Virus/Malware Removal, Memory Upgrade, Java Update Fix, New PC Set-up

Here’s a few recent jobs that I can remember off the top of my head:

istartsurf Browser Search HijackRemote Virus, Malware, and unwanted programs removal. This image shows a browser search hijack, where instead of opening a Google.com search page it opens a different search page. This was done without the client’s knowledge, probably as a result of downloading free software from somewhere.

Memory upgrade (more RAM).

Remote to fix a Java update that wouldn’t install properly.

New PC setup, including security, and data transfer.

Foxit Reader now comes with unwanted programs

I have to be careful here, so I don’t get sued, but my recommended PDF reading software now comes with Conduit Search and maybe SearchProtect, which some people label as malware or virus.

The latest version of the free Foxit Reader has an option during the installation to opt-out of the added software.  Since most people just click through with OK or Accept they’re unlikely to notice they are installing additional software.  Conduit and Search Protect are therefore ‘potentially unwanted programs”, or PUPs.

If you have these unwanted programs on your computer, contact me and I will remove them for you if you can’t do it yourself.

Conduit is adware, meaning it delivers adverts to people who have it installed.  It’s a ‘browser hijack’ which takes over your browser (Internet Explorer, Chrome, etc) and instead of using your chosen search engine (Bing, Google, or whoever), it uses Conduit’s search engine which delivers adverts and tracks your internet searches (and maybe other internet use).

Search Protect is software that makes it very difficult (virtually impossible) to change your search provider back to Google, Bing, or whoever you choose.

Foxit, I assume, generate income from the installations or use of these unwanted programs.  If they didn’t get income from them, why would they add them to their installation package?

These sneaky add-ins are getting more and more difficult to uninstall, and I’m seeing many more of them.  Always take time when installing software or updating software to make sure you un-tick (un-check) the additional software “offers”, even if they seem tempting.  The key is, if you dodn’t go looking for that software, don’t install it.

I will uninstall Foxit Reader from all my PCs and use an alternative (when I find one).

Again, these ‘infections’ can be difficult to remove.  Contact me if you would like me to remove them for you.

SearchGol browser hijack removal

A new client called me in because they had adverts on their search page and pop-ups, and their home page was set to searchgol.com.  These browser hijacks or search hijacks aren’t just annoying, the can lead you to other websites that install more rubbish on your system, and the certainly track your internet searches and browsing history and habits.

I have had lots of this type of thing lately and usually it’s fairly easy for me to remove these search hijacks, but it was the first time I had seen SearchGol.  I removed everything as usual, but each time I restarted Chrome searchgol came back.  Internet explorer was ok, but even unistalling Chrome and reinstalling wouldn’t stop the searchgol redirect from coming back.

[EDIT: I subsequently suspect that Search Protect was being used to prevent the user (and me) from changing the search provider too.  Search Protect can also be difficult to remove]

I tried all the tools and instructions I could find when searching for a solution on Google, but none of them worked.  It had taken much longer than the time I estimated, but I was determined not to give up.  I slept on it, and had an idea.  The next evening I tried it and it worked, searchgol was gone!

I’m usually good at finding a solution on Google, but none of the solutions I tried had worked.  Sometimes, I have to rely on my own brain to solve a problem.

If you have ads showing on your search engine (or search page) then you might have a browser hijack or search hijack.  Contact me and I will arrange an appointment to remove it either in person, or by remote login to your computer.