Windows Virus

How to Uninstall Chromium Virus

Parasite may reinstall itself multiple times if you don't delete its core files. We recommend downloading SpyHunter to scan for malicious programs installed with it. This may save you hours and cut down your time to about 15 minutes. 

Download SpyHunter Anti-Malware

More information on SpyHunter, steps to uninstallEULAThreat Assessment Criteria, and Privacy Policy.

Windows Chromium Virus Removal Guide

Step 1. Enter Safe Mode (Optional)

Some of the steps will likely require you to exit the page. Bookmark it for later reference.

Reboot in Safe Mode This is allow only process to be started on your computer. This step is optional but it will increase the chance to remove Chromium Virus

We get asked this a lot, so we are putting it here: Removing parasite manually may take hours and damage your system in the process. We recommend downloading SpyHunter to see if it can detect parasite files for you.

Step 2. Find Unwanted Processes

Press CTRL + SHIFT + ESC at the same time and go to the Processes Tab (the “Details” 
Tab on Win 8 and 10).
Try to determine which processes are dangerous.

Right click on each of them and select Open File Location.
Then scan the files with our free online virus scanner to determine which are dangerous:

Drag and Drop Files Here to Scan
Maximum file size: 128MB.

This scanner is free and will always remain free for our website's users. You can find its full-page version at: https://howtoremove.guide/online-virus-scanner/




Scan Results


Virus Scanner Result
ClamAV
AVG AV
Maldet

After you open their folder, end the processes that are infected, then delete their folders.

Note: If you are sure something is part of the infection – delete it, even if the scanner 
doesn’t flag it. No anti-virus program can detect all infections.

Step 3. Remove Chromium Virus From Start Up Location

Hold together the Start Key and R. Type appwiz.cpl –> OK.

Type msconfig in the search field and hit enter. A window will pop-up
You are now in the Control Panel. Look for suspicious entries. Uninstall it/them.

Startup > Uncheck entries that have “Unknown” as Manufacturer or otherwise look suspicious.
Hold the Start Key and R – copy + paste the following and click OK:

Step 4. IP and DNS Settings

notepad %windir%/system32/Drivers/etc/hosts

To remove parasite on your own, you may have to meddle with system files and registries. If you were to do this, you need to be extremely careful, because you may damage your system.

If you want to avoid the risk, we recommend downloading SpyHunter
a professional malware removal tool.

More information on SpyHunter, steps to uninstall, EULA, Threat Assessment Criteria, and Privacy Policy. 
If SpyHunter detects a malware, you will have to purchase a license to remove it.

A new file will open. If you are hacked, there will be a bunch of other IPs connected to you at the bottom. Look at the image below:

If there are suspicious IPs below “Localhost” – write to us in the comments.

Open the start menu and search for Network Connections (On Windows 10 you just write it after clicking the Windows button), press enter.

1. Right-click on the Network Adapter you are using —> Properties —> Internet Protocol Version 4 (ICP/IP), click Properties.

2. The DNS line should be set to Obtain DNS server automatically. If it is not, set it yourself.

3. Click on Advanced —> the DNS tab. Remove everything here (if there is something) —> OK.

Step 5. Remove Chromium Virus From All Browsers

Note: After you complete this step, the threat will be gone from your browsers. Finish the 
next step as well or it may reappear on a system reboot.

Right click on the browser’s shortcut —> Properties.

Note: We are showing Google Chrome, but you can do this for Firefox and IE (or Edge).

Properties —–> Shortcut. In Target, remove everything after .exe


Remove Chromium Virus from Internet Explorer and Edge

Open Edge, click on the (Gear Icon) —–> Manage Add-ons.

Find the threat —> Disable. Go to Edge —–> Internet Options —> change the URL to whatever you use (if hijacked) —> Apply.


Remove Chromium Virus from FireFox

Open Firefox, click mozilla menu -> Add-ons -> Extensions.

Find the adware/malware -> Remove.


Remove Chromium Virus from Chrome

Step 6. Remove Chromium Virus From All Browsers

Type Regedit in the windows search field and press Enter.

Inside, press CTRL and F together and type the threat’s Name. Right click and delete any entries you find with a similar name. If they don’t show up this way, go manually to these directories and delete/uninstall them:

HKEY_CURRENT_USER—-Software—–Random Directory. — It could be any one of them, ask
us if you can’t discern which ones are malicious.
HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random

If the guide doesn’t help, download the anti-virus program we recommended or try our free
online virus scanner. Also, you can always ask us in the comments for help!

 


37 Comments

  • We wouldn’t suggest our readers software that is not safe to use. Which Remover tool are you exactly referring to?

  • Hey i installed CCleaner and for some reason after my CCleaner got installed chromium icon just appeared on my desktop and in my task bar so i did go in control panel and uninstalled after that i saw no things hijacking my browser or pop-ups after like 2 months or more i saw my DISK USAGE was 100% and i called my brothers he knows about computers and he told me that may be some malware i simpy played Steam games and i didnt download any unsafe files from internet not even music ! After that i factory reset my pc after that My pc was going slow ..And i heard malware could have Restore Point i got so scared that it may come back after 1 month i saw my cooling fan was just from it self going high i thought that was dust but it was completly clean i scanned my system with AVAST Antivirus nothing was there and i was just checking my system files and i saw 1 or 2 files having alot of numbers i thought that was some system files but when i went in Chromium was there and just copying some files from my D: Drive and from my Web Browser history i got so scared ..When i entered in that file AVAST automaticlly said infection detected i tried going in safe mode it will not allow me i couldnt do anything but there were no popups or hijacking my browser PC was just slow after that i got MAD and i simply took my system down and deleted everything i even removed win8.1 after that i installed new Win8.1 is there any possibilty that he can come back because i have same HDD ? I know this is a long story but i want you everything to know 😀 ! Please answer,thanks !

    • If you have re-installed everything, there’s probably no need to worry. How is your PC behaving now? Are there any problems after you re-installed Windows?

  • Probably not. Still, scanning the folder might not be a bad idea. Tell us in the comments if anything got detected.

  • Remove the IP address that you’ve send us as well as any other similar address and then save the file.

  • Since those IP’s are more than likely coming from the unwanted software, we advise you to delete them and then save the changes to the Hosts file.

  • Getting the free version of SpyHunter would provide with the scanner function of the program which would detect any suspicious and potentially unwanted or harmful files on your PC but you will need to manually remove them. If you opt for the paid version of the program, it will also provide you with a removal tool that will almost always succeed in removing the problematic software. In addition to that, even if the program fails to resolve your issue, you have the option to ask for live support from the program’s developers so that you can receive a custom fix method for your specific situation.

  • Those addresses aren’t necessarily harmful yet they should still be removed from your Hosts file since they aren’t supposed to be there. Be sure to delete them and save the changes to the Hosts file.

  • I tried the conventional ways one but couldn’t advance it more because I don’t want to risk myself by meddling with system files & registries, so I tried to download your recommended software and installed it… the bad news is, installation error (your software can’t be installed in my PC).

    • What error dos it give you? Also, do you have Administrator rights on the PC that you’re using?

  • Hi, i have been following these steps and stuck in step 4, I can see below the local host, they are some ip adress that are supiscious

    127.0.0.1 down.baidu2016. com
    127.0.0.1 123.sogou. com
    127.0.0.1 http://www.czzsyzgm. com
    127.0.0.1 http://www.czzsyzxl. com
    0.0.0.1 msplus.mcafee. com

    I have tried opening the DNS, however there are no rogue dns to remove whatsoever. How?

  • what does these mean?

    # unchecky_begin
    # These rules were added by the Unchecky program in order to block advertising software modules
    0.0.0.0 0.0.0.0 # fix for traceroute and netstat display anomaly
    0.0.0.0 tracking.opencandy. com.s3. amazonaws. com
    0.0.0.0 media.opencandy. com
    0.0.0.0 cdn.opencandy. com
    0.0.0.0 tracking.opencandy. com
    0.0.0.0 api.opencandy. com
    0.0.0.0 api.recommendedsw. com
    0.0.0.0 rp.yefeneri2. com
    0.0.0.0 os.yefeneri2. com
    0.0.0.0 os2.yefeneri2. com
    0.0.0.0 installer.betterinstaller. com
    0.0.0.0 installer.filebulldog. com
    0.0.0.0 d3oxtn1x3b8d7i.cloudfront. net
    0.0.0.0 inno.bisrv. com
    0.0.0.0 nsis.bisrv. com
    0.0.0.0 cdn.file2desktop. com
    0.0.0.0 cdn.goateastcach. us
    0.0.0.0 cdn.guttastatdk. us
    0.0.0.0 cdn.inskinmedia. com
    0.0.0.0 cdn.insta.oibundles2. com
    0.0.0.0 cdn.insta.playbryte. com
    0.0.0.0 cdn.llogetfastcach. us
    0.0.0.0 cdn.montiera. com
    0.0.0.0 cdn.msdwnld. com
    0.0.0.0 cdn.mypcbackup. com
    0.0.0.0 cdn.ppdownload. com
    0.0.0.0 cdn.riceateastcach. us
    0.0.0.0 cdn.shyapotato. us
    0.0.0.0 cdn.solimba. com
    0.0.0.0 cdn.tuto4pc. com
    0.0.0.0 cdn.appround. biz
    0.0.0.0 cdn.bigspeedpro. com
    0.0.0.0 cdn.bispd. com
    0.0.0.0 cdn.bisrv. com
    0.0.0.0 cdn.cdndp. com
    0.0.0.0 cdn.download.sweetpacks. com
    0.0.0.0 cdn.dpdownload. com
    0.0.0.0 cdn.visualbee. net
    # unchecky_end

    • Well, it means that you should probably delete the IPs from the Hosts file where you found them. Those aren’t supposed to be there so make sure you remove them from the file and save the changes.

  • # unchecky_begin
    # These rules were added by the Unchecky program in order to block advertising software modules
    0.0.0.0 0.0.0.0 # fix for traceroute and netstat display anomaly
    0.0.0.0 tracking.opencandy .com.s3.amazonaws. com
    0.0.0.0 media.opencandy. com
    0.0.0.0 cdn.opencandy. com
    0.0.0.0 tracking.opencandy. com
    0.0.0.0 api.opencandy. com
    0.0.0.0 api.recommendedsw. com
    0.0.0.0 rp.yefeneri2. com
    0.0.0.0 os.yefeneri2. com
    0.0.0.0 os2.yefeneri2. com
    0.0.0.0 installer.betterinstaller. com
    0.0.0.0 installer.filebulldog. com
    0.0.0.0 d3oxtn1x3b8d7i.cloudfront. net
    0.0.0.0 inno.bisrv. com
    0.0.0.0 nsis.bisrv. com
    0.0.0.0 cdn.file2desktop. com
    0.0.0.0 cdn.goateastcach. us
    0.0.0.0 cdn.guttastatdk. us
    0.0.0.0 cdn.inskinmedia. com
    0.0.0.0 cdn.insta.oibundles2. com
    0.0.0.0 cdn.insta.playbryte. com
    0.0.0.0 cdn.llogetfastcach. us
    0.0.0.0 cdn.montiera. com
    0.0.0.0 cdn.msdwnld. com
    0.0.0.0 cdn.mypcbackup. com
    0.0.0.0 cdn.ppdownload. com
    0.0.0.0 cdn.riceateastcach. us
    0.0.0.0 cdn.shyapotato. us
    0.0.0.0 cdn.solimba. com
    0.0.0.0 cdn.tuto4pc. com
    0.0.0.0 cdn.appround. biz
    0.0.0.0 cdn.bigspeedpro. com
    0.0.0.0 cdn.bispd. com
    0.0.0.0 cdn.bisrv. com
    0.0.0.0 cdn.cdndp. com
    0.0.0.0 cdn.download.sweetpacks. com
    0.0.0.0 cdn.dpdownload. com
    0.0.0.0 cdn.visualbee. net
    # unchecky_end

  • I have this chromium virus. i think i got most of it off but i recall seeing something else that was associated with it when i was deleting and i forgot to write it down. It started with a “P” like pankan or something like that. Is this a virus too that need to be removed and what is the proper spelling so i can search for it. Thanks!

  • alright so, I had dealt with this before. I simply deleted it. But from another website, I got it, and couldn’t find it, so I simply removed it from the computer in the Control Panel. Both of these made my computer really laggy and it had things glitch out. I think it also started some random youtube links I had open at the time.

    • Complete the other steps – it is common for such software to not be present in the list of programs in the Control Panel.

    • Hi Tawseef,
      you can remove the program from your Programs List in Settings/Control Panel in Windows, though we recommend you to keep the antivirus software to keep your system safe

Leave a Comment