Remove Hijack.ShellA.Gen Permanently – How Do I Get Rid of Hijack.ShellA.Gen?

Last night I scanned my computer with MBAM several times and found Hijack.ShellA.Gen. I marked it for quarantine, rebooted but it showed up again on the next scan. How do I remove it?

What is Hijack.ShellA.Gen?

Hijack.ShellA.Gen is detected as a Trojan horse that will seriously damage the infected computer by doing a lot of harmful destructions. This kind of Trojan often breaks in users’ computer via different channels. Here are some details about its transmission channels. For example –

Attached to the spam email;
Spread by infected removable drives;
Bundled with free programs or small programs like java update;
Embedded on suspicious hyperlinks and compromised webpages...


Hijack.ShellA.Gen will damage your computer seriously. It can mainly change your browser settings and your DNS settings. And then you will encounter a series of problems. For example, you will find your browser homepage and search engine changed into suspected ones. Whenever you browse the web, you will find your web pages redirected to suspected sites without asking permission. It can also damage or even delete your important system files, making your system acting weirdly and slowly. Besides, Hijack.ShellA.Gen can also download other malwares to the computer after it exploits the vulnerability of your browsers and system. And then it will do more harm to your PC with the help of the malware it triggers. If you leave this virus go unchecked in your computer, you may face with information theft and attacks from remote hackers.

How to Remove Hijack.ShellA.Gen

Hijack.ShellA.Gen is a dangerous computer threat. It should be removed from your PC as soon as possible. Here is some removal advice below. You can read it for help.

Guide 1: Manually Remove Hijack.ShellA.Gen by Yourself
Guide 2: Automatically Remove Hijack.ShellA.Gen with SpyHunter

Guide 1: Manually Remove Hijack.ShellA.Gen by Yourself

Step 1. Restart your computer in Safe mode.

Keep tabbing F8 key before the Windows start-up logo appears until you get to Advanced Options, select Safe Mode, and hit ENTER.



Step 2. End up the trojan processes in Windows Task Manager.

Press Ctrl+Shift+Esc or Ctrl+Alt+Delete to open Windows Task Manager, find malicious processes and click End process.



Random.exe

Step 3. Navigate to Registry Editor and clean up all Hijack.ShellA.Gen registry entries.

Press Win+ R key at and same time to open Run Commend Box. Open Registry Editor by typing “regedit” in Runbox and clicking OK.



Look through the registry entries and find out all listed harmful items. Right click on them and terminate the related entries.



HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "<random>" = "%AppData%\<random>.exe"
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "<random>" = "%AppData%\<random>.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation"=1
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = "%AppData%\<random>.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe "Debugger"="svchost.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpCmdRun.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpUXSrv.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSASCui.exe

Step 4. Show hidden folders and files.

Windows XP

Start button > Control Panel > Appearance and Personalization > Folder Options > Show Hidden Files or Folders



Remove the checkmark from Hide extensions for known file types. And remove the checkmark from Hide protected operating system files (Recommended).

Windows 7 / Vista

Libraries > Folder Options > Tools > Show Hidden Files or Folders




Remove the checkmark from Hide extensions for known file types and Hide protected operating system files (Recommended)

Windows 8 /8.1

Windows Explorer > View > Hidden Items



Delete Hijack.ShellA.Gen Virus associated files.

%UserProfile%\Application Data\Microsoft\[random].exe
%System Root%\Samples
%User Profile%\Local Settings\Temp
%AppData%\<random>.exe
%CommonAppData%\<random>.exe
C:\Windows\Temp\<random>.exe
%temp%\<random>.exe
C:\Program Files\<random>
C:\ProgramData\[random numbers]\

Step 5 Restore your browser 

Internet Explorer

Open Internet Explorer, then click on the gear icon (Tools for Windows XP users) at the top (far right), then select Manage add-ons.

 Navigate to Search Providers, remove S.yimg.com from the list and enable the one you want.

Follow the pictures below to get back your Home Page. If you fail to remove this website, you can reset your browser settings.

Delete random URL in the homepage box and type in www.google.com or other.

Mozilla Firefox

Open Firefox, simultaneously tap Alt+T keys and select Options. Click the General tab and move to the Home Page. Type in www.google.com or other. and click OK.

Open Firefox, press Alt + H, and select Troubleshooting Information > Refresh...

Google Chrome

Click on the Customize icon(wrench or 3 bar icon) next to the address bar. Select Settings from the drop-down list and then navigate to  Search > Manage search engines…Click X on the URL of the search tool you want to remove. Click Done.

Find Show advanced settings...and then go to Reset settings.

 

Step 6. Remove leftover and speed up your PC.

You can download and install RegCure Pro to speed up and optimize your PC. It is packed with the tools you need to boost your PC's speed and performance.

• Clean away Windows registry errors
• Eject active viruses, spyware and other malware
• Stop unneeded processes 
• Delete startup items
• Delete privacy files

Click the icon to download RegCure Pro.

Guide 2: Automatically Remove Hijack.ShellA.Gen with Powerful Removal Tool

SpyHunter is an adaptive real-time spyware detection and removal tool. It  can help you remove Hijack.ShellA.Gen and all the threats in your PC. It will never bundle with any programs and can get along with existing security programs without any conflicts. Please feel relieved about usage.

Click the download button below to get SpyHunter

After detecting all the threats in your system, you can click on “Fix Threats” to remove them.



Warm Reminder:

SpyHunter is a powerful anti-malware for inexperience computer user. It can help you remove all the detected threats automatically. So all you need to do is install it for immediate and ongoing protection.