Browser Redirect

How To Remove Mysites123 Virus From Chrome/Firefox

Parasite may reinstall itself multiple times if you don't delete its core files. We recommend downloading SpyHunter to scan for malicious programs installed with it. This may save you hours and cut down your time to about 15 minutes. 

Download SpyHunter Anti-Malware

More information on SpyHunter, steps to uninstallEULAThreat Assessment Criteria, and Privacy Policy.

This page aims to help you remove Mysites123. These Mysites123 removal instructions work for Chrome, Firefox, Internet Explorer and Safari, as well as every version of Windows. Dear reader it seems you are looking for ways to deal with the problem named Mysites123. You have come to the right place, in this article we are not only going to provide extensive instructions how to remove Mysites123 from your system, we will also provide valuable information how to avoid further problems caused by the software in question.
We will be upfront about this – you are most likely dealing with a program of the Adware class of Malware. This is a sub-type of a virus class known for instigating a number of unwanted pop-up Advertisements and Website redirects onto the affected users’ desktops.

 The mysites123 Virus

In addition to this you may notice some strange changes to your browser like toolbars appearing without your knowledge or consent, text turned into hyperlinks leading to some unsavory places and in some documented cases even a complete replacement of the web browser.

Some general advice for you:

  • Do not click on the ads whether they are in the form of a pop-up window or a banner, it doesn’t matter. Avoid interacting with them.
  • Once you are redirected to some strange website because of the virus, leave as fast as you can. Nothing good will come from spending time on such a shady place.

How did the virus reach your device?

There are a number of ways in which the malware may have infected your system. One of the oldest tricks in the book but still popular and ever evolving is through e-mail attachments. A lost has been written on this subject but still a couple of suggestions for you to follow:

  • Be especially careful when opening an e-mail from someone you have no prior history of emailing. Be even more careful when clicking to download an e-mail attachment. In fact we strongly advise against doing so when dealing with e-mails from senders you don’t know.
  • Open your eyes wide, there are things like the notorious phishing scam e-mails, messages that look like a legitimate sender has tried to contact you but are in fact bogus mails looking to steal your personal information.

Another way Mysites123 may have found its way into your PC is if you have downloaded and opened an infected executable (.exe) file from a file sharing website or a torrent. You can never be sure whether a file is not messed around it so if possible always use an anti-virus/anti-malware scanner to check a file before installing it.

The most common cause by a landslide is through software bundles. That is the Adware software was attached and installed together with another program, most likely freeware that you have installed at some point in the past. The reason you have probably missed it in the first place is very few people actually read through the EULA’s or review the Advanced options before actually committing to the installation process. Our advice for you is to do just that – click on advanced installation options and double check if something else is not been installed together with the actual thing you want to install.


Name Mysites123
Type  Browser Hijacker
Danger Level Medium
Symptoms Your home page is changed to
Distribution Method Trojans, adware, software bundles that fail to disclose you will be receiving third-party advertisements.
Detection Tool Malware and Adware are notoriously difficult to track down, since they actively try to deceive you. Use this professional parasite scanner to make sure you find all files related to the infection.Sponsored

1: Enter Safe Mode.
2: Remove Mysites123 from Chrome, Firefox, Internet Explorer and Safari.
3: Remove attachments to browser shortcuts.
4: Uninstall the virus from your Add/Remove Programs.
5: Permanently delete the threat from Task Manager’s processes.
6: Uninstall the virus from Regedit and Msconfig.

How To Remove Mysites123 Virus From Chrome/Firefox

Things readers are interested in:



UPDATE! You can visit this article for an updated version of the guide: Remove Pop-Up Ads from Chrome/Firefox (Adware Virus)

The first thing to do is a reboot in Safe Mode. If you already know how to do it, just skip this and proceed to Step 2. If you do not know how to do it, continue reading:

For Windows 98, XP, Millenium and 7:

Restart your computer. To be sure you don’t miss the time when you need to press it, just spam F8 as soon as the PC starts booting. Then choose Safe Mode With Networking.

For W8 and 8.1:

Click the Start button, then Control Panel —> System and Security —> Administrative Tools —> System Configuration.Administrator permission required


Then check the Safe Boot option and click OK. Click Restart in the pop-up.

For W10:

  1. Open the Start menu.
  2. Click the power button icon in the right corner of the Start menu to show the power options menu.
  3. Press and hold down the SHIFT key on the keyboard and click the Restart option while still holding down the SHIFT key.

W10 will perform the reboot. Next do the following:

Click the Troubleshoot icon, then Advanced options —> Startup Settings. Click Restart.
After the reboot click on Enter Safe Mode With Networking (Fifth Option).


To remove parasite on your own, you may have to meddle with system files and registries. If you were to do this, you need to be extremely careful, because you may damage your system.

If you want to avoid the risk, we recommend downloading SpyHunter
a professional malware removal tool.

More information on SpyHunter, steps to uninstallEULAThreat Assessment Criteria, and Privacy Policy.

Since the malware has most probably already spread to all your browsers you will need to be extra vigilant and remove it from all your browsers. This can be quite irritating but you have little choice if you want to rid yourself of the threat once and for all.

ie9-10_512x512 Remove the Malware from Internet Explorer:

Open IE, then click IE GEAR —–> Manage Add-ons.

pic 3

Find the malware. Remove it by pressing Disable.

If your Home Page is different from the usual, click IE GEAR —–> Internet Options>edit the URL box with your preferred search engine, and click Apply.

firefox-512 Remove Mysites123 from Firefox:

Open Firefox, click on mozilla menu (top right) ——-> Add-ons. Hit Extensions next.

mysites123 In Firefox

The problem should be lurking somewhere around here – Remove it.

chrome-logo-transparent-background Remove Mysites123 from Chrome:

Start Chrome, click chrome menu icon —–>More Tools —–> Extensions. There, find the malware and select chrome-trash-icon(Remove).

mysites123 in Google Chrome

Click chrome menu icon again, and proceed to Settings —> Search, the fourth tab, select Manage Search Engines. Remove everything but the search engines you normally use.

safari Remove the malware from Safari:

Open Safari, and click Safari —–>Preferences —–> Extensions—–>Uninstall the malware.


Right click on the browser’s shortcut, then click Properties.

NOTE: We are showing Google Chrome, but the method is the same for Chrome, Firefox, Internet Explorer, Safari, and Microsoft Edge.


Once you’ve reached Properties —–> Shortcut (on the band at the top), then in the Target type field, REMOVE EVERYTHING AFTER .exe.


Hold the Start Key and R together. Write appwiz.cpl in the field, then click OK.


You are now in the Control Panel. Search around for the virus and suspicious-looking programs. Uninstall it/them. Also, be extremely careful. Viruses often spend one last ditch effort to trick you into installing more of their kind. If you see a screen like this when you click Uninstall, choose NO:


Hold the Start Key and R againbut this time copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A .txt file will open – don’t type or change it. If you are hacked and someone has access to your PC, there will be a bunch of other IPs connected to you at the bottom. This is what a hosts file looks like:

hosts_opt (1)

If there are a bunch of strange IPs connecting to you below “Localhost” you may be hacked, and it’s best to ask us in the comments for directions.


Open the Task Manager by right clicking on the Taskbar and choosing Start Task Manager.


Once it opens, choose the Processes Tab. Look at all of the processes in front of you and try to determine which ones are a virus. Google them or ask us in the comments and we will provide the best assistance we can.


From here until the last step of our removal guide you have to be extremely careful. What you will be instructed to do is very important and very dangerous. You will have to mess with important system files which may lead to some very serious damage to your device in the case of even the smallest mishap. If you don’t feel like risking it all we strongly advise you to instead download and use a professional program that will automatically solve your issue.

Our editor’s pick goes to SpyHunter:

We get asked this a lot, so we are putting it here: Removing parasite manually may take hours and damage your system in the process. We recommend downloading SpyHunter to see if it can detect parasite files for you.

You can find a review here.


Right click on each of the virus processes separately and select Open File Location. Also, End the process after you open the folder. Just to make sure we don’t delete any programs you mistakenly took for a virus, copy the folders somewhere, then delete the directories you were sent to.


Take a look at the following things:

Type msconfig in the search field and hit enter: you will be transported to a Pop Up window.


Go in the Startup tab and Uncheck entries that have “Unknown” as Manufacturer.

Type Regedit in the windows search field and press Enter.

Once inside, press CTRL and F together and type the virus’s Name. Right click and delete any entries you find with a similar name. If you can’t find them this way, look in these directories, and delete/uninstall the registries manually:

  • HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious, but bear in mind they are always different.
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random

Remember to leave us a comment if you run into any trouble!

Did we help you? Please, consider helping us by spreading the word!


  • Delete all of them. I’ve encountered this several times in the past 2 weeks. They are a 100% part of the virus. Just delete them from your hosts file and close/save it. 🙂 Tell me if that helped later 🙂 I’m here to help.

  • Removing the text does not guarantee Mysites123 will not come back again.You need to finish up the rest of the guide for everything to be completely effective.

  • Hello Sayma,

    This one is indeed very strange, because in my experience SpyHunter4 is really the best for this. If you have paid for it you can contact the technicians there to access your computer remotely.

    There are two more things that you can do yourself.

    1. Go to Network Connections, select your internet adapter, select properties and open the IP4 line. After you do it look for the DNS line. If it has any numbers in it set them all to zeroes or click to obtain them automatically.

    2. In Chrome open the settings and look for Users. Use the create new user button to create a new user, then delete the old one you were using. Also, again in settings, select the Manage Search Engines and remove MySite123 (or other suspicious search engines) from there.

    It may be entirely possible that Mysites123 is already removed from your PC and you only need to adjust back the settings that it changed.

    Please, let me know if these work for you and specifically which one fixed your problem.

Leave a Comment