{"id":72848,"date":"2017-10-10T12:16:17","date_gmt":"2017-10-10T09:16:17","guid":{"rendered":"http:\/\/greatis.com\/blog\/how-to\/remove-shadowsocks-miner.htm"},"modified":"2017-10-10T12:16:17","modified_gmt":"2017-10-10T09:16:17","slug":"remove-shadowsocks-miner","status":"publish","type":"post","link":"https:\/\/greatis.com\/blog\/howto\/remove-shadowsocks-miner.htm","title":{"rendered":"(SOLVED!) How to Remove &quot;SHADOWSOCKS MINER&quot; VIRUS in 3 simple steps! &quot;SHADOWSOCKS MINER&quot; Removal Guide"},"content":{"rendered":"<div class=\"wpInsert wpInsertInPostMy wpInsertAbove\" style=\"padding: 0px;\"><\/div><h2>What is SHADOWSOCKS MINER?<\/h2>\n<div class=\"intro\">\n<b>SHADOWSOCKS MINER is reported as Win32:PUP-gen<\/b> (potentially unwanted program). SHADOWSOCKS MINER is usually installed hiddenly without a user permission. SHADOWSOCKS MINER uses obtrusive, misleading, or deceptive advertising. SHADOWSOCKS MINER is hard in removal!\n<\/div>\n<div class=\"space\">&nbsp;<\/div>\n<p>I suggest you to <b>remove SHADOWSOCKS MINER from your PC as soon as possible<\/b>!<br \/>\nTried to remove SHADOWSOCKS MINER? Cannot completely delete SHADOWSOCKS MINER, because it gets back?<br \/>\nSee how to fix SHADOWSOCKS MINER step by step using my removal guide.<\/\/p><div class=\"wpInsert wpInsertInPostMy wpInsertMiddle\"><\/div><h2>How SHADOWSOCKS MINER got on your computer?<\/h2>\n<p>Like many potentially unwanted programs, SHADOWSOCKS MINER can be installed on your computer as part of a bundle with another tool you downloaded from the Internet. Since SHADOWSOCKS MINER manufacturer pays software developers for distributing SHADOWSOCKS MINER within their applications, SHADOWSOCKS MINER is often included as part of the installer.<br \/>\nSHADOWSOCKS MINER is also often distributed with free games and simple, one-click freeware tools developed specifically with the purpose of getting SHADOWSOCKS MINER onto as many computers as possible.<br \/>\nUsually, you have not only one SHADOWSOCKS MINER problem, but a bunch of similar WIN32:PUPs.<\/p>\n<h2>How dangerous is SHADOWSOCKS MINER?<\/h2>\n<p>While SHADOWSOCKS MINER is not considered illegal and is not officially classified as malware, it poses a direct threat to your privacy. Since SHADOWSOCKS MINER runs alongside your Web browser, it can collect and transmit information such your search queries, Web forms and passwords, names and messages, track Web sites that you visit, and do much more on your computer without you even knowing. SHADOWSOCKS MINER was reported to cause significant slowdowns in browser performance, making Web page load times much longer compared to a clean system.<\/p>\n<p>On a scale of 1 to 5 (with 1 being &quot;mostly harmless&quot;, 3 being &quot;invasive&quot; and 5 being &quot;dangerous&quot;), SHADOWSOCKS MINER can be rated as a 3.<\/p>\n<h2>You have 2 ways to remove SHADOWSOCKS MINER:<\/h2>\n<p><img loading=\"lazy\" class=\"alignnone wp-image-66789 size-full\" src=\"http:\/\/greatis.com\/blog\/img\/2ways.png\" alt=\"You have 2 ways\" width=\"192\" height=\"192\" \/><br \/>\n<span class=\"sidebar\"><br \/>\n<a href=\"#autoremoval\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-66791\" src=\"http:\/\/greatis.com\/blog\/img\/automatically.png\" alt=\"Remove it automatically\" width=\"48\" height=\"48\" \/>1. Remove Automatically.<\/a><br \/>\n<a href=\"#manualremoval\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-66790\" src=\"http:\/\/greatis.com\/blog\/img\/manually.png\" alt=\"Remove it manually\" width=\"48\" height=\"48\" \/>2. Remove Manually.<\/a><br \/>\n<\/span><\/p>\n<h3>Why I recommend you to use an automatic way?<\/h3>\n<ol>\n<li>You know only one virus name: &quot;SHADOWSOCKS MINER&quot;, but usually <strong>you have infected by a bunch of viruses<\/strong>.<br \/>\nThe UnHackMe program <strong>detects this threat and all others<\/strong>.<\/li>\n<li>UnHackMe is <strong>quite fast<\/strong>! You need only 5 minutes to check your PC.<\/li>\n<li>UnHackMe uses the special features to<strong> remove hard in removal viruses<\/strong>. If you remove a virus manually, it can prevent deleting using a self-protecting module. If you even delete the virus, it may recreate himself by a stealthy module.<\/li>\n<li>UnHackMe is <strong>small and compatible<\/strong> with any antivirus.<\/li>\n<li>UnHackMe is <strong>fully free<\/strong> for 30-days!<\/li>\n<\/ol>\n<p><a name=\"autoremoval\"><\/a><\/p>\n<h3>Here&rsquo;s how to remove SHADOWSOCKS MINER virus automatically:<\/h3>\n<p><b><u><a href=\"#step1\">STEP 1: Install UnHackMe (1 minute)<\/a><\/u><\/b><\/p>\n<p><b><u><a href=\"#step2\">STEP 2: Scan for malware using UnHackMe (1 minute)<\/a><\/u><\/b><\/p>\n<p><b><u><a href=\"#step3\">STEP 3: Remove SHADOWSOCKS MINER virus (3 minutes)<\/a><\/u><\/b><\/p>\n<p>\nSo it was much easier to fix such problem automatically, wasn&apos;t it?<br \/>\nThat is why I strongly advise you to use <span style=\"text-decoration: underline;\"><a href=\"http:\/\/greatis.com\/unhackme\/download.htm?pk_campaign=blog&amp;pk_kwd=end\">UnHackMe<\/a><\/span> for remove SHADOWSOCKS MINER redirect or other unwanted software.<\/p>\n<p><a name=\"manualremoval\"><\/a><\/p>\n<h3>How to remove SHADOWSOCKS MINER manually:<\/h3>\n<p>STEP 1: Check all shortcuts of your browsers on your desktop, taskbar and in the Start menu. Right click on your shortcut and change it&apos;s properties.<\/p>\n<div style=\"position: relative; background: url(&apos;https:\/\/s3.amazonaws.com\/greatis\/shortcut.png&apos;); width: 360px; height: 200px;\">\n<div style=\"position: absolute; bottom: 22px; left: 160px; width: 200px; color: #f63b14; font-size: 10px;\">http:\/\/SHADOWSOCKS MINER<\/div>\n<\/div>\n<p>You can see <strong>SHADOWSOCKS MINER<\/strong> at the end of shortcut target (command line). Remove it and save changes.<\/p>\n<p>In addition, check this command line for fake browser&apos;s trick.<br \/>\nFor example, if a shortcut points to Google Chrome, it must have the path:<br \/>\n<strong> C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe<\/strong>.<br \/>\nFake browser may be: &#8230;\\Appdata\\Roaming\\HPReyos\\ReyosStarter3.exe.<br \/>\nAlso the file name may be: &#8220;chromium.exe&#8221; instead of chrome.exe.<\/p>\n<p>STEP 2: Investigate the list of installed programs and uninstall all unknown recently installed programs.<\/p>\n<p><img src=\"http:\/\/info.greatis.com\/wp-content\/uploads\/2016\/11\/installed-programs.png\" alt=\"check installed programs to uninstall\" \/><\/p>\n<p>STEP 3: Open Task Manager and close all processes, related to <strong>SHADOWSOCKS MINER<\/strong> in their description. Discover the directories where such processes start. Search for random or strange file names.<\/p>\n<div style=\"width: 501px\" class=\"wp-caption alignnone\"><img loading=\"lazy\" src=\"http:\/\/greatis.com\/blog\/img\/remove-virus-proceses.png\" alt=\"Remove SHADOWSOCKS MINER virus from running processes \" width=\"491\" height=\"532\" \/><p class=\"wp-caption-text\">Remove SHADOWSOCKS MINER virus from running processes<\/p><\/div>\n<p>STEP 4: Inspect the Windows services. Press Win+R, type in: services.msc and press OK.<\/p>\n<div style=\"width: 436px\" class=\"wp-caption alignnone\"><img loading=\"lazy\" src=\"http:\/\/greatis.com\/blog\/img\/remove-virus-from-services.png\" alt=\"Remove SHADOWSOCKS MINER virus from Windows services\" width=\"426\" height=\"233\" \/><p class=\"wp-caption-text\">Remove SHADOWSOCKS MINER virus from Windows services<\/p><\/div>\n<p>Disable the services with random names or contains <strong>SHADOWSOCKS MINER<\/strong> in it&apos;s name or description.<\/p>\n<p>STEP 5: After that press Win+R, type in: taskschd.msc and press OK to open Windows Task Scheduler.<br \/>\n<img class=\"responsive-img\" src=\"http:\/\/info.greatis.com\/wp-content\/uploads\/2016\/11\/run-scheduler.png\" alt=\"Remove SHADOWSOCKS MINER from scheduled task list.\" \/><\/p>\n<p>Delete any task related to <strong>SHADOWSOCKS MINER<\/strong>. Disable unknown tasks with random names.<\/p>\n<p>STEP 6: Clear the Windows registry from <strong>SHADOWSOCKS MINER<\/strong> virus.<br \/>\nPress Win+R, type in: regedit.exe and press OK.<\/p>\n<div style=\"width: 436px\" class=\"wp-caption alignnone\"><img loading=\"lazy\" src=\"http:\/\/greatis.com\/blog\/img\/remove-virus-from-registry.png\" alt=\"Remove SHADOWSOCKS MINER virus from Windows registry\" width=\"426\" height=\"233\" \/><p class=\"wp-caption-text\">Remove SHADOWSOCKS MINER virus from Windows registry<\/p><\/div>\n<p>Find and delete all keys\/values contains<strong> SHADOWSOCKS MINER<\/strong>.<\/p>\n<p>STEP 7: <a href=\"http:\/\/greatis.com\/blog\/how-to\/remove-virus-google-chrome.htm\">Remove SHADOWSOCKS MINER from <span style=\"text-decoration: underline;\">Google Chrome<\/span><\/a>.<br \/>\n<a href=\"http:\/\/greatis.com\/blog\/wp-content\/uploads\/2016\/10\/remove-virus-chrome-extensions.png\"><img loading=\"lazy\" class=\"size-full wp-image-63175\" src=\"http:\/\/greatis.com\/blog\/wp-content\/uploads\/2016\/10\/remove-virus-chrome-extensions.png\" alt=\"Remove SHADOWSOCKS MINER Virus from Chrome Extensions\" width=\"790\" height=\"531\" srcset=\"https:\/\/greatis.com\/blog\/wp-content\/uploads\/2016\/10\/remove-virus-chrome-extensions.png 790w, https:\/\/greatis.com\/blog\/wp-content\/uploads\/2016\/10\/remove-virus-chrome-extensions-300x201.png 300w\" sizes=\"(max-width: 790px) 100vw, 790px\" \/><\/a><\/p>\n<p>STEP 8: <a href=\"http:\/\/greatis.com\/blog\/howto\/remove-virus-internet-explorer.htm\">Remove SHADOWSOCKS MINER from <span style=\"text-decoration: underline;\">Internet Explorer<\/span><\/a>.<\/p>\n<div id=\"attachment_63185\" style=\"width: 452px\" class=\"wp-caption alignnone\"><a href=\"http:\/\/greatis.com\/blog\/wp-content\/uploads\/2016\/10\/set-internet-explorer-homepage.png\"><img aria-describedby=\"caption-attachment-63185\" loading=\"lazy\" class=\"size-full wp-image-63185\" src=\"http:\/\/greatis.com\/blog\/wp-content\/uploads\/2016\/10\/set-internet-explorer-homepage.png\" alt=\"Set Internet Explorer Homepage\" width=\"442\" height=\"567\" srcset=\"https:\/\/greatis.com\/blog\/wp-content\/uploads\/2016\/10\/set-internet-explorer-homepage.png 442w, https:\/\/greatis.com\/blog\/wp-content\/uploads\/2016\/10\/set-internet-explorer-homepage-233x300.png 233w\" sizes=\"(max-width: 442px) 100vw, 442px\" \/><\/a><p id=\"caption-attachment-63185\" class=\"wp-caption-text\">Set Internet Explorer Homepage<\/p><\/div>\n<p>STEP 9: <a href=\"http:\/\/greatis.com\/blog\/howto\/remove-virus-from-mozilla-firefox.htm\">Remove SHADOWSOCKS MINER from <span style=\"text-decoration: underline;\">Mozilla Firefox<\/span><\/a>.<\/p>\n<div id=\"attachment_63022\" style=\"width: 543px\" class=\"wp-caption alignnone\"><a href=\"http:\/\/greatis.com\/blog\/wp-content\/uploads\/2016\/10\/set-firefox-home-page.png\"><img aria-describedby=\"caption-attachment-63022\" loading=\"lazy\" class=\"size-full wp-image-63022\" src=\"http:\/\/greatis.com\/blog\/wp-content\/uploads\/2016\/10\/set-firefox-home-page.png\" alt=\"Change Firefox Home Page\" width=\"533\" height=\"377\" srcset=\"https:\/\/greatis.com\/blog\/wp-content\/uploads\/2016\/10\/set-firefox-home-page.png 533w, https:\/\/greatis.com\/blog\/wp-content\/uploads\/2016\/10\/set-firefox-home-page-300x212.png 300w\" sizes=\"(max-width: 533px) 100vw, 533px\" \/><\/a><p id=\"caption-attachment-63022\" class=\"wp-caption-text\">Change Firefox Home Page<\/p><\/div>\n<p>STEP 10: And at the end, clear your basket, temporal files, browser&apos;s cache.<\/p>\n<p>But if you miss any of these steps and only one part of virus remains &#8211; it will come back again immediately or after reboot.<\/p>\n<div class=\"wpInsert wpInsertInPostMy wpInsertBelow\" style=\"padding: 0px;\"><\/div>","protected":false},"excerpt":{"rendered":"<p>What is SHADOWSOCKS MINER? How to remove (uninstall) SHADOWSOCKS MINER virus manually? This post is a free guide how to remove SHADOWSOCKS MINER from your PC and cleanup Chrome, Firefox, Internet Explorer, Edge browser.<br \/>\n   <br \/><a style=\"color: #42A2CE\" href=\"https:\/\/greatis.com\/blog\/howto\/remove-shadowsocks-miner.htm\"><u>More&#8230;<\/u><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[62042],"tags":[80884],"_links":{"self":[{"href":"https:\/\/greatis.com\/blog\/wp-json\/wp\/v2\/posts\/72848"}],"collection":[{"href":"https:\/\/greatis.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/greatis.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/greatis.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/greatis.com\/blog\/wp-json\/wp\/v2\/comments?post=72848"}],"version-history":[{"count":0,"href":"https:\/\/greatis.com\/blog\/wp-json\/wp\/v2\/posts\/72848\/revisions"}],"wp:attachment":[{"href":"https:\/\/greatis.com\/blog\/wp-json\/wp\/v2\/media?parent=72848"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/greatis.com\/blog\/wp-json\/wp\/v2\/categories?post=72848"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/greatis.com\/blog\/wp-json\/wp\/v2\/tags?post=72848"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}