How to remove hijacker

Malware Description: hails from the distribution framework of Personal Antivirus which appears to be a dangerous fake anti-spyware tool. is an annoying hijacker that redirects people to its website. As a browser hijacker, is powered by trojans which invade one’s system bit by bit and reconfigure some of its executables to ensure subsequent computer havoc. When you get this hijacker on board, you will keep stumbling upon frequent browser redirections to domain which looks like Personal Antivirus online scanner that runs inside My Computer GUI. Having completed the scan job, claims to detect multiple malware threats that are allegedly on your PC and just about to disrupt it. In fact, scan results are a fake so believe none of them. The hijacker is merely attempting to scare you into thinking you got computer problems, and then suggests Personal Antivirus assistance to resolve the reported issues. If you encounter diverting activity, make sure you take adequate and prompt measures to get rid of the problem core, i.e. the trojans which cause it. Please, follow our guide below to get rid of problem.

Malware Type: Browser Hijackers

Malware Author: Innovagest2000 SL

Threat Level: High

Advice: Immediately remove Hijacker Free Scanner and Remover: Download Now Screenshot: Fake Scanner Screenshot:

How to remove hijacker manually:
Manual removal of hijacker and attendant malware is feasible if you have sufficient expertise in dealing with program files, system processes, .dll files and registry entries.

The associated files to be deleted are listed below:

  • %Documents and Settings%\All Users\Desktop\Personal Antivirus.lnk
  • %Documents and Settings%\All Users\Start Menu\Programs\Personal Antivirus
  • %Documents and Settings%\All Users\Start Menu\Programs\Personal Antivirus\Personal Antivirus Home Page.lnk
  • %Documents and Settings%\All Users\Start Menu\Programs\Personal Antivirus\Personal Antivirus.lnk
  • %Documents and Settings%\All Users\Start Menu\Programs\Personal Antivirus\Purchase License.lnk
  • %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Personal Antivirus.lnk
  • %UserProfile%\Application Data\Personal Antivirus
  • %UserProfile%\Application Data\Personal Antivirus\settings.ini
  • %UserProfile%\Application Data\Personal Antivirus\uill.ini
  • %UserProfile%\Application Data\Personal Antivirus\unins000.exe
  • %UserProfile%\Application Data\Personal Antivirus\Uninstall Personal Antivirus.lnk
  • %UserProfile%\Application Data\Personal Antivirus\db
  • %UserProfile%\Application Data\Personal Antivirus\db\config.cfg
  • %UserProfile%\Application Data\Personal Antivirus\db\Timeout.inf
  • %UserProfile%\Application Data\Personal Antivirus\db\Urls.inf
  • %UserProfile%\Local Settings\Application Data\Microsoft\Windows\log.txt
  • %UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini
  • %UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe
  • %Program Files%\Personal Antivirus
  • %Program Files%\Personal Antivirus\activate.ico
  • %Program Files%\Personal Antivirus\Explorer.ico
  • %Program Files%\Personal Antivirus\PerAvir.exe
  • %Program Files%\Personal Antivirus\unins000.dat
  • %Program Files%\Personal Antivirus\uninstall.ico
  • %Program Files%\Personal Antivirus\working.log
  • %Program Files%\Personal Antivirus\db
  • %Program Files%\Personal Antivirus\db\DBInfo.ver
  • %Program Files%\Personal Antivirus\db\ia080614.db
  • %Program Files%\Personal Antivirus\db\ia080618x.db
  • %Program Files%\Personal Antivirus\Languages
  • %Program Files%\Personal Antivirus\Languages\IAEs.lng
  • %Program Files%\Personal Antivirus\Languages\IAFr.lng
  • %Program Files%\Personal Antivirus\Languages\IAGer.lng
  • %Program Files%\Personal Antivirus\Languages\IAIt.lng
  • %WINDOWS%\system32\log.txt
  • %UserProfile%\Application Data\Microsoft\Windows\winlogon.exe
  • %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iGSh.png
  • %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iMSh.png
  • %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iPSh.png
  • %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iv.exe
  • %UserProfile%\Local Settings\Application Data\Microsoft\Windows\log.txt
  • %UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini
  • %UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe

The related registry entries to be removed are as follows:

  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Personal Antivirus_is1
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ITGrdEngine
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “PrS”
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Personal Antivirus”

Please, be aware that manual removal of is a cumbersome procedure and does not ensure complete deletion of the malware, due to the fact that some files might be hidden or may automatically reanimate themselves afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal of, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.

Download Hijacker Automatic Remover

Like This Article? Let Others Know!

Related Guides:

Reader's Comments:

  1. Sharon |

    Hi. Thank you so much for your excellent explanations. I’m fairly new to computers, got mine set up with Ubuntu 8.4 and Firefox. I added on IETabs and that is when the problems started for me. I have since removed it but the problems continue and they are just as you say on this site: my browser gets redirected…I get several different kinds of attack site pop-ups…and the window I’m working in will simply disappear but when I next restart the computer I get asked whether I want those windows restored…general browser problems…redirected to their sites by pop-ups…general slowdown in my computer since this all happened a week ago. So, even though my instincts were good and I didn’t install any of this when I ran across it, it must have gotten something in when it took over the computer for a moment.

    I have tried looking on the Ubuntu Absolute Beginner sites etc for answers, but most stuff seems to say that this isn’t supposed to happen. Clamav… but that seems to be more for e-mail scanning…so I don’t know what to do. Is your removal tool ok to use with Linux Ubuntu 8.4 and Mozilla Firefox (can’t seem to find out the number I have – I think it’s either 3 or 3.5)? I don’t see anything that indicates one way or another about this.

    Many thanks for your ehlp and the excellent work you folks do!

  2. admin |

    We appreciate your feedback! Thanks!
    Regarding the issue with browsers – the removal tool works with Mozilla Firefox for sure. Give it a shot!

Post a Comment: