Home Blog

Funmoods Removal – How to Remove Funmoods Browser Hijacker

Posted by in Blog adware
on November 22nd, 2012 | Leave a comment

Funmoods is an add-on that can add expressions to social network and emails. With the popularity of social network, such kind of expression toolbar becomes popular. However, there are some suspicious toolbar you should not install and Funmoods is one of them. Though the toolbar claim itself as a legitimate one, we do find it hijacks browser, redirects search result, displays advertisement and uses misleading promotion technique to gain customers. Usually, virus that can produce advertisement will monitor users’ online activities and collect information like website visited and search inquiries, so that it can displays ads users may be interested in. Most victims complain that their web browser is redirected to start.funmoods.com. We suggest you not to keep Funmoods on your pc.

How to remove Funmoods completely
Have you tried browser built-in uninstaller or add/removal programs? Usually, these two methods can not uninstall the suspicious add-on completely. It will still run on the background and cause problems. You can try to remove Funmoods manually. Manual way is to find out and delete all components of the toolbar by yourself.
1. Unregister dll files

%ProgramFiles%\Funmoods\1.5.23.22\bh\escort.dll
%ProgramFiles%\Funmoods\1.5.23.22\escortApp.dll
%ProgramFiles%\Funmoods\1.5.23.22\escortEng.dll
%ProgramFiles%\Funmoods\1.5.23.22\escorTlbr.dll
%ProgramFiles%\Funmoods\1.5.23.22\escortShld.dll

2. Delete files

%AppData%\funmoods.crx
%AppData%\Google\Chrome\
%ProgramFiles%\Funmoods\1.5.23.22\funmoodssrv.exe
%ProgramFiles%\Funmoods\1.5.23.22\uninstall.exe
%ProgramFiles%\Funmoods\1.5.23.22\bh\escort.dll
%ProgramFiles%\Funmoods\1.5.23.22\escortApp.dll
%ProgramFiles%\Funmoods\1.5.23.22\escortEng.dll
%ProgramFiles%\Funmoods\1.5.23.22\escorTlbr.dll
%ProgramFiles%\Funmoods\1.5.23.22\escortShld.dll

3. Delete related registry entries

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\escort.DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\escortApp.DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\escortEng.DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\escorTlbr.DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\esrv.EXE
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{960DF771-CFCB-4E53-A5B5-6EF2BBE6E706}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}\Instl
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}\Instl\Data
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{75A4D144-506D-4BE5-81DB-EC7DA1E7F840}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{75A4D144-506D-4BE5-81DB-EC7DA1E7F840}\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{75A4D144-506D-4BE5-81DB-EC7DA1E7F840}\ProgID

Easy way to remove Funmoods
Using a virus removal program is the easiest way to get rid of the toolbar. Since some antivirus programs do not classified the toolbar as malicious, they do not put detection on it. So if you want to remove Funmoods by a virus removal program, you need to choose those that have detection on it.

We recommend you to download Spyware Cease, an antispyware program, which is proved to be able to remove the toolbar and stop redirection effectively.

Leave a Reply