Ads Removal

WindoWeather Virus Ads Removal (Malware Uninstall Guide)

Parasite may reinstall itself multiple times if you don't delete its core files. We recommend downloading SpyHunter to scan for malicious programs installed with it. This may save you hours and cut down your time to about 15 minutes. 

Download SpyHunter Anti-Malware

More information on SpyHunter, steps to uninstallEULAThreat Assessment Criteria, and Privacy Policy.

This page aims to help you remove WindoWeather Virus. These WindoWeather Virus removal instructions work for Chrome, Firefox and Internet Explorer, as well as every version of Windows.

Read this, it might be important. WindoWeather Virus has been dubbed a computer virus. Its class – Adware. Not many people consider this an especially potent threat to your system security. And while we generally agree with such an assessment we feel it is quite important to be completely aware of what you will be facing and how to effectively and completely extirpate it from your device.

The adware infection is a very wide spread one and you are definitely not alone in this predicament (assuming you are reading this because you suspect or already know you have WindoWeather Virus on your computer). That might not make you feel a whole lot better but you can be safe in the knowledge that a lot of people have gotten rid of this pest, so there is no reason you shouldn’t be able to do so if you follow our removal guide closely.

What to expect from WindoWeather Virus?

Apart from the never ending advertisements?

  • More ads of course, but not only that. You have probably noticed that sometimes when you try to open a web page a new window or tab opens up in addition or instead of the one you have tried to open. That’s called browser redirecting and is not only irritating but also potentially dangerous. The websites that have opened up without your consent are often times riddled with malware and you could much worse than to close them down as soon as they open up.
  • You can also expect a drop-off in your overall system performance. That could be especially noticeable on a little older configurations and laptops and if you have a slower internet connection. This could be easily explained with not so many words – for something as simple as opening your browser your CPU and memory are tasked with a specific amount of usage load. Now if you add to the equation that every time you decide to use your browser or open a new page, an ad or ads in plural get loaded you can see why your computer is performing worse than you are accustomed to.

Now, before you start with removing WindoWeather Virus, bear with us for a minute longer and read through this. It will probably answer some of your questions that will pop-up during the actual removal procedure so this might turn out quite a good investment for your time and attention. There are different versions of the Adware virus out there, so it is quite hard and for all intents and purposes impossible to create a guide specifically tailored to each user’s “version” of the malware. As a result you might notice some parts of our guide to be redundant to your specific issue. In that case simply ignore them and continue on with the rest. If something is unclear or you need additional guidance – our comments section is open to you.


Name WindoWeather Virus
Type Adware
Danger Level Medium
Symptoms Unwanted ads, irritating browser redirects, hindered system performance.
Distribution Method E-mail attachments, corrupted files downloaded via torrents, software bundles.
Detection Tool



If the removal guide helps you, remember: a thank you in the comments goes a long way to warm our hearts!
1: Enter Safe Mode.
2: Remove WindoWeather Virus from Chrome, Firefox and Internet Explorer.
3: Remove attachments to browser shortcuts.
4: Uninstall the virus from your Add/Remove Programs.
5: Permanently delete the threat from Task Manager’s processes.
6: Uninstall the virus from Regedit and Msconfig.

WindoWeather Virus Removal



Reboot in Safe Mode (use this guide if you don’t know how to do it).

This was the first preparation.


To remove parasite on your own, you may have to meddle with system files and registries. If you were to do this, you need to be extremely careful, because you may damage your system.

If you want to avoid the risk, we recommend downloading SpyHunter
a professional malware removal tool.

More information on SpyHunter, steps to uninstallEULAThreat Assessment Criteria, and Privacy Policy.

The first thing you must do is Reveal All Hidden Files and Folders.

  • Do not skip this step – WindoWeather Virus may have hidden some of its files.

It is important to remember here that this virus spreads to ALL of your web browsers, very quickly and effectively. This means that you will need to repeat Step 2 from our guide for each browser and not only for your most oft used one – statistically most readers only clean up their Chrome or Firefox browser. If you don’t want to risk WindoWeather Virus reappearing you will need to be thorough and careful.


ie9-10_512x512 Remove the Malware from Internet Explorer:

Open IE, click IE GEAR —–> Manage Add-ons.

pic 3

Find the malware —> Disable. Go to IE GEAR —–> Internet Options —> change the URL to whatever you use (if hijacked) —> Apply.

firefox-512 Remove WindoWeather Virus from Firefox:

Open Firefox, click mozilla menu ——-> Add-ons —-> Extensions.

pic 6

Find the adware/malware —> Remove.

chrome-logo-transparent-background Remove WindoWeather Virus from Chrome:

Start Chrome, click chrome menu icon —–>More Tools —–> Extensions. Find the malware and select chrome-trash-icon

pic 8

Click chrome menu icon —> Settings —> Search —> Manage Search Engines. Remove everything but your normal search engines. Open Settings —>On Start up —>Open a specific page or set of pages —> Set pages and do the same there.


Right click on the browser’s shortcut —> Properties.

NOTE: We are showing Google Chrome, but you can do this for Firefox and IE (or Edge) as well.


Properties —–> Shortcut. In Target, remove everything after .exe.


Hold together the Start Key and R. Type appwiz.cpl –> OK.


You are now in the Control Panel. Look for suspicious entries. Uninstall it/them. If you see a screen like this when you click Uninstall, choose NO:


Hold the Start Key and R copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A new file will open. If you are hacked, there will be a bunch of other IPs connected to you at the bottom. Look at the image below:

hosts_opt (1)

If there are suspicious IPs below “Localhost” – write to us in the comments.

Open the Start Menu, type “Control Panel” in the search box —> Enter. Network and Internet —> Network and Sharing Center —> Change Adapter Settings. Right-click your Internet connection —> Properties.

In Networking, left click Internet Protocol Version 4 —> Properties. If everything is normal, your window will look like this:

DNS Settings

If it’s not, click on the two “automatic” choices. NOTE: If you are in a domain network, contact your Domain Administrator so he can make these settings, or this may break your Internet Connection.


Press CTRL + SHIFT + ESC simultaneously. Go to the Processes Tab. Try to determine which ones are a virus. Google them or ask us in the comments.


Please be advised that the next phase of our removal guide is especially important but also might turn out to be quite harder and trickier than anything you had to do up until this point. Especially for users who have no previous experience in the manual removal of malware this might turn out to be quite the challenge. Please be very careful – even a small mistake or misclick might turn out to be quite the disaster, severely damaging your system and sometimes even irreversibly so. For this reason we only implore you to continue if you are prepared and confident. If you harbor any doubts then it is probably for the better if you download and install a professional software to take care of the problem for you. It is safer and easier to accomplish.



Right click on each of the virus processes and select Open File Location, then End the process. Copy the folders somewhere (as a backup if you make a mistake) and delete the directories you were sent to.


Type msconfig in the search field and hit enter. A window will pop-up:


Startup —> Uncheck entries that have “Unknown” as Manufacturer.

Type Regedit in the windows search field and press Enter.

Inside, press CTRL and F together and type the virus’s Name. Right click and delete any entries you find with a similar name. If they don’t show this way, go manually to these directories and delete/uninstall them:

  • HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious.
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random

Leave a Comment