Jun 26

RestrictedDomainHelp.com Hijacker Description:

RestrictedDomainHelp.com is an intricate invention of the malware creators who are responsible for developing and propagating such infamous rogue anti-spyware as Personal Antivirus (alias PAV). If you ever hit RestrictedDomainHelp.com domain, we assure you have a trojan virus on board which has integrated itself with your web browser and is triggering randomly implemented browser redirections. RestrictedDomainHelp.com is entitled “Warning! Visiting this site may harm your computer!” and actually looks like a warning page that offers a few options to choose. In order to prevent malicious online activity, RestrictedDomainHelp.com suggests the victims to click and activate the “Web protection software”. However, if you happen to push that link, you will get diverted to a page (same URL but extension “/1” or “/2”) where you will be suggested to buy Personal Antivirus license. Do not get lured by the alleged discount mentioned on RestrictedDomainHelp.com/1 or RestrictedDomainHelp.com/2 domains. There’s no room for discount when it’s about purchasing a worthless and, what’s more, dangerous program that pretends to be something it’s definitely not. Please, keep your web-surfing away from RestrictedDomainHelp.com and this sort of websites. You should just remove RestrictedDomainHelp.com hijacker, which means you need to get the corresponding trojans uninstalled. You can use the tips below to learn how to secure your online routine from RestrictedDomainHelp.com hijacker and its related rogue anti-spyware Personal Antivirus.

Find out if your PC is infected with RestrictedDomainHelp.com hijacker and affiliated malware (PAV rogue):

RestrictedDomainHelp.com screenshot:

How to remove RestrictedDomainHelp.com hijacker manually:

To perform manual removal of RestrictedDomainHelp.com hijacker, you should do the following:

Delete RestrictedDomainHelp.com related corrupt files:

  • %Documents and Settings%\All Users\Desktop\Personal Antivirus.lnk
  • %Documents and Settings%\All Users\Start Menu\Programs\Personal Antivirus
  • %Documents and Settings%\All Users\Start Menu\Programs\Personal Antivirus\Personal Antivirus Home Page.lnk
  • %Documents and Settings%\All Users\Start Menu\Programs\Personal Antivirus\Personal Antivirus.lnk
  • %Documents and Settings%\All Users\Start Menu\Programs\Personal Antivirus\Purchase License.lnk
  • %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Personal Antivirus.lnk
  • %UserProfile%\Application Data\Personal Antivirus
  • %UserProfile%\Application Data\Personal Antivirus\settings.ini
  • %UserProfile%\Application Data\Personal Antivirus\uill.ini
  • %UserProfile%\Application Data\Personal Antivirus\unins000.exe
  • %UserProfile%\Application Data\Personal Antivirus\Uninstall Personal Antivirus.lnk
  • %UserProfile%\Application Data\Personal Antivirus\db
  • %UserProfile%\Application Data\Personal Antivirus\db\config.cfg
  • %UserProfile%\Application Data\Personal Antivirus\db\Timeout.inf
  • %UserProfile%\Application Data\Personal Antivirus\db\Urls.inf
  • %UserProfile%\Local Settings\Application Data\Microsoft\Windows\log.txt
  • %UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini
  • %UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe
  • %Program Files%\Personal Antivirus
  • %Program Files%\Personal Antivirus\activate.ico
  • %Program Files%\Personal Antivirus\Explorer.ico
  • %Program Files%\Personal Antivirus\PerAvir.exe
  • %Program Files%\Personal Antivirus\unins000.dat
  • %Program Files%\Personal Antivirus\uninstall.ico
  • %Program Files%\Personal Antivirus\working.log
  • %Program Files%\Personal Antivirus\db
  • %Program Files%\Personal Antivirus\db\DBInfo.ver
  • %Program Files%\Personal Antivirus\db\ia080614.db
  • %Program Files%\Personal Antivirus\db\ia080618x.db
  • %Program Files%\Personal Antivirus\Languages
  • %Program Files%\Personal Antivirus\Languages\IAEs.lng
  • %Program Files%\Personal Antivirus\Languages\IAFr.lng
  • %Program Files%\Personal Antivirus\Languages\IAGer.lng
  • %Program Files%\Personal Antivirus\Languages\IAIt.lng
  • %WINDOWS%\system32\log.txt
  • %UserProfile%\Application Data\Microsoft\Windows\winlogon.exe
  • %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iGSh.png
  • %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iMSh.png
  • %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iPSh.png
  • %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iv.exe
  • %UserProfile%\Local Settings\Application Data\Microsoft\Windows\log.txt
  • %UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini
  • %UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe

Remove RestrictedDomainHelp.com associated registry entries:

  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Personal Antivirus_is1
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ITGRDENGINE
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ITGrdEngine
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “PrS”
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Personal Antivirus”

Please, note that manual removal of RestrictedDomainHelp.com hijacker is a procedure of high complexity and should be performed with extreme caution. Lack of the required skills and even the slightest deviation from the instructions may lead to irreparable system damage. To ensure trouble-free deletion, it is recommended to use the automatic RestrictedDomainHelp.com hijacker removal tool below:

Download RestrictedDomainHelp.com Hijacker Removal Tool

Leave a Reply