How to Remove Boyu.com.tr & ProSearch Virus? [ Easy Tutorial ]

Boyu.com.tr, Ssj4.io, ProSearch and Ook.gg virus is a browser hijacker and a variant of Superstar3.io, and Searchmenow.gg virus. Once infected, Boyu.com.tr, Ssj4.io and Bangsearch.pro take control of your browser's search settings, disable Windows security, silently install malicious extensions, and drop malware applications onto your PC.
Attempts to remove Boyu.com.tr, Ssj4.io, Ook.gg and Bangsearch.pro are often futile as they reappear after a certain period. If automated removal is unsuccessful, consider attempting our manual removal process. We have developed a step-by-step tutorial to help you eliminate the Bangsearch and ss4j virus. Please watch and provide your feedback.
1) *ChromeTool.bat code*: If any error then run in Normal Mode
myprocessinfo....
2) *EdgeFix.reg code*: If any error then run in Normal Mode
myprocessinfo....
3) *Activate Defender.reg code*: If any error then run in Normal Mode
myprocessinfo....
4) For unwanted extensions that cannot be removed
Please watch the tutorial: • How to Remove Malware ...
5) * if this malware installs Chromstera virus*
Please watch this tutorial: • How to Get Rid Of Chro...
For UCPD velocity / UCPDMgr.exe file
It is not necessary to have UCPDMgr.exe file every time on every infected PC. Therefore, if this file is not found, it indicates that your computer is not infected with this particular file.
Latest updation for Malware Files/Folder/Location
===========================================================================
These are additional files; the *REST OF THE MALWARE FILES ARE THE SAME AS SHOWN IN THE VIDEO*.
===========================================================================
A) Latest Task Entries
UCPDMgr.exe is not active now. (*Old*)
No New Entry Found (06/11/23)
B) Malware Files & Folders
New Update 24/09/2024
New files are added/changed by the virus creator
New Virus Domain Added*: Boyu.com.tr virus ( *Latest 08/07/24)
New Virus Domain Added*: Ssj4.io virus ( *Old/Active 04/02/24)
New Virus Domain Added*: ook.gg virus ( *Old/Active 15/10/23)
New Virus Domain Added*: Searches-world.com virus ( *Old/Active 18/10/23)
MUST CHECK / AERAS OF YOUR COMPUTER ( Latest 24/09/24)
C:\Program Files (x86)\
C:\Users\{Your User Name}\AppData\Roaming\
C:\Users\{Your User Name}\AppData\Local\
C:\Program Files (x86)\Chromstera\ChromsteraUpdater.exe (if found, delete it / *Old/To Be Check*)
C:\Users\{Your User Name}\AppData\Local\apps.crx (if found, delete it / *Old/To Be Check*)
================= old entries =================
( Why old, coz malware creator change their modus operandi )
C:\Program Files (x86)\Kavaca\ = Delete Kavaca Folder ( OLD 07/02/24)
C:\Users\{Your User Name}\AppData\Roaming\GlobalCo ( OLD 07/02/24)
C:\Users\{Your User Name}\AppData\Roaming\EdgWebOpt2 ( OLD 07/02/24)
C:\Users\{Your User Name}\AppData\Roaming\EdgWebOpt ( OLD 07/02/24)
C:\Windows\system32\op.config.xml (*Old*)
C:\WINDOWS\system32\ServiceUI.exe (if found, delete it / *Old/Not Active 06/11/23)
C:\WINDOWS\system32\UITheme.exe (if found, delete it / *Old/Not Active 06/11/23)
C:\WINDOWS\system32\serviceui.json (if found, delete it / *Old/Not Active 31/10/23)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\*Sordum* (if found, delete it / Old/To Be Check 20/11/23)
C:\Users\[your user name]\AppData\Local\*Sordum* (if found, delete it / Old/To Be Check 20/11/23)
🙏🙏*Please like my tutorial and subscribe to my channel*🙏🙏

[@MyProcessInfo]

*Please take note, everyone*: Bangsearch frequently alters both the file name and its location, making it challenging to keep up-to-date with these changes. Therefore, I kindly request everyone to carefully follow the video instructions and apply the provided techniques to locate the latest modifications using Bangsearch Pro.

[@mohammedalali7533]

HI, I have a problem, I found a file to delete from your description 'SysWin.exe' but when I try to delete it it says "you'll need to provide administrator permission to delete this file" when I press continue it says "the action cant be completed because the file is open in MsHelper" what should I do? if you would please help Edit: I opened the task manager and found both 'SysWin.exe' and 'vcpkhost.exe' and clicked "end task" and also for the MsHelper I deleted from the task manager and then I was able to delete the two files.

[@nathaniell411]

Hey man nothing was working fornme so i was reading the comments tryna see if something changed insaw yoyr comment and ended both takss i had the exact same ones running and it seems to have fixed my issue thanks alot!

[@nathaniell411]

Only thing is i dont see the files anywhere to delete them i saw both the tasks running and ended them both but im not sure if the files are still somewhere on my pc or not insearcged for them and didnt see them

[@voyager177]

How do you identify if the file name and its location is suspicious?

[@Gamerelk]

@@mohammedalali7533 Yep. This Work Greatly.

[@TechTronTV]

Okay if you are here and you have this issue and are reading comments and think they are all bottled, I promise I'm real lmao, this is actually legit. I was skeptical but I did the chrome took, ran chrome as admin and used the tool. Went away INSTANTLY! Thank you sm

[@Twistedllll]

Sus

[@JinTopic1]

@@Twistedllllfax

[@Combine_Recruiter]

Fr

[@lolhound1212]

Thank you so much man

[@BadidanYT]

thank youu, this worked for me. I was getting so mad when i tried searching for images but it just wouldn't show up anything, it would just give me links and take me to a site by itself, it took me awhile to figure out because some of the files were changed from the video, but the description are also indication of updated malware and detections for why the computer is acting the way it is. But thank you again

[@MyProcessInfo]

You're welcome!

[@zec4979]

I’m trying to run the chrome tool on administrator mode but doesn’t work on safe mode. Nothing pops up

[@ShotBySohzzy]

same

[@immortalphoenix1674]

Thank you so much this was a pain to try to get rid of but your video help and got rid this annoying virus thanks again.

[@MyProcessInfo]

You're welcome!

[@TheDethsheep]

Absolute godsend! Thank so much! Worked perfectly! Seriously awesome tutorial!

[@MyProcessInfo]

You're welcome!

[@hardheadwoody]

Didn’t work :/ registry editor won’t work for the step and I can’t delete the UPCD file

[@dridrx_3769]

I know the comments are weird, but il personally real haha, I’ve followed the bio for found different folder and it works! Thx a lot

[@vq-gamesblitz]

Bro ur my fucking savior, I don't know anything about coding and stuff so I was really nervous for this but it worked even tho I didn't find any files to delete. The UCPDM.exe file i could find in my search bar but couldn't delete. Still seemed to work tho so tnx SO MUCH.

[@shaebuchanan5316]

Thank you sweetheart ❤

[@MyProcessInfo]

You are welcome..!! 😊

[@aldadelgado7595]

Me has salvado, sí funciona gente :)

[@LabanVFX]

bro saved my life🙏 thank you sm🙏🙏🙏🙏

[@MyProcessInfo]

You are welcome 😊

[@JP-oe4zs]

Nice, works as advertised. Not unlike the others which shoe horn you into buying soy hunter

[@nepzeiac416]

It won’t let me run chrome tool as administrator I click it and it does nothing

[@joey1212-u1b]

on 6:25 when i tried running chrome tool it didn't do anything and i thought it did something and i went on and at 7:40 i couldn't find anything can you help?

[@youexpectedaname]

hey bro is there anyway i can contact you? my computer is running into problems with the bangsearch

[@Domibanana100]

I need help, i can’t delete the UCPD files i dont have enough permission from trustedinstaller , i am at the part where youre in safe mode, i cant delete UCPDMgr.exe and UCPD.sys

[@Domibanana100]

okay well i didnt follow all the steps becaus ei couldn’t delete 50% of the files i could delete sordum, also the last step of running activate defender didnt work.BUT somethign worked and my browsers are now fine thank you so much please help more people

[@Raul-u9p]

Oh thx bro =)))) no way i got rid of that shit tysm

[@venusxskull2291]

It didnt work for me :( help me?

[@orbitalblimp]

I couldn't delete UCPDmgr.exe. It said that I needed permission from Trustedinstaller to make changes to the file. Now what?

[@KeenenBlake]

It’s not letting me delete any of the files. It says I don’t have permission. And where did the chrome fix come from??

[@N0tChaseYT]

Same

[@samueleortu178]

Same

[@omarajob199]

ill literally blow u dry for this one mate! cheers

[@the_thirteenth_struggle]

Excuse me, I have a question, may you please tell me how to delete UCPDMgr? It says I do not have access to delete the file.

[@sherutsport5290]

I also can't delete this file

[@lmbbuilders7363]

This didn’t work for me I couldn’t find the files and after the tutorial the redirect still happened only on chrome I got it from steam unlocked If anyone else has this problem after doing this tutorial download avast and do every virus search and browser/temp file scan it removed the virus for me

[@davidchristopher2216]

I got the virus from the same place trying to download something

[@maximleikam92]

i did that with avast and it found a malware in temp file and put it automatically in quarantine but it still puts me on ssj4 site

[@rhgamehamel6350]

I got it from the same place I’m never attempting to be a pro hacker again

[@ohheeheehahgrrr]

Yeah me too, i tried antivast and it didnt work, i got mine from a fake nvidia website

[@jaynicholls868]

Wow! Is all i can say to this. Your so easy to follow along too, plus even tho i had a few problems with name changes down below still showed me what others to look out for. Thankyou again bro🤙🏻

[@sdrummr]

This really helps if you have the same problems I had. Thank you so much kind stranger!!!!!!

[@Untoldtruth._]

I can't run "activate defender" It says that not all the datas are wrote correctly in the system's Register

[@rdny2374]

did u find a solution already?

[@mal1ylies761]

i'm trying to merge the activate defender but it says "not all data was successfully written to the registry. some keys are open by the system or other processes, or you have insufficient privileges to perform this operation" edit: the virus got removed either way though so tysm for this video

[@MyProcessInfo]

please check the codes : error or white space in code

[@damunaik4]

You're a lifesaver! Wish this video came first in the search results because this is legit. Plus I appreciate you taking time to update the description with new file names as you find them.. I found at least 3 files/folders from your list, and now my browsers are working fine. Let's hope the virus doesnt emerge again! Also i tried activating my Defender and didnt work, but it doesnt matter, the rest of the process works just fine.

[@MyProcessInfo]

You're welcome..!!

[@TheGamerQuest100]

Thank you so much for making this video. You are truly a tech hero. To the people who can't find UCPD velocity. Just continue on to the next step and make sure you read the description carefully what file you need to delete.

[@MyProcessInfo]

Much appreciated!

[@bronson8439]

I don’t see my file anywhere

[@Popcorn.-.]

OH MY GOD I CANT BELIVE THIS WORKS, I missed a couple of files and I didn't even successfully merge at the end but I said screw it its probably gonna fail anyway, so I followed the tutorial the best I can with a lot of fails that I didn't try and fix and I just tested it and it literally works.

[@RetroDubs]

Thank you so much I’ve been dealing with this for days.

[@X-Kxrma-X]

is this legit???

[@Raul-u9p]

@@X-Kxrma-X is actually working

[@NigmarecarsAGR]

@@X-Kxrma-Xyeah

[@deathanoide3041]

Everything worked perfectly! Thank you so much for this awesome video! It scared me when my laptop had came across with these issues, until this video has saved my life. You just earned yourself a new subscriber from me! Again, thank you so much for this video and I mean that! You really did saved my life! Have a wonderful day! 😁👍👍

[@MyProcessInfo]

You're welcome! ❤❤❤

[@Frosty-xx8eu]

Works fr ; just some notes for some people in the comments ; windows defender doesnt necessarily need to work for virus to go , you wont necessarily have anything in the task manager , just make sure you are thorough when deleting the files and look in the description for all the possible names and locations

[@ricomon35]

Good to know, since I found no iterations for the UCPD Velocity process.

[@00amare]

THANK YOU SO MUCH, finally after days of struggling to get rid of it!!! This works you guys, follow the instructions and you will be good👍

[@MyProcessInfo]

You're welcome!

[@L0vyyyy]

THIS WORKED THANK U SO MUCHHH I WAS LITERALLY STRESSING SO MUCHHHH ❤❤❤❤

[@witat7203]

Thank you for posting this and going out of your way to keep the description updated. Really helps

[@MyProcessInfo]

You are welcome 😊

[@MemingstonRBLX]

OMG THANK YOU SO SO MUCH I WAS SO WORRIED and I'm real Bless you

[@dustyadams5927]

I hate vids where it's just point & click!

[@AKTTT]

what am i supposed to look at in descriptions to disable ucpd velocity, because i dont think theres any name in task schedular library in description then the name im trying to look for, can i also get in contact with you.

[@vigilo-cu6rg]

Same

[@Blitzdo]

As of now, the file is renamed to Appservice.

[@luci4better]

hard process but it worked.

[@SpacemanEzy]

Just used it with all the info in the video and comments. Worked!

[@lebohangmoloi6721]

Thank you so much broe...you're a true G. It works people, just follow along.I thought I was gonna have to rest my PC.Thanks again man.

[@kimakeem9965]

I get an error message when opening the chrome file in safe mode. I right to run as adminatraror to no avail. I tried right click and merge the edge file and received an error message as well. Feeling a little defeated 😢

[@SK0PSS]

Same I’m not sure what I’m doing wrong. I think maybe the virus is under a different file name than the ones in the description, bc I can’t find any of those listed on my task scheduler either

[@rhgamehamel6350]

When going to local files - program files (x86) - delete Miicrosoft

[@beowulf1694]

How did you delete it? When I try to do it, it says it's running in other folder. Please help me

[@rhgamehamel6350]

@@beowulf1694 personally it didn’t say that , it just deleted and the problem was gone , but I was in safe mode

[@solodolo6819]

​@@beowulf1694open task manager look for "Robust Optimizer" and similar names, righr click, then end task. Go back to that folder and delete it

[@williewodka9196]

This helped me, thank you so much! After downloading a "game" file from a shady website, I saw a suspicious pop up so I instantly deleted the file. Although yhe virus was already there, it didnt have time to infect my laptop with any tasks, all i did was clear the temporary files and restarted my laptop and it helped!

[@noone-zh1zo]

U have no idea what making these tutorials does for people thank u soooooo much

[@MyProcessInfo]

You are welcome 😊

[@danman8924]

Great video! Very clear and consistent! Fixed it instantly 👍

[@davidgarza4592]

It worked for me, couldn’t find any of the files in questions, also safe mode wouldn’t let me run any of the files. So I just ran them in normal, and it worked. Strange but thank you!!

[@roylee1380]

What do I do if I watched the files change names and disappear I’m in safe mode rn and sordum files where there and disappear before I had a chance to delete please help 5:35 update I found it thank you so much for the video didn’t think it would be that tricky but I got it

[@dna_spryzen9577]

I did all of it but the activate defender didnt work and bangsearchpro is still showing up can u help?

[@salvatoreconca4222]

Activate defender ain’t working for me either

[@Mr_chicken123]

guys im not a bot and this actually worked,i had bangsearch and i couldnt do anything but this saved me and helped, i really reccomend it and goodluck removing it if u see this .

[@Lg3logan]

I could not find the SearchUi files or the two other folders what do I do?

[@amjadislam4799]

Same any solution bro?

[@BSPRO-GAMER]

I tried your solution and it works, but i have a question : - Can i now delete the texte document created ? Otherwise, thx you so much !

[@vexelt8728]

The ONE PERSON WHO HELP ME just 1 TEXT , THE BEST!

[@rickbeen2291]

thank you su much this worked i skipped a few steps because i dint have some of the files but it still worked thank you

[@Kv4s1r_]

I think I have a differnet iteration of the virus, it stopped redirecting me after I disabled the MsHelper startup service. Do you know where to find the file so i can delete it?

[@kroosHevilic2323]

BRO YOU JUST SAVED MY LIFE I was about to reset my pc because every time i searched something up like something little like “hi” it would redirect me to a blocked page. Now i Can search now bro if I could give you a hug right now i would thanks brother love from 🇬🇹

[@mikea9929]

Wow this virus was a nasty little bugger. This helped so much thank you thank you thank you! I would have never figured this out myself. Thank you!!!

[@ephesusofficial]

THIS FIXED MY ISSUE I HAD FOR OVER A YEAR!!!! THANK YOU❤❤❤❤

[@Natalia-mr6yv]

RAAAAAH IT WORKED!! IT SHOWED THE WINDOWS DEFENDER DIDINT WORK BUT IT RESOLVED ANYWAYD. THANK YOUU

[@CloseDrake97234]

Oh my god thank you so much! I though i was going to have to pay like £50 to get it fixed but I watched this video and I don't get redirected anymore! I had a bit of trouble in some spots but just replayed the video from a couple seconds before and it all turned out fin thank you so much for your help!!!

[@elitaylor2934]

It says after I put it into safe mode that the chrome tool cannot be accessed by the system so I can’t do anything basically once it’s in safe mode what do I do

[@rhgamehamel6350]

Same ! Any news ???

[@Cynaras]

Thanks a lot mate, although I didn’t find the files you named, following all the steps fixed it anyway, people like you are the unspoken heroes of the Internet ❤❤

[@sadfghjk3909]

When I try opening the chrome and edge fix and activate they say file cannot be accessed by the system

[@ShotBySohzzy]

same

[@NicoCall93]

Thank you! You saved my pc!

[@MyProcessInfo]

You are welcome! ❤❤

[@3ak744]

It was long but it did work, that's man🎉

[@salito2.073]

Okay so in 6:05 you restarted, I did that and my now PC doesn’t turn on lmao

[@ab.mehairbi5411]

This was amazing and worked perfectly fine i just deleted all the files that were the same date as today and it working

[@zayedalkharoosi4436]

All what I can say is thank you a lot pro u helped my pc from the format

[@giovanninegrinramos4018]

works

[@Tiaan-ow2ek]

you deserve

[@waitinginqueue]

i found UCPDMgr and UCPD sys but says i am unable to delete them due to the fact i don’t have permission yet i can’t get permission because the activator is saying i don’t have permission either

[@younes4889]

Same, what did you do?

[@starknight1244]

Thank you very much, just extra note the appdata in user may also be hidden also some folders in the windows folder the need to unhide them is required

[@hqnji8945]

Saved me bro, much love 👍👍

[@coachnelly]

Thank you soooooooooo much for this, it really helped a lot! My first time doing something like this, I was on the verge of throwing the laptop against the wall and after wrecking it with a hammer. But following the tutorial step by step and checking all the updated info in the description box, I managed to get rid of this annoying virus. Thanks a million times. This has been super valuable.You're Awesome!

[@MyProcessInfo]

You're so welcome!

[@jordanbarron4198]

@@MyProcessInfo gg bro

[@yousefplayzgames]

No way this works. Thanks for helping me!

[@nicknackh1610]

That's worked for me, thank you! Your a damn saint! :D

[@MyProcessInfo]

You're welcome!!

[@StopReadingMyName202]

You earned a sub and a like, saved my brand new laptop. Thank you.

[@MyProcessInfo]

You are welcome..!! 😊

[@vaportheowl]

When my chrome browser kept jumping to searches-world, I was thoroughly freaked out. Then when I downloaded an antivirus program to get rid of it, the program literally couldn’t find an issue. I was mortified that I finally did my computer in by trying to download SAW: The Video Game from Steam Unlocked. This video was a life saver and, while I thought the presentation was a tad sketchy looking, I'm glad I trusted the process. Keep up the great work, and I'll try to be careful when downloading games online lmaoo

[@MyProcessInfo]

You're welcome..!! :)

[@Ainzoöalgowns]

does it actually work?

[@vaportheowl]

@@Ainzoöalgowns so far, yeah

[@JasonN-qu5sc]

@@Ainzoöalgownsyes works a charm, check the description for registry changes too. I had a couple new ones that weren’t in the video. This thing was kicking my ass until I found this guy

[@JerryMeehanJr]

everything worked except for windows defender said something was missing or permissions issue i have a cracked windows 11 lol

[@waitinginqueue]

same here. trying to look into other ways to activate it

[@MylesKyochi]

@@waitinginqueuedid you find anything?

[@alimo3011]

It worked. I’m not a bot 😂😂😂 I swear. This guy is legit. Thanks dude

[@derekballer2333]

Thanks!!

[@Pedram_Jr]

Defender cant merged please help

[@beowulf1694]

Same here for edge and defender, chrome to won't open

[@geq9569]

you are a lifesaver, absolute legend

[@lifeisstrange2605]

OMG THANK YOU SO MUCH!!! At first I thought it was the wifi I was using but it happened with the main one I used! This is the only thing that helped me, thank you!

[@MyProcessInfo]

You're welcome!!

[@kevinandersson1768]

I cant run the cmd files... what should I do?

[@lightplace11]

The goat bro thanks so much this worked❤❤❤

[@avammari]

THANK YOU SO MUCH OMG IT MADE ME SO MAD THAT IT KEPT SWITCHING YOUR AMAZING THANK YOU SO MY H

[@reaperpilled]

Thanks so much! There was some steps I couldn’t do for some reason - but it worked out in the end ❤️❤️ 😭

[@MyProcessInfo]

You're welcome!!

[@devinhisbag3251]

How do I copy that if u can’t access KZbin 😂

[@alrightmelover-nz5ys]

It worked for me - thank you! I found just following the process and not worrying if I couldn't find some of the files or even about an error message re: merging at the end paid off - just follow the steps as best you can.

[@MyProcessInfo]

You are welcome!

[@dawsonmod]

You my bro and a LEGEND! thank you heaps!!

[@fa1nt176]

Thank you very much

[@samhux4981]

what do i do if i don’t see ucpd velocity?

[@khadljah]

fr I’m having that same issue as well however I’m gonna finish the tutorial I’ll update to see if it worked

[@khadljah]

just finished the tutorial and it didn’t work do u still have the virus if not what did u do to fix it?

[@khadljah]

Yooo I fixed it!!!

[@uptown1317]

Love the beat... where can I find it?

[@harshiniroshika1495]

It worked. Thank you so much ❤

[@Turtlethantwigs]

Thank you so much for all the help. I’m really glad I was able to find this video and fix my search browsers. All the best!!!

[@MyProcessInfo]

You're welcome!

[@Ughhjv237]

THANK YOU SO MUCH!! YOU'RE THE BEST!!