PUA Opencandy Virus Removal

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.

This page aims to help you remove PUA Opencandy Virus. These PUA Opencandy Virus removal instructions work for Chrome, Firefox and Internet Explorer, as well as every version of Windows.

PUA Opencandy Virus has been pegged for a potential malicious software. Its exact class definition – Adware. Most people would happily disregard this type of computer virus as annoying but not quite dangerous. While that is mostly true, we would very much like to enlighten our readers to the possible dangers and drawbacks associated with this type of malware.


Name PUA Opencandy
Type Adware
Danger Level Medium
Symptoms Unwanted Ads would appear, web page redirects, reduced system performance.
Distribution Method Downloaded infected executable files.
Detection Tool


1: Enter Safe Mode.
2: Remove PUA Opencandy Virus from Chrome, Firefox and Internet Explorer.
3: Remove attachments to browser shortcuts.
4: Uninstall the virus from your Add/Remove Programs.
5: Permanently delete the threat from Task Manager’s processes.
6: Uninstall the virus from Regedit and Msconfig.

PUA Opencandy Virus is characterized by the numerous advertisements it will display on your desktop space, either in the form of a pop-up window or a hard to close window. Very often you will notice some strange things happening like another website opening instead of the one you typed in the address bar. That’s called browser redirecting and is another trait of the virus you should be warned about.

PUA Opencandy Virus – tricks and t(h)reats.

In this section we are looking to shed some light on the main deceptions used by this virus to manipulate users, as well as invaluable advice how to best act if you find yourself in such a position. Also there will be a list of the negative impacts the malware is bound to have on your PC.

Let’s get started with the tricks and how to properly react when you encounter them:

  • First, and that is very important and critical, if/when you encounter a flashing message either as s pop-up or a window warning you about a virus or a number of viruses found on your PC, do not completely lose your wits. Since you are reading this article you clearly have a virus problem, yet it won’t be solved by downloading some unknown software. In fact it is very important to make the distinction between a real software and fake software that is malicious in its essence. If you have doubts it is best to avoid downloading anything and ask us in the comments section.
  • Another quite similar deception is a message/pop-up informing you about missing plugins or audio and video codecs from your system. You should never download any such updates from unofficial sources.
  • Now for the Windows and program updates – again you might encounter similar urgings to update your Windows or highly recognizable software programs like Java, Adobe applications, WMP and others. The same advice applies here – only install updates downloaded from secure and if possible official product pages. That way you will save yourselves a lot of headaches.

Now, here’s how your computer has been negatively impacted by the malware’s influence:

  • Significantly reduced performance and slowing down, that is especially noticeable on older configurations.
  • The execution time required for CPU taxing operations would be greatly increased.
  • Moments of freezing and lagging, especially when a web browser is open, slower internet connection might be an exacerbating factor as well.
  • In some extreme cases complete OS shutdown or significant errors might occur.

PUA Opencandy Virus Removal



Reboot in Safe Mode (use this guide if you don’t know how to do it).

This is just the first preparation.


To remove parasite, you may have to meddle with system files and registries. Making a mistake and deleting the wrong thing may damage your system.
Avoid this by using SpyHunter - a professional Parasite removal tool.

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.

The first mandatory thing is to Reveal All Hidden Files and Folders. Read here more how to do it. Each version of Windows does this slightly differently.

  • I repeat – it’s extremely important you do this. PUA Opencandy Virus may have hidden some of its files and you need to see them to delete them.

Please be advised that this type of computer virus is fully capable, and probably has done already so, to spread its infection to all web browsers present on your system. While most people look to clean up the malware from their preferred browser of choice whether it be Chrome, Firefox or something else, it is important to be thorough and remove the threat from all browsers currently on your hard drive. The way to accomplish this is by repeating Steps 2 and 3 for each one.


ie9-10_512x512 Remove the Malware from Internet Explorer:

Open IE, then click IE GEAR —–> Manage Add-ons.

pic 3

Find the malware. Remove it by pressing Disable.

If your Home Page is different from the usual, click IE GEAR —–> Internet Options>edit the URL box with your preferred search engine, and click Apply. Also, Reset Your IE Settings

firefox-512 Remove PUA Opencandy from Firefox:

Open Firefox, click on mozilla menu (top right) ——-> Add-ons. Hit Extensions next.

pic 6

The problem should be lurking somewhere around here – Remove it. Then Refresh Your Firefox Settings.

chrome-logo-transparent-background Remove PUA Opencandy from Chrome:

Start Chrome, click chrome menu icon —–>More Tools —–> Extensions. There, find the malware and select chrome-trash-icon.

pic 8

Click chrome menu icon again, and proceed to Settings —> Search, the fourth tab, select Manage Search Engines. Delete everything but the search engines you normally use. After that Reset Your Chrome Settings.


Right click on the browser’s shortcut, then click Properties.

NOTE: We are showing Google Chrome, but the method is the same for Chrome, Firefox, Internet Explorer, and Microsoft Edge.


Once you’ve reached Properties —–> Shortcut (on the band at the top), then in the Target type field, delete EVERYTHING AFTER .exe.


Hold the Start Key and R together. Write appwiz.cpl in the field, then click OK.


You are now in the Control Panel. Uninstall any suspicious programs. Also, viruses often spend one last ditch effort to trick you into installing more of their kind. If you see a screen like this when you click Uninstall, choose NO:


Hold the Start Key and R againthen copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A .txt file will open – don’t type or change it. If you are hacked and someone has access to your PC, there will be a bunch of other IPs connected to you at the bottom. This is what a hosts file looks like:

hosts_opt (1)

If there are a bunch of strange IPs connecting to you below “Localhost” you may be hacked, and it’s best to ask us in the comments for directions.


Right click on the Taskbar and choose “Start Task Manager.”


Then click the Processes Tab. Look at all of the processes in front of you and try to determine which ones are a virus. Google them or ask us in the comments and we will provide the best assistance we can.


There’s some good news and some bad news. Let’s start with the good news for a change. If you are reading this then you have successfully reached a point where you are almost through extirpating PUA Opencandy Virus from your system. Just a couple of steps remain and you are all done.

Now for the bad news. The steps that remain are both absolutely essential for the success of the whole undertaking and simultaneously what you will need to accomplish is definitely harder than anything in the instructions up to this point. Be extra careful and focused as any minor mistake might turn out to have disastrous consequences for your device. Only continue if you are prepared to face such an outcome. If not it is probably best if you think about downloading and using a professional scanner and remover instead.



Right click on each of the virus processes separately and select Open File Location. Also, End the process after you open the folder. Just to make sure we don’t delete any programs you mistakenly took for a virus, copy the folders somewhere, then delete the directories you were sent to.


Take a look at the following things:

Type msconfig in the search field and hit enter: you will be transported to a Pop Up window.


Go in the Startup tab and Uncheck entries that have “Unknown” as Manufacturer.

Type Regedit in the windows search field and press Enter.

Once inside, press CTRL and F together and type the virus’s Name. Right click and delete any entries you find with a similar name. If you can’t find them this way, look in these directories, and delete/uninstall the registries manually:

  • HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious, but bear in mind they are always different.
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random

Remember to leave us a comment if you run into any trouble!

Did we help you? Please, consider helping us by spreading the word!