Instant Support Virus Removal

Keep in mind, SpyHunter’s malware & virus scanner is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.

How irritating is this virus?

This article aims to help users remove Instant Support virus from Chrome, Firefox, Internet Explorer and Safari, as well as their respective system.

Instant Support Virus

Instant Support is an Adware application, which is a type of virus. It works by creating advertisements and flooding your browser with them. They can be presented in the form of pop-up windows, banners, maybe even new pages and as random words turned into hyperlinks. The Ads will usually advertise for sites you may have visited recently and for items you were interested in.

The reason Instant Support virus is able to do that is because it reads into your browser’s history and past search queries. Yes, this is very dangerous and also extremely suspicious as nothing is preventing the virus from sending that data back to it’s creator – thus violating your online privacy. It could even send your passwords and log-in details for important institutions like online banking. These are of course encrypted, but it’s best to get rid of Instant Support as soon as possible and then change your passwords.

What other harm can come out of Instant Support

While you have the Instant Support virus on your computer you’ll be seeing Ads whenever you load an internet page. This means double the work for your CPU, resulting in general slowdown for your computer. This could get even worse if you are using a limited internet or one with slow download speed like hotel Wi-Fi.

Worse Instant Support will also try to install viruses or scam programs on your computer. This will be presented as offers for free software downloads. Remember that Instant Support is not shy about generating fake messages about non-existing problems with your computer in order to scare you into downloading an anti-virus or PC registry optimizing program in this way. It could also mask the virus as a missing plug-in or maybe some codec or video player that you supposedly require in order to view movies online. It’s best if you simply ignore Instant Support and its offers until you get rid of it – otherwise you might end up with even more viruses for removal.

Before you dive into the removal guide there is one important thing you should be aware of. There are multiple versions of Instant Support virus in existence, because whoever created Instant Support likes to update it and make it harder to get rid of with every new iteration. We’ve written our article so it can remove even the latest known versions of Instant Support, but if your PC has been infected by an older one some of these steps may not be necessary.

Proceed with Step 1 and carefully read and perform every step. If at any point you do not see Instant Support in the list to remove as described here don’t worry and just move on to the next step, because you likely didn’t need the previous one as explained above.

Name Instant Support
Type Adware.
Danger LevelMedium. The ads will quickly turn into a nuisance and there are legitimate concerns about the safety of your private data.
SymptomsReduced performance, increased loading times, pop-up Ads.
Distribution MethodE-mail attachment, downloaded compromised file vie torrent or file sharing website.
Detection Tool

1: Enter Safe Mode.
2: Remove Instant Support from Chrome, Firefox, Internet Explorer and Safari.
3: Remove the virus from browser shortcuts.
4: Uninstall the virus from your AddRemove Programs.
5: Permanently remove Instant Support from Task Manager’s processes.
6: Remove the virus from Regedit and Msconfig.

Remove Instant Support

Readers are interested in:


The first thing to do is a reboot in Safe Mode. If you already know how to do it, just skip this and proceed to Step 2. If you do not know how to do it, continue reading:

For Windows 98, XP, Millenium and 7: 

Restart your computer. To be sure you don’t miss the time when you need to press it, just spam F8 as soon as the PC starts booting. Then choose Safe Mode With Networking.

For W8 and 8.1:

Click the Start button, then Control Panel —> System and Security —> Administrative Tools —> System Configuration.Administrator permission required


Then check the Safe Boot option and click OK.  Click  Restart in the pop-up.

For W10:

  1. Open the Start menu.
  2. Click the power button icon in the right corner of the Start menu to show the power options menu.
  3. Press and hold down the SHIFT key on the keyboard and click the Restart option while still holding down the SHIFT key.

W10 will perform the reboot. Next do the following:

Click the Troubleshoot icon, then Advanced options —> Startup Settings. Click Restart.
After the reboot click on Enter Safe Mode With Networking (Fifth Option).


To remove parasite, you may have to meddle with system files and registries. Making a mistake and deleting the wrong thing may damage your system.
Avoid this by using SpyHunter - a professional Parasite removal tool.

Keep in mind, SpyHunter’s malware & virus scanner is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.

When Instant Support came into your computer it infected ALL of your internet browsers and now you have to clean them out. Do this by running Steps 2&3 for every browser that is currently installed on your computer. Don’t forget that this includes any old browsers that you may have installed in the past, but are no longer getting any use. If even a single copy of Instant Support remains it may just copy itself back and render your efforts here wasted.

While you are doing this be aware that Instant Support might try to sneak in some messages just before you delete it. It should be in the general tone of free services, software downloads or the like. Don’t install anything this virus offers you – it’s just a last ditch effort by to to install itself on your computer again, possibly under a different name.

ie9-10_512x512  Remove the Malware from Internet Explorer:

Open IE, then click  IE GEAR —–> Manage Add-ons.

pic 3

Find Instant Support . Remove it by pressing Disable.

If your Home Page is different from the usual, click IE GEAR —–> Internet Options>edit the URL box with your preferred search engine, and click Apply.

firefox-512 Remove Instant Support from Firefox:

Open Firefoxclick on mozilla menu (top right) ——-> Add-onsHit Extensions next.

Instant Support Virus in Firefox

Instant Support  should be somewhere around here –  Remove it.

chrome-logo-transparent-backgroundRemove Instant Support from Chrome:

 Start Chrome, click chrome menu icon —–>More Tools —–> Extensions. There,  find the malware and  select  chrome-trash-icon(Remove).

Instant Support Virus in Chrome

 Click chrome menu icon again, and proceed to Settings —> Search, the fourth tab, select Manage Search Engines.  Remove everything but the search engines you normally use.

safari Remove the malware from Safari:

Open Safari, and click Safari —–>Preferences —–> Extensions—–>Uninstall the malware.


Right click on the browser’s shortcut, then click Properties.

NOTE: We are showing Google Chrome, but the method is the same for Chrome, Firefox, Internet Explorer, Safari, and Microsoft Edge.


Once you’ve reached Properties —–> Shortcut (on the band at the top), then in the Target type field, REMOVE EVERYTHING AFTER .exe.


Hold the Start Key and R together. Write appwiz.cpl in the field, then click OK.


You are now in the Control Panel. Search around for Instant Support and suspicious-looking programs. Uninstall it/them. Also, be extremely careful. Viruses often spend one last ditch effort to trick you into installing more of their kind. If you see a screen like this when you click Uninstallchoose NO:


Hold the Start Key and R againbut this time copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A .txt file will open – don’t type or change it. If you are hacked and someone has access to your PC, there will be a bunch of other IPs connected to you at the bottom. This is what a hosts file looks like:

hosts_opt (1)

If there are a bunch of strange IPs connecting to you below “Localhost” you may be hacked, and it’s best to ask us in the comments for directions.


Open the Task Manager by right clicking on the Taskbar and choosing Start Task Manager.


Once it opens, choose the Processes Tab. Look at all of the processes in front of you and try to determine which ones are a virus. Google them or ask us in the comments and we will provide the best assistance we can.


This is perhaps the most important and difficult step, so be extremely careful. Doing things wrong here can have severe consequences on the stability of your OS if you make a big mistake. If you are not feeling comfortable, we advise you to download a professional Instant Support remover program. Additionally, accounts connected to your credit cards, or important information, may be exposed to other viruses, which will not reveal themselves to you until it’s too late. Use the scanner of the software we recommend to scan for and hopefully disable any such virus.


Right click on each of the virus processes separately and select Open File Location. Also, End the process after you open the folder. Just to make sure we don’t delete any programs you mistakenly took for a virus, copy the folders somewhere, then delete the directories you were sent to.


Take a look at the following things:

Type msconfig in the search field and hit enter: you will be transported to a Pop Up window. 


Go in the Startup tab and Uncheck entries that have “Unknown” as Manufacturer.

Type Regedit in the windows search field and press Enter.

Once inside, press CTRL and F together and type the virus’s Name. Right click and delete any entries you find with a similar name. If you can’t find them this way, look in these directories, and delete/uninstall the registries manually:

  • HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious, but bear in mind they are always different.
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random

Remember to leave us a comment if you run into any trouble!

Did we help you? Please, consider helping us by spreading the word!