“You Shall Not Pass” Virus (Manual Removal Guide)

Recently, computer users meet a new virus that is presented in the form of Gandalf image and the saying underneath of it stating “You Shall Not Pass“. 
 

Once attacked by this virus, users will block you from visiting Facebook, Google, Youtube and other websites. You may get this nasty virus through several means: opening the spam email attachments, clicking malicious links, downloading some free programs from unknown websites, or sharing files even from legitimate websites that have been compromised, and so on. The reason why this virus appears is because the host file of your Windows OS has been amended. “You Shall Not Pass” virus alert maybe be a sign of a very malicious threat on your computer. It is not difficult to remove the “You Shall Not Pass”, but it’s not the sole issue you have. To get rid of “You Shall Not Pass” from your system, please follow the removal steps below.

 

Manual Removal Guide

Step 1: Press Ctrl+Alt+Del keys together and stop You Shall Not Pass virus processes in the Windows Task Manager.
random.exe

Step 2: Detect and remove You Shall Not Pass virus associated files listed below:

%AppData%[trojan name]toolbardtx.ini

%AppData%[trojan name]toolbarguid.dat

%AppData%[trojan name]toolbarlog.txt

%AppData%[trojan name]toolbarpreferences.dat

%AppData%[trojan name]toolbarstat.log

%AppData%[trojan name]toolbarstats.dat

%AppData%[trojan name]toolbaruninstallIE.dat

%AppData%[trojan name]toolbaruninstallStatIE.dat

%AppData%[trojan name]toolbarversion.xml

Step 3: Open the Registry Editor, search for and delete these Registry Entries created by You Shall Not Pass virus
 
(Click Start button> click "Run" > Input "regedit" into the Run box and click ok)

HKEY_LOCAL_MACHINESOFTWAREClasses[trojan name]IEHelper.DNSGuardCurVer

HKEY_LOCAL_MACHINESOFTWAREClasses[trojan name]IEHelper.DNSGuardCLSID

HKEY_LOCAL_MACHINESOFTWAREClasses[trojan name]IEHelper.DNSGuard

HKEY_LOCAL_MACHINESOFTWAREClasses[trojan name]IEHelper.DNSGuard.1

HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar “[trojan name]”

Vedio Removal Guide

  
Note: You need to have sufficient expertise to deal with program files, processes, dll files and registry entries to avoid some mistakes. If you can’t remove the virus by yourself or meet with any difficulty, just feel free to live chat with Tee Support Online Experts for instant help.