Wednesday, June 11, 2014

How Do I Get Rid of pcsupport.1-newmessages.com Redirect

pcsupport.1-newmessages.com is a total scam website that created for deceiving money from unsuspicious users. When infected by this malicious website, it will pop up constantly informing that Your Computer has adware/spyware virus. To remove the virus, you need to call the number 877-649-9499 for immediate assistance. As a matter of fact, it is totally fake and no virus is there. By displaying the scary message, it is trying to make you scared for the current situation so that to scam money from your account. And based on the ID address and location shown on the website, users will be easy to fall into the trap and call the number for help.

While meeting with this nasty website, there is no need to be worried about what it indicates since it is a poorly-built website lacking of basic information. It can't be legitimate! What users need to do is to get rid of the vicious website timely. Any delay will be lead to severe damages such as file destruction, invasion of extra threats or even personal information collection. Thus, the earlier removal of pcsupport.1-newmessages.com, the safer your computer will be.


pcsupport.1-newmessages.com screenshot




Relevant Symptoms about pcsupport.1-newmessages.com



  1. pcsupport.1-newmessages.com is very tricky and stubborn scam website
  2. pcsupport.1-newmessages.com slips into computer furtively without user’s consent
  3. pcsupport.1-newmessages.com can be hardly removed by security programs
  4. pcsupport.1-newmessages.com adds browser with extension, add-on and plug-in to redirect search results constantly
  5. pcsupport.1-newmessages.com is able to take note of your visiting websites and annoy you with advertisements
  6. pcsupport.1-newmessages.com can also take you to malicious websites and bring computer with harmful programs


Get Rid of pcsupport.1-newmessages.com manually and completely



Step1: Set Your DNS as Google's Public DNS( 8.8.8.8):

(Available on Windows7/Vista and Window8/8.1)

1. Open Control Panel
2. At Network and Internet, select "View network status and tasks"
3. At Network and Sharing Center, select "Change adapter settings"
4. Select the network adapter you are using (LAN or WLAN), then click on "Properties"
5. Double click "Internet Protocol Version4 (TCP/IPV4)"
6. Check "Use the following DNS server addresses"
7. Set the "Preferred DNS server" as 8.8.8.8

  set_dns_8.8.8

Step2: Stop pcsupport.1-newmessages.com processes in the Windows Task Manager

random.exe

On Windows XP

•Press Ctrl+Alt+Del keys together to open Windows Task Manager ;
•Under the Processes tab, right-click on the processes related with the virus and click End Process

  XP END PRO

On Windows 7 / Windows Vista

•Right-click on Task Bar and click on Task Manager;
•Under the Processes tab, right-click on the processes related with the adware and click

  W7 END PRO1

W7 END PRO2

On Windows 8 / 8.1

•Right-click on Task Bar and click on Task Manager;
•Under the Processes tab, right-click on the processes related with the virus and click

  W8 END PRO

Step3: Show all hidden files:

On Windows XP

•Close all programs so that you are at your desktop.
•Click on the Start button. This is the small round button with the Windows flag in the lower left corner.
•Click on the Control Panel menu option.
•When the control panel opens click on the Appearance and Personalization link.
•Under the Folder Options category, click on Show Hidden Files or Folders.
•Under the Hidden files and folders section, select the radio button labeled Show hidden files, folders, or drives.
•Remove the checkmark from the checkbox labeled Hide extensions for known file types.
•Remove the checkmark from the checkbox labeled Hide protected operating system files (Recommended).
•Press the Apply button and then the OK button.

  XP SHOW

On Windows 7 / Vista

•Click and open Libraries
•Under the Folder Options category of Tools , click on Show Hidden Files or Folders.
•Under the Hidden files and folders section, select the radio button labeled Show hidden files, folders, or drives.
•Remove the checkmark from the checkbox labeled Hide extensions for known file types.
•Remove the checkmark
 from the checkbox labeled Hide protected operating system files (Recommended).
•Press the Apply button and then the OK button.

  W7 SHOW1

  W7 SHOW2

W7 SHOW3

On Windows 8 /8.1

•Click on Windows Explorer ;
•Click on View tab;
•Check the “Hidden Items” box

  W8 SHOW

Step4: Delete pcsupport.1-newmessages.com associated files

%LocalAppData%\<random 3 characters>.exe
%Temp%\<random characters and numbers>
%AppData%\p1.exe
%UserProfile%\Application Data\[random digits]\[random digits].cfg

Step 5: Open Registry Editor:

Method 1 

(Available on Windows XP, Windows 7 /Vista, and Windows 8 /8.1):

•Call out “Run” box by pressing “Windows” key + “R” key on your keyboard; •Type “Regedit” into the Run box and click OK to open Registry Editor

Method 1 Registry1

Method 1 Registry2

Method 1 Registry4

Method 2 

(Available on Windows 7/ Vista):

•Click on Start button to open Start Menu
•Type “Regedit” into the search box and click on Regedit to open Registry Editor

Method 2 Registry1

Method2 Registry2

Method 2 Registry3

Step 6: Terminate these Registry Entries created by pcsupport.1-newmessages.com.

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "<random>.exe" = "<malware path>\<random>.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\random
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\run\ MyFunDeals.info
HKEY_CLASSES_ROOT\CLSID\{750fdf0e-2a26-11d1-a3ea-080036587f03}\InProcServer32 "(Default)" = "<malware path>\<random>.dll"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "courts" = %AppData%\p1.exe


Tips: Please be careful while removing files and registry entries from your system. Any mistaken operation can lead to system crash and data loss. That dealing with system file needs sufficient computer skills to locate the correct files and get them removed. If you are not a computer literate or not so confident to do it by yourself, please click and get an instant help from expert here.

get help from online expert here

No comments:

Post a Comment