free and will always remain free for our website's users. You can find its full-page version at: https://howtoremove.guide/online-virus-scanner/




Scan Results


Virus Scanner Result
ClamAV
AVG AV
Maldet

After you open their folder, end the processes that are infected, then delete their folders. 

Note: If you are sure something is part of the infection – delete it, even if the scanner doesn’t flag it. No anti-virus program can detect all infections. 

Step3

Hold together the Start Key and R. Type appwiz.cpl –> OK.

appwiz

You are now in the Control Panel. Look for suspicious entries. Uninstall it/them.

Type msconfig in the search field and hit enter. A window will pop-up:

msconfig_opt

Startup —> Uncheck entries that have “Unknown” as Manufacturer or otherwise look suspicious.

Step4

Hold the Start Key and R –  copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A new file will open. If you are hacked, there will be a bunch of other IPs connected to you at the bottom. Look at the image below:

hosts_opt (1)

If there are suspicious IPs below “Localhost” – write to us in the comments.

Open the start menu and search for Network Connections (On Windows 10 you just write it after clicking the Windows button), press enter.

  1. Right-click on the Network Adapter you are using —> Properties —> Internet Protocol Version 4 (ICP/IP), click  Properties.
  2. The DNS line should be set to Obtain DNS server automaticallyIf it is not, set it yourself.
  3. Click on Advanced —> the DNS tab. Remove everything here (if there is something) —> OK.

DNS

Step5

  • After you complete this step, the threat will be gone from your browsers. Finish the next step as well or it may reappear on a system reboot.

Right click on the browser’s shortcut —> Properties.

NOTE: We are showing Google Chrome, but you can do this for Firefox and IE (or Edge).

browser-hijacker-taskbar-properties

Properties —–> Shortcut. In Targetremove everything after .exe.

ie9-10_512x512  Remove Ads by AddonJet from Internet Explorer:

Open IE, click  IE GEAR —–> Manage Add-ons.

pic 3

Find the threat —> Disable. Go to IE GEAR —–> Internet Options —> change the URL to whatever you use (if hijacked) —> Apply.

firefox-512 Remove Ads by AddonJet from Firefox:

Open Firefoxclick  mozilla menu  ——-> Add-ons —-> Extensions.

pic 6

Find the adware/malware —> Remove.
chrome-logo-transparent-backgroundRemove Ads by AddonJet from Chrome:

Close Chrome. Navigate to:

 C:/Users/!!!!USER NAME!!!!/AppData/Local/Google/Chrome/User Data. There is a Folder called “Default” inside:

Rename the Folder to Backup Default

Rename it to Backup Default. Restart Chrome.

Step6

WARNING!
To remove parasite, you may have to meddle with system files and registries. Making a mistake and deleting the wrong thing may damage your system.
Avoid this by using SpyHunter - a professional Parasite removal tool.

Keep in mind, SpyHunter’s malware & virus scanner is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.

Type Regedit in the windows search field and press Enter.

Inside, press CTRL and F together and type the threat’s Name. Right click and delete any entries you find with a similar name. If they don’t show up this way, go manually to these directories and delete/uninstall them:

  • HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious.
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random

If the guide doesn’t help, download the anti-virus program we recommended or try our free online virus scanner. Also, you can always ask us in the comments for help!


  • plantsrgreen

    in the same HOSTS file, I found the following:

    127.0.0.1 down.baidu2016..com

    127.0.0.1 123.sogou..com

    127.0.0.1 http://www.czzsyzgm..com

    127.0.0.1 http://www.czzsyzxl..com

    Hope you can help me. Thanks!

    • HowToRemove.Guide Team

      Hi, these sites are responsible for at least some of the Ads you are seeing. You need to delete them from the file.