Click on screenshot to zoom
Danger level 7
Type: Browser Hijackers
Common infection symptoms:
  • Hijacks homepage
  • Changes default search engine

Pagesnews.org

Pagesnews.org is a dubious domain linked to the presence of the adware helper. Users who really have this undesirable piece of software inside their computers see their Google Chrome browser open with it every 33 minutes. Users might also be redirected to Pagesnews.org from time to time when they surf other websites. The web page opened does not look harmful at first glance. Actually, we cannot call it malicious either, but, undoubtedly, it is not trustworthy and should be closed as soon as possible. According to specialists working at pcthreat.com, this domain is a medium for displaying ads and driving traffic to certain pages. The developer of Pagesnews.org, most probably, gets money for displaying the commercial content for users and increasing the web traffic to third-party pages. Needless to say, ordinary users do not get anything. Our security specialists say that they might only get untrustworthy software if they click on various links located on the main page of Pagesnews.org, use its search box to find the information on the web, and trust search results opened for them fully.

Pagesnews.org cannot be called an ordinary browser hijacker because it does not change browsers’ settings, e.g. homepage and default search provider. It creates the so-called scheduled task in %WINDIR%\System32\Tasks instead of altering the settings of web browsers. This new task it creates in the Task Scheduler allows it to appear to users every 33 minutes. As has already been mentioned at the beginning, you might notice your web browser open with Pagesnews.org in the URL bar automatically, or you will be taken to this page when surfing other normal websites which are not associated with Pagesnews.org by any means. If you already see it opened for you, close this page as soon as possible and do not click on links you can find on this website because they might open untrustworthy pages. Find a better search provider to use instead of the search box of Pagesnews.org as well. Search results displayed by this page might contain promotional links too. There is a risk that some of them are related to bad third-party pages and might redirect users there if they perform web searches using this Russian domain.

Moreover, third-party pages users might be taken to after clicking on links/ads displayed on Pagesnews.org might also be dangerous in a sense that they might try to extort personal information from people. Also, such websites often record non-personally identifiable information associated with users’ activities and habits. Trustworthy pages might record information about users too, but they never gather any personal details, so you should always check the Privacy Policy of pages before starting to surf them fearlessly. Keep in mind that pages you are taken to after clicking on sponsored links/ads start gathering data immediately after you are redirected to them.

Research has shown that Pagesnews.org is not the only browser hijacker belonging to this family. It is almost identical to Hrforlastnews.com/news and Gdslkeee1ru. All of them travel bundled in malicious installers. Suspicious Russian applications might travel with these browser hijackers too, so if you already see Pagesnews.org every half an hour, be aware of the fact that other untrustworthy applications might be installed on your computer too. It is not easy to find them because they are well-hidden, so leave the detection job for a reputable scanner. It would be smart to keep a security application enabled 24/7 because much more serious infections if compared to a browser hijacker can enter the unprotected computer. Make sure that the tool you leave activated on your system is fully reliable.

You need to perform two removal steps to delete the Pagesnews.org browser hijacker fully from the computer. First, you need to go to reset web browsers to their default settings (it should affect only Google Chrome but check other web browsers too). Second, a scheduled task created by this browser hijacker needs to be eliminated as soon as possible. As has already been mentioned in this article, this infection could have entered the system together with other dubious applications, so it is a must to scan the computer with an automatic malware remover, such as SpyHunter, after you finish deleting the browser hijacker associated with the Pagesnews.org domain.

Remove Pagesnews.org manually from browsers

Reset browsers to their default settings

Internet Explorer

  1. Open Internet Explorer.
  2. Open the Tools menu and click Internet Options.
  3. Click on the Advanced tab to open it.
  4. Click Reset.
  5. Put a tick in the Delete personal settings box to enable it.
  6. Click Reset in the dialog box one more time.

Mozilla Firefox

  1. Start Mozilla Firefox.
  2. Press Alt+H.
  3. Select Troubleshooting information from the menu opened for you.
  4. Click Refresh Firefox.
  5. Click on the same button one more time in the dialog box.

Google Chrome

  1. Launch your web browser and press Alt+F simultaneously.
  2. Select Settings from the menu and click Show advanced settings.
  3. Click on the Reset Settings button.
  4. Locate the Reset button in the window that shows up and click on it.

Delete the scheduled task

  1. Open the Windows Explorer.
  2. Go to %WINDIR%\System32\Tasks.
  3. Delete the file having pagesnews.org/lions or a similar name.
Download Spyware Removal Tool to Remove* Pagesnews.org
  • Quick & tested solution for Pagesnews.org removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Pagesnews.org

Files associated with Pagesnews.org infection:

ProtectWindowsManager.exe
Downloader.dll
windhcpclient.exe
R003.exe
mngr.exe
%AppData%\Mozilla\Firefox\Profiles\????????????????
BitGuard.exe
MAJTuto.exe
ReminderFoxUpdater.exe
%ALLUSERSPROFILE%\Anti-phishing Domain Advisor
MSLSService.exe
NCdownloader.exe
applications.exe
lsdprn.exe
dnkt.exe
DeltaFix.dll
webmakerplus.exe
regCheck.vbs
sv.exe
psupport.dll
VirusRemover.exe
RGMUpdater.exe
NTS.exe
plura_autorun.exe
%ALLUSERSPROFILE%\Browser Manager
ContentHost.dll
CompTmp.exe
VideoUsage.exe
PCProtect.exe
contentagent.exe
ScriptHost.dll
openinstall.exe
update1.dll
Sixth.exe
SafeUpdater.exe
Seventh.exe
LiveUpdate.exe
%ALLUSERSPROFILE%\BrowserProtect
dlprotect.exe
AdbFlashIA2.exe
%ALLUSERSPROFILE%\Application Data\Anti-phishing Domain Advisor
IEError.exe
PackerV2.exe
%USERPROFILE%\Local Settings\Application Data\Google\Chrome\User Data\Default
toolserv.exe
yContentFilterService.exe
PCProtect.dll
ALiBaBar.dll
%USERPROFILE%\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph
kometaup.exe
optimizer.exe
WombatUpdater.exe
fiber.js
20dollars2surf.exe
SyncPulseManager.exe
Client.exe
%LOCALAPPDATA%\Google\Chrome\User Data\Default
GoogleUpdate.exe
%LOCALAPPDATA%\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph
timetasks.exe
DFService.exe
DocUnzipUpdt.exe
stprss.exe
Autoload.exe
compatibilitychecksvc.exe
PlusMo.exe
lmservice.exe
litefile.bin
openinst.exe
ScreenCapture.exe
usetting.exe
bi_client.exe
update.exe
brfilterdrv.sys
uninstall_Winservices.exe
%ALLUSERSPROFILE%\Application Data\Browser Manager
smp2.exe
TorrentStat.exe
browsemngr.exe
BDL.dll
UpdateTask.exe
ProtectExtension.exe
AutoUpdater.exe
Assistant_x64.dll
ieplug.dll
monitorsvc.exe
winclient32.exe
wabEventSupport16.dll
wirtual.exe
clteyghuwphSystem.exe
BrowserProtect.exe
safetynut.exe
Toast.exe
%ALLUSERSPROFILE%\Application Data\BrowserProtect
wprotectmanager.exe
%AppData%\Microsoft\Windows\Start Menu\Programs\BrowserProtect
chrome-links.exe
Updater.exe
Bind.exe
host.exe
VideoEklenti.exe
Win_Updater.exe
OptimizerMonitor.exe
TimeTasksSetup.exe
uninstaller.exe
systerm32.exe
flashEnhancer.dll
playsetup.exe
safebrowser.exe
inspasio.exe
UpdateService.exe
upr.exe

Pagesnews.org DLL's to remove:

PCProtect.dll
wabEventSupport16.dll
Downloader.dll
ContentHost.dll
update1.dll
ScriptHost.dll
BDL.dll
Assistant_x64.dll
ALiBaBar.dll
psupport.dll
DeltaFix.dll
ieplug.dll
flashEnhancer.dll

Pagesnews.org processes to kill:

ProtectExtension.exe
systerm32.exe
ProtectWindowsManager.exe
CompTmp.exe
DocUnzipUpdt.exe
Bind.exe
VirusRemover.exe
Sixth.exe
SafeUpdater.exe
SyncPulseManager.exe
Win_Updater.exe
plura_autorun.exe
sv.exe
UpdateTask.exe
mngr.exe
update.exe
Seventh.exe
contentagent.exe
webmakerplus.exe
OptimizerMonitor.exe
safetynut.exe
GoogleUpdate.exe
VideoUsage.exe
optimizer.exe
openinstall.exe
timetasks.exe
winclient32.exe
openinst.exe
Updater.exe
lmservice.exe
Toast.exe
toolserv.exe
BrowserProtect.exe
NTS.exe
stprss.exe
TimeTasksSetup.exe
chrome-links.exe
safebrowser.exe
uninstall_Winservices.exe
dlprotect.exe
Client.exe
IEError.exe
host.exe
lsdprn.exe
upr.exe
UpdateService.exe
smp2.exe
wirtual.exe
PCProtect.exe
yContentFilterService.exe
WombatUpdater.exe
clteyghuwphSystem.exe
RGMUpdater.exe
kometaup.exe
windhcpclient.exe
MSLSService.exe
dnkt.exe
ScreenCapture.exe
PlusMo.exe
PackerV2.exe
BitGuard.exe
VideoEklenti.exe
MAJTuto.exe
playsetup.exe
compatibilitychecksvc.exe
LiveUpdate.exe
uninstaller.exe
Autoload.exe
AdbFlashIA2.exe
R003.exe
DFService.exe
20dollars2surf.exe
bi_client.exe
monitorsvc.exe
applications.exe
AutoUpdater.exe
inspasio.exe
ReminderFoxUpdater.exe
wprotectmanager.exe
usetting.exe
NCdownloader.exe
TorrentStat.exe
browsemngr.exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.