Guide: How to Remove HSEARCH-PLUS.CO virus from Chrome

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

What is HSEARCH-PLUS.CO?

HSEARCH-PLUS.CO is a browser hijacker!

HSEARCH-PLUS.CO detected as HIJACK.HSEARCH-PLUS.
HSEARCH-PLUS.CO is appeared on your PC after installing free software, bundled with adware downloader program. Adware program changes the homepage and search engine for your web browser to HSEARCH-PLUS.CO.
 
Ads by HSEARCH-PLUS.CO

In addition, it changed Windows shortcuts on your desktop and in the Start Menu.
The link to HSEARCH-PLUS.CO site is added into the command line.

HSEARCH-PLUS.CO

Each time when you click on shortcut you will start displaying of HSEARCH-PLUS.CO site.

You have 2 ways to remove HSEARCH-PLUS.CO:

You have 2 ways

Remove it automatically1. Remove Automatically.
Remove it manually2. Remove Manually.

Why I recommend you to use an automatic way?

  1. You know only one virus name: "HSEARCH-PLUS.CO", but usually you have infected by a bunch of viruses.
    The UnHackMe program detects this threat and all others.
  2. UnHackMe is quite fast! You need only 5 minutes to check your PC.
  3. UnHackMe uses the special features to remove hard in removal viruses. If you remove a virus manually, it can prevent deleting using a self-protecting module. If you even delete the virus, it may recreate himself by a stealthy module.
  4. UnHackMe is small and compatible with any antivirus.
  5. UnHackMe is fully free for 30-days!

Here’s how to remove HSEARCH-PLUS.CO virus automatically:

STEP 1: Install UnHackMe (1 minute)

STEP 2: Scan for malware using UnHackMe (1 minute)

STEP 3: Remove HSEARCH-PLUS.CO virus (3 minutes)

So it was much easier to fix such problem automatically, wasn't it?
That is why I strongly advise you to use UnHackMe for remove HSEARCH-PLUS.CO redirect or other unwanted software.

How to remove HSEARCH-PLUS.CO manually:

STEP 1: Check all shortcuts of your browsers on your desktop, taskbar and in the Start menu. Right click on your shortcut and change it's properties.

http://…

You can see HSEARCH-PLUS.CO or another web site at the end of shortcut target (command line). Remove it and save changes.

In addition, check this command line for fake browser's trick.
For example, if a shortcut points to Google Chrome, it must have the path:
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe.
Fake browser may be: …\Appdata\Roaming\HPReyos\ReyosStarter3.exe.
Also the file name may be: “chromium.exe” instead of chrome.exe.

STEP 2: Investigate the list of installed programs and uninstall all unknown recently installed programs.

check installed programs to uninstall

STEP 3: Open Task Manager and close all processes, related to HSEARCH-PLUS.CO in their description. Discover the directories where such processes start. Search for random or strange file names.

Remove HSEARCH-PLUS.CO virus from running processes

Remove HSEARCH-PLUS.CO virus from running processes

STEP 4: Inspect the Windows services. Press Win+R, type in: services.msc and press OK.

Remove HSEARCH-PLUS.CO virus from Windows services

Remove HSEARCH-PLUS.CO virus from Windows services

Disable the services with random names or contains HSEARCH-PLUS.CO in it's name or description.

STEP 5: After that press Win+R, type in: taskschd.msc and press OK to open Windows Task Scheduler.
Remove HSEARCH-PLUS.CO from scheduled task list.

Delete any task related to HSEARCH-PLUS.CO. Disable unknown tasks with random names.

STEP 6: Clear the Windows registry from HSEARCH-PLUS.CO virus.
Press Win+R, type in: regedit.exe and press OK.

Remove HSEARCH-PLUS.CO virus from Windows registry

Remove HSEARCH-PLUS.CO virus from Windows registry

Find and delete all keys/values contains HSEARCH-PLUS.CO.

STEP 7: Remove HSEARCH-PLUS.CO from Google Chrome.
Remove HSEARCH-PLUS.CO Virus from Chrome Extensions

STEP 8: Remove HSEARCH-PLUS.CO from Internet Explorer.

Set Internet Explorer Homepage

Set Internet Explorer Homepage

STEP 9: Remove HSEARCH-PLUS.CO from Mozilla Firefox.

Change Firefox Home Page

Change Firefox Home Page

STEP 10: And at the end, clear your basket, temporal files, browser's cache.

But if you miss any of these steps and only one part of virus remains – it will come back again immediately or after reboot.

Leave a Reply