{"id":5062,"date":"2014-11-22T09:53:11","date_gmt":"2014-11-22T09:53:11","guid":{"rendered":"http:\/\/malwaretips.com\/blogs\/?p=5062"},"modified":"2017-01-09T06:20:46","modified_gmt":"2017-01-09T06:20:46","slug":"remove-medfos-trojan","status":"publish","type":"post","link":"https:\/\/malwaretips.com\/blogs\/remove-medfos-trojan\/","title":{"rendered":"How to remove Trojan:JS\/Medfos.B malware (Virus Removal Guide)"},"content":{"rendered":"<p><strong>Trojan:JS\/Medfos.B is a malicious JavaScript file<\/strong> that redirects search queries when using websites such as AOL, Ask, Bing, Google and Yahoo to other website from which cyber criminals get some sort of revenue.<br \/>\nMedfos is a member of the <strong>Win32\/Medfos family<\/strong> and got your computer, after you have visited an infected website which exploited a vulnerability from a Java or Adobe software and Medfos installed a file called <em>chromeupdate.crx<\/em> in your %LOCALAPPDATA% folder.<\/p><div id=\"mwtad3058815440\" class=\"gas_fallback-ad_309684--placement_360520\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"3957935887\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n<p>As part of its self-defense mechanism,once installed Medfos disguises itself as a legitimate Google Chrome or Firefox extension with the name <em>ChromeUpdateManager 1.0<\/em> or <em>Translate This 2.0<\/em>, as show in the below images:<\/p>\n<p>Trojan:JS\/Medfos.B sole purpose is to generate revenue for its authors via pay-per-click advertising links and redirect traffic to affiliate sites, so we recommend that you remove this Trojan as soon as possible from your computer.<\/p><div id=\"mwtad2395394336\" class=\"gas_fallback-ad_381396-ad_309691-placement_360566\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"1471373341\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n<div class=\"mt_noteb\">Files reported as Trojan:JS\/Medfos.B may not necessarily be malicious. Should you be uncertain as to whether a file has been reported correctly, you can submit the affected file to <a title=\"Upload sample to VirusTotal.com\" href=\"https:\/\/www.virustotal.com\/en\/\" target=\"_blank\" rel=\"noopener\">https:\/\/www.virustotal.com\/en\/<\/a> to be scanned with multiple antivirus engines.<\/div>\n<div class=\"mt_noteg\">You should <strong>always pay attention when installing software<\/strong> because often, a software installer includes optional installs. Be very careful what you agree to install.<br \/>\n<strong>Always opt for the custom installation<\/strong> and deselect anything that is not familiar, especially optional software that you never wanted to download and install in the first place. It goes without saying that you should not install software that you don\u2019t trust.<\/div>\n<div id=\"mwtad799428521\" class=\"gas_fallback-ad_309746-ad_309691-placement_360521\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"4456629336\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><h2 class=\"mt_title\">How to remove Trojan:JS\/Medfos.B virus\u00a0(Virus Removal Guide)<\/h2>\n<div class=\"mt_noteb\">This malware removal guide may appear overwhelming due to the amount of the steps and numerous programs that are being used. We have only written it this way to provide clear, detailed, and easy to understand instructions that anyone can use to remove malware for free.<br \/>\nPlease perform all the steps in the correct order. If you have any questions or doubt at any point, <strong>STOP<\/strong> and <a href=\"https:\/\/malwaretips.com\/forums\/malware-removal-assistance.10\/\" target=\"_blank\">ask for our assistance<\/a>.<\/div>\n<ul class=\"stepsbox\">\n<li>\n<div class=\"mwt_summary\">To remove Trojan:JS\/Medfos.B virus, follow these steps:<\/div>\n<\/li>\n<li><a href=\"#zemana\"><strong>STEP 1<\/strong>: Use Zemana AntiMalware Portable to remove malware<\/a><\/li>\n<li><a href=\"#malwarebytes\"><strong>STEP 2<\/strong>: Scan and clean your computer with Malwarebytes Anti-Malware<\/a><\/li>\n<li><a href=\"#hitmanpro\"><strong>STEP 3<\/strong>: Double-check for malicious programs with HitmanPro<\/a><\/li>\n<\/ul>\n<hr \/>\n<h3 id=\"zemana\" class=\"mt_blue\">STEP 1: Use Zemana AntiMalware Portable to remove malware<\/h3>\n<p>Zemana AntiMalware Portable is a free utility that will scan your computer for the Trojan:JS\/Medfos.B browser hijacker and other malicious programs.<\/p>\n<ol>\n<li>You can download <strong>Zemana AntiMalware Portable<\/strong> from the below link:<br \/>\n<a href=\"https:\/\/malwaretips.com\/blogs\/downloads-zemana-antimalware\/\" target=\"_blank\" rel=\"noopener noreferrer\"> <strong>ZEMANA ANTIMALWARE PORTABLE DOWNLOAD LINK<\/strong><\/a> <em>(This link will open a new web page from where you can download &#8220;Zemana AntiMalware Portable&#8221;)<\/em><\/li>\n<li>Double-click on the file named &#8220;<em>Zemana.AntiMalware.Portable<\/em>&#8221; to perform a system scan with Zemana AntiMalware Free.<br \/>\n<img decoding=\"async\" class=\"size-full wp-image-59786 alignnone\" title=\"Double-click on the Zemana Portable icon to install this program\" src=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/12\/Zemana-Portable-Download.jpg\" alt=\"Zemana AntiMalware portable\" width=\"496\" height=\"255\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/12\/Zemana-Portable-Download.jpg 496w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/12\/Zemana-Portable-Download-300x154.jpg 300w\" sizes=\"(max-width: 496px) 100vw, 496px\" \/><br \/>\nYou may be presented with a <em>User Account Control<\/em> dialog asking you if you want to run this program. If this happens, you should click \u201c<strong>Yes<\/strong>\u201d to allow Zemana AntiMalware to run.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-58796\" title=\"Zemana AntiMalware User Account Control pop-up\" src=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2015\/07\/Zemana-AntiMalware-UAC.jpg\" alt=\"Zemana AntiMalware User Account Control\" width=\"404\" height=\"303\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2015\/07\/Zemana-AntiMalware-UAC.jpg 404w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2015\/07\/Zemana-AntiMalware-UAC-300x225.jpg 300w\" sizes=\"(max-width: 404px) 100vw, 404px\" \/><\/li>\n<li>When Zemana AntiMalware will start, click on the &#8220;<strong>Scan<\/strong>&#8221; button to perform a system scan.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-58794\" title=\"Click on the Scan button to perform a system scan\" src=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2015\/07\/Zemana-AntiMalware-Free-Scan.jpg\" alt=\"Zemana AntiMalware Free Scan\" width=\"538\" height=\"392\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2015\/07\/Zemana-AntiMalware-Free-Scan.jpg 538w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2015\/07\/Zemana-AntiMalware-Free-Scan-300x219.jpg 300w\" sizes=\"(max-width: 538px) 100vw, 538px\" \/><\/li>\n<li>Zemana AntiMalware will now scan your computer for malicious programs. This process can take up to 10 minutes.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-58795\" title=\"Zemana AntiMalware Free scanning for Trojan:JS\/Medfos.B malware\" src=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2015\/07\/Zemana-AntiMalware-Free-Scanning-For-Malware.jpg\" alt=\"Zemana AntiMalware scanning for virus\" width=\"540\" height=\"389\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2015\/07\/Zemana-AntiMalware-Free-Scanning-For-Malware.jpg 540w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2015\/07\/Zemana-AntiMalware-Free-Scanning-For-Malware-300x216.jpg 300w\" sizes=\"(max-width: 540px) 100vw, 540px\" \/><\/li>\n<li>When Zemana has finished finished scanning it will show\u00a0a screen that displays any\u00a0malware that has been detected. To remove all the malicious files, click on the &#8220;<strong>Next<\/strong>&#8221; button.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-58793\" title=\"Click Next to remove all malicious programs\" src=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2015\/07\/Zemana-AntiMalware-Free-Malware-Detected.jpg\" alt=\"Zemana AntiMalware Removing Trojan:JS\/Medfos.B Virus\" width=\"537\" height=\"384\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2015\/07\/Zemana-AntiMalware-Free-Malware-Detected.jpg 537w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2015\/07\/Zemana-AntiMalware-Free-Malware-Detected-300x215.jpg 300w\" sizes=\"(max-width: 537px) 100vw, 537px\" \/><br \/>\nZemana AntiMalware will now start to remove all the malicious programs from your computer. When the process is complete, you can close Zemana AntiMalware and continue with the rest of the instructions.<\/li>\n<\/ol>\n<hr \/>\n<h3 id=\"malwarebytes\" class=\"mt_blue\">STEP 2: Scan and clean your computer with Malwarebytes Anti-Malware<\/h3>\n<p>Malwarebytes Anti-Malware is a powerful on-demand scanner which should remove the Trojan:JS\/Medfos.B virus from your machine. It is important to note that Malwarebytes Anti-Malware will run alongside antivirus software without conflicts.<\/p>\n<ol>\n<li>You can download <strong>download Malwarebytes Anti-Malware<\/strong>\u00a0from the below link.<br \/>\n<strong><a href=\"https:\/\/malwaretips.com\/blogs\/downloads-malwarebytes-for-windows\/\" target=\"_blank\" rel=\"noopener noreferrer\">MALWAREBYTES ANTI-MALWARE DOWNLOAD LINK<\/a> <\/strong><em>(This link open a new page from where you can download &#8220;Malwarebytes Anti-Malware&#8221;)<\/em><\/li>\n<li>When Malwarebytes has finished downloading, double-click on the &#8220;<em>mb3-setup-consumer<\/em>&#8221; file to install Malwarebytes Anti-Malware on your computer.<br \/>\n<img decoding=\"async\" class=\"size-full wp-image-59774 alignnone\" title=\"Double-click on mb3-setup to install Malwarebytes\" src=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/12\/Malwarebytes-Download.jpg\" alt=\"Malwarebytes installer\" width=\"502\" height=\"256\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/12\/Malwarebytes-Download.jpg 502w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/12\/Malwarebytes-Download-300x153.jpg 300w\" sizes=\"(max-width: 502px) 100vw, 502px\" \/><br \/>\nYou may be presented with an\u00a0<em>User Account Control<\/em>\u00a0pop-up asking if you want to allow Malwarebytes to make changes to your device. If this happens, you should click \u201c<em>Yes<\/em>\u201d to continue with the installation.<br \/>\n<img decoding=\"async\" class=\"size-full wp-image-59773 alignnone\" title=\"Click Yes to install Malwarebytes\" src=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/12\/Malwarebytes-UAC-Prompt.jpg\" alt=\"Malwarebytes User Account Control Prompt\" width=\"504\" height=\"371\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/12\/Malwarebytes-UAC-Prompt.jpg 504w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/12\/Malwarebytes-UAC-Prompt-300x221.jpg 300w\" sizes=\"(max-width: 504px) 100vw, 504px\" \/><\/li>\n<li>When the Malwarebytes installation begins, you will see the <em>Malwarebytes Setup Wizard<\/em> which will guide you through the installation process.<br \/>\n<img decoding=\"async\" class=\"size-full wp-image-59768 alignnone\" title=\"Click on the Next button to install Malwarebytes\" src=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/12\/Malwarebytes-Installer.jpg\" alt=\"Setup Malwarebytes installer\" width=\"506\" height=\"393\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/12\/Malwarebytes-Installer.jpg 506w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/12\/Malwarebytes-Installer-300x233.jpg 300w\" sizes=\"(max-width: 506px) 100vw, 506px\" \/><br \/>\nTo install Malwarebytes Anti-Malware on your machine, <strong>keep following the prompts<\/strong> by clicking the &#8220;<strong>Next<\/strong>&#8221; button.<br \/>\n<img decoding=\"async\" class=\"size-full wp-image-59767 alignnone\" title=\"Malwarebytes final setup screen\" src=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/12\/Malwarebytes-Final-Installer-screen.jpg\" alt=\"Completing the Malwarebytes Setup Wizard\" width=\"503\" height=\"394\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/12\/Malwarebytes-Final-Installer-screen.jpg 503w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/12\/Malwarebytes-Final-Installer-screen-300x235.jpg 300w\" sizes=\"(max-width: 503px) 100vw, 503px\" \/><\/li>\n<li>Once installed, Malwarebytes will automatically start and update the antivirus database. To start a system scan you can click on the &#8220;<strong>Scan\u00a0Now<\/strong>&#8221; button.<br \/>\n<img decoding=\"async\" class=\"size-full wp-image-59771 alignnone\" title=\"Click on the Scan Now button to scan with Malwarebytes\" src=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/12\/Malwarebytes-Scan-Now.jpg\" alt=\"Perform a system scan with Malwarebytes\" width=\"643\" height=\"446\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/12\/Malwarebytes-Scan-Now.jpg 643w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/12\/Malwarebytes-Scan-Now-300x208.jpg 300w\" sizes=\"(max-width: 643px) 100vw, 643px\" \/><\/li>\n<li>Malwarebytes Anti-Malware will now start scanning your computer for malicious programs.<br \/>\nThis process can take a few minutes, so we suggest you do something else and periodically check on the status of the scan to see when it is finished.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-59772\" title=\"Malwarebytes Anti-Malware while performing a scan\" src=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/12\/Malwarebytes-Scanning-for-Malware.jpg\" alt=\"Malwarebytes scanning for malware\" width=\"643\" height=\"445\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/12\/Malwarebytes-Scanning-for-Malware.jpg 643w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/12\/Malwarebytes-Scanning-for-Malware-300x208.jpg 300w\" sizes=\"(max-width: 643px) 100vw, 643px\" \/><\/li>\n<li>When the scan has completed, you will be presented with a screen showing the malware infections that Malwarebytes Anti-Malware has detected.<br \/>\nTo remove the malicious programs that Malwarebytes has found, click on the &#8220;<strong>Quarantine Selected<\/strong>&#8221; button.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-59769\" title=\"Click on the Quarantine Selected button to remove malware\" src=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/12\/Malwarebytes-Quaratine-Virus.jpg\" alt=\"Malwarebytes Quarantine Selected\" width=\"641\" height=\"451\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/12\/Malwarebytes-Quaratine-Virus.jpg 641w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/12\/Malwarebytes-Quaratine-Virus-300x211.jpg 300w\" sizes=\"(max-width: 641px) 100vw, 641px\" \/><\/li>\n<li>Malwarebytes Anti-Malware will now quarantine all the malicious files and registry keys that it has found.<br \/>\nTo complete the malware removal process, Malwarebytes may ask you to restart your computer.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-59770\" title=\"Malwarebytes requesting to restart computer to complete malware removal process\" src=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/12\/Malwarebytes-Removing-Virus.jpg\" alt=\"Malwarebytes removing malware from computer\" width=\"639\" height=\"445\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/12\/Malwarebytes-Removing-Virus.jpg 639w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/12\/Malwarebytes-Removing-Virus-300x209.jpg 300w\" sizes=\"(max-width: 639px) 100vw, 639px\" \/><br \/>\nWhen the malware removal process is complete, you can close Malwarebytes Anti-Malware and continue with the rest of the instructions.<\/li>\n<\/ol>\n<hr \/>\n<h3 id=\"hitmanpro\" class=\"mt_blue\">STEP 3: Double-check for malicious programs with HitmanPro<\/h3>\n<p>HitmanPro can find and remove malware, adware, bots, and other threats that even the best antivirus suite can oftentimes miss. HitmanPro is designed to run alongside your antivirus suite, firewall, and other security tools.<\/p><div id=\"mwtad4212021260\" class=\"gas_fallback-ad_309686-ad_309691-placement_360569\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"6935453015\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n<ol>\n<li>You can download <strong>HitmanPro<\/strong> from the below link:<br \/>\n<a href=\"https:\/\/malwaretips.com\/blogs\/downloads-hitmanpro\/\" target=\"_blank\" rel=\"noopener noreferrer\"> <strong>HITMANPRO DOWNLOAD LINK<\/strong><\/a> <em>(This link will open a new web page from where you can download &#8220;HitmanPro&#8221;)<\/em><\/li>\n<li>When HitmanPro has finished downloading, double-click on the &#8220;<em>hitmanpro<\/em>&#8221; file to install this program on your computer.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-59783\" title=\"Double-click on the HitmanPro file\" src=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/12\/HitmanPro-Download.jpg\" alt=\"HitmanPro icon\" width=\"498\" height=\"242\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/12\/HitmanPro-Download.jpg 498w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/12\/HitmanPro-Download-300x146.jpg 300w\" sizes=\"(max-width: 498px) 100vw, 498px\" \/><br \/>\nYou may be presented with an\u00a0<em>User Account Control<\/em>\u00a0pop-up asking if you want to allow HitmanPro to make changes to your device. If this happens, you should click \u201c<em>Yes<\/em>\u201d to continue with the installation.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-59784\" title=\"Click Yes to install HitmanPro\" src=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/12\/HitmanPro-User-Account-Control.jpg\" alt=\"HitmanPro User Account Control Pop-up\" width=\"496\" height=\"363\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/12\/HitmanPro-User-Account-Control.jpg 496w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/12\/HitmanPro-User-Account-Control-300x220.jpg 300w\" sizes=\"(max-width: 496px) 100vw, 496px\" \/><\/li>\n<li>When the program starts you will be presented with the start screen as shown below. Now click on the <strong>Next<\/strong> button to continue with the scan process.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-54010\" title=\"Click Next to install HitmanPro\" src=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/08\/HitmanPro-install.jpg\" alt=\"HitmanPro setup process\" width=\"534\" height=\"421\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/08\/HitmanPro-install.jpg 534w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/08\/HitmanPro-install-300x237.jpg 300w\" sizes=\"(max-width: 534px) 100vw, 534px\" \/><\/li>\n<li>HitmanPro will now begin to scan your computer for malware.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-54012\" src=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/08\/HitmanPro-Scan.jpg\" alt=\"HitmanPro scanning for Trojan:JS\/Medfos.B virus\" width=\"529\" height=\"426\" title=\"\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/08\/HitmanPro-Scan.jpg 529w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/08\/HitmanPro-Scan-300x242.jpg 300w\" sizes=\"(max-width: 529px) 100vw, 529px\" \/><\/li>\n<li>When it has finished it will display a list of all the malware that the program found as shown in the image below. Click on the &#8220;<strong>Next<\/strong>&#8221; button, to remove malware.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-54008\" title=\"HitmanPro scan summary. Click Next to remove malware\" src=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/08\/HitmanPro-detected-malware.jpg\" alt=\"HitmanPro detected malware\" width=\"530\" height=\"426\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/08\/HitmanPro-detected-malware.jpg 530w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/08\/HitmanPro-detected-malware-300x241.jpg 300w\" sizes=\"(max-width: 530px) 100vw, 530px\" \/><\/li>\n<li>Click on the &#8220;<strong>Activate free license<\/strong>&#8221; button to begin the <em>free 30 days trial<\/em>, and remove all the malicious files from your computer.<br \/>\n<img decoding=\"async\" class=\"alignnone size-full wp-image-54011\" title=\"Click on the Activate free license button\" src=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/08\/HitmanPro-remove-malware.jpg\" alt=\"Activate HitmanPro to remove malware\" width=\"528\" height=\"420\" srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/08\/HitmanPro-remove-malware.jpg 528w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2016\/08\/HitmanPro-remove-malware-300x239.jpg 300w\" sizes=\"(max-width: 528px) 100vw, 528px\" \/><br \/>\nWhen the process is complete, you can close HitmanPro and continue with the rest of the instructions.<\/li>\n<\/ol>\n<hr \/>\n<div class=\"mt_noteg\">Your computer should now be free of the Trojan:JS\/Medfos.B virus. If you are still experiencing problems while trying to remove Trojan:JS\/Medfos.B virus from your machine, you can ask for help in our <strong><a title=\"Malware Removal Assistance\" href=\"https:\/\/malwaretips.com\/forums\/malware-removal-assistance.10\/\" target=\"_blank\">Malware Removal Assistance<\/a><\/strong> forum.<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Trojan:JS\/Medfos.B is a malicious JavaScript file that redirects search queries when using websites such as AOL, Ask, Bing, Google and Yahoo to other website from which cyber criminals get some sort of revenue. Medfos is &#8230; <\/p>\n<p class=\"read-more-container\"><a title=\"How to remove Trojan:JS\/Medfos.B malware (Virus Removal Guide)\" class=\"read-more button\" href=\"https:\/\/malwaretips.com\/blogs\/remove-medfos-trojan\/#more-5062\" aria-label=\"Read more about How to remove Trojan:JS\/Medfos.B malware (Virus Removal Guide)\">Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":5063,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2728],"tags":[],"class_list":["post-5062","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-trojans","masonry-post","generate-columns","tablet-grid-50","mobile-grid-100","grid-parent","grid-50","resize-featured-image"],"_links":{"self":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/posts\/5062","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/comments?post=5062"}],"version-history":[{"count":0,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/posts\/5062\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/media\/5063"}],"wp:attachment":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/media?parent=5062"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/categories?post=5062"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/tags?post=5062"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}