How to Get Rid of CercaVoli (PUP)

Jun 27th 2017 - by Fix My PC FREE in: Blog Virus Removal | 0 Comment

ATTENTION, PLEASE!

Malware may reinstall itself multiple times if you don't delete its core files. This may require tracking down dozens of files in different locations.

We recommend downloading Restoro to eradicate Malware for you (it should cut down the time to about 15 minutes).

>> Download Restoro <<

What is CercaVoli?

CercaVoli is categorized as a potentially unwanted program or PUP. This application claims to provide users with plane flight-related information but it does not work. Instead, it displays a bunch of sponsored advertisements from third parties. Needless to say, its purpose is to generate profit using pay-per-click marketing system. It is an intrusive application that uses deceptive techniques to trick users into thinking that it is helping them when in the truth is it is a good for nothing application and a potential threat to your computer.

CercaVoli used to function as an application that helps users get best plane flight deals to save money. Even so, it’s no longer working like it used to. It runs on your computer’s background but literally does nothing and uses up your computer’s resources. It also has an empty user interface window since this application has no connection to the server.

Another peculiar feature about CercaVoli is that you don’t have the option to uninstall it from Control Panel and so unsurprisingly, it also does not have any uninstaller. This particular feature alone should ring some warning bells. Not only that, it also creates several files in your computer and creates two registry entries to make it even more difficult for you to remove it from your computer. These files are cercaVoli.Ink, Wsis32, SysUrlHL.job and SysUrlSH. These files are created in the following locations:

  • %PROGRAMFILES(x86)%\cercaVoli
  • %PROGRAMFILES%\cercaVoli
  • %ALLUSERSPROFILE%\Start Menu\Programs\(Default)
  • %APPDATA%\Microsoft\Windows\Start Menu\Programs\(Default)
  • %USERPROFILE%\Microsoft\Windows\Start Menu\Programs\(Default)
  • %ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\(Default)
  • %ALLUSERSPROFILE%\Application Data\Microsoft\Windows\Start Menu\Programs\(Default)
  • %WINDIR%\Tasks
  • %WINDIR%\System32\Tasks
  • %USERPROFILE%\Desktop

Currently, there is not much to know about CercaVoli since its official distribution website, dealflightsfinder.com is no longer available. However, according to our researchers, CercaVoli was developed for the Italian market since it catered to Italians. But what’s bugging is that it still exists despite it no longer having its official distribution website which could mean that this application is installed stealthily in your computer. It could be distributed through software bundles you can find in free sharing sites. That’s why you have to be cautious in downloading free software from free sharing sites since most these sites do not disclose the other bundled software.

In conclusion, CercaVoli is literally a useless application that you have to remove from your computer. This application is not useful to you in any way and only takes up your system resources and can slow down your computer. So it is highly recommended to eliminate it as soon as you can.

Remove CercaVoli from your computer using two methods: manually and automatically.

Method #1 – Manual Process

  1. Tap the Windows +E keys to open the File Explorer
  1. After opening File Explorer, type in these paths in the address bar:
  • %PROGRAMFILES(x86)%\cercaVoli
  • %PROGRAMFILES%\cercaVoli
  1. Erase all of the contents under CercaVoli folder.
  1. Type in another set of paths again listed below, open each folder and look for cercaVoli.lnk.
  • %ALLUSERSPROFILE%\Start Menu\Programs\(Default)
  • %APPDATA%\Microsoft\Windows\Start Menu\Programs\(Default)
  • %USERPROFILE%\Microsoft\Windows\Start Menu\Programs\(Default)
  • %ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\(Default)
  • %ALLUSERSPROFILE%\Application Data\Microsoft\Windows\Start Menu\Programs\(Default)
  1. Delete cercaVoli.lnk from all the listed folders.
  1. Open another set of paths by typing the following to the address bar:
  • %WINDIR%\Tasks
  • %WINDIR%\System32\Tasks
  1. Look for SysUrlSH and SysUrlSH.job and then erase them.
  1. Type in %HOMEDRIVE% and press Enter.
  1. Look for Wsis32 and erase it.
  1. And last but not the least, look for cercaVoli.lnk located in your computer’s desktop and remove it.
  1. Empty your Recycle Bin.

The next step is not recommended for you if you don’t know how to navigate the Registry Editor. Making changes can highly impact your computer. So it is highly advised to use PC Cleaner Pro instead to get rid of the entries that CercaVoli created.

However, if you are well-versed in making registry adjustments, then you can do proceed to step 12.

  1. Open your Registry Editor. To do so, tap Windows + R keys and type in regedit in the dialog box and then press Enter. As stated, making changes in your computer’s registry can affect your computer and may cause some damage with one single mistake. To prevent that make sure to make a copy of any registry key by exporting it.

  1. Go to HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree
  1. Look for SysUrlHL and SysUrlSH value strings and then erase them.
  1. Close the Registry Editor.

Method #2 – Automatic Process

  1. Turn on your computer. If it’s already on, you have to reboot it.

  1. After that, the BIOS screen will be displayed, but if Windows pops up instead, reboot your computer and try again. Once you’re on the BIOS screen, repeat pressing F8, by doing so the Advanced Option shows up.

  1. To navigate the Advanced Option use the arrow keys and select Safe Mode with Networking then hit Enter.

  1. Windows will now load the Safe Mode with Networking.

  1. Press and hold both R key and Windows key.

    6. If done correctly, the Windows Run Box will show up.

  1. Type in explorer http://www.fixmypcfree.com/install/spyremoverpro

A single space must be in between explorer and http. Click OK.

  1. A dialog box will be displayed by Internet Explorer. Click Run to begin downloading SpyRemover Pro. Installation will start automatically once download is done.

    9. Click OK to launch SpyRemover Pro.

  1. Run SpyRemover Pro and perform a full system scan.

  1. After all the infections are identified, click REMOVE ALL.

    12. Register SpyRemover Pro to protect your computer from future threats.

 

No Comment

Leave a Reply

Name Required

Website