{"id":66779,"date":"2017-04-03T11:25:49","date_gmt":"2017-04-03T08:25:49","guid":{"rendered":"http:\/\/greatis.com\/blog\/how-to\/remove-weatherbuddy-exe-virus-redirect.htm"},"modified":"2017-04-03T11:25:49","modified_gmt":"2017-04-03T08:25:49","slug":"remove-weatherbuddy-exe-virus-redirect","status":"publish","type":"post","link":"https:\/\/greatis.com\/blog\/how-to\/remove-weatherbuddy-exe-virus-redirect.htm","title":{"rendered":"How to TOTALLY remove WEATHERBUDDY.EXE virus? Here is your &quot;WEATHERBUDDY.EXE Removal Guide&quot;"},"content":{"rendered":"<div class=\"wpInsert wpInsertInPostMy wpInsertAbove\" style=\"padding: 0px;\"><\/div><p>Be careful! Full path on computer: <b>%LOCAL APPDATA%\\WEATHERBUDDY\\WEATHERBUDDY.EXE<\/b><\/p>\n<p><h2>What is WEATHERBUDDY.EXE?<\/h2>\n<div class=\"intro\">\n<b>WEATHERBUDDY.EXE is a pretty popular virus.<\/b><br \/>\nYou can get it on your computer while downloading it bundled with some free software.<br \/>\nSadly, most free downloads do not disclose that other programs will be installed, so you are more likely to get WEATHERBUDDY.EXE on your PC without your own knowledge.\n<\/div>\n<div class=\"space\">&nbsp;<\/div>\n<p>After being downloaded, <b>WEATHERBUDDY.EXE<\/b> hijacks your browser and changes search settings.<br \/>\nWEATHERBUDDY.EXE also causes an appearance of popup ads and browser redirecting.<\/p>\n<p>WEATHERBUDDY.EXE is very annoying and hard to get rid of.<br \/>\n<b>Make a full backup of your PC before starting.<\/b><br \/>\nFollow the next steps to make your system clean again:<\/p>\n<h3>How to remove WEATHERBUDDY.EXE manually:<\/h3>\n<p>STEP 1: <b>Uninstall WEATHERBUDDY.EXE<\/b> using Windows uninstallation applet (use Add\/Remove Programs or Uninstall Program or Apps &amp; features).<br \/>\n<img src=\"http:\/\/info.greatis.com\/wp-content\/uploads\/2016\/11\/installed-programs.png\" alt=\"check installed programs to uninstall\" \/><\/p>\n<p>STEP 2: Open Task Manager and close all processes, related to <strong>WEATHERBUDDY.EXE<\/strong> in their description. Discover the directories where such processes start. Search for random or strange file names.<\/p>\n<div style=\"width: 501px\" class=\"wp-caption alignnone\"><img loading=\"lazy\" src=\"http:\/\/greatis.com\/blog\/img\/remove-virus-proceses.png\" alt=\"Remove WEATHERBUDDY.EXE virus from running processes \" width=\"491\" height=\"532\" \/><p class=\"wp-caption-text\">Remove WEATHERBUDDY.EXE virus from running processes<\/p><\/div>\n<p>STEP 3: Inspect the Windows services. Press Win+R, type in: services.msc and press OK.<\/p>\n<div style=\"width: 436px\" class=\"wp-caption alignnone\"><img loading=\"lazy\" src=\"http:\/\/greatis.com\/blog\/img\/remove-virus-from-services.png\" alt=\"Remove WEATHERBUDDY.EXE virus from Windows services\" width=\"426\" height=\"233\" \/><p class=\"wp-caption-text\">Remove WEATHERBUDDY.EXE virus from Windows services<\/p><\/div>\n<p>Disable the services with random names or contains <strong>WEATHERBUDDY.EXE<\/strong> in it&#8217;s name or description.<\/p>\n<p>STEP 4: After that press Win+R, type in: taskschd.msc and press OK to open Windows Task Scheduler.<br \/>\n<img class=\"responsive-img\" src=\"http:\/\/info.greatis.com\/wp-content\/uploads\/2016\/11\/run-scheduler.png\" alt=\"Remove WEATHERBUDDY.EXE from scheduled task list.\" \/><\/p>\n<p>Delete any task related to <strong>WEATHERBUDDY.EXE<\/strong>. Disable unknown tasks with random names.<\/p>\n<p>STEP 5: Clear the Windows registry from <strong>WEATHERBUDDY.EXE<\/strong> virus.<br \/>\nPress Win+R, type in: regedit.exe and press OK.<\/p>\n<div style=\"width: 436px\" class=\"wp-caption alignnone\"><img loading=\"lazy\" src=\"http:\/\/greatis.com\/blog\/img\/remove-virus-from-registry.png\" alt=\"Remove WEATHERBUDDY.EXE virus from Windows registry\" width=\"426\" height=\"233\" \/><p class=\"wp-caption-text\">Remove WEATHERBUDDY.EXE virus from Windows registry<\/p><\/div>\n<p>Find and delete all keys\/values contains<strong> WEATHERBUDDY.EXE<\/strong>.<\/p>\n<p>STEP 6: Check your <b>shortcuts on your desktop and in the Start menu<\/b> for WEATHERBUDDY.EXE presence. Fix infected shortcuts.<\/p>\n<p>STEP 7: <a href=\"http:\/\/greatis.com\/blog\/how-to\/remove-virus-google-chrome.htm\">Remove a virus from Google Chrome<\/a>.<\/p>\n<p>STEP 8: <a href=\"http:\/\/greatis.com\/blog\/howto\/remove-virus-internet-explorer.htm\">Remove a virus from Internet Explorer<\/a>.<\/p>\n<p>STEP 9: <a href=\"http:\/\/greatis.com\/blog\/howto\/remove-virus-from-mozilla-firefox.htm\">Remove a virus from Mozilla Firefox<\/a>.<\/p>\n<p>STEP 10: And at the end, clear your basket, temporal files, browser&#8217;s cache.<\/\/p><div class=\"wpInsert wpInsertInPostMy wpInsertMiddle\"><\/div><h2>How to remove WEATHERBUDDY.EXE automatically:<\/h2>\n<p>Just try to use <span style=\"text-decoration: underline;\"><a href=\"http:\/\/greatis.com\/unhackme\/download.htm?pk_campaign=blog&amp;pk_kwd=try\">UnHackMe<\/a><\/span> from <a href=\"http:\/\/www.greatis.com\/?pk_campaign=blog&amp;pk_kwd=trylink\">Greatis Software<\/a>.<\/p>\n<p><a href=\"http:\/\/greatis.com\/unhackme\/download.htm?pk_campaign=blog&amp;pk_kwd=complete\">UnHackMe<\/a> will complete all steps for only 5 minutes!<\/p>\n<h3>Here&rsquo;s how to remove WEATHERBUDDY.EXE virus:<\/h3>\n<p><b><u><a href=\"#step1\">STEP 1: Install UnHackMe (1 minute)<\/a><\/u><\/b><\/p>\n<p><b><u><a href=\"#step2\">STEP 2: Scan for malware using UnHackMe (1 minute)<\/a><\/u><\/b><\/p>\n<p><b><u><a href=\"#step3\">STEP 3: Remove WEATHERBUDDY.EXE virus (3 minutes)<\/a><\/u><\/b><\/p>\n<p>So it was much easier to fix such problem automatically, wasn&apos;t it?<br \/>\nThat is why I strongly advise you to use <span style=\"text-decoration: underline;\"><a href=\"http:\/\/greatis.com\/unhackme\/download.htm?pk_campaign=blog&amp;pk_kwd=end\">UnHackMe<\/a><\/span> for remove WEATHERBUDDY.EXE redirect or other unwanted software.<br \/>\nRelated Files:<br \/>\n%TEMP%\\5BE0956B-21D5-472C-B944-84ADDE9A75AD\\HTML.ZIP<br \/>\n%TEMP%\\WEATHER BUDDY_2017-04.LOG<br \/>\n%LOCAL APPDATA%\\WEATHERBUDDY\\WEATHERBUDDY.EXE<br \/>\n%STARTUP%\\WEATHERBUDDY.LNK<br \/>\n%START MENU%\\PROGRAMS\\WEATHERBUDDY\\WEATHERBUDDY.LNK<\/p>\n<h2>File Information WEATHERBUDDY.EXE:<\/h2>\n<p>Virustotal = <b>2\/62<\/b><br \/>\nMD5 =  <b>11C79EC491152EC0ECF3A2099D2C1D94<\/b><br \/>\nFile Size: 3670016<br \/>\nOriginalFilename: WeatherBuddy.exe<br \/>\nFileDescription: Weather Buddy GUI<br \/>\nInternalName: WeatherBuddy.exe<br \/>\nCompanyName: ELLS LLC<br \/>\nFileVersion: 1.0.0.15<br \/>\nLegalCopyright: c 2013-2017 by ELLS LLC<\/p>\n<div class=\"wpInsert wpInsertInPostMy wpInsertBelow\" style=\"padding: 0px;\"><\/div>","protected":false},"excerpt":{"rendered":"<p>Solved! Here is WEATHERBUDDY.EXE removal guide how to quickly remove (uninstall &#038; cleanup) WEATHERBUDDY.EXE from your computer. Follow this instruction to remove WEATHERBUDDY.EXE ads, redirect, homepage in the Google Chrome, Mozilla Firefox, Internet Explorer, Microsoft Edge.<br \/>\n   <br \/><a style=\"color: #42A2CE\" href=\"https:\/\/greatis.com\/blog\/how-to\/remove-weatherbuddy-exe-virus-redirect.htm\"><u>More&#8230;<\/u><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[51029],"tags":[76194],"_links":{"self":[{"href":"https:\/\/greatis.com\/blog\/wp-json\/wp\/v2\/posts\/66779"}],"collection":[{"href":"https:\/\/greatis.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/greatis.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/greatis.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/greatis.com\/blog\/wp-json\/wp\/v2\/comments?post=66779"}],"version-history":[{"count":0,"href":"https:\/\/greatis.com\/blog\/wp-json\/wp\/v2\/posts\/66779\/revisions"}],"wp:attachment":[{"href":"https:\/\/greatis.com\/blog\/wp-json\/wp\/v2\/media?parent=66779"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/greatis.com\/blog\/wp-json\/wp\/v2\/categories?post=66779"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/greatis.com\/blog\/wp-json\/wp\/v2\/tags?post=66779"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}