How to remove Trotux.com redirection virus

What is Trotux.com?

Trotux.com is an unpleasant page that appears on your browsers without invitation, and though it is not dangerous itself, it still can bring threats with it. Besides hijacking your browser and blocking other search engines except for its own, Trotux.com malware promotes third-party websites by twisted search results. We should warn you about not clicking these links as often they lead to sources filled with commercials or, in the worst, but still common, scenario, with infections. So, if you will continue to use this search domain, you will likely get more malware, since it is difficult to distinguish safe links from masqueraded ones of infected sites. In this connection the only remedy is to remove Trotux.com hijacker.

Trotux.com page

How Trotux.com got installed on your computer?

Computer hazards have many ways to infiltrate systems, and all of them include the component of stealth. For the browser hijacker group, to which trotux.com belongs, the most typical method is bundling it into software packages. Usually these are free utilities that can be found of sites specializing in freeware downloads. To avoid it you should bear in mind to perform installations in no hurry. First, change the installation mode to Advanced and then inspect every setup screen. Pay particular attention to steps with license agreement and other documents, as they state the possible effects that the application may make on your systems. Then find the step that shows what is included into the package and deselect the applications that seem suspicious.

Symptoms of Trotux.com infection

  • First and the most striking proof of having a browser hijacker is change of the main page. Usually it is a search engine page that is designed so that user would believe in its legitimacy.
  • Generally, hijackers cause redirections when user makes a search query on its page or tries to reach a blocked site (usually another search engine or anti-malware sites)
  • Another indicator of hijacker infection is appearance of new programs, toolbars and browser extensions that you don’t remember installing and processes in start-up queue.
  • Also, you may notice the significant slowdown in the system operating, since running of the applications required for malware activity may consume a lot of CPU.
  • Besides, hijacker infection may as well negatively affect the speed of Internet connection.

How to remove Trotux.com?

To make sure that the hijacker won’t appear again, you need to delete Trotux.com completely. For this you need to remove the application from the Control Panel and then check the drives for such leftovers as Trotux.com files and registry entries.
We should warn you that performing some of the steps may require above-average skills, so if you don’t feel experienced enough, you may apply to automatic removal tool.

Download Norton

Performing an antimalware scan with Norton would automatically search out and delete all elements related to Trotux.com. It is not only the easiest way to eliminate Trotux.com, but also the safest and most assuring one.


Steps of Trotux.com manual removal

Uninstall Trotux.com from Control Panel

As it was stated before, more likely that the hijacker appeared on your system brought by other software. So, to get rid of Trotux.com you need to call to memory what you have installed recently.

How to remove Trotux.com from Windows XP

  1. Click the Start button and open Control Panel
  2. Go to Add or Remove Programs
  3. Find the application related to Trotux.com and click Uninstall

How to remove Trotux.com from Windows 7/Vista

  1. Click the Start button and open Control Panel
  2. Go to Uninstall Program
  3. Find the application related to Trotux.com and click Uninstall

How to remove Trotux.com from Windows 8/8.1

  1. Right-click the menu icon in left bottom corner
  2. Choose Control Panel
  3. Select the Uninstall Program line
  4. Uninstall the application related to Trotux.com

How to remove Trotux.com from Windows 10

  1. Press Win+X to open Windows Power menu
  2. Click Control Panel
  3. Choose Uninstall a Program
  4. Select the application related to Trotux.com and remove it

noteIf you experience problems with removing Trotux.com from Control Panel: there is no such title on the list, or you receive an error preventing you from deleting the application, see the article dedicated to this issue.
Read what to do if program won’t uninstall from Control Panel


Remove Trotux.com from browsers

Since some of hijacker threats use a disguise of a browser add-on, you will need to check the list of extensions/add-ons in your browser.

How to remove Trotux.com from Google Chrome

  1. Start Google Chrome
  2. Click on Tools, then go to the Extensions
  3. Delete Trotux.com or other extensions that look suspicious and you don’t remember installing them

How to remove Trotux.com from Internet Explorer

  1. Launch Internet Explorer
  2. Click on the Tools/Gear icon, then select Manage Add-ons
  3. Delete Trotux.com or other extensions that look suspicious and you don’t remember installing them

How to remove Trotux.com from Mozilla Firefox

  1. Start Mozilla Firefox
  2. Click on the right-upper corner button
  3. Click Add-ons, then go to Extensions
  4. Delete Trotux.com or other extensions that look suspicious and you don’t remember installing them

How to remove Trotux.com from Microsoft Edge

  1. Start Microsoft Edge
  2. Click the three-dot button in the upper right corner
  3. Choose Extensions
  4. Click the gear icon near Trotux.com or other extensions that look suspicious and you don’t remember installing them
  5. Choose Remove

Reset your browsers

How to reset settings in Google Chrome

  1. Click on the icon in the right-upper corner
  2. Choose Settings
  3. Click Show advanced settings
  4. Click the Reset Settings button

How to reset settings in Mozilla Firefox

  1. Click the icon in the upper right corner
  2. Choose Help
  3. Select Troubleshooting Information
  4. Click the Reset Firefox… button

How to reset settings in Internet Explorer

  1. Click on the Tools button
  2. Go to Internet options
  3. Go to the Advanced tab
  4. Click Reset

How to reset settings in Microsoft Edge

  1. Start Microsoft Edge
  2. Click the three-dot button in the upper right corner
  3. Choose Settings
  4. Under the Clear browsing data category select Choose what to clear
  5. Select everything and click Clear

Delete files and registry entries added by Trotux.com

Sometimes removal via Control Panel is not enough since the built-in application can leave some files that shortly will restore the hijacker. So, you need to find all of the following items and delete them

Remove Trotux.com files and folders:

C:\Program Files (x86)\[random]\
C:\Program Files (x86)\[random]\DeElevator.dllh7o
C:\Program Files (x86)\[random]\reakaph.xhtm5h7o
C:\Program Files (x86)\[random]\
C:\Program Files (x86)\[random]\[random]mpp.dll
C:\Program Files (x86)\[random]\
C:\Program Files (x86)\[random]\JtsLncs.xhtm5
C:\Program Files (x86)\[random]\JtsLnctes.exe
C:\Windows\System32\Tasks\[random] Launcher

Remove Trotux.com registry entries:

HKCU\Software\[random]
HKCU\Software\Mozilla\Firefox\{EB52F1AB-3C2B-424F-9794-833C687025CF}\hp http://www.trotux.com/?z=[id]&from=epf1&uid=[computer_id]&type=hp&mode=ffsengext
HKCU\Software\Mozilla\Firefox\{EB52F1AB-3C2B-424F-9794-833C687025CF}\tab http://www.trotux.com/?z=[id]&from=epf1&uid=[computer_id]&type=hp&mode=ffsengext
HKCU\Software\Mozilla\Firefox\{EB52F1AB-3C2B-424F-9794-833C687025CF}\sp http://www.trotux.com/search/?q={searchTerms}&z=[id]&from=epf1&uid=[computer_id]&type=sp
HKCU\Software\Mozilla\Firefox\{EB52F1AB-3C2B-424F-9794-833C687025CF}\surl http://www.trotux.com/search/?&z=[id]&from=epf1&uid=[computer_id]&type=sp&q=
HKCU\Software\Mozilla\Firefox\{EB52F1AB-3C2B-424F-9794-833C687025CF}\uid [random]
HKCU\Software\Mozilla\Firefox\{EB52F1AB-3C2B-424F-9794-833C687025CF}\s HtTp://d2jeaw7c5nmwo6.cloudfront.net/kww7yc2r?uid=%s&update0=version,%s&update1=sys,%s&update4=ref,%s&update5=mode,%s&update6=sys0,%s&update7=sys1,%s&update8=sys2,%s&update9=sys3,%s&update10=sys4,%s
HKCU\Software\Mozilla\Firefox\{EB52F1AB-3C2B-424F-9794-833C687025CF}\spname trotux
HKLM\SOFTWARE\Classes\CLSID\{6710C780-E20E-4C49-A87D-321850ED3D7C}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\EnableShellExecuteHooks 1
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A7BD9EC3-FCFC-4AD6-8AB6-8D6C89FCD7D8}
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\[random] Launcher
HKLM\SOFTWARE\Microsoft\help http://www.trotux.com/?z=[id]&from=epf1&uid=[computer_id]&type=hp
HKLM\SOFTWARE\Mozilla\Firefox\{EB52F1AB-3C2B-424F-9794-833C687025CF}
HKLM\SOFTWARE\Mozilla\Firefox\{EB52F1AB-3C2B-424F-9794-833C687025CF}\hp http://www.trotux.com/?z=[id]&from=epf1&uid=[computer_id]&type=hp&mode=ffsengext
HKLM\SOFTWARE\Mozilla\Firefox\{EB52F1AB-3C2B-424F-9794-833C687025CF}\tab http://www.trotux.com/?z=[id]&from=epf1&uid=[computer_id]&type=hp&mode=ffsengext
HKLM\SOFTWARE\Mozilla\Firefox\{EB52F1AB-3C2B-424F-9794-833C687025CF}\sp http://www.trotux.com/search/?q={searchTerms}&z=[id]&from=epf1&uid=[computer_id]&type=sp
HKLM\SOFTWARE\Mozilla\Firefox\{EB52F1AB-3C2B-424F-9794-833C687025CF}\surl http://www.trotux.com/search/?&z=[id]&from=epf1&uid=[computer_id]&type=sp&q=
HKLM\SOFTWARE\Mozilla\Firefox\{EB52F1AB-3C2B-424F-9794-833C687025CF}\uid [random]
HKLM\SOFTWARE\Mozilla\Firefox\{EB52F1AB-3C2B-424F-9794-833C687025CF}\s HtTp://d2jeaw7c5nmwo6.cloudfront.net/kww7yc2r?uid=%s&update0=version,%s&update1=sys,%s&update4=ref,%s&update5=mode,%s&update6=sys0,%s&update7=sys1,%s&update8=sys2,%s&update9=sys3,%s&update10=sys4,%s
HKLM\SOFTWARE\Mozilla\Firefox\{EB52F1AB-3C2B-424F-9794-833C687025CF}\spname trotux
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{CDF7DA52-A297-4646-89F9-CE1DAC96612B}
HKLM\SOFTWARE\{8C4CE252-7DB2-4F8E-8E76-BAD0E5826A83}
HKLM\SYSTEM\CurrentControlSet\services\JtsLncs


If the above-mentioned methods didn’t help in eliminating the threat, then it’s better to rely on an automatic way of deleting Trotux.com.

Download Norton

We also recommend to download and use Norton to scan the system after Trotux.com removal to make sure that it is completely gone. The antimalware application will detect any vicious components left among system files and registry entries that can recover Trotux.com.

Leave a Reply

Your email address will not be published. Required fields are marked *