How to Remove Yoursites123 Virus from Chrome/Firefox/IE

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.

This page aims to show you how to remove Yoursites123 Virus. Questions like jak usunąć yoursites123 and eliminar yoursites123 have been steadily piling up in our Inbox alongside how to remove Yoursites123 and remove Yoursites123, showing a new global virus threat, affecting different countries.These Yoursites123 virus removal instructions work for Firefox and Chrome as well as every version of Windows.

Yoursites123 has been tagged as a potential computer virus of the Browser Hijacker variety by a number of online security experts.

Remove Yoursites123

Most people are finding Browser Hijacker applications to be more in the annoying category than seen as a potential danger. Yet we find that might be a bit of a misconception. In order to help you we have complied a list of the negative impacts this virus might have on your device as well as a detailed explanation what tricks to expect from Yoursites123 Virus and how to deal with them. That is of course in addition to a detailed instructions jak usunąć yoursites123 and eliminar yoursites123 from your computer. So, let’s start.

Consequences of having Yoursites123 Virus and how to deal with its deceptions

Negative impact it may have on your device:

  • Greatly reduced performance, especially on older systems.
  • Significantly increased execution times for seemingly simple operations like opening your browser, opening a new page or a new tab.
  • Momentary freezes and “lagging”, especially on older systems with slower internet connection.
  • In some extreme cases users might be subjected to their OS crushing or experiencing a serious system error, i.e. the dreaded BSOD.

Here we think would be a good idea to list some of the main tricks associated with this malware and what to avoid when facing them:

  • It is very likely that at some point you will face a pop-up warning you about a virus found on your PC. Consequently a possible “fix” would be suggested in the form of some software. Our advice is to completely disregard any such message, more than likely you will be installing malware instead of an anti-virus software.
  • Other pop-up message in a similar vein might suggest that you download the missing plugins or audio and video codecs required to play some clip. Again you should abstain from downloading any such content from unconfirmed and frankly shady sources.
  • Another deception initiated by the malicious software would be a message informing you about required program updates that you are missing. Most often popular software like Windows Media Player, Adobe products and Java applications are mentioned. We will repeat our advice here – do not download any updates unless that are from an official source.

After all this it is not hard to imagine why people are asking the jak usunąć yoursites123 and eliminar yoursites123 questions.

How did you end up with Yoursites123 on your device?

One of the first questions that pop-up in one’s mind after discovering that there is a computer virus on his device is to look for a way to remove it. Probably the next one is to wonder how did this thing happen at all? There are several ways in which you might have fallen victim to this infection. Probably the oldest trick in the books but still widely used even nowadays is the e-mail attachments way for computer contamination. Our advice – be very careful before opening e-mails from unknown senders even if they seem like reputable sources and be especially careful before opening or downloading any attachments from unfamiliar senders. Most reputable e-mails providers offer some sort of file scanning so it’s advisable you at least do this before opening attachments. We would recommend you additionally scan any file downloaded from an e-mail with an additional anti-malware scanner or anti-virus program.

Another popular way of virus spreading is through contaminated files downloaded from file-sharing websites and torrent sites. There is very little actual control in what is being uploaded and distributed on such sites, so if you end up downloading something be sure to scan it first before opening, especially executable files.

By comparison though the most likely culprit for adware and browser hijackers’ distribution is the software bundles installation method. In short these are normal installers for a most often completely legitimate program, often some kind of freeware, with an easy to miss small addition. Together with the software you actually wanted to install comes additional program that is sometimes harmless but often times might be malicious as in this case. The only way for you to prevent this from happening in the future is to carefully and thoroughly examining what exactly is going to be installed on your computer. The way to achieve that is by always selecting Advanced installation options and deselecting anything that might seem not part of the software that you intended to install in the first place.

Who creates applications like Yoursites123?

It’s a completely logical to assume that at one point or another you have wondered why apps like this are being created. It may seem without much practical value but here’s the thing – software applications like Yoursites123 are being created with one purpose in mind only – for profit.

It is not uncommon for Adware and Browser Hijackers to be actually affiliated in some way with the websites you see being advertised or being redirected to. One of the possible explanations is that any time a user clicks on an Ad they (the creators of these types of malware) get a certain amount of money in exchange, in a way it is a kind of a royalty system. We can only assume that if a user actually spends any money the reward for the creators of the questionable software will be bigger as well.

As a result it is perfectly safe to assume a couple of things:

  1. The ads will be displayed and showcased on the user’s desktop regardless of his or hers preference and permission. The only way to stop them altogether is to completely extirpate the underlying cause.
  2. It is very unlikely that a reputable and above board company or entity will ever use this form of online Advertising. Keep that in mind if you ever find yourself wondering whether you should give away any of your personal information.

How come then this is a way for a company to advertise a web site or product in the first place? It is probably not necessary to look for a reason any further than the overall cost for such an undertaking. By all accounts it turns out this is a way cheaper way of online advertising than other more conventional and reputable types like Google Ads or Facebook business. Let’s say, for argument’s sake that the proprietary owner of such a website decides it is imperative to generate some quick traffic on the cheap for his struggling business. It is not that hard to imagine why he would choose to contact some creators of malware so that the creation of software directing traffic to the desired website can be commissioned. It might be head scratching at first to try and wrap your head around the idea that this could be in any way easier or cheaper way to advertise a product. A fair point, but keep in mind that for all intents and purposes it seems that this type of malicious software is very easy to be created as evidenced by the swarms of new applications that pop-up on a daily basis. Thus the cost is low. Now it is high time we begin with our how to remove instructions!


Name Yoursites123
Type Browser Hijacker
Danger Level High. A very dangerous and annoying software that is not easy to remove.
Symptoms  Various Advertisements, website redirects, hyperlinks appearing while you are browsing.
Distribution Method E-mail attachments, infected files downloaded from torrent or file sharing websites, software bundles.
Detection Tool Malware and Adware are notoriously difficult to track down, since they actively try to deceive you. Use this professional parasite scanner to make sure you find all files related to the infection.Sponsored


1: Enter Safe Mode.
2: Remove Yoursites123 Virus from Chrome, Firefox, Internet Explorer and Safari.
3: Remove attachments to browser shortcuts.
4: Uninstall the virus from your Add/Remove Programs.
5: Permanently delete the threat from Task Manager’s processes.
6: Uninstall the virus from Regedit and Msconfig.

How to Remove Yoursites123 Virus from Chrome/Firefox

Things readers are interested in:

UPDATE! You can visit this article for an updated version of the guide: Remove Pop-Up Ads from Chrome/Firefox (Adware Virus)


Reboot in Safe Mode (use this guide if you don’t know how to do it).

This is just the first preparation.


To remove parasite, you may have to meddle with system files and registries. Making a mistake and deleting the wrong thing may damage your system.
Avoid this by using SpyHunter - a professional Parasite removal tool.

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.

The first mandatory thing is to Reveal All Hidden Files and Folders. Each version of Windows does this slightly differently.

  • I repeat – it’s extremely important you do this. Yoursites123 Virus may have hidden some of its files and you need to see them to delete them.

Unfortunately, Yoursites123 Virus has already spread its infection to all web browsers currently installed on your computer. You will have to apply steps 2 and 3 from our extensive removal guide repeatedly for each infected browser. You can’t disinfect only the one(s) you mainly use, even a trace of the virus left might lead to it reappearing, so be thorough and remove everything.


ie9-10_512x512 Remove the Malware from Internet Explorer:

Open IE, then click IE GEAR —–> Manage Add-ons.

pic 3

Find the malware. Remove it by pressing Disable.

If your Home Page is different from the usual, click IE GEAR —–> Internet Options>edit the URL box with your preferred search engine, and click Apply. Also, Reset Your IE Settings

firefox-512 How To Remove Yoursites123 Virus from Firefox:

Open Firefox, click on mozilla menu (top right) ——-> Add-ons. Hit Extensions next.

Yoursites123 in Firefox

Yoursites123 in Firefox

The problem should be lurking somewhere around here –  Remove it. Then Refresh Your Firefox Settings.

chrome-logo-transparent-background How To Remove Yoursites123 Virus from Chrome:

Start Chrome, click chrome menu icon —–>More Tools —–> Extensions. There, find the malware and select chrome-trash-icon.

Yoursites123 in Google Chrome

 Click chrome menu icon again, and proceed to Settings —> Search, the fourth tab, select Manage Search Engines.  Delete everything but the search engines you normally use. After that Reset Your Chrome Settings.


Right click on the browser’s shortcut, then click Properties.

NOTE: We are showing Google Chrome, but the method is the same for Chrome, Firefox, Internet Explorer, Safari, and Microsoft Edge.


Once you’ve reached Properties —–> Shortcut (on the band at the top), then in the Target type field, delete EVERYTHING AFTER .exe.


Hold the Start Key and R together. Write appwiz.cpl in the field, then click OK.


You are now in the Control Panel. Uninstall any suspicious programs. Also, viruses often spend one last ditch effort to trick you into installing more of their kind. If you see a screen like this when you click Uninstall, choose NO:


Hold the Start Key and R againthen copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A .txt file will open – don’t type or change it. If you are hacked and someone has access to your PC, there will be a bunch of other IPs connected to you at the bottom. This is what a hosts file looks like:

hosts_opt (1)

If there are a bunch of strange IPs connecting to you below “Localhost” you may be hacked, and it’s best to ask us in the comments for directions.


Right click on the Taskbar and choose “Start Task Manager.”


Then click the Processes Tab. Look at all of the processes in front of you and try to determine which ones are a virus. Google them or ask us in the comments and we will provide the best assistance we can.


This is the most important and difficult part. If you delete the wrong file, it may damage your system irreversibly. If you can not do this,
>> Download SpyHunter - a professional parasite scanner and remover.

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.

Right click on each of the virus processes separately and select Open File LocationEnd the process after you open the folder. Just to make sure we don’t delete any programs you mistakenly took for a virus, copy the folders somewhere, then delete the directories you were sent to.



Take a look at the following things:

Type msconfig in the search field and hit enter: you will be transported to a Pop Up window.


Go in the Startup tab and Uncheck entries that have “Unknown” as Manufacturer.

Type Regedit in the windows search field and press Enter.

Once inside, press CTRL and F together and type the virus’s Name. Right click and delete any entries you find with a similar name. If you can’t find them this way, look in these directories, and delete/uninstall the registries manually:

  • HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious, but bear in mind they are always different.
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random

Remember to leave us a comment if you run into any trouble!

Did we help you? Please, consider helping us by spreading the word!

  • Thomas de Vries

    Re: text document in step 4
    Below my IP I have

    Is this something to be worried about?

    • HowToRemove.Guide Team

      I am quite positive these are both part of the virus. Copy the addresses to a text file and delete these two lines from your hosts file. If something isn’t right you can just add them in later. But I’m almost completely sure it’s part of the yoursites123 virus.
      Tell me how it went later and if the guide helped you 🙂

      • Thomas de Vries

        I think it has worked a treat. Thank you.

        • HowToRemove.Guide Team

          Thank you for posting this too 🙂 It’s always nice to see someone thanking us 🙂 If you ever have a problem, feel free to write to us again, we’ll gladly help you.

  • HowToRemove.Guide Team

    Hello Sunny,
    Can you tell me what these IPs are? Sometimes IPs in the hosts file can be innocent.
    The DNSAPI.dll message is part of the virus. Ignore it for now and just tell me the IPs. If the message persists after we are finished with the hosts file, we will address the issue. 🙂

  • Pablo Sánchez Flores

    The only of these things i had to do was just Step 3. After deleting the URL the virus didn’t appear.

    Thank you

    • HowToRemove.Guide Team

      No problem 🙂 You are welcome any time.

  • HowToRemove.Guide Team

    Hello Marc,
    Try to copy the file somewhere else and edit these 4 IPs out. They are 100% part of the virus. Then replace the old hosts file the edited one.

  • Vlacholse

    Thanks for all information. I solved my problem. I just removed extensions and reset browsers, malware gone.

    • HowToRemove.Guide Team

      That’s great. I hope this fixes your problem for good and the malware doesn’t come back 🙂 Tell us if anything changes and we’ll try to help you.

  • Tamima K

    I’ve done everything here, and everytime i close google chrome and open it again i see the again! What else can i do?

    • HowToRemove.Guide Team

      If everything else fails, download the scanner from one of our ads. It should help you track the infected files and you can do it from there.
      Also, were there extensions in your version of the virus? There are 1 or two different things you can try if there were extensions.

    • Shadow

      It happened to me too.
      You can do one more thing that doesn’t get removed with all these steps. Go to Settings / On Start up / Open a specific page or set of pages /
      Click on Set pages……delete yoursites123 and set new page

      • HowToRemove.Guide Team

        Thank you for the comment. I’ll be sure to add this.

        • Shadow

          Thank you for the great guide 🙂

          • HowToRemove.Guide Team

            Thank you for your contribution as well. Hopefully we will be able to help more people. 🙂

  • Luka

    it helped me!! thank you very much!!!

    • HowToRemove.Guide Team

      You are welcome. Glad we could help! 🙂

  • HowToRemove.Guide Team

    You are welcome!

  • Anusha Pathuri

    The yoursites123 extension doesn’t show up in Chrome, Firefox, or IE. Neither is it on the list of programs in the Control Panel. Yet on startup I’m directed to the yoursites123 page. So basically Step 2 is redundant. I went to the “On Startup” and deleted yoursites and set it to some other page. yoursites came back anyway. I did Step 3. In Step 4, the .txt file doesn’t show any IPs after Localhost. So that’s good. I did the regedit thing too. But it just won’t go away! Please help?

    • HowToRemove.Guide Team

      Try the following for Chrome:

      Close Chrome. Navigate to:

      C:/Users/!!!!USER NAME!!!!/AppData/Local/Google/Chrome/User Data. There is a Folder called “Default” inside:

      Rename it to Backup Default. Restart Chrome.

      For the rest, you absolutely must have missed some parts of the virus. It’s not your fault, these things can be pretty sneaky… Download the scanner from one of our ads and use it to find the infected files.
      Did any of this help?

  • HowToRemove.Guide Team


    It is entirely possible that a part of the virus lays somewhere and interferes with your attempts to remove yoursites123. Try again starting from Step 1. If you don’t know what else to do then download the software from the links above and use the scanner to locate the infected files. Let us know how that goes.

  • HowToRemove.Guide Team

    Hello Ellen,
    Glad to hear you managed to clean up your Chrome browser. As for MS Edge – can you tell me which of steps from our removal guide you managed to complete?


    I also fell into the trap of this virus.
    Thankfully i found your website and have tried all the steps, just like a text book exercise and it worked. superb. Thank god that you exist. Thanks again from INDIA. m/.

    • HowToRemove.Guide Team

      Hi Vivek, glad we could be of help.

  • HowToRemove.Guide Team

    Hi Hercules,

    I am assuming you are using WIn 10. Miscrosoft moved the Startup tab to the Task manager. Just look at the tabs, one of them says Startup.

  • HowToRemove.Guide Team

    You should be fine now, but there’s no guarantee you didn’t miss something that’s still on your PC. If you want to be 100% sure, download the SpyHunter scanner from one of our ads, and check if it finds something.