How to Remove Boyu.com.tr & Bangsearch.pro Virus? [ Easy Tutorial ]
ฝัง
- เผยแพร่เมื่อ 25 ส.ค. 2024
- Boyu.com.tr, Ssj4.io, Bangsearch.pro and Ook.gg virus is a browser hijacker and a variant of Superstar3.io, and Searchmenow.gg virus. Once infected, Boyu.com.tr, Ssj4.io and Bangsearch.pro take control of your browser's search settings, disable Windows security, silently install malicious extensions, and drop malware applications onto your PC.
Attempts to remove Boyu.com.tr, Ssj4.io, Ook.gg and Bangsearch.pro are often futile as they reappear after a certain period. If automated removal is unsuccessful, consider attempting our manual removal process. We have developed a step-by-step tutorial to help you eliminate the Bangsearch and ss4j virus. Please watch and provide your feedback.
1) *ChromeTool.bat code*: If any error then run in Normal Mode
myprocessinfo....
2) *EdgeFix.reg code*: If any error then run in Normal Mode
myprocessinfo....
3) *Activate Defender.reg code*: If any error then run in Normal Mode
myprocessinfo....
4) For unwanted extensions that cannot be removed
Please watch the tutorial: • How to Remove Malware ...
5) * if this malware installs Chromstera virus*
Please watch this tutorial: • How to Get Rid Of Chro...
For UCPD velocity / UCPDMgr.exe file
It is not necessary to have UCPDMgr.exe file every time on every infected PC. Therefore, if this file is not found, it indicates that your computer is not infected with this particular file.
Latest updation for Malware Files/Folder/Location
===========================================================================
These are additional files; the *REST OF THE MALWARE FILES ARE THE SAME AS SHOWN IN THE VIDEO*.
===========================================================================
A) Latest Task Entries
UCPDMgr.exe is not active now. (*Old*)
No New Entry Found (06/11/23)
B) Malware Files & Folders
New Update 08/07/2024
New files are added/changed by the virus creator
New Virus Domain Added*: Boyu.com.tr virus ( *Latest 08/07/24)
New Virus Domain Added*: Ssj4.io virus ( *Old/Active 04/02/24)
New Virus Domain Added*: ook.gg virus ( *Old/Active 15/10/23)
New Virus Domain Added*: Searches-world.com virus ( *Old/Active 18/10/23)
MUST CHECK / AERAS OF YOUR COMPUTER ( Latest 08/07/24)
C:\Program Files (x86)\
C:\Users\{Your User Name}\AppData\Roaming\
C:\Users\{Your User Name}\AppData\Local\
C:\Program Files (x86)\Chromstera\ChromsteraUpdater.exe (if found, delete it / *Old/To Be Check*)
C:\Users\{Your User Name}\AppData\Local\apps.crx (if found, delete it / *Old/To Be Check*)
================= old entries =================
( Why old, coz malware creator change their modus operandi )
C:\Program Files (x86)\Kavaca\ = Delete Kavaca Folder ( OLD 07/02/24)
C:\Users\{Your User Name}\AppData\Roaming\GlobalCo ( OLD 07/02/24)
C:\Users\{Your User Name}\AppData\Roaming\EdgWebOpt2 ( OLD 07/02/24)
C:\Users\{Your User Name}\AppData\Roaming\EdgWebOpt ( OLD 07/02/24)
C:\Windows\system32\op.config.xml (*Old*)
C:\WINDOWS\system32\ServiceUI.exe (if found, delete it / *Old/Not Active 06/11/23)
C:\WINDOWS\system32\UITheme.exe (if found, delete it / *Old/Not Active 06/11/23)
C:\WINDOWS\system32\serviceui.json (if found, delete it / *Old/Not Active 31/10/23)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\*Sordum* (if found, delete it / Old/To Be Check 20/11/23)
C:\Users\[your user name]\AppData\Local\*Sordum* (if found, delete it / Old/To Be Check 20/11/23)
🙏🙏*Please like my tutorial and subscribe to my channel*🙏🙏
![[UNCUT] The Loyal Pin ปิ่นภักดิ์ EP.4 (2/4)](http://i.ytimg.com/vi/MN-p1DHjPtI/mqdefault.jpg)
*Please take note, everyone*: Bangsearch frequently alters both the file name and its location, making it challenging to keep up-to-date with these changes. Therefore, I kindly request everyone to carefully follow the video instructions and apply the provided techniques to locate the latest modifications using Bangsearch Pro.
HI, I have a problem, I found a file to delete from your description 'SysWin.exe' but when I try to delete it it says "you'll need to provide administrator permission to delete this file" when I press continue it says "the action cant be completed because the file is open in MsHelper" what should I do? if you would please help
Edit: I opened the task manager and found both 'SysWin.exe' and 'vcpkhost.exe' and clicked "end task" and also for the MsHelper I deleted from the task manager and then I was able to delete the two files.
Hey man nothing was working fornme so i was reading the comments tryna see if something changed insaw yoyr comment and ended both takss i had the exact same ones running and it seems to have fixed my issue thanks alot!
Only thing is i dont see the files anywhere to delete them i saw both the tasks running and ended them both but im not sure if the files are still somewhere on my pc or not insearcged for them and didnt see them
How do you identify if the file name and its location is suspicious?
@@mohammedalali7533 Yep. This Work Greatly.
Okay if you are here and you have this issue and are reading comments and think they are all bottled, I promise I'm real lmao, this is actually legit. I was skeptical but I did the chrome took, ran chrome as admin and used the tool. Went away INSTANTLY! Thank you sm
Sus
@@PokemonPower2712fax
Fr
Thank you so much man
I couldn't delete UCPDmgr.exe. It said that I needed permission from Trustedinstaller to make changes to the file. Now what?
Thank you for posting this and going out of your way to keep the description updated. Really helps
You are welcome 😊
It’s not letting me delete any of the files. It says I don’t have permission. And where did the chrome fix come from??
Same
Same
Wow! Is all i can say to this. Your so easy to follow along too, plus even tho i had a few problems with name changes down below still showed me what others to look out for. Thankyou again bro🤙🏻
Thank you so much for making this video. You are truly a tech hero.
To the people who can't find UCPD velocity. Just continue on to the next step and make sure you read the description carefully what file you need to delete.
Much appreciated!
I don’t see my file anywhere
You're a lifesaver! Wish this video came first in the search results because this is legit. Plus I appreciate you taking time to update the description with new file names as you find them.. I found at least 3 files/folders from your list, and now my browsers are working fine. Let's hope the virus doesnt emerge again!
Also i tried activating my Defender and didnt work, but it doesnt matter, the rest of the process works just fine.
You're welcome..!!
Excuse me, I have a question, may you please tell me how to delete UCPDMgr? It says I do not have access to delete the file.
I also can't delete this file
Works fr ; just some notes for some people in the comments ; windows defender doesnt necessarily need to work for virus to go , you wont necessarily have anything in the task manager , just make sure you are thorough when deleting the files and look in the description for all the possible names and locations
Good to know, since I found no iterations for the UCPD Velocity process.
U have no idea what making these tutorials does for people thank u soooooo much
You are welcome 😊
I can't run "activate defender"
It says that not all the datas are wrote correctly in the system's Register
did u find a solution already?
This didn’t work for me I couldn’t find the files and after the tutorial the redirect still happened only on chrome I got it from steam unlocked
If anyone else has this problem after doing this tutorial download avast and do every virus search and browser/temp file scan it removed the virus for me
I got the virus from the same place trying to download something
i did that with avast and it found a malware in temp file and put it automatically in quarantine but it still puts me on ssj4 site
I got it from the same place I’m never attempting to be a pro hacker again
Yeah me too, i tried antivast and it didnt work, i got mine from a fake nvidia website
Just used it with all the info in the video and comments. Worked!
I’m trying to run the chrome tool on administrator mode but doesn’t work on safe mode. Nothing pops up
same
Thank you so much I’ve been dealing with this for days.
is this legit???
@@X-Kxrma-X is actually working
@@X-Kxrma-Xyeah
Thank you soooooooooo much for this, it really helped a lot! My first time doing something like this, I was on the verge of throwing the laptop against the wall and after wrecking it with a hammer. But following the tutorial step by step and checking all the updated info in the description box, I managed to get rid of this annoying virus. Thanks a million times. This has been super valuable.You're Awesome!
You're so welcome!
@@MyProcessInfo gg bro
i'm trying to merge the activate defender but it says "not all data was successfully written to the registry. some keys are open by the system or other processes, or you have insufficient privileges to perform this operation"
edit: the virus got removed either way though so tysm for this video
please check the codes : error or white space in code
Great video! Very clear and consistent! Fixed it instantly 👍
Thanks a lot mate, although I didn’t find the files you named, following all the steps fixed it anyway, people like you are the unspoken heroes of the Internet ❤❤
Thank you so much broe...you're a true G.
It works people, just follow along.I thought I was gonna have to rest my PC.Thanks again man.
When my chrome browser kept jumping to searches-world, I was thoroughly freaked out. Then when I downloaded an antivirus program to get rid of it, the program literally couldn’t find an issue. I was mortified that I finally did my computer in by trying to download SAW: The Video Game from Steam Unlocked.
This video was a life saver and, while I thought the presentation was a tad sketchy looking, I'm glad I trusted the process.
Keep up the great work, and I'll try to be careful when downloading games online lmaoo
You're welcome..!! :)
does it actually work?
@@Ainzoöalgowns so far, yeah
@@Ainzoöalgownsyes works a charm, check the description for registry changes too. I had a couple new ones that weren’t in the video.
This thing was kicking my ass until I found this guy
Thank you for updating the description!
You earned a sub and a like, saved my brand new laptop. Thank you.
You are welcome..!! 😊
Thanks so much! There was some steps I couldn’t do for some reason - but it worked out in the end ❤️❤️ 😭
You're welcome!!
you’re actually a legend for updating the description! i deleted serviceUI and UI Theme exe files and it worked! ❤❤
You are welcome..!! 😊
I get an error message when opening the chrome file in safe mode. I right to run as adminatraror to no avail. I tried right click and merge the edge file and received an error message as well. Feeling a little defeated 😢
Same I’m not sure what I’m doing wrong. I think maybe the virus is under a different file name than the ones in the description, bc I can’t find any of those listed on my task scheduler either
BRO YOU JUST SAVED MY LIFE I was about to reset my pc because every time i searched something up like something little like “hi” it would redirect me to a blocked page. Now i Can search now bro if I could give you a hug right now i would thanks brother love from 🇬🇹
Thank you so much for all the help. I’m really glad I was able to find this video and fix my search browsers. All the best!!!
You're welcome!
Everything worked perfectly! Thank you so much for this awesome video! It scared me when my laptop had came across with these issues, until this video has saved my life. You just earned yourself a new subscriber from me! Again, thank you so much for this video and I mean that! You really did saved my life! Have a wonderful day! 😁👍👍
You're welcome! ❤❤❤
As of now, the file is renamed to Appservice.
what am i supposed to look at in descriptions to disable ucpd velocity, because i dont think theres any name in task schedular library in description then the name im trying to look for, can i also get in contact with you.
Same
OMG THANK YOU SO SO MUCH I WAS SO WORRIED and I'm real Bless you
That's worked for me, thank you! Your a damn saint! :D
You're welcome!!
This helped me, thank you so much! After downloading a "game" file from a shady website, I saw a suspicious pop up so I instantly deleted the file. Although yhe virus was already there, it didnt have time to infect my laptop with any tasks, all i did was clear the temporary files and restarted my laptop and it helped!
OH MY GOD I CANT BELIVE THIS WORKS, I missed a couple of files and I didn't even successfully merge at the end but I said screw it its probably gonna fail anyway, so I followed the tutorial the best I can with a lot of fails that I didn't try and fix and I just tested it and it literally works.
Thank you very much, just extra note the appdata in user may also be hidden also some folders in the windows folder the need to unhide them is required
THIS WORKED THANK U SO MUCHHH I WAS LITERALLY STRESSING SO MUCHHHH ❤❤❤❤
OMG THANK YOU SO MUCH!!! At first I thought it was the wifi I was using but it happened with the main one I used! This is the only thing that helped me, thank you!
You're welcome!!
It worked for me - thank you! I found just following the process and not worrying if I couldn't find some of the files or even about an error message re: merging at the end paid off - just follow the steps as best you can.
You are welcome!
It worked for me, couldn’t find any of the files in questions, also safe mode wouldn’t let me run any of the files. So I just ran them in normal, and it worked. Strange but thank you!!
it worked😭😭😭
I didn't find any of the files that you deleted, so I just picked some random files that looked suspicious to me.
great tutorial, very clear, thank youuu
What were the file names
Coz I can't find the files that were mentioned in the description ;-;
You're welcome 😊
ill literally blow u dry for this one mate! cheers
Bro thank you so much man!!!!! All I did was deleting the files you mentioned in the description and it’s away. I tried everything man thank you soooo much!!!!!
You're welcome!
I could not find the SearchUi files or the two other folders what do I do?
Same any solution bro?
Didn’t work :/ registry editor won’t work for the step and I can’t delete the UPCD file
Saved me bro, much love 👍👍
This worked absolutely brilliant for me, thank you so much!
You're welcome!
This is the first tech video in a long time that has actually worked for me.
I didn’t have to use the description at all, and I couldn’t delete some files from my computer in safe mode, but it still WORKED. Thank you so, so much @MyProcessInfo 👍👍👍
THANK YOU SO MUCH, finally after days of struggling to get rid of it!!! This works you guys, follow the instructions and you will be good👍
You're welcome!
Thank you, I appreciate the guidance. You just made my week!
Thank you so much this was a pain to try to get rid of but your video help and got rid this annoying virus thanks again.
You're welcome!
thank youu, this worked for me. I was getting so mad when i tried searching for images but it just wouldn't show up anything, it would just give me links and take me to a site by itself, it took me awhile to figure out because some of the files were changed from the video, but the description are also indication of updated malware and detections for why the computer is acting the way it is. But thank you again
You're welcome!
Thank you, I appreciate the clear guidance you gave. You just made my week!
You are so welcome! ❤❤❤
This was amazing and worked perfectly fine i just deleted all the files that were the same date as today and it working
I think I have a differnet iteration of the virus, it stopped redirecting me after I disabled the MsHelper startup service. Do you know where to find the file so i can delete it?
I did all of it but the activate defender didnt work and bangsearchpro is still showing up can u help?
Activate defender ain’t working for me either
you are a lifesaver, absolute legend
It says after I put it into safe mode that the chrome tool cannot be accessed by the system so I can’t do anything basically once it’s in safe mode what do I do
Same ! Any news ???
When I try opening the chrome and edge fix and activate they say file cannot be accessed by the system
same
My brain was so scrambled trying to keep up with all this but thank you for your help! People reading this, follow the steps and you should be good.
I cant run the cmd files... what should I do?
New subs my man. Perfectly worked. Thank you so much
Thanks for the sub!
i found UCPDMgr and UCPD sys but says i am unable to delete them due to the fact i don’t have permission yet i can’t get permission because the activator is saying i don’t have permission either
Same, what did you do?
what do i do if i don’t see ucpd velocity?
fr I’m having that same issue as well however I’m gonna finish the tutorial I’ll update to see if it worked
just finished the tutorial and it didn’t work do u still have the virus if not what did u do to fix it?
Yooo I fixed it!!!
guys im not a bot and this actually worked,i had bangsearch and i couldnt do anything but this saved me and helped, i really reccomend it and goodluck removing it if u see this
.
You my bro and a LEGEND! thank you heaps!!
This guy is the Goattttt, My Pc search is working again and all thanks to this person, Thansk you bro
Happy to help
RAAAAAH IT WORKED!! IT SHOWED THE WINDOWS DEFENDER DIDINT WORK BUT IT RESOLVED ANYWAYD. THANK YOUU
How do I delete those 3 files without the permission needed bit?
Holy moly, it worked. Thank you.
The “Reduced Memory” under program files is FOR SURE a part of the virus. Thats when it all started for me
Works perfectly, i was sweating as a computertard when i had to go look for the files to delete, but just went through you list (had 3 of the new ones in system32) and it ended up working like magic, Thank you so much for an easy to follow video!
Absolute godsend! Thank so much! Worked perfectly! Seriously awesome tutorial!
You're welcome!
Oh my god thank you so much! I though i was going to have to pay like £50 to get it fixed but I watched this video and I don't get redirected anymore! I had a bit of trouble in some spots but just replayed the video from a couple seconds before and it all turned out fin thank you so much for your help!!!
I found the new files but cant delete them
Wow this virus was a nasty little bugger. This helped so much thank you thank you thank you! I would have never figured this out myself. Thank you!!!
im going to be completly honest, i dont know who are you, this is the first video i watched from you, but man, thank you so much, i was struggling with this fucking virus but you were the salvation, and i dont even need to do the stuff in the video, only search the files you left in the description box and delete it, so man, as i said, thank you so much
took me long enough but it was worth it lol thanks 🙏
You deserve more likes and subs ur a life savor
For me it’s not letting me enter the files while in safe mode just opens and gives me a error code and doesn’t show anything is even saved on them when I did save them the right way
Kudos. It actually worked. Thanks for the updated names.
You're welcome!
It won’t let me run ChromeTool as administrator
Last step Activate Defender didn't work, i receive massage that : Some keys are open by the system or other processe, or have insufficient privileges to perform this operation!!
Thank you very much
It says “you need permission to perform this action from trusted installer”
Its not letting me run my chrome fix
Same
I literally love you. So much.
You're welcome 😊
On my computer it doesn't show the "This Pc" icon with the computer icon. How do I get there?
Well I may be screwed... I was going to enter safe mode. BUT it says I need a Bitlocker Recover Key... Whatever the heck that is...
Bro it says something happened and your PIN isn’t available. Click to set up PIN again. And when i do click it says i need to install an app for this task and would i like to search for one and when i do click yes it just does absolutely nothing. Btw it was when i was restarting the computer after turning on the safe boot
All what I can say is thank you a lot pro u helped my pc from the format
So my chrometool instantly goes away and when I merge it tells me I can’t bc something is there
it worked , thank you so much!
You're welcome!
Thank you so much...worked perfectly❤
When I do the activate defender it says cannot import what do I do? 😢
hello im here for ask you , i didnt find the UPDC Velocity ,
Hi, I was trying to run the .bat file as an administrator but nothing was popping up. Would you have any idea why?
It worked. I’m not a bot 😂😂😂 I swear. This guy is legit. Thanks dude
The chrometool i made does not work