Type: Redirect Virus
Risk Level: Medium
Affected OS: Win 7/8/Vista/XP

Have a look at on the symptoms of recentlya.com
- recentlya.com is very tricky and stubborn redirect virus
- recentlya.com slips into computer furtively without user’s consent
- recentlya.com adds browser with extension, add-on and plug-in to redirect search results constantly
- recentlya.com is able to take note of your visiting websites and annoy you with advertisements
- recentlya.com can also take you to malicious websites and bring computer with harmful programs
How can recentlya.com invades into computer?
One of the typical symptoms of recentlya.com that is crafty to slip into computer secretly before asking for user’s approval. In general, recentlya.com is able to bundle its component with free programs, spam email attachment and other third party websites. Or it can also be disseminated by some other malware through Internet vulnerabilities. It is important for users getting closely careful with the bundles of free programs and unknown websites.
Get Rid of recentlya.com manually and completely
1) Press CTRL+ALT+DELETE to open the Windows Task Manager.
2) Click on the "Processes" tab, search for recentlya.com processes, right-click it and select "End Process" option.
random.exe
3) Delete the files that recentlya.com drops on system folders:
%Windir%/System32/[RANDOM NAME].exe
%ProgramFiles%\Internet Explorer\Connection Wizard\[random]
%Temp%\[random].bat
4) Click on Start menu, select “run”, type “regedit” on the search box and hit the Enter key.
5) Search and remove registry entries as listed as below:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "<random>.exe" = "<malware path>\<random>.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\[random]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "<random>.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "courts" = %AppData%\p1.exe
Attention: As the virus has the ability to change the infected files and registry entries randomly, users may not be able to locate and delete the correct ones. It is not suggested to do it yourself if you are not familiar in computer knowledge. In order not to mess up the system, please click and start a live chat with expert here.
No comments:
Post a Comment