How to Remove Fanli90.cn “Virus” (Chrome/Firefox/IE)

Keep in mind, SpyHunter’s malware & virus scanner is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.


How irritating is this virus?

This page aims to help you remove Fanli90.cn “Virus”. These Fanli90.cn “Virus” removal instructions work for Chrome, Firefox and Internet Explorer, as well as every version of Windows.

Nagging programs that can mess up your browser are all over the internet and every now and then a new one gets released. Generally, this type of programs are called Browser Hijackers and here, we will be talking about Fanli90.cn – one of the latest applications of this type. If you’re reading this, then you have probably already felt just how annoying this piece of software can be. Among the most common complaints from Fanli90.cn are its tendency to invade the user’s Chrome, Firefox, IE or Edge browser and meddle with its settings, by adding new search engines, toolbars and homepages, as well as causing sudden redirects to other pages that the user did not intend on visiting. If you too are going through this same problem, we can help you resolve it with our Fanli90.cn removal guide at the bottom of this article. However, it is advisable that you read all the paragraphs prior to actually going to the instruction manual and using it to get rid of the unpleasant program.

Aggressive marketing

Usually, the main purpose of most Hijackers is online advertising. They are packed with a number of different promoting functions that enable them to advertise everything from different websites and online services to different software programs, both from the same developer and from third parties. The thing is, almost always programs like Fanli90.cn cross the border between peacefully advertising something and being intrusive and invasive. This has led to many people believing that Browser Hijackers are actually some sort of PC viruses and referring to them as malware. One thing is for certain: if a program tries to force different forms of advertisement on your browser without your permission, you should probably remove the said application.

Are they really viruses?

There are a lot of debates about whether Browser Hijackers are actual PC viruses or if they are simply annoying yet legitimate programs. There are certainly some similarities, but also quite a few differences between the two types of software. Generally, applications like Fanli90.cn, though being undesirable and unpleasant, are pretty much harmless. In contrast, actual viruses like Trojan horses and Ransomware can be extremely problematic and dangerous if your machine gets infected by them. Another important difference that we ought to mention is that unlike software viruses, many Hijackers are actually legal and legally distributed. Last but not least is the fact that nagging programs like Fanli90.cn do not make the slightest attempt to remain unnoticed. Actually, they are trying really hard to be as noticeable as possible. Malicious programs like Ransomware and Trojans, on the other hand, are programmed to have little to no symptoms so that it is more difficult to realize that they’ve gotten on your PC.

Other potential problems

In this paragraph, we will inform you about what other issues you might have with a program of the Browser Hijacker type. Apart from having your browser modified, there are several other possible negative effects that Fanli90.cn might have on your system that you must be aware of.

  • If the unpleasant program has been installed on your machine, it might cause RAM and CPU spikes, which can lead to a general slowdown of your system and maybe even making it unstable.
  • A common complaint regarding Hijackers is that they also flood the browser with annoying and heavily obstructive adverts that can utterly ruin your browsing experience and might sometimes redirect you to sketchy and obscure websites if you interact with them.
  • Additionally, in order to make the ads seem more likable, some Hijackers use data gathered from your browser history and modify the adverts based on your online searches.

You must keep your machine protected!

Eliminating the annoying software is only half the fight against Browser Hijackers. The other half is ensuring that no more similar programs make it inside your system. This is why you must remember and always employ the next several tips.

  • Never download anything from obscure websites that might not be safe. The only download sources you should ever use are the ones that have been verified as safe and dependable.
  • If you see a new e-mail that comes from an unknown user and looks sketchy, think twice before opening it, since it might be a spam letter that contains the Hijacker.
  • If your browser has an automatic download function, make sure to disable it. No file should be downloaded on your system automatically, without you first giving it your permission.
  • Be very careful with what you install. Sometimes, the installers of new programs are actually file bundles that have extra applications added to them. This is how Hijackers are commonly distributed. That’s why you must always carefully look through the setup wizard and see if there are any added programs that look shady and potentially undesirable. If you find any, be sure to uncheck them in order to leave them out of the installation. In some cases, you will have the option to use an Advanced installation menu. Always opt for that if you have the opportunity – this is where usually the bundled programs are hidden.

 

SUMMARY:

Name Fanli90.cn
Type Browser Hijacker
Danger Level Medium (nowhere near threats like Ransomware, but still a security risk)
Symptoms Usually, users complain from unwanted new search engine and toolbars on their browsers as well as a changed starting page and sudden page redirects.
Distribution Method Most of the times, Browser Hijackers are being spread through unwanted spam emails, deceitful online ads and software bundles.
Detection Tool We generally recommend SpyHunter or a similar anti-malware program that is updated daily.

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you’ll need to purchase the full version.
More information about SpyHunter and steps to uninstall.

Fanli90.cn “Virus” Removal


Step1

Some of the steps will likely require you to exit the page. Bookmark it for later reference.

Reboot in Safe Mode (use this guide if you don’t know how to do it).

Step2

This is the most important step. Do not skip it if you want to remove Fanli90.cn successfully!

Press CTRL + SHIFT + ESC at the same time and go to the Processes Tab (the “Details” Tab on Win 8 and 10). Try to determine which processes are dangerous. 

malware-start-taskbar

Right click on each of them and select Open File Location. Then scan the files with our free online virus scanner:

Drag and Drop Files Here to Scan
Maximum file size: 128MB.

This scanner is free and will always remain free for our website's users. You can find its full-page version at: https://howtoremove.guide/online-virus-scanner/




Scan Results


Virus Scanner Result
ClamAV
AVG AV
Maldet

After you open their folder, end the processes that are infected, then delete their folders. 

Note: If you are sure something is part of the infection – delete it, even if the scanner doesn’t flag it. No anti-virus program can detect all infections. 

Step3

Hold together the Start Key and R. Type appwiz.cpl –> OK.

appwiz

You are now in the Control Panel. Look for suspicious entries. Uninstall it/them.

Type msconfig in the search field and hit enter. A window will pop-up:

msconfig_opt

Startup —> Uncheck entries that have “Unknown” as Manufacturer or otherwise look suspicious.

Step4

Hold the Start Key and R –  copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A new file will open. If you are hacked, there will be a bunch of other IPs connected to you at the bottom. Look at the image below:

hosts_opt (1)

If there are suspicious IPs below “Localhost” – write to us in the comments.

Open the start menu and search for Network Connections (On Windows 10 you just write it after clicking the Windows button), press enter.

  1. Right-click on the Network Adapter you are using —> Properties —> Internet Protocol Version 4 (ICP/IP), click  Properties.
  2. The DNS line should be set to Obtain DNS server automatically. If it is not, set it yourself.
  3. Click on Advanced —> the DNS tab. Remove everything here (if there is something) —> OK.

DNS

Step5

  • After you complete this step, the threat will be gone from your browsers. Finish the next step as well or it may reappear on a system reboot.

Right click on the browser’s shortcut —> Properties.

NOTE: We are showing Google Chrome, but you can do this for Firefox and IE (or Edge).

browser-hijacker-taskbar-properties

Properties —–> Shortcut. In Target, remove everything after .exe.

ie9-10_512x512  Remove Fanli90.cn from Internet Explorer:

Open IE, click  IE GEAR —–> Manage Add-ons.

pic 3

Find the threat —> Disable. Go to IE GEAR —–> Internet Options —> change the URL to whatever you use (if hijacked) —> Apply.

firefox-512 Remove Fanli90.cn from Firefox:

Open Firefoxclick  mozilla menu  ——-> Add-ons —-> Extensions.

pic 6

Find the adware/malware —> Remove.
chrome-logo-transparent-backgroundRemove Fanli90.cn from Chrome:

Close Chrome. Navigate to:

 C:/Users/!!!!USER NAME!!!!/AppData/Local/Google/Chrome/User Data. There is a Folder called “Default” inside:

Rename the Folder to Backup Default

Rename it to Backup Default. Restart Chrome.

Step6

WARNING!
To remove parasite, you may have to meddle with system files and registries. Making a mistake and deleting the wrong thing may damage your system.
Avoid this by using SpyHunter - a professional Parasite removal tool.

Keep in mind, SpyHunter’s malware & virus scanner is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.

Type Regedit in the windows search field and press Enter.

Inside, press CTRL and F together and type the threat’s Name. Right click and delete any entries you find with a similar name. If they don’t show up this way, go manually to these directories and delete/uninstall them:

  • HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious.
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random

If the guide didn’t help you, download the anti-virus program we recommended or ask us in the comments for guidance!