Remove EclecticButtons by Eclecticbuttons.com (“Add Extension” Scam)

Can’t Remove EclecticButtons ads? This page includes detailed ads by EclecticButtons Removal instructions!

EclecticButtons is a malicious Google Chrome extension. Its website is trying to lure you into installing it. Every now and then, your browser is redirected to the eclecticbuttons.com/bn.php page. Messages inform you that if you leave the website, some changes won’t be saved. But you probably know that. What you don’t know is that these messages are corrupted. They are part of the design of the website. Clicking on them will enable your browser’s full-screen mode. Your cursor will start to blink too. The malicious website is trying to disorientate you. This is all part of the scheme. Do not rush. Leave this page immediately. Unfortunately, we have some bad news. The fact that you were redirected to this website is evidence enough that your PC is already infected. You have the EclecticButtons adware on board. The good news is, this parasite can be deleted completely. Be advised, however. If you postpone the removal, the adware may get a chance to cause some irreversible damage to your system. As any other such infection, the EclecticButtons adware is programmed to generate ad-revenue. This app cares about money only. It doesn’t check what is being promoted via its services or who the advertiser is. Hackers take advantage of such applications. They use them to spread corrupted content. One click on the wrong advertisement will download more malware or viruses directly on your PC. Therefore, do not hesitate to remove the adware.

Remove EclecticButtons

How did I get infected with?

To reach its victims, adware applications rely on trickery. Torrents, spam messages, freeware/shareware bundling, etc. These are just the most commonly used malware distribution methods. Yet, these techniques can be prevented from succeeding. All you should do is to be vigilant and doubting. The EclecticButtons adware, as any other computer applications, needs your approval to operate. And you provided it. We are not accusing you. The adware tricked you. This furtive utility arrived hidden. Be careful when you are installing programs. Always opt for an advanced installation. Only under it can you see all extras that are about to be installed. Examine them carefully. Malicious programs are often presented as useful applications. Before you give your consent, read the terms and conditions. You can also do online research. If you spot anything out of the ordinary, abort the installation immediately. Keep in mind that you can deselect all extras and still install the program you originally planned to set up. This time you were lucky. The EclecticButtons adware can be removed. However, dangerous viruses are using these same techniques to travel the web. Choose caution over carelessness.

Why is this dangerous?

EclecticButtons adware is a menace. It displays a lot of commercials and redirects its victims to promoted websites. Due to its intrusive nature and the fact that it collects data about its users, this utility is considered a malicious program. Do not let it remain active on your computer. The longer it runs on your PC, the more dangerous it becomes. This utility collects information about your online activities. Which pages you visit, what search inquiries you make, browsing history, etc. Everything you enter via your web browser is recorded. This if you use your computer to pay the bills and to make an online purchase, the adware will record your usernames, passwords, credit card information and billing address. Can you imagine what may happen if such data becomes a possession of hackers? This scenario is quite possible. The EclecticButtons adware will sell every bit of information to third parties. Don’t wait to see what will happen with your computer. If you take immediate actions, you can remove the EclecticButtons adware relatively easy. Follow our detailed guide or download a trustworthy anti-virus application. You have a lot of options. Clean your computer now!

How to Remove EclecticButtons virus

The EclecticButtons infection is specifically designed to make money to its creators one way or another. The specialists from various antivirus companies like Bitdefender, Kaspersky, Norton, Avast, ESET, etc. advise that there is no harmless virus.

If you perform exactly the steps below you should be able to remove the EclecticButtons infection. Please, follow the procedures in the exact order. Please, consider to print this guide or have another computer at your disposal. You will NOT need any USB sticks or CDs.

STEP 1: Track down EclecticButtons in the computer memory

STEP 2: Locate EclecticButtons startup location

STEP 3: Delete EclecticButtons traces from Chrome, Firefox and Internet Explorer

STEP 4: Undo the damage done by the virus

STEP 1: Track down EclecticButtons in the computer memory

  • Open your Task Manager by pressing CTRL+SHIFT+ESC keys simultaneously
  • Carefully review all processes and stop the suspicious ones.

end-malicious-process

  • Write down the file location for later reference.

Step 2: Locate EclecticButtons startup location

Reveal Hidden Files

  • Open any folder
  • Click on “Organize” button
  • Choose “Folder and Search Options”
  • Select the “View” tab
  • Select “Show hidden files and folders” option
  • Uncheck “Hide protected operating system files”
  • Click “Apply” and “OK” button

Clean EclecticButtons virus from the windows registry

  • Once the operating system loads press simultaneously the Windows Logo Button and the R key.

win-plus-r

  • A dialog box should open. Type “Regedit”

regedit

Depending on your OS (x86 or x64) navigate to:

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] or
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] or
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

  • and delete the display Name: [RANDOM]

delete backgroundcontainer

  • Then open your explorer and navigate to: %appdata% folder and delete the malicious executable.

Clean your HOSTS file to avoid unwanted browser redirection

Navigate to %windir%/system32/Drivers/etc/host

If you are hacked, there will be foreign IPs addresses connected to you at the bottom. Take a look below:

hosts-redirect-virus

STEP 3 : Clean EclecticButtons traces from Chrome, Firefox and Internet Explorer

  • Open Google Chrome

  • In the Main Menu, select Tools then Extensions
  • Remove the EclecticButtons by clicking on the little recycle bin
  • Reset Google Chrome by Deleting the current user to make sure nothing is left behind

disable EclecticButtons from chrome

  • Open Mozilla Firefox

  • Press simultaneously Ctrl+Shift+A
  • Disable the unwanted Extension
  • Go to Help
  • Then Troubleshoot information
  • Click on Reset Firefox

remove EclecticButtons from firefox

  • Open Internet Explorer

  • On the Upper Right Corner Click on the Gear Icon
  • Click on Internet options
  • go to Toolbars and Extensions and disable the unknown extensions
  • Select the Advanced tab and click on Reset

remove EclecticButtons from ie

  • Restart Internet Explorer

Step 4: Undo the damage done by EclecticButtons

This particular Virus may alter your DNS settings.

Attention! this can break your internet connection. Before you change your DNS settings to use Google Public DNS for EclecticButtons, be sure to write down the current server addresses on a piece of paper.

To fix the damage done by the virus you need to do the following.

  • Click the Windows Start button to open the Start Menu, type control panel in the search box and select Control Panel in the results displayed above.
  • go to Network and Internet
  • then Network and Sharing Center
  • then Change Adapter Settings
  • Right-click on your active internet connection and click properties. Under the Networking tab, find Internet Protocol Version 4 (TCP/IPv4). Left click on it and then click on properties. Both options should be automatic! By default it should be set to “Obtain an IP address automatically” and the second one to “Obtain DNS server address automatically!” If they are not just change them, however if you are part of a domain network you should contact your Domain Administrator to set these settings, otherwise the internet connection will break!!!

You must clean all your browser shortcuts as well. To do that you need to

  • Right click on the shortcut of your favorite browser and then select properties.

safebrowsing-biz-shortcut-removal

  • in the target field remove EclecticButtons argument and then apply the changes.
  • Repeat that with the shortcuts of your other browsers.
  • Check your scheduled tasks to make sure the virus will not download itself again.

How to Permanently Remove EclecticButtons Virus (automatic) Removal Guide

Please, have in mind that once you are infected with a single virus, it compromises your system and let all doors wide open for many other infections. To make sure manual removal is successful, we recommend to use a free scanner of any professional antimalware program to identify possible registry leftovers or temporary files.

Leave a Comment