This article aims to help you remover the SavePages Virus from Chrome, Firefox and Internet Explorer. Questions like “remover SavePages 1.0.0”, “como excluir savepages” and “desinstalar savepages” were piled in our inbox yesterday, signifying a strong malware explosion in non-english speaking countries.
So you think that you have gotten SavePages Virus and believe this to be a malware, right? What you actually have is a version of a virus that also has some components of a Browser Hijacker. It will send you an ‘error message’ about a sham issue and it will continue to prompt you to call a fraudulent phone number, which will cost you few hundreds dollars to uninstall the malware they have created themselves. It is best to ignore this ridiculous ad and its threats as it is only there to scare you and make you form uneducated decisions caused by stress in order to pay the hackers.
Put simply: the virus really does nothing, but to annoy you with its pop-up ads like the rest of the viruses of this kind. The NOTA BENE here is that it tends to be more aggressive and the deception itself is done usually via phone. People have shaped a habit of believing more and faster what an actual human voice tells them, than to trust chat and/or e-mail communications. It is just the era we live in — things become more and more digital and computerized, but this should not scare us. As you continue to read the article you will understand why.
What is dangerous about the SavePages Virus?
Malwares like SavePages Virus are known to gather and misuse users’ data. It is capable of ‘memorizing’ your internet browsing habits and search queries. It is also created to collect passwords, credit card information, personal data, etc. A good example of saved personal data are the pre-filled blanks you’ve used to send job applications, address registration and/or for online shopping. Best thing to do is to use the advanced settings on your browser and deselect the box for auto-fill forms. This will give you a good protection + familiarizing yourself with the removal guide at the bottom of this page will help you even further.
The virus will also cause your system to significantly slow down. Hackers have thought of that too and have invented fake software and/or programs that should help you solve this problem, but in fact they will only make it worse. Be careful! We strongly recommend that whenever you download a new software, to do so from the original website, aka, from the manufacturer himself. Anything even slightly suspicious or untruthful, remove ASAP!
How was SavePages Virus installed on your computer?
This is a million dollar question, isn’t it? Usually the most possible way is through some kind of infected file downloaded from an online storage. This includes, but is not limited to: email attachments, spam e-mails, fake downloadable programs and/or files (as mentioned above), etc. Using any of these without a highly qualified anti-virus program to scan them is like looking for a trouble with flash light during day time. Another way you SavePages Virus infected your computer is through something called “bundled software”. It is a legit term, but unfortunately not too well known to most users yet. Let us explain!
It is quite common today to end up downloading more than one program at the time of download. What do we mean? Simply put: when you are downloading program Y, the one you want and need, along with it you get programs X, B, S, etc. without knowing it. However, these additional downloads are malware. This happens frequently when you’re using a certain service for free and the default functions. Thus, we advise to always use advanced settings. Might take a few minutes longer in terms of work, but you will get the same result and rest assure that your PC and personal info is safe. By building this habit you will constantly have the knowledge and be in control over what is being installed. Best thing to do is to deny installation to anything you don’t need or find suspicious.
|Symptoms||slowness of system, pop-up ads, browser redirection|
|Distribution Method||spams, bundled software, phishing emails|
If the removal guide helps you, remember: a thank you in the comments goes a long way to warm our hearts!
1: Enter Safe Mode.
2: Uninstall the virus from your Add/Remove Programs and check MS Config.
3: Check your hosts file and domain network for being hacked.
4:Remove SavePages Virus from Chrome, Firefox and Internet Explorer.
5: Remove SavePages Virus from Task Manager’s processes.
6: Remove the virus from Regedit.
Remove SavePages Virus From Chrome/Firefox
Things readers are interested in:
Reboot in Safe Mode (use this guide if you don’t know how to do it).
This was the first preparation.
To remove parasite on your own, you may have to meddle with system files and registries. If you were to do this, you need to be extremely careful, because you may damage your system.
If you want to avoid the risk, we recommend downloading SpyHunter - a professional malware removal tool - to see whether it will find malicious programs on your PC.
- Do not skip this – SavePages Virus may have hidden some of its files.
Hold together the Start Key and R. Type appwiz.cpl –> OK.
You are now in the Control Panel. Look for suspicious entries. Uninstall it/them. If you see a screen like this when you click Uninstall, choose NO:
Type msconfig in the search field and hit enter. A window will pop-up:
Startup —> Uncheck entries that have “Unknown” as Manufacturer.
Hold the Start Key and R – copy + paste the following and click OK:
A new file will open. If you are hacked, there will be a bunch of other IPs connected to you at the bottom. Look at the image below:
If there are suspicious IPs below “Localhost” – write to us in the comments.
Open the Start Menu, type “Control Panel” in the search box —> Enter. Network and Internet —> Network and Sharing Center —> Change Adapter Settings. Right-click your Internet connection —> Properties.
In Networking, left click Internet Protocol Version 4 —> Properties. If everything is normal, your window will look like this:
If it’s not, click on the two “automatic” choices. NOTE: If you are in a domain network, contact your Domain Administrator so he can make these settings, or this may break your Internet Connection.
Right click on the browser’s shortcut —> Properties.
NOTE: We are showing Google Chrome, but you can do this for Firefox and IE (or Edge) as well.
Properties —–> Shortcut. In Target, remove everything after .exe.
Remove the Malware from Internet Explorer:
Open IE, click —–> Manage Add-ons.
Find the malware —> Disable. Go to —–> Internet Options —> change the URL to whatever you use (if hijacked) —> Apply.
Remove SavePages Virus from Firefox:
Open Firefox, click ——-> Add-ons —-> Extensions.
Find the adware/malware —> Remove.
Remove SavePages Virus from Chrome:
Close Chrome. Navigate to:
C:/Users/!!!!USER NAME!!!!/AppData/Local/Google/Chrome/User Data. There is a Folder called “Default” inside:
Rename it to Backup Default. Restart Chrome.
- At this point the malware is gone from Chrome, but complete the entire guide or it may reappear on a system reboot.
Press CTRL + SHIFT + ESC simultaneously. Go to the Processes Tab. Try to determine which ones are a virus. Google them or ask us in the comments.
A BIG WARNING! READ THIS BEFORE PROCEEDING!
This is the most important and difficult part, so be extremely careful. If you make a big mistake, it can damage your system significantly. Accounts connected to your credit cards or important information may be exposed to SavePages Virus. If you do not feel you can do this, download a professional remover.
Right click on each of the virus processes and select Open File Location, then End the process. Copy the folders somewhere (as a backup if you make a mistake) and delete the directories you were sent to.
Type Regedit in the windows search field and press Enter.
Inside, press CTRL and F together and type the virus’s Name. Right click and delete any entries you find with a similar name. If they don’t show this way, go manually to these directories and delete/uninstall them:
- HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious.
HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random