I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.
What is 195.123.234.33/WIN/?
195.123.234.33/WIN/ detected as Trojan.WIN.
195.123.234.33/WIN/ is appeared on your PC after installing free software, bundled with adware downloader program. Adware program changes the homepage and search engine for your web browser to 195.123.234.33/WIN/.
In addition, it changed Windows shortcuts on your desktop and in the Start Menu.
The link to 195.123.234.33/WIN/ site is added into the command line.
Each time when you click on shortcut you will start displaying of 195.123.234.33/WIN/ site.
You have 2 ways to remove 195.123.234.33/WIN/:
1. Remove Automatically.
2. Remove Manually.
Why I recommend you to use an automatic way?
- You know only one virus name: "195.123.234.33/WIN/", but usually you have infected by a bunch of viruses.
The UnHackMe program detects this threat and all others. - UnHackMe is quite fast! You need only 5 minutes to check your PC.
- UnHackMe uses the special features to remove hard in removal viruses. If you remove a virus manually, it can prevent deleting using a self-protecting module. If you even delete the virus, it may recreate himself by a stealthy module.
- UnHackMe is small and compatible with any antivirus.
- UnHackMe is fully free for 30-days!
Here’s how to remove 195.123.234.33/WIN/ virus automatically:
STEP 1: Install UnHackMe (1 minute)
STEP 2: Scan for malware using UnHackMe (1 minute)
STEP 3: Remove 195.123.234.33/WIN/ virus (3 minutes)
So it was much easier to fix such problem automatically, wasn't it?
That is why I strongly advise you to use UnHackMe for remove 195.123.234.33/WIN/ redirect or other unwanted software.
How to remove 195.123.234.33/WIN/ manually:
STEP 1: Check all shortcuts of your browsers on your desktop, taskbar and in the Start menu. Right click on your shortcut and change it's properties.
You can see 195.123.234.33/WIN/ or another web site at the end of shortcut target (command line). Remove it and save changes.
In addition, check this command line for fake browser's trick.
For example, if a shortcut points to Google Chrome, it must have the path:
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe.
Fake browser may be: …\Appdata\Roaming\HPReyos\ReyosStarter3.exe.
Also the file name may be: “chromium.exe” instead of chrome.exe.
STEP 2: Investigate the list of installed programs and uninstall all unknown recently installed programs.
STEP 3: Open Task Manager and close all processes, related to 195.123.234.33/WIN/ in their description. Discover the directories where such processes start. Search for random or strange file names.
Remove 195.123.234.33/WIN/ virus from running processes
STEP 4: Inspect the Windows services. Press Win+R, type in: services.msc and press OK.
Remove 195.123.234.33/WIN/ virus from Windows services
Disable the services with random names or contains 195.123.234.33/WIN/ in it's name or description.
STEP 5: After that press Win+R, type in: taskschd.msc and press OK to open Windows Task Scheduler.
Delete any task related to 195.123.234.33/WIN/. Disable unknown tasks with random names.
STEP 6: Clear the Windows registry from 195.123.234.33/WIN/ virus.
Press Win+R, type in: regedit.exe and press OK.
Remove 195.123.234.33/WIN/ virus from Windows registry
Find and delete all keys/values contains 195.123.234.33/WIN/.
STEP 7: Remove 195.123.234.33/WIN/ from Google Chrome.
STEP 8: Remove 195.123.234.33/WIN/ from Internet Explorer.
Set Internet Explorer Homepage
STEP 9: Remove 195.123.234.33/WIN/ from Mozilla Firefox.
Change Firefox Home Page
STEP 10: And at the end, clear your basket, temporal files, browser's cache.
But if you miss any of these steps and only one part of virus remains – it will come back again immediately or after reboot.