Addthis_widget.js Trojan Virus Removal

This article can help you to remove Addthis_widget.js Virus. The step by step removal works for every version of Microsoft Windows.

The Trojan horse is a well-known PC infection. These parasites are the first thing we imagine when someone mentions the terms “PC virus.” And there is a good reason for that. The Trojans are stealthy, cunning and deadly. The newest member of their malicious family is a Trojan named Addthis_widget.js. This parasite sneaks into your computer unnoticed and wreaks havoc. If you fail to remove it promptly, hell will rise. Addthis_widget.js uses both your computer and your Internet connection to spread its payload file. The longer this virus remains active on your PC, the more likely it is to infect your other devices. This is not a joke. You are dealing with a cyber threat. You should take immediate action against it. This is not an easy task, though. Upon infiltration, Addthis_widget.js corrupts your entire operating system. The virus can create and delete files as well as entries from your System Registry. A simple system reboot will not stop the infection. Addthis_widget.js loads together with your OS and will not stop unless it’s stopped. The parasite works in the background and is hard to be detected. Consider yourself lucky, you know that this parasite is present on your device. Use this knowledge as an advantage. Track the virus down and remove it while you still can. This virus is a backdoor to your computer. Other, more dangerous, infections can use it to enter your device. You can try to delete the Trojan manually. Yet, this virus is quite sophisticated. If you fail to detect and delete all components of the parasite, the virus will restore itself. Furthermore, if you make a mistake and delete one wrong file, you will end up with the Blue Screen of the Death. Therefore, we recommend you to use a trustworthy anti-virus application. Run a full system scan and let the program remove all suspicious elements.

remove Addthis_widget.js

How did I get infected with?

Did you know that you can infect your machine with viruses by opening unverified emails? Yes, just by opening an email. The hackers can embed malicious codes in the body of the email itself. These codes exploit vulnerabilities in your email client and your web browser. They execute when you open a corrupted email. One click, that’s all it takes for a virus to be downloaded. Now you understand why all security experts preach how dangerous the spam messages are. Unfortunately, not all spam letters are detected as spam. Hackers are imaginative. They always manage to create new ways to camouflage their malicious letters. Only your caution can prevent them from succeeding. Before you open an email or any other type of instant message, confirm who the sender is. The crooks tend to write on behalf of well-known organizations, companies, banks, post offices, etc. If you receive such an email, go to the company’s official website. You can find their authorized email addresses there. Compare them with the one you have received a message from. If they don’t match, delete the pretender immediately. You should be always vigilant and doubting. When you open a questionable email, opt for red flags. A reliable company will use your real name to address you. If the message starts with “Dear Customer,” or “Dear Friend,” proceed with caution. Do not download anything unless you are absolutely sure that it is safe. It is also a good idea to scan everything with an anti-virus program.

Why is this dangerous?

Addthis_widget.js has no place on your computer. Since the dawn of the Internet, the Trojans were used as spying tools. These parasites can “see” your IP and MAC addresses, what programs you have installed on your computer, what changes you have made to your hardware, when you are online and you are not. They can even record your browser related data. What is worse, the Trojans can send your files directly to the hackers. They can use the information to blackmail you. Or, they can simply infect your machine with ransomware. Addthis_widget.js is a giant hole in your security wall. The hackers can easily re-program the virus to install malware and other viruses on your PC. And thus, it is the hackers that are in control of your machine, not you. It is a quite dangerous situation to caught in the middle of. If, for example, the hackers need extra CPU power, they can turn your machine into a part of a botnet. This means only one thing, your computer will be used for illegal business. And guess what?! If the authorities catch you, you will face the charges. Do not let this scenario to unfold. You are the victim here. Yet, you are not helpless. Use a powerful anti-virus app and delete Addthis_widget.js for good! The sooner, the better!

Manual Addthis_widget.js Removal Instructions

The Addthis_widget.js infection is specifically designed to make money to its creators one way or another. The specialists from various antivirus companies like Bitdefender, Kaspersky, Norton, Avast, ESET, etc. advise that there is no harmless virus.

If you perform exactly the steps below you should be able to remove the Addthis_widget.js infection. Please, follow the procedures in the exact order. Please, consider to print this guide or have another computer at your disposal. You will NOT need any USB sticks or CDs.

STEP 1: Track down Addthis_widget.js related processes in the computer memory

STEP 2: Locate Addthis_widget.js startup location

STEP 3: Delete Addthis_widget.js traces from Chrome, Firefox and Internet Explorer

STEP 4: Undo the damage done by the virus

STEP 1: Track down Addthis_widget.js related processes in the computer memory

  • Open your Task Manager by pressing CTRL+SHIFT+ESC keys simultaneously
  • Carefully review all processes and stop the suspicious ones.

end-malicious-process

  • Write down the file location for later reference.

Step 2: Locate Addthis_widget.js startup location

Reveal Hidden Files

  • Open any folder
  • Click on “Organize” button
  • Choose “Folder and Search Options”
  • Select the “View” tab
  • Select “Show hidden files and folders” option
  • Uncheck “Hide protected operating system files”
  • Click “Apply” and “OK” button

Clean Addthis_widget.js virus from the windows registry

  • Once the operating system loads press simultaneously the Windows Logo Button and the R key.

win-plus-r

  • A dialog box should open. Type “Regedit”

regedit

Depending on your OS (x86 or x64) navigate to:

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] or
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] or
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

  • and delete the display Name: [RANDOM]

delete backgroundcontainer

  • Then open your explorer and navigate to: %appdata% folder and delete the malicious executable.

Clean your HOSTS file to avoid unwanted browser redirection

Navigate to %windir%/system32/Drivers/etc/host

If you are hacked, there will be foreign IPs addresses connected to you at the bottom. Take a look below:

hosts-redirect-virus

Step 4: Undo the possible damage done by Addthis_widget.js

This particular Virus may alter your DNS settings.

Attention! this can break your internet connection. Before you change your DNS settings to use Google Public DNS for Addthis_widget.js, be sure to write down the current server addresses on a piece of paper.

To fix the damage done by the virus you need to do the following.

  • Click the Windows Start button to open the Start Menu, type control panel in the search box and select Control Panel in the results displayed above.
  • go to Network and Internet
  • then Network and Sharing Center
  • then Change Adapter Settings
  • Right-click on your active internet connection and click properties. Under the Networking tab, find Internet Protocol Version 4 (TCP/IPv4). Left click on it and then click on properties. Both options should be automatic! By default it should be set to “Obtain an IP address automatically” and the second one to “Obtain DNS server address automatically!” If they are not just change them, however if you are part of a domain network you should contact your Domain Administrator to set these settings, otherwise the internet connection will break!!!

 

  • Check your scheduled tasks to make sure the virus will not download itself again.

How to Permanently Remove Addthis_widget.js Virus (automatic) Removal Guide

Please, have in mind that once you are infected with a single virus, it compromises your whole system or network and let all doors wide open for many other infections. To make sure manual removal is successful, we recommend to use a free scanner of any professional antimalware program to identify possible virus leftovers or temporary files.

Leave a Comment