Remove Facebook Notification Virus

Can’t Remove “Facebook Notification” pop-ups?

The Facebook Notification Virus is a deceptive pop-up that tries to trick you into installing malware in your computer. If the program causing these fake Notifications was legitimate, we wouldn’t be preparing a removal guide right now. However, you’ll find detailed instructions down below to help you get rid of this. Classified as adware as a PUP (potentially unwanted program), this thing is unsafe. Normally, you wouldn’t want to keep a parasite of any kind on board, would you? Then what is stopping you from removing this one? As its name implies, the Facebook Notification app promises to show notifications from Facebook. With over 1.65 million active users every month, the social network has immense popularity. Unfortunately, that also leads to infections like the one we’re tackling today. The Facebook Notification virus installs a browser extension. And once this plugin gets added, trouble begins. No, you will not receive notifications from your Facebook friends. You will only receive potentially harmful commercials. As we mentioned, this parasite is part of the adware family. Adware-type programs are responsible for a huge amount of pop-ups in all shapes imaginable. How, how exactly does the scheme work so you start seeing commercials? Firstly, your machine gets infected. It goes without saying that happens entirely behind your back. Then the virus adds its malicious extension which injects your browsers with pop-ups. Just to make your life a little bit more problematic, this plugin is compatible with all your browsers. Thus, regardless of which one you use, the pop-ups are always there to greet you. You might be interested to learn that these ads are sponsored. You’re only seeing them because cyber criminals make money this way. Get emotionally prepared for a never-ending parade of advertisements. That includes various banners, interstitials, product deals, product offers, price comparisons, discounts and coupons, etc. You see, in this constant mess of commercials, surfing the Web becomes a cyber battlefield. At the least, you’ll be wasting your time while generating views for hackers. Is being a sponsor of cyber crooks something you’re striving for? Apart from being invasive, these pop-ups are also unreliable. They might lead to you all kinds of dangerous websites and cause you serious damage. In addition, due to the parasite’s presence on board, your private life online is no longer private. The virus sneakily spies on your browsing-related activities and sends your private data to hackers. Obviously, this cannot end well. Take action before the virus gets out of hand.

How did I get infected with?

The parasite applies various tricks to get installed. Probably the most popular infiltration method is freeware bundling. All you need to do in order to harm your machine is download some unverified program bundle off of the Internet. That is it. Instead of relying on your active cooperation, hackers take advantage of your haste online. To be honest, not many people pay close attention to the software they download. However, you should always be careful. A single careless click might have catastrophic consequences. Opt for the custom or Advanced option in the Setup Wizard to make sure there’s nothing malicious in the bundle. Also, actually reading the Terms and Conditions or EULA (End User License Agreement) is a good idea. If you rush towards the “I accept” button, you’re basically neglecting your safety. This is a mistake hackers are not likely to leave unpunished. Other malware distribution techniques are third-party pop-ups, illegitimate torrents, fake program updates, etc. Keep an eye out for potential threats and take care of your machine.

Why is this dangerous?

The Facebook Notification virus causes indeed quite a headache. Its browser extension takes down Mozilla Firefox, Google Chrome and Internet Explorer. As you could imagine, the pop-ups are practically everywhere. Our advice is to stay away from all commercials this pest may generate because they are all untrustworthy. This program also serves as a back door to malware thus leading to more dangers and threats. Last but not least, hackers now have access to your browsing history, email addresses and IP address. Trust us, there are enough monetizing platforms online for hackers to choose from. One thing is for sure, though, crooks will find a way to make money out of your sensitive data. Keep in mind that even though identity theft is not a common scenario, it’s something that definitely must be prevented. To uninstall this nasty application manually, please follow our instructions.

How Can I Remove Facebook Notification Virus Pop-ups?

If you perform exactly the steps below you should be able to remove the infection. Please, follow the procedures in the exact order. Please, consider to print this guide or have another computer at your disposal. You will NOT need any USB sticks or CDs.

STEP 1: Kill the Malicious Process

STEP 2: Reveal Hidden Files

STEP 3: Locate Startup Location

STEP 4: Delete any unknown add-on from Chrome, Firefox or IE

STEP 5: Permanently Remove “Facebook Notification” from the windows registry.
WARNING! Stopping the wrong file or deleting the wrong registry key may damage your system irreversibly.
If you are feeling not technical enough you may use Spyhunter Professional Virus Removal Tool. However, only the Scanner is FREE, in order to remove the Facebook Notification Virus completely you need to purchase full version.
>>Download SpyHunter – a professional scanner and remover.

If you feel technical enough you may proceed with Manual Facebook Virus Removal

STEP 1: Stop the malicious process using Windows Task Manager

• Open your task Manager by pressing CTRL+SHIFT+ESC keys simultaneously
• Locate the process of the ransomware. Have in mind that this is usually a random generated file.
• Before you kill the process, type the name on a text document for later reference.

• Locate any suspicious processes associated with the Virus.
• Right click on the process
• Open File Location
• End Process
• Delete the directories with the suspicious files.
• Have in mind that the process can be hiding and very difficult to detect

STEP 2: Reveal Hidden Files

• Open any folder
• Click on “Organize” button
  
• Choose “Folder and Search Options”
• Select the “View” tab
• Select “Show hidden files and folders” option
• Uncheck “Hide protected operating system files”
• Click “Apply” and “OK” button

STEP 3: Locate the Virus startup location

• Once the operating system loads press simultaneously the Windows Logo Button and the R key.

• A dialog box should open. Type “Regedit”
• WARNING! be very careful when editing the Microsoft Windows Registry as this may render the system broken.

Depending on your OS (x86 or x64) navigate to:

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] or
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] or
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

• and delete the display Name: [RANDOM]

• Then open your explorer and navigate to:

Navigate to your %appdata% folder and delete the executable.

You can alternatively use your msconfig windows program to double check the execution point of the virus. Please, have in mind that the names in your machine might be different as they might be generated randomly, that’s why you should run any professional scanner to identify malicious files.

STEP 4 : Uninstall unknown programs from Your Computer

Simultaneously press the Windows Logo Button and then “R” to open the Run Command

Type “Appwiz.cpl”

Locate the any unknown program and click on uninstall/change. To facilitate the search you can arrange the programs by date. review the most recent installed programs first. In general you should remove all unknown programs.

STEP 5 : Remove add-ons and extensions from Chrome, Firefox or IE

Remove from Google Chrome

• In the Main Menu, select Tools—> Extensions
• Remove any unknown extension by clicking on the little recycle bin
• If you are not able to delete the extension then navigate to C:\Users\”computer name“\AppData\Local\Google\Chrome\User Data\Default\Extensions\and review the folders one by one.
• Reset Google Chrome by Deleting the current user to make sure nothing is left behind

• If you are using the latest chrome version you need to do the following
• go to settings – Add person

• choose a preferred name.

• then go back and remove person 1
• Chrome should be malware free now

Remove from Mozilla Firefox

• Open Firefox
• Press simultaneously Ctrl+Shift+A
• Disable and remove any unknown add on
• Open the Firefox’s Help Menu

• Then Troubleshoot information
• Click on Reset Firefox

Remove from Internet Explorer

• Open IE
• On the Upper Right Corner Click on the Gear Icon
• Go to Toolbars and Extensions
• Disable any suspicious extension.
• If the disable button is gray, you need to go to your Windows Registry and delete the corresponding CLSID
• On the Upper Right Corner of Internet Explorer Click on the Gear Icon.
• Click on Internet options

• Select the Advanced tab and click on Reset.

• Check the “Delete Personal Settings Tab” and then Reset

• Close IE

• Then open your explorer and navigate to:

Navigate to your %appdata% folder and delete the executable.

Navigate to %windir%/system32/Drivers/etc/host

If you are hacked, there will be foreign IPs addresses connected to you at the bottom. Take a look below:

If you are uncertain about the IPs below “Localhost” contact us in out google+ profile and we will try to help you.

Permanently Remove “Facebook Notification” Leftovers

To make sure manual removal is successful, we recommend to use a free scanner of any professional antimalware program to identify any registry leftovers or temporary files and to prevent this from happening again.