Since you have found yourself infected with, the removal guide below should serve your purposes fully. However, if you cannot remove using it, then it means our information is out of date, an a new “version” of the virus has been released. If this happens, please let us know in the comments, and we will manually resolve your situation.


Today’s article concerns itself with the removal of the browser hijacker virus known as What is characteristic of this kind of viruses is that they will keep generating loads and loads of Ads every time you start your internet browser. These Ads are annoying to deal with, but they will not not harm your computer directly – that is as long as you do not interact with them or install anything they offer you. Removing the virus can take some effort, because you have to delete every file associated with it. Otherwise there is a good chance that will greet you once again the next time you start your browser. Our removal guide covers all information necessary to remove it, so just keep reading.

qqovd logo

The Ads are really a back door for other, more dangerous viruses

We’ve already underlined the importance of not clicking on the Ads, but it’s important. Nothing coming out of is real anyway. Any site the hyperlink take you will be fake, maybe even an exact copy if a real site selling things. If you make the mistake of paying anything to these frauds you will soon discover that you got nothing for your money, or worse – a cracked copy that won’t work until you pay even more for an “update”.

You might also get offers for free downloads for different software. Remember that any file related to will be a virus. That’s why these thing are considered back doors/entry point for other viruses.

Ads don’t necessarily always offer you things directly

There is a good chance that you see a number of different messages while you have on your computer. They will generally inform you of some “problem” you have a new computer and then they will offer you a free solution. This is just another form of scam that plants to install a virus in your computer. Usually once you install the “free” scanner it will require payment before cleaning the non-existing problem.

One possible way that might have entered your computer through

The so-called program bundles. These are actually installers for programs that install a number of addition programs in addition to the main thing – usually demos or trial versions from the same maker or from partners. Unfortunately sometimes, especially if we are talking about free program, the extra bundled programs are actually some sort of browser hijacker – possibly If you’ve recently installed such a program and have ran the default installation option then that’s one way got it. For this reason it’s generally recommended to go with the advanced installation option at all times. If all is good then it’s just a couple of clicks on the next button to get the same result as with the default installation. Otherwise you get to see exactly what added software is getting installed and you have the option to block it from doing so. We recommend you do it for every program you don’t really need.



Our first step here is a reboot in Windows Safe Mode. If you already know how to do it, just skip this and proceed to Step 2. If you do not know how to do it, continue reading:

For Windows 98, XP, Millenium and 7 Users:

Restart your computer. To be sure you don’t miss the window of time when you need to press it, just spam F8 as soon as the PC starts booting. In the new menu, choose Safe Mode With Networking.


Proceed to Step 2.

For Windows 8 and Windows 8.1 Users:

 Press the Windows Key and R at the same time. Select the Boot tab in the new window that appears.


Then check the Safe Boot option and click OK.  Click  Restart in the new pop-up.

system- config

Proceed to Step 2.

For OS X Users:

When you Mac is turned off, press the Power Button. After you hear the Startup Sound, immediately press and hold the Shift key until the Apple logo appears.

Proceed to Step 2.

STEP 2: has infected ALL of your browsers. Apply the steps separately for each one.

ie9-10_512x512  For Internet Explorer Users:

Open IE, then click  IE GEAR —–> Manage Add-ons.

pic 3

Find . Disable it.

If your Home Page is different from the usual, click IE GEAR —–> Internet Options>edit the URL box with your preferred search engine, and click Apply.

firefox-512  For Mozilla Firefox Users:

Open Firefoxclick on mozilla menu (top right) ——-> Add-ons.

pic 5.

Hit Extensions next.

qqovd firefox  should be somewhere around here –  Remove it.

Next, type about:config on the web page address bar. A message will tell you that you need to be careful. Agree and say OK. Directly below the address bar, there is a search bar. Type in it Any entries that Mozilla finds with the term need to be reset to their defaults by right clicking and choosing the Reset option.


chrome-logo-transparent-background For Google Chrome Users

 Start Chrome, click chrome menu icon —–>More Tools —–> Extensions.


pic 7

In  Extensions,  find the virus and  select  chrome-trash-icon.

 Click chrome menu icon   again, and proceed to Settings —> Search (the fourth tab), select Manage Search Engines.  Remove anything but the search engines you normally use.

pic 9

safari For Safari Users:

Open Safari, and click Safari —–>Preferences —–> Extensions—–>Uninstall the malware.


(Works for Windows XP, Windows 7, Windows 8, Windows 8.1)

Hold windows-buttonand R together. Write appwiz.cpl  in the new field, then click OK.


You are now in the Control Panel. Search around for and anything else suspicious-looking.   Uninstall  it/them. Also, be extremely careful. Viruses often spend one last ditch effort to trick you into installing more of their kind. If you see a screen like this when you click Uninstallchoose NO:



This is perhaps the most important and difficult step, so be extremely careful. Open the Task Manager by right clicking on the Taskbar and choosing Start Task Manager.


Once it opens, choose the Processes Tab. Look at all of the processes in front of you and try to determine which ones are a virus. Google them or ask us in the comments and we will provide the best assistance we can. If the virus returns later on after you supposedly removed it, the reason is that you missed something here.


Right click on each of the virus processes separately and select Open File Location. Also, End the process after you open the folder. Just to make sure we don’t delete any programs you mistakenly took for a virus, copy the folders somewhere, then delete the directories you were sent to.

STEP 5: 

You should do the following for ALL browsers you have installed. Browser hijackers infect everything while in your system. You need to manually get rid of it from each shortcut. You should do the following:

Right click on the browser’s shortcut, then click Properties.

Alternatively, if you have your browser pinned down to the taskbar, you Right click it, then Right Click again on the Small Browser Icon —–> Properties

NOTE: Below, we are showing Google Chrome, but the method is the same for all browsers.


Once you’ve reached Properties —–> Shortcut (on the band at the top), then in the Target type field, you should REMOVE EVERYTHING AFTER .exe”


Now click on the Menu icon on top, and go to Settings. In Settings, find the Search section (the fourth one from top), then click Manage Search Engines. In there you should remove any search sites you do not use.

google chrome settings


We’ve had reports that this virus can come back after you uninstall it. This usually takes place on system boot. If this happens, do the following:

Type Regedit in the windows search field and press Enter.

Once inside, press CTRL and F together and type the virus’s Name. Right click and delete any entries you find with a similar name. Alternatively, if you can’t find any this way, look in these directories, and delete the registries manually:

  • HKEY_CURRENT_USER—-Software—–Random numbers
    HKEY_CURRENT_USER—-Software—Microsoft—Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft— Internet Explorer—-Main—- Random


Step 7: 

Type msconfig in the windows search field and hit enter. In the new window that pops up, go under the Startup tab and untick any services that have “Unknown” as manufacturer.

msconfig startup

STEP 8 – Optimization

And that’s it. Well done for removing We’ve prepared a short and sweet optimization guide, specifically designed for users who just removed a virus. It is completely free, you do not need to download anything, and it’s not very time consuming. If you are interested, you can check it out here.