Remove Qone8 virus using AdwCleaner (Easy Removal Guide)




Remove Qone8Qone8 is a homepage hijacker which is installed by malicious ELEX Beijng software. This homepage hijacker is bundled with freeware to promote Qone8 Search and to make money using advertisements within the search results. Once this Qone8 browser hijacker is installed on your computer, the default search engine and homepage for Internet Explorer, Google Chrome or Mozilla Firefox is replaced with Qone8. This Qone8 homepage is not malicious process itself and may not be called a virus, but it does change security settings within your favorite browser and is distributed by freeware. We noticed that by installing software our homepage and default search engine was replaced with Qone8, but we couldn’t find it in the programs list in Windows. This is a nasty browser hijacker or a so called browser redirect.

It is advised to always read the Terms and Agreements before installing software on your computer. Do never click too fast through the installation process [Next] button of software as you will agree to software you might not want to install. If the installer offers an Advanced, Custom or Decline button, click it to find out if there is any other malicious software offered and installed during the installation process.




How To Remove Qone8 – Start.Qone8.com

Please note that all the software we offer to remove Qone8 is free, our instruction is tested and works to remove this threat from your Internet Explorer, Google Chrome or Mozilla Firefox browser. We do not supply any shareware which detects the threat and asks a license in order to remove Qone8 .

Follow all steps in correct order to completely and successfuly remove Qone8 from your browser.
This is important: if you have any problem during this removal instruction in order to remove this threat, please stop.

Removal Steps for Qone8

Step 1 – Remove Qone8 redirect using AdwCleaner

Step 2 – Remove Qone8 files using MalwareBytes Anti-Malware

WE USE FREE SOFTWARE

This is a comprehensive removal instruction to remove Qone8 from your computer. If for some reason the instruction does not deliver the desired results, you can reset your favorite browser Internet Explorer, Google Chrome or Mozilla Firefox to default settings. In first place this is not recommended, as restoring to default settings will remove all your personal settings from your browser. Please use restoring to default settings only if anything else fails.

Step 3 – Optional: Reset browser settings

STEP 1 – Remove Qone8 using AdwCleaner (including Report log)

AdwCleaner will scan your computer for malicious Services, Folder, Files, Shortcuts, Registry items and Products. As AdwCleaner tries to delete these malicious content it will also clean the Internet Explorer, Google Chrome and Mozilla Firefox browser. We strongly recommend using AdwCleaner several times a month to keep your computer clean from adware, popups, browser hijackers or toolbars.
Download AdwCleaner (Official link and direct-download)

Select AdwCleaner.exe with right mouse click and Run as Administrator

Remove Qone8  - AdwCleaner

If User Account Control asks you to allow AdwCleaner.exe to make changes to your computer, press Yes to continue.

Remove Qone8

Start scanning your computer for any malicious threats by selecting the Scan button, please wait.

Remove Qone8

AdwCleaner will now start scanning your computer. If AdwCleaner is done, it will display a list of malicious items detected, please uncheck the items you do not want to remove that might be detected as malicious.
If you have nothing to uncheck, continue to the removal process and select the Clean button.

Remove Qone8

AdwCleaner will display the following informational alerts and starts rebooting the computer.

All programs will be closed in order to proceed correctly to the removal of the infections. Please save any work in progress and the click [OK]

If you have been brought to use AdwCleaner, it’s probably because your PC contained potentially unwanted programs or adware.
Potentially unwanted programs are often proposed during the installation of software. They may be present form of toolbars that sometimes change the homepage of the browser and slow internet browsing.
To avoid the installation of these programs polluting the computer, it is essential to follow these tips:

– Always download a program from the official link, or a trusted site
– When installing a program, do not click too fast [Next] without paying attention to Terms of Use and third-party programs available.
– If third-party programs are available (toolbars, etc) uncheck them.
– Enable detection of PUP (Potentially Unwanted Program) in your Antivirus.

AdwCleaner must restart the computer to complete the removal process. The report will be opened on the next reboot.

After the reboot a logfile will open. The logfile in Windows XP and Windows 7 will open once the desktop is started. To open the logfile in Windows 8 you need to switch to the Desktop modus by selecting windows key + d on your keyboard.
If you want to check the AdwCleaner log, you can find the report log in your system drive, Adwcleaner folder (for example: C:\adwcleaner)

AdwCleaner Qone8 Removal Logfile

 

# AdwCleaner v3.022 – Report created 29/03/2014 at 13:51:31
# Updated 13/03/2014 by Xplode
# Operating System : Windows 8 Pro (64 bits)
# Username : SandBox
# Running from : Downloads\adwcleaner.exe
# Option : Clean

***** [ Services ] *****

Service Deleted : IePluginService
Service Deleted : Wpm

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\IePluginService
Folder Deleted : C:\ProgramData\WPM
Folder Deleted : C:\Program Files (x86)\SupTab
Folder Deleted : C:\Users\SandBox\AppData\Roaming\SupTab
Folder Deleted : C:\Users\SandBox\AppData\Roaming\Mozilla\Firefox\Profiles\1lohj3ow.default\Extensions\[email protected]
File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\qone8.xml

***** [ Shortcuts ] *****

Shortcut Disinfected : C:\Users\Public\Desktop\Google Chrome.lnk
Shortcut Disinfected : C:\Users\Public\Desktop\Mozilla Firefox.lnk
Shortcut Disinfected : C:\Users\SandBox\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Google Chrome.lnk
Shortcut Disinfected : C:\Users\SandBox\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Internet Explorer.lnk
Shortcut Disinfected : C:\Users\SandBox\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mozilla Firefox.lnk
Shortcut Disinfected : C:\Users\SandBox\Desktop\Google Chrome.lnk
Shortcut Disinfected : C:\Users\SandBox\Desktop\Internet Explorer.lnk
Shortcut Disinfected : C:\Users\SandBox\Desktop\Mozilla Firefox.lnk
Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
Shortcut Disinfected : C:\Users\SandBox\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Shortcut Disinfected : C:\Users\SandBox\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Google Chrome.lnk
Shortcut Disinfected : C:\Users\SandBox\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Internet Explorer.lnk
Shortcut Disinfected : C:\Users\SandBox\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mozilla Firefox.lnk
Shortcut Disinfected : C:\Users\SandBox\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
Shortcut Disinfected : C:\Users\SandBox\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Shortcut Disinfected : C:\Users\SandBox\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk
Shortcut Disinfected : C:\Users\SandBox\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk
Shortcut Disinfected : C:\Users\SandBox\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk
Shortcut Disinfected : C:\Users\SandBox\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Google Chrome.lnk
Shortcut Disinfected : C:\Users\SandBox\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Internet Explorer.lnk
Shortcut Disinfected : C:\Users\SandBox\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Mozilla Firefox.lnk

***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [[email protected]]
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command
Key Deleted : HKCU\Software\AppDataLow\Software\DynConIE
Key Deleted : HKLM\Software\qone8Software
Key Deleted : HKLM\Software\supTab
Key Deleted : HKLM\Software\supWPM
Key Deleted : HKLM\Software\Wpm
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Wpm

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16384

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\\ Mozilla Firefox v25.0.1 (en-US)

[ File : C:\Users\SandBox\AppData\Roaming\Mozilla\Firefox\Profiles\1lohj3ow.default\prefs.js ]

Line Deleted : user_pref(“browser.newtab.url”, “hxxp://start.qone8.com/newtab/?type=nt&ts=1396097285&from=nsbfr&uid=531364863_198313_04EBE5BC”);
Line Deleted : user_pref(“browser.search.defaultenginename”, “qone8”);
Line Deleted : user_pref(“browser.search.selectedEngine”, “qone8”);
Line Deleted : user_pref(“browser.startup.homepage”, “hxxp://start.qone8.com/?type=hp&ts=1396097285&from=nsbfr&uid=531364863_198313_04EBE5BC”);

-\\ Google Chrome v33.0.1750.154

[ File : C:\Users\SandBox\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted : homepage
Deleted : search_url
Deleted : keyword

*************************

STEP 2 – Remove Qone8 files with using MalwareBytes Anti-Malware

Download MalwareBytes Anti-Malware

Malwarebytes Anti-Malware Free’s industry-leading scanner detects and removes malware like worms, Trojans, rootkits, rogues, spyware, and more. All you have to do is launch Malwarebytes Anti-Malware Free and run a scan. It’s that simple. Or if you want even better protection, consider Malwarebytes Anti-Malware Premium and its instant real-time scanner that automatically prevents malware and websites from infecting your PC. Either way you’re crushing malware and foiling hackers

*According to OPSWAT, Malwarebytes Anti-Malware is the most popular security product installed by users.

Install MalwareBytes Anti-Malware using the installation wizard.
MalwareBytes Anti-Malware needs no configs or specific settings, just install and you are ready to scan your computer for malware and free removal.

malwarebytes-main

  • Perform a Threat Scan

malwarebytes-threat-scan1

If you find malware in your free scan consider upgrading to our PRO Version. The PRO version stops malware dead in its tracks, never allowing it to access your PC.

  • Real-time active malware prevention engine blocks known threats
  • Heuristic protection prevents new zero day malware infections
  • Malicious website protection blocks access to known and zero day malicious web content
  • Automatic priority updates and scheduled scanning
  • Blazing fast flash scans

1 year/3 PCs for only $24.95. This is not a attempt to let you buy software you do not need or that does not work, MalwareBytes Anti-Malware works. Over 300 million downloads worldwide, they can’t be wrong are they ? Try the free version first.

Innovative anti-malware beats criminal software that steals your money and online life

Today’s cyber criminals build software designed to slip past antivirus programs undetected. Malwarebytes Anti-Malware Premium crushes these threats with innovative technologies designed to defend you while keeping your online experience fast and hassle free.

What it does for you

  • Detects and protects against malware in real-time
  • Blocks hacking and phishing attempts
  • Schedules automatic scanning
  • Offers three flexible scanning modes

How it works for you

  • Anti-Malware/Anti-Spyware
  • Malicious website blocking
  • Real-time protection
  • Heuristic detection
  • Integrated Malwarebytes Anti-Rootkit
  • Hyper Scan mode
  • Scan/Database update scheduler
  • Integrated Malwarebytes Chameleon
  • Advanced malware removal
  • Antivirus compatibility

Reset browser settings

Sometimes it is advised to restore your browser to default settings, as this threat is installed by many different applications. Restoring is the easiest and fastest way to get rid of this threat. Please know when you restore to default settings all your personal settings will be lost. If you do agree to continue to reset your Internet Explorer, Google Chrome or Mozilla Firefox browser to default settings see our instructions.

Reset Internet Explorer to default settings

  • Open Internet Explorer
  • goto “wrench” icon in top right corner
  • Select Internet Options

internet explorer reset

  • Goto tab Advanced
  • Select Reset button

internet explorer reset

  • Enable Delete personal Settings
  • Click Reset button

internet explorer reset

  • Restart Internet Explorer

Reset Google Chrome to default settings

  • Open Google Chrome
  • Goto the three stripes in the right top corner (menu)
  • Select Settings

google chrome - reset

  • Scroll down to the end of the page, search for + Show advanced settings

google chrome - reset

  • Scroll down once again to the end of the page and click Reset browser settings button

google chrome - reset

  • Click Reset once more

google chrome - reset

Reset Mozilla Firefox to default settings

  • Open Mozilla Firefox
  • Goto the orange Firefox button in the top left
  • Select Help > Troubleshooting information

firefox reset

  • Select Reset Firefox

firefox reset

  • Confirm Reset Firefox

firefox reset

  • Select Finish
  • Mozilla Firefox will automatically restart

Article published on — by Max Reisler

Leave a Reply