Welcome to remove-malware.net

How to remove Itsecure.microsoft.com hijacker

Malware Description:
During the last 2 months, the fraudulent blackhat SEO cyber-criminals who released Antivirus System PRO rogue anti-spyware have been practising various kinds of tricks to arrive at their commercial goals. The latest one is about modifying one’s hosts file to play havoc with the web browser on the compromised computer. The trick is all about making the unsuspecting victim think he/she is being redirected to a legitimate Microsoft website that promotes a certain antivirus tool. Itsecure.microsoft.com sounds like a trustworthy and completely legit domain name, doesn’t it? That’s exactly what the fraudsters expect you to believe. However, do NOT trust Itsecure.microsoft.com, no matter how decent the URL may sound. The truth about Itsecure.microsoft.com is that the domain is hit for the one and only reason – the trojans related to Antivirus System PRO have changed your hosts file to divert your online activities to the pre-defined IP-address. In other words, after your PC gets attacked by Antivirus System PRO scareware, its attendant Trojans will match an insecure IP address with an attractive domain name, i.e. Itsecure.microsoft.com. Consequently, your random internet sessions may get interrupted and redirected to Antivirus System PRO website (see screenshot below) with Itsecure.microsoft.com URL. This way, the scammers are trying to make you purchase their worthless and extremely annoying product. Do not fall victim of that unlawful scheme! Remove all signs of Antivirus System PRO rogue and check your hosts file to see if the malware has mapped its bad IP to Itsecure.microsoft.com. Please, stick to the guide below to secure your PC.

Malware Type: Browser Hijackers

Malware Author: Magic software Inc

Threat Level: Critical

Advice: Immediately remove and scan for additional malware

Itsecure.microsoft.com Hijacker Free Scanner and Remover: Download Now

Screenshot of Itsecure.microsoft.com pushing Antivirus System Pro:

How to remove Itsecure.microsoft.com hijacker manually:
Manual removal of Itsecure.microsoft.com hijacker and attendant malware is feasible if you have sufficient expertise in dealing with program files, system processes, .dll files and registry entries.

The associated files to be deleted are listed below:

• %WINDOWS%\sysguard.exe
• %WINDOWS%\system32\iehelper.dll

The related registry entries to be removed are as follows:

• HKEY_CURRENT_USER\Software\AvScan
• HKEY_CLASSES_ROOT\CLSID\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “system tool”

Please, be aware that manual removal of Itsecure.microsoft.com hijacker is a cumbersome procedure and does not ensure complete deletion of the malware, due to the fact that some files might be hidden or may automatically reanimate themselves afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal of Itsecure.microsoft.com hijacker, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.

Related Articles:

How to remove Browser-security.microsoft.com hijacker
How to remove Microsoft.browser-security-center.com hijacker