Remove Razor Web Ads From Chrome/Firefox

 

Did you suddenly start seeing Razor Web Ads pop ups? We can help you remove Razor Web Ads immediately.

razor web ads

WARNING! READERS, BEGIN HERE, PLEASE! Razor Web Ads is a malware application of the adware class – a class that is well-known for employing trickery in the hopes that you will install more of its kind. For obvious reasons you do not want that, so here we will list the top ways it can attempt to manipulate you. The most important thing to remember is that in every instance you are the one who has to accept something – an offer, an update and so on. If you just ignore everything you see you should be fine for the time being. The most prominent tricks are as follows:

  • Updates for programs like Java or Flash Player. These are disguised like the real deal, and not necessarily only on web pages. They can appear on your windows tray as well.
  • Another variety of the preceding point is an overlayed pop-up on top of videos. It can prompts you to update flash player of whatever the video runs on. It’s completely fake, but on some pages it’s plain impossible to get rid of, so you may have to remove Razor Web Ads before watching anything. I know it’s annoying but it is what it is.
  • Banners displayed around header and footer sections that supposedly inform you of missing plugins.
  • If an anti-virus program suddenly appears out of nowhere and decides it wants to scan, trust me – it’s part of the virus.
  • Newer adware have managed to gain the ability to read the list of programs you have installed. They have been given some thumbnails to try and imitate all popular programs so you may start running in pop-ups that claim to be such a program. The list is too long, but as always – just ignore everything. Windows updates can be imitated too.

Aside from all of these things there are several known side effects stemming from all adware, not only Razor Web Ads. These are in no particular order:

  1. Freezes and crashes; the infamous blue screen; overall slowing down of the system. The big problem here is that the ads are not a part of the pages’ design, so they are generated and simulated by your PC, which takes a big hit in terms of loading time.
  2. You may be redirected whenever you click on links of any kind, not just the ads. If you happen to land on a website you shouldn’t land on, exit it immediately, or another virus can potentially slither its way in your PC.
  3. Razor Web Ads is on of the known malware to collect cookies and browser history, accounts and passwords. This information is sent to whoever created it about a week after the infection starts, so be sure to move quickly, remove Razor Web Ads, and change all your passwords after. Your credit cards may be exposed if you own any online banking methods.

Razor_Web_Ads_opt

How did I get infected by Razor Web Ads?

We know of at least 3 different ways this could have occurred., and all of them involve the user somehow. Contrary to popular belief, a trojan or a hacker can not bring this virus to your PC. On the other hand, spam email definitely can – this is the first path. Most users become confused when they see that a seemingly legitimate company or institution contacts them “by mistake” and sends attachments with documents. Except these aren’t documents at all, but .exe files slated to install adware. If you are not careful here, something similar to what you are fighting will be installed, and you’ll have to remove it as well.

Another way to do things is through so-called “shell” programs. These are completely fake programs that pose as downloaders that will supposedly speed the process so you can connect and get something you are searching for. They can only work in the cases when you don’t expect them. Put plainly they are named after popular search terms (e.g. Harry Potter) and show up in search results. Once you land on a page, they say something in the vein of “click here to download the tool needed to get Harry Potter” – and if you interact with said button you end up with a virus.

The third and most lucrative way is via real, often useful programs that serve as promotional platforms for adware. The people who create free software need to somehow monetize to feed themselves – unfortunately the way they do it is by getting paid to include adware in their bundles. The only good thing here is that they are quite easy to spot if you know where to look. This can help quite a lot in avoiding a situation where you have to, yet again, remove Razor Web Ads or another adware. Somewhere along the installation steps of the free program you will encounter something like this:

adware-example1

When that happens uncheck any marks if you can refuse the “extra content.” If you can not exit the setup and search for another utility.

Remove Razor Web Ads

STEP 1:

Our first step here is a reboot in Safe Mode. If you already know how to do it, just skip this and proceed to Step 2. If you do not know how to do it, continue reading:

For Windows 98, XP, Millenium and 7 Users:

Start your PC. You need to press F8 in a precise moment, but just to be safe you don’t miss it, spam F8 as soon as the booting process commences. Choose Safe Mode With Networking.

Safe-Mode1

Proceed to Step 2.

For W. 8 and 8.1 Users:

Click the Start button Picture of the Start button, then Control Panel —> System and Security —> Administrative Tools —> System Configuration.Administrator permission required

msconfig

Then check the Safe Boot option and click OK.  Click  Restart in the new pop-up.

system- config

Proceed to Step 2.

For OS X Users:

When you Mac is turned off, press the Power Button. After you hear the Startup Sound, immediately press and hold the Shift key until the Apple logo appears.

Proceed to Step 2.

STEP 2:

  Razor Web Ads has infected each and every one of your browsers. Apply the steps separately for each one.

ie9-10_512x512  For Internet Explorer Users:

Open IE, then click  IE GEAR —–> Manage Add-ons.

pic 3

Find Razor Web Ads . Disable it.

If your Home Page is different from the usual, click IE GEAR —–> Internet Options>edit the URL box with your preferred search engine, and click Apply.

firefox-512  For Mozilla Firefox Users:

Open Firefoxclick on mozilla menu (top right) ——-> Add-ons.

pic 5.

Hit Extensions next.

razor web ads firefox

Razor Web Ads  should be somewhere around here –  Remove it.


chrome-logo-transparent-background For Google Chrome Users
:

 Start Chrome, click chrome menu icon —–>More Tools —–> Extensions.

 

pic 7

In  Extensions,  find the virus and  select  chrome-trash-icon.

razor web ads chrome

 Click chrome menu icon   again, and proceed to Settings —> Search (the fourth tab), select Manage Search Engines.  Remove anything but the search engines you normally use.

pic 9


safari For Safari Users:

Open Safari, and click Safari —–>Preferences —–> Extensions—–>Uninstall the malware.

STEP 3 (UPDATED!) :

Right click on the browser’s shortcut, then click Properties.

NOTE: Below, we are showing Google Chrome, but the method is the same for all browsers.

browser-hijacker-taskbar-properties

Once you’ve reached Properties —–> Shortcut (on the band at the top), then in the Target type field, you should REMOVE EVERYTHING AFTER .exe.

STEP 4 (UPDATED!):

(Works for Windows XP,  7,  8,  8.1)

Hold windows-buttonand R together. Write appwiz.cpl  in the new field, then click OK.

 appwiz

You are now in the Control Panel. Search around for Razor Web Ads and anything else suspicious-looking. Uninstall  it/them. If you are having difficulties discerning which program is a virus, ask us in the comments. Also, be extremely careful. Viruses often spend one last ditch effort to trick you into installing more of their kind. If you see a screen like this when you click Uninstallchoose NO:

virus-removal1

Hold windows-buttonand R again – but this time copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A .txt file will open – don’t touch anything there. If you are hacked and someone has access to your PC, there will be a bunch of other IPs connected to you at the bottom. This is what hosts file looks like:

hosts_opt (1)

If there is anything connecting to you below “Localhost” you may be hacked, and it’s best to ask us in the comments for directions.

STEP 5 (UPDATED!):

This is perhaps the most important and difficult step, so be extremely careful. Open the Task Manager by right clicking on the Taskbar and choosing Start Task Manager.

virus-taskbar123

Once it opens, choose the Processes Tab. Look at all of the processes in front of you and try to determine which ones are a virus. Google them or ask us in the comments and we will provide the best assistance we can. If the virus returns later on, the reason is that you missed something here. However, we should warn you – doing this can be extremely risky, so the best course is to seek assistance from us.

malware-start-taskbar

Right click on each of the virus processes separately and select Open File Location. Also, End the process after you open the folder. Just to make sure we don’t delete any programs you mistakenly took for a virus, copy the folders somewhere, then delete the directories you were sent to.

STEP 6 (UPDATED!):

Take a look at the following things:

Type msconfig in the search field and hit enter: you will be transported to a new window. 

msconfig_opt

Go in the Startup tab and Uncheck anything that has “unknown” as Manufacturer.

Type Regedit in the windows search field and press Enter.

Once inside, press CTRL and F together and type the virus’s Name. Right click and delete any entries you find with a similar name. Alternatively, if you can’t find any this way, look in these directories, and delete the registries manually:

  • HKEY_CURRENT_USER—-Software—–Random numbers
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random

regedit_opt

STEP 7 – Optimization

And that’s it. Well done for removing Razor Web Ads. We’ve prepared a short and sweet optimization guide, specifically designed for users who just removed a virus. It is completely free, you do not need to download anything, and it’s not very time consuming. If you are interested, you can check it out here.

Was this guide helpful?

  • Pingback: Remove Ads by Razor Web | Home Computer Security Guide()

  • Pouria

    wich of these are virus activities?ctfmon.exe/svchost.exe/Isass.exe/Ism.exe/smss.exe/system/system idle pr…/csrss.exe/wininit.exe/winlogon.exe/dllhost.exe/ please answer me as quickly as possible 🙁

     
    • Stefan Sadakov

      None of the ones you listed are virus activities. If you can’t find anything in the task manager, it’s possible there aren’t any rogue processes. Just to be sure, can you upload a screenshot of all the processes in your Task Manager? We will review them and try to determine which one is the problem, if any. But – again – it’s not unheard of that there are no virus processes in the Task Manager. 🙂

       
  • Anubhav

    is windows driver package ricoh company a virus?

     
    • Stefan Sadakov

      Can you screenshot this program and include it in your next comment?

       
  • edmy

    Is (mssplus.mcafee.com) a hack, its the only thing under my localhost

     
    • Stefan Sadakov

      No, it’s not. That’s macafee protection, it’s a safe IP. Sometimes they are connected in the local host.