Instant Support “Virus” Removal (May 2017 Update)

Keep in mind, SpyHunter’s malware & virus scanner is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.


How irritating is this virus?

This article aims to help users remove Instant Support virus from Chrome, Firefox, Internet Explorer and Safari, as well as their respective system.

Instant Support Virus

Instant Support is an Adware application, which is a type of virus. It works by creating advertisements and flooding your browser with them. They can be presented in the form of pop-up windows, banners, maybe even new pages and as random words turned into hyperlinks. The Ads will usually advertise for sites you may have visited recently and for items you were interested in.

The reason Instant Support virus is able to do that is because it reads into your browser’s history and past search queries. Yes, this is very dangerous and also extremely suspicious as nothing is preventing the virus from sending that data back to it’s creator – thus violating your online privacy. It could even send your passwords and log-in details for important institutions like online banking. These are of course encrypted, but it’s best to get rid of Instant Support as soon as possible and then change your passwords.

What other harm can come out of Instant Support

While you have the Instant Support virus on your computer you’ll be seeing Ads whenever you load an internet page. This means double the work for your CPU, resulting in general slowdown for your computer. This could get even worse if you are using a limited internet or one with slow download speed like hotel Wi-Fi.

Worse Instant Support will also try to install viruses or scam programs on your computer. This will be presented as offers for free software downloads. Remember that Instant Support is not shy about generating fake messages about non-existing problems with your computer in order to scare you into downloading an anti-virus or PC registry optimizing program in this way. It could also mask the virus as a missing plug-in or maybe some codec or video player that you supposedly require in order to view movies online. It’s best if you simply ignore Instant Support and its offers until you get rid of it – otherwise you might end up with even more viruses for removal.

Before you dive into the removal guide there is one important thing you should be aware of. There are multiple versions of Instant Support virus in existence, because whoever created Instant Support likes to update it and make it harder to get rid of with every new iteration. We’ve written our article so it can remove even the latest known versions of Instant Support, but if your PC has been infected by an older one some of these steps may not be necessary.

Proceed with Step 1 and carefully read and perform every step. If at any point you do not see Instant Support in the list to remove as described here don’t worry and just move on to the next step, because you likely didn’t need the previous one as explained above.

Name  Instant Support
Type  Adware.
Danger Level Medium. The ads will quickly turn into a nuisance and there are legitimate concerns about the safety of your private data.
Symptoms Reduced performance, increased loading times, pop-up Ads.
Distribution Method E-mail attachment, downloaded compromised file vie torrent or file sharing website.
Detection Tool We generally recommend SpyHunter or a similar anti-malware program that is updated daily.

Instant Support “Virus” Removal

If you are a Windows user, continue with the guide below.

If you are a Mac user, please use our How to remove Ads on Mac guide.

If you are an Android user, please use our Android Malware Removal guide.


Step1

Some of the steps will likely require you to exit the page. Bookmark it for later reference.

Reboot in Safe Mode (use this guide if you don’t know how to do it).

Step2

WARNING! READ CAREFULLY BEFORE PROCEEDING!

We get asked this a lot, so we are putting it here: Removing parasite manually may take hours and damage your system in the process. If you want a fast safe solution, we recommend SpyHunter. 

>> Click to Download Spyhunter. If you don't want this software, continue with the guide below.

Keep in mind, SpyHunter’s malware & virus scanner is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.

Press CTRL + SHIFT + ESC at the same time and go to the Processes Tab (the “Details” Tab on Win 8 and 10). Try to determine which processes are dangerous. 

malware-start-taskbar

Right click on each of them and select Open File Location. Then scan the files with our free online virus scanner:

Drag and Drop Files Here to Scan
Maximum file size: 128MB.

This scanner is free and will always remain free for our website's users. You can find its full-page version at: https://howtoremove.guide/online-virus-scanner/




Scan Results


Virus Scanner Result
ClamAV
AVG AV
Maldet

After you open their folder, end the processes that are infected, then delete their folders. 

Note: If you are sure something is part of the infection – delete it, even if the scanner doesn’t flag it. No anti-virus program can detect all infections. 

Step3

Hold together the Start Key and R. Type appwiz.cpl –> OK.

appwiz

You are now in the Control Panel. Look for suspicious entries. Uninstall it/them.

Type msconfig in the search field and hit enter. A window will pop-up:

msconfig_opt

Startup —> Uncheck entries that have “Unknown” as Manufacturer or otherwise look suspicious.

Step4

Hold the Start Key and R –  copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A new file will open. If you are hacked, there will be a bunch of other IPs connected to you at the bottom. Look at the image below:

hosts_opt (1)

If there are suspicious IPs below “Localhost” – write to us in the comments.

Open the start menu and search for Network Connections (On Windows 10 you just write it after clicking the Windows button), press enter.

  1. Right-click on the Network Adapter you are using —> Properties —> Internet Protocol Version 4 (ICP/IP), click  Properties.
  2. The DNS line should be set to Obtain DNS server automatically. If it is not, set it yourself.
  3. Click on Advanced —> the DNS tab. Remove everything here (if there is something) —> OK.

DNS

Step5

  • After you complete this step, the threat will be gone from your browsers. Finish the next step as well or it may reappear on a system reboot.

Right click on the browser’s shortcut —> Properties.

NOTE: We are showing Google Chrome, but you can do this for Firefox and IE (or Edge).

browser-hijacker-taskbar-properties

Properties —–> Shortcut. In Target, remove everything after .exe.

ie9-10_512x512  Remove Instant Support from Internet Explorer:

Open IE, click  IE GEAR —–> Manage Add-ons.

pic 3

Find the threat —> Disable. Go to IE GEAR —–> Internet Options —> change the URL to whatever you use (if hijacked) —> Apply.

firefox-512 Remove Instant Support from Firefox:

Open Firefoxclick  mozilla menu  ——-> Add-ons —-> Extensions.

pic 6

Find the adware/malware —> Remove.
chrome-logo-transparent-backgroundRemove Instant Support from Chrome:

Close Chrome. Navigate to:

 C:/Users/!!!!USER NAME!!!!/AppData/Local/Google/Chrome/User Data. There is a Folder called “Default” inside:

Rename the Folder to Backup Default

Rename it to Backup Default. Restart Chrome.

Step6

WARNING!
To remove parasite, you may have to meddle with system files and registries. Making a mistake and deleting the wrong thing may damage your system.
Avoid this by using SpyHunter - a professional Parasite removal tool.

Keep in mind, SpyHunter’s malware & virus scanner is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.

Type Regedit in the windows search field and press Enter.

Inside, press CTRL and F together and type the threat’s Name. Right click and delete any entries you find with a similar name. If they don’t show up this way, go manually to these directories and delete/uninstall them:

  • HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious.
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random

If the guide doesn’t help, download the anti-virus program we recommended or try our free online virus scanner. Also, you can always ask us in the comments for help!