Step by step guide from TotalDefense on removing Qvo6, a browsers hijacker malware from your system. Visit http://blogs.totaldefense.com/securityblog.aspx for cloud-based endpoint security solutions for home and businesses.

1. How to remove Qvo6?
Last week, Google released the list of words and phrases most searched in 2013. The most burning
question among all expressions was: "How to remove Qvo6? ".
First of all, what is Qvo6?
Qvo6 is a type of malware known as "browsers hijacker". This means it takes over your browser’s home
page or search engine and directs your queries to other sites, which in turn do more damage as they
also take control over your browser shortcuts and more.
The reason many people are looking for how to get rid of it, is because this program is considered CPU
(Clean potentially unwanted) application, hence despite the damage it causes, it is not really defined
as ‘pure malware’, moreover it arrives as part of a legitimate installation of various free software.
The best way to avoid infection is to pay attention to what you are installing. It is not always a good
idea to install software that is not familiar to you, moreover take a hard look at what is marked with a
‘V’ when you install something, especially if you do not know what kind of ‘hitchhikers’ hiding in their
back trunk .
So you did not read my blog in time and got infected? Here are some steps you can do to get rid of the
pest. Like all bacteria, here we need a combination of different types of antibiotics and some manual
testing. Note - The use of this guide is at your own risk.
Step 1 : Shutdown everything
Close everything. All your browsers and other software that you use. To get the best results, it is
recommend that you reboot the computer, then perform these operations without running any
additional software.
Step 2 : Clean the Registry
One of the deepest places where Qvo6 plants itself, is the Registry. For removal, you can use one of
the free adware cleaner tools or manually use Registry Editor.
Here are the main locations that Qvo6 uses:
HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL
HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page
HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL
HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page
HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant
HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch
Copyright © 2013 TotalDefense, Inc. | All rights reserved www.totaldefense.com
Page 1

2. HKCUSoftwareMicrosoftInternet ExplorerSearchScopes{33BB0A4E-99AF-4226-BDF6-49120163DE86}
HKLMSOFTWAREMicrosoftInternet ExplorerMainFeatureControlFEATURE_BROWSER_EMULATION
HKLMSOFTWAREMicrosoftInternet ExplorerSearchScopes{33BB0A4E-99AF-4226-BDF6-49120163DE86}
HKLMSOFTWAREqvo6Software
HKCUSoftwareMicrosoftInternet ExplorerSearchScopes{33BB0A4E-99AF-4226-BDF649120163DE86},DisplayName
HKCUSoftwareMicrosoftInternet ExplorerSearchScopes{33BB0A4E-99AF-4226-BDF649120163DE86},URL
HKLMSOFTWAREMicrosoftInternet ExplorerSearchScopes{33BB0A4E-99AF-4226-BDF649120163DE86},DisplayName
HKLMSOFTWAREMicrosoftInternet ExplorerSearchScopes{33BB0A4E-99AF-4226-BDF649120163DE86},URL
HKCUSoftwareMicrosoftInternet ExplorerSearchScopes,DefaultScope
HKLMSOFTWAREClientsStartMenuInternetFIREFOX.EXEshellopencommand,(Default)
HKLMSOFTWAREClientsStartMenuInternetGoogle Chromeshellopencommand,(Default)
HKLMSOFTWAREClientsStartMenuInternetIEXPLORE.EXEshellopencommand,(Default)
HKLMSOFTWAREClientsStartMenuInternetOperashellopencommand,(Default)
HKLMSOFTWAREClientsStartMenuInternetOpera.exeshellopencommand,(Default)
HKLMSOFTWAREClientsStartMenuInternetSafari.exeshellopencommand,(Default)
HKLMSOFTWAREClientsStartMenuInternetSEAMONKEY.EXEshellopencommand,(Default)
Copyright © 2013 TotalDefense, Inc. | All rights reserved www.totaldefense.com
Page 2

3. Step 3 : Rescue the browsers
Now, we must make a daring rescue operation and bring home the hostages – the browsers. How to do
it? For this, again you can use one of the free adware cleaner tools or manually by fixing all the tweaks
in your browser’s settings.
Step 4 : Manual corrections
We're almost done. All that's left for you to do right now is to make sure the malware did not junk your
browser’s shortcuts. Go to your desktop and right-click on the shortcuts that normally activate your
browser, and select Properties.
Check the Target line under the Shortcut tab. Make sure that there is only the executable file name of
the browser (iexplore.exe, chrome.exe, etc.).
Copyright © 2013 TotalDefense, Inc. | All rights reserved www.totaldefense.com
Page 3

4. About TotalDefense:
Total Defense(@Total_Defense) is a global leader in malware detection and anti-crimeware solutions.
We offer a broad portfolio of leading security products for the consumer market used by over four
million consumers worldwide. Our solutions also include the industry’s first complete cloud security
platform, providing fully integrated endpoint, web and email security through a single Web-based
management console with a single set of enforceable security policies
Total Defense is a former business of CA Technologies, one of the largest software companies in the
world, and has operations in New York, California, Europe, Israel and Asia.
Visit http://www.totaldefense.com/ for web, cloud & mobile security solutions for home users and
businesses.
Copyright © 2013 TotalDefense, Inc. | All rights reserved www.totaldefense.com
Page 4