How to Remove War Thunder Pop-up Ads

Can’t Remove War Thunder ads? This page includes detailed ads by War Thunder Removal instructions!

War Thunder is the striking name of an adware infection. Yes, the program, getting advertised as a free gaming platform, is a fake. It’s not useful or reliable. It doesn’t offer anything enjoyable. What it offers is headaches and unpleasantness. Adware-type applications are hazardous and an immense threat. Above all, they are ad-supported. And, so is War Thunder. If you’re unfamiliar with the term, let’s elaborate. It means that, to survive, the adware has to make money. How does it succeed in doing that? Well, easy. It exploits your naivety. The tool gets you to click on its unreliable links and ads. And, every time you do, you ensure its survival. Here’s why you must NOT do that. Clicks brings prosperity for the infection, and grievances for you. Say, you press one of the countless pop-up ads, it bombards you with. By choice or accident, it doesn’t matter. The result is the same. You end up with malware. Yes, a click equals you getting stuck with more unwanted infections. How come? Well, each ad, the adware throws at you, conceals malware. You pressing it is the same as giving consent on its installment. So, the more ads, you press, the more infections, you end up with. And, that’s only one of the issues, War Thunder presents you with. The absolute worst one, that towers over all the rest, has to do with your privacy. The cyber threat follows instructions to steal and expose your private information. It spies on your online activities, and records your every move. Once it deems it has gathered enough, it hands it over. To whom? Well, to the unknown third parties that published it. Let that sink in for a moment. Strangers get access to your personal and financial data. Are you okay with that? Or, would you rather do something to prevent it? Do what’s best for you, and your system, and delete the adware ASAP. War Thunder is a menace. Get rid of it.

Remove War Thunder

How did I get infected with?

War Thunder turns to the usual antics to invade your system. The old but gold means tend to assist its sneaky invasion. Yes, the tool manages to slither its way in undetected. That may seem astonishing. Especially, when you consider it needs your permission to enter. No adware can access a user’s system without asking for, and receiving, the explicit consent of said user. So, the War Thunder application asked whether you agree to allow it into your system. And, evidently, you did. Don’t be too hard on yourself, though. Don’t imagine the tool outright popping up to seek permission. If it did that, you’d deny it, and move on. And, the infection can’t have that. So, instead, it turns to slyness and subtlety. It still asks. But it does it in such a way that if you’re not cautious enough, you can’t catch it. It slips by you, and you don’t even know it. It may sound confusing, but it’s rather simple. One of the most common methods of invasion is freeware. The adware lurks behind it. And, if you don’t apply enough attention when installing it, it invades unnoticed. If you wish to avoid that scenario, don’t throw caution to the wind. Understand how imperative it is to do your due diligence. Every time, you install tools or updates off the web, be thorough. Take the time to read the terms and conditions. Don’t just say YES to everything, and hope for the best. That’s a strategy that almost always results in infections, sneaking in. Don’t give into gullibility and haste. Don’t discard the importance of vigilance. Sometimes, even a little extra attention goes a long way.

Why is this dangerous?

War Thunder is a game that you can, supposedly, play online for free. Or, so claims the website. Make no mistake. Choosing to trust the game, or the website, costs you. You get redirected to non-stop. As well as to other suspicious sites. All of which are unreliable and untrustworthy. Open a new tab, search the web, do anything online at all. You get redirected. But not only redirects plague your browsing. You also suffer endless waterfalls of ads. As stated, the tool rests on its ads and links to prolong its operations. The more you click on what it throws your way, the more it continues to exist. However, as mentioned, for you they lead to nothing but unpleasantness. Their constant appearance causes frequent system crashes. Your computer’s performance slows down to a crawl, as well. Every time, you go online, you go through hell. Add the security threat to that mess, and the decision gets made for you. You should delete the adware ASAP! It only wreaks havoc, and pushes you further into the abyss of troubles. The more it remains, the worse your predicament gets. Do yourself a favor, and don’t waste time. Find the exact hiding place of the War Thunder plague. Then, as soon as you do, delete it. It’s the best course of action, you can take. You best take it fast. Delays lead to regrets.

How to Remove War Thunder virus

The War Thunder infection is specifically designed to make money to its creators one way or another. The specialists from various antivirus companies like Bitdefender, Kaspersky, Norton, Avast, ESET, etc. advise that there is no harmless virus.

If you perform exactly the steps below you should be able to remove the War Thunder infection. Please, follow the procedures in the exact order. Please, consider to print this guide or have another computer at your disposal. You will NOT need any USB sticks or CDs.

WARNING! Stopping the wrong file or deleting the wrong registry key may damage your system irreversibly.
If you are feeling not technical enough just use Spyhunter Professional Malware Removal Tool to deal with the problem!
>>Download SpyHunter – a Professional Remover.

Please, keep in mind that SpyHunter’s scanner tool is free. To remove the War Thunder infection, you need to purchase its full version.

STEP 1: Track down War Thunder in the computer memory

STEP 2: Locate War Thunder startup location

STEP 3: Delete War Thunder traces from Chrome, Firefox and Internet Explorer

STEP 4: Undo the damage done by the virus

STEP 1: Track down War Thunder in the computer memory

  • Open your Task Manager by pressing CTRL+SHIFT+ESC keys simultaneously
  • Carefully review all processes and stop the suspicious ones.


  • Write down the file location for later reference.

Step 2: Locate War Thunder startup location

Reveal Hidden Files

  • Open any folder
  • Click on “Organize” button
  • Choose “Folder and Search Options”
  • Select the “View” tab
  • Select “Show hidden files and folders” option
  • Uncheck “Hide protected operating system files”
  • Click “Apply” and “OK” button

Clean War Thunder virus from the windows registry

  • Once the operating system loads press simultaneously the Windows Logo Button and the R key.


  • A dialog box should open. Type “Regedit”


Depending on your OS (x86 or x64) navigate to:

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] or
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] or

  • and delete the display Name: [RANDOM]

delete backgroundcontainer

  • Then open your explorer and navigate to: %appdata% folder and delete the malicious executable.

Clean your HOSTS file to avoid unwanted browser redirection

Navigate to %windir%/system32/Drivers/etc/host

If you are hacked, there will be foreign IPs addresses connected to you at the bottom. Take a look below:


STEP 3 : Clean War Thunder traces from Chrome, Firefox and Internet Explorer

  • Open Google Chrome

  • In the Main Menu, select Tools then Extensions
  • Remove the War Thunder by clicking on the little recycle bin
  • Reset Google Chrome by Deleting the current user to make sure nothing is left behind

disable War Thunder from chrome

  • Open Mozilla Firefox

  • Press simultaneously Ctrl+Shift+A
  • Disable the unwanted Extension
  • Go to Help
  • Then Troubleshoot information
  • Click on Reset Firefox

remove War Thunder from firefox

  • Open Internet Explorer

  • On the Upper Right Corner Click on the Gear Icon
  • Click on Internet options
  • go to Toolbars and Extensions and disable the unknown extensions
  • Select the Advanced tab and click on Reset

remove War Thunder from ie

  • Restart Internet Explorer

Step 4: Undo the damage done by War Thunder

This particular Virus may alter your DNS settings.

Attention! this can break your internet connection. Before you change your DNS settings to use Google Public DNS for War Thunder, be sure to write down the current server addresses on a piece of paper.

To fix the damage done by the virus you need to do the following.

  • Click the Windows Start button to open the Start Menu, type control panel in the search box and select Control Panel in the results displayed above.
  • go to Network and Internet
  • then Network and Sharing Center
  • then Change Adapter Settings
  • Right-click on your active internet connection and click properties. Under the Networking tab, find Internet Protocol Version 4 (TCP/IPv4). Left click on it and then click on properties. Both options should be automatic! By default it should be set to “Obtain an IP address automatically” and the second one to “Obtain DNS server address automatically!” If they are not just change them, however if you are part of a domain network you should contact your Domain Administrator to set these settings, otherwise the internet connection will break!!!

You must clean all your browser shortcuts as well. To do that you need to

  • Right click on the shortcut of your favorite browser and then select properties.


  • in the target field remove War Thunder argument and then apply the changes.
  • Repeat that with the shortcuts of your other browsers.
  • Check your scheduled tasks to make sure the virus will not download itself again.

How to Permanently Remove War Thunder Virus (automatic) Removal Guide

Please, have in mind that once you are infected with a single virus, it compromises your system and let all doors wide open for many other infections. To make sure manual removal is successful, we recommend to use a free scanner of any professional antimalware program to identify possible registry leftovers or temporary files.

Leave a Comment