Cantataweb Ads Removal Guide - How to Remove Cantataweb

Cantataweb Adware Removal Guide

Cantataweb is an nasty adware which attaches itself on your IE, Firefox and Chrome silently when you install free programs downloaded from third party websites. With the invading of Cantataweb, your online activities will be interrupted severely every time you open web browser. No matter what website you visit, annoying Cantataweb ads in forms of in-text hyperlink ads, banner ads and popup ads will keep harassing you. In worse situation, other threats such as hijacker will be transferred to your system with help of Cantataweb, then your homepage and search engine will be replaced with unwanted third party search engine like iStart123.com and omiga-plus. Spyware connected with Cantataweb may even be able to steal your sensitive information, and you may suffer from financial loss.



From research, lots of victims cannot get rid of Cantataweb virus with their antivirus program. This is common, since Cantataweb was created with advanced rootkit technology which helps its codes bypass firewall and antispyware, and it is able to change its codes’ name and path on the compromised PC constantly, thus your antispyware could hardly keep up to detect and remove all the malicious codes. Therefore, we have to use the effective manual solution that could always help we remove stubborn virus like Cantataweb malware. Please follow the manual removal steps below to clear up the Cantataweb ads and secure your PC. If you are not familiar with manual removal, you’d better get professional help from MiTechMate Online PC Expert:

Remove Cantataweb redirect step by step now

(Please carefully read the notes before you start to remove any file :This guide is based on the first version of Cantataweb, but this infection keeps adding its features and updating its codes, files and locations, thus you may not be able to find out all its related files listed below. It requires expert skills and experience to identify all the files of Cantataweb infection, if you are not familiar with it, do not risk to delete any file by yourself, since you may disable your PC for deleting wrong files which are crucial for your system. This guide is just for reference, we do not promise it will work for all the victims of different PCs in varied situations and conditions. Any problem and consequence incurred by your mistake should be borne by yourself.)

Step 1: Reset browser settings of Chrome, Firefox and Internet Explorer:



Google Chrome

Click on Chrome wrench icon >> click on Settings >> click on the Show Advanced Settings >> click on Reset Browser Settings.



  Mozilla Firefox


Click on Firefox button >> locate Help >> click on Troubleshooting Information >> click on Reset Firefox


 



  Internet Explorer


Click on Tools >> select Internet Options >> click on Advanced tab >> click on Reset >> confirm the resetting

.




   Step2: Show all hidden files: On Windows XP

• Close all programs so that you are at your desktop.
• Click on the Start button. This is the small round button with the Windows flag in the lower left corner.
• Click on the Control Panel menu option.
• When the control panel opens click on the Appearance and Personalization link.
• Under the Folder Options category, click on Show Hidden Files or Folders.
• Under the Hidden files and folders section, select the radio button labeled Show hidden files, folders, or drives.
• Remove the checkmark from the checkbox labeled Hide extensions for known file types.
• Remove the checkmark from the checkbox labeled Hide protected operating system files (Recommended).
• Press the Apply button and then the OK button.

On Windows 7 / Vista

• Click and open Libraries
• Under the Folder Options category of Tools , click on Show Hidden Files or Folders.
• Under the Hidden files and folders section, select the radio button labeled Show hidden files, folders, or drives.
• Remove the checkmark from the checkbox labeled Hide extensions for known file types.
• Remove the checkmark from the checkbox labeled Hide protected operating system files (Recommended).
• Press the Apply button and then the OK button.

On Windows 8 /8.1

• Click on Windows Explorer ;
• Click on View tab;
• Check the "Hidden Items" box

Step3: Delete Cantataweb redirect Virus associated files

%AllUsersProfile%\Application Data\.exe
%AppData%[trojan name]toolbarstats.dat
%UserProfile%\Application Data\[random digits]\[random digits].cfg
%UserProfile%\Application Data\[random digits]\[random digits].exe

Step4: Set Your DNS as Google’s public DNS (8.8.8.8):




Step5: Terminate these Registry Entries created by Cantataweb redirect.



Method 1 (Available on Windows XP, Windows 7 /Vista, and Windows 8 /8.1):

• Call out “Run” box by pressing “Windows” key + “R” key on your keyboard;
• Type "Regedit" into the Run box and click OK to open Registry Editor

 


  Method 2 (Available on Windows 7/ Vista):

• Click on Start button to open Start Menu
• Type "Regedit" into the search box and click on Regedit to open Registry Editor

 
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\InternetSettings “CertificateRevocation”=0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\[RANDOM CHARACTERS] %AppData%\[RANDOM CHARACTERS]\[RANDOM CHARACTERS].exe
HKEY_CURRENT_USER\Software\Microsoft\Installer\Products\random

Video Guide about How to Remove Registry Entries of Adware

Important notes

If you are not a computer expert, it will be very risky to complete the Cantataweb manual removal process. You have to assure that you are equipped with expert-level knowledge and skills on PC before you do anything on the infected system. If you are not experienced enough on manually removing a virus, please get MiTechMate Online PC Support to help you.