Remove Aartemis.com homepage (Real instruction)




remove aartemis.com homepageAartemis.com is a homepage hijacker also called Browser Hijacker, which is installed by browser extensions or addons. This homepage hijacker is bundled with freeware to promote Aartemis Web Search called AARTEMIS Promoted by Yahoo and to make money using advertisements within the search results. Once this Aartemis.com browser hijacker is installed on your computer, the default search engine and homepage for Internet Explorer, Google Chrome or Mozilla Firefox is replaced with Aartemis.com. This Aartemis.com homepage is not malicious process itself and may not be called a virus, but it does change security settings within your favorite browser and is distributed by freeware. When we installed this homepage hijacking into our test systems it did not set this homepage to aartemis.com and search engines were redirected to qone8, we know this instruction works so if you are infected with aartemis.com homepage, follow our guide.

Please be aware what you install on your computer. The Aartemis.com browser hijacker is most likely installed by the computer user itself because it’s offered during the installation process.

It is advised to always read the Terms and Agreements before installing software on your computer. Do never click too fast through the installation process [Next] button of software as you will agree to software you might not want to install. If the installer offers a Advanced or Custom option button, click it to find out if there is any other malicious software offered and installed during the installation process.

Remove Aartemis.com

remove aartemis.com homepage




Please note that all the software we offer to remove Aartemis.com is free, our instruction is tested and works to remove this threat from your Internet Explorer, Google Chrome or Mozilla Firefox browser. We do not supply any shareware which detects the threat and asks a license in order to remove Aartemis.com.

Follow all steps in correct order to completely and successfully remove Aartemis.com.
This is important: if you have any problem during this removal instruction in order to remove this threat, please stop.

Remove Aartemis.com using AdwCleaner (free)

Remove Aartemis.comRemove Aartemis.com using AdwCleaner

AdwCleaner will scan your computer for malicious Services, Folder, Files, Shortcuts, Registry items and Products. As AdwCleaner tries to delete these malicious content it will also clean the Internet Explorer, Google Chrome and Mozilla Firefox browser. We strongly recommend using AdwCleaner several times a month to keep your computer clean from adware, popups, browser hijackers or toolbars.

Download AdwCleaner (Official link and direct-download)

Select AdwCleaner.exe with right mouse click and Run as Administrator

Remove Aartemis.com - AdwCleaner

If User Account Control asks you to allow AdwCleaner.exe to make changes to your computer, press Yes to continue.

Remove Aartemis.com

Start scanning your computer for any malicious threats by selecting the Scan button, please wait.

Remove Aartemis.com

AdwCleaner will now start scanning your computer. If AdwCleaner is done, it will display a list of malicious items detected, please uncheck the items you do not want to remove that might be detected as malicious.
If you have nothing to uncheck, continue to the removal process and select the Clean button.

Remove Aartemis.com

AdwCleaner will display the following informational alerts and starts rebooting the computer.

All programs will be closed in order to proceed correctly to the removal of the infections. Please save any work in progress and the click [OK]

If you have been brought to use AdwCleaner, it’s probably because your PC contained potentially unwanted programs or adware.
Potentially unwanted programs are often proposed during the installation of software. They may be present form of toolbars that sometimes change the homepage of the browser and slow internet browsing.
To avoid the installation of these programs polluting the computer, it is essential to follow these tips:

– Always download a program from the official link, or a trusted site
– When installing a program, do not click too fast [Next] without paying attention to Terms of Use and third-party programs available.
– If third-party programs are available (toolbars, etc) uncheck them.
– Enable detection of PUP (Potentially Unwanted Program) in your Antivirus.

AdwCleaner must restart the computer to complete the removal process. The report will be opened on the next reboot.

After the reboot a logfile will open. The logfile in Windows XP and Windows 7 will open once the desktop is started. To open the logfile in Windows 8 you need to switch to the Desktop modus by selecting windows key + d on your keyboard.
If you want to check the AdwCleaner log, you can find the report log in your system drive, Adwcleaner folder (for example: C:\adwcleaner)

Result of AdwCleaner scan (it works, see log)

# AdwCleaner v3.012 – Report created 21/11/2013 at 15:21:26
# Updated 11/11/2013 by Xplode
# Operating System : Windows 8 Pro (64 bits)
# Username : FixYourBrowser.com
# Running from : C:\Users\FixYourBrowser.com\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****

Service Deleted : WsysSvc

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\eSafe
Folder Deleted : C:\Users\FixYourBrowser.com\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml
Folder Deleted : C:\Users\FixYourBrowser.com\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo
File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\aartemis.xml

***** [ Shortcuts ] *****

Shortcut Disinfected : C:\Users\Public\Desktop\Google Chrome.lnk
Shortcut Disinfected : C:\Users\Public\Desktop\Mozilla Firefox.lnk
Shortcut Disinfected : C:\Users\FixYourBrowser.com\Desktop\Internet Explorer.lnk
Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
Shortcut Disinfected : C:\Users\FixYourBrowser.com\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Shortcut Disinfected : C:\Users\FixYourBrowser.com\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
Shortcut Disinfected : C:\Users\FixYourBrowser.com\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Shortcut Disinfected : C:\Users\FixYourBrowser.com\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk
Shortcut Disinfected : C:\Users\FixYourBrowser.com\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk
Shortcut Disinfected : C:\Users\FixYourBrowser.com\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WsysSvc
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command
Key Deleted : HKLM\Software\aartemisSoftware
Key Deleted : HKLM\Software\eSafeSecControl
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WsysControl

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16384

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\\ Mozilla Firefox v25.0.1 (en-US)

[ File : C:\Users\FixYourBrowser.com\AppData\Roaming\Mozilla\Firefox\Profiles\87pv5a55.default\prefs.js ]

Line Deleted : user_pref(“browser.newtab.url”, “hxxp://aartemis.com/newtab/?type=nt&ts=1385043651&from=tugs&uid=262929407_198313_04EBE5BC”);
Line Deleted : user_pref(“browser.search.defaultenginename”, “aartemis”);
Line Deleted : user_pref(“browser.search.selectedEngine”, “aartemis”);
Line Deleted : user_pref(“browser.startup.homepage”, “hxxp://aartemis.com/?type=hp&ts=1385043651&from=tugs&uid=262929407_198313_04EBE5BC”);

-\\ Google Chrome v31.0.1650.57

[ File : C:\Users\FixYourBrowser.com\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted : homepage
Deleted : search_url
Deleted : keyword
Deleted : urls_to_restore_on_startup

*************************

Leave a Reply