Home Blog

Ilitili Virus – How to Remove Ilitili Virus completely

Posted by in Blog browser hijacker
on December 4th, 2012 | Leave a comment

Ilitili Virus is classified as browser hijacker virus that redirect web browser on the compromised computer. The virus gets into a computer with the help of Trojan virus or system vulnerability. It usually redirect users to ilitili.com and then to other random sites such as Isearch.glarysoft.com. Before you learn how to remove the virus, it is necessary to know how your pc is infected so as to prevent such infection effectively in the further. The threat could be bundled with spam email attachment, some free programs and fake software update from non-official websites. In addition to changing web browser settings and damaging computer, Ilitili Virus collect information such as login name, passwords, websites visited, search inquires and so on.

How to remove Ilitili Virus manually
One of the possible ways to remove the Trojan is to remove related files and registry entries manually. But it is based on the foundation that you have enough pc skills.
1. Remove following files

%AllUsersProfile%\Application Data\~
%AllUsersProfile%\Application Data\~r
%AllUsersProfile%\Application Data\.dll
%AllUsersProfile%\Application Data\.exe
%AllUsersProfile%\Application Data\
%AllUsersProfile%\Application Data\.exe
%UserProfile%\Start Menu\Programs\www.ilitili.com\
%UserProfile%\Start Menu\Programs\www.ilitili.com\Uninstall www.ilitili.com.lnk
%UserProfile%\Start Menu\Programs\www.ilitili.com\www.ilitili.com.lnk

2. Delete registry entries created by Ilitili Virus

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “CertificateRevocation” = ’0?
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnonBadCertRecving” = ’0?
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop “NoChangingWallPaper” = ’1?
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = ‘/{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/`wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v`w:/rbs:’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = ’1?
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = ’1?
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “DisableTaskMgr” = ’1?
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = ‘no’
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main “Use FormSuggest” = ‘yes’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced “Hidden” = ’0?
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced “ShowSuperHidden” = 0?

How to Get Rid of Ilitili Virus in an Automatic Way?
Due to the complexity of manual removal, many victims want to find a quick and effective way to help you get rid of Ilitili Virus completely. Here we strongly recommend you to get an automatic way. To complete the task, you need a kind of powerful and professional antivirus software, such as Spyware Cease. It can help you detect and kill all the viruses in a short time. The whole process involves few manual steps. As long as you know how to install a virus removal program, you can give all work to it. Spyware Cease is one of the most powerful virus removal programs that can wipe off browser hijacker virus effectively. It is proved that Spyware Cease can remove Ilitili Virus after an online scan.

Leave a Reply