(Solved!) Here is how to remove "QY_PLUGIN.EXE" virus COMPLETELY: "QY_PLUGIN.EXE" Removal Guide

Be careful! Full path on computer: %PROGRAM FILES%\IQIYI VIDEO\LSTYLE\5.6.40.4071\QY_PLUGIN.EXE

What is QY_PLUGIN.EXE?

After being downloaded, QY_PLUGIN.EXE hijacks your browser and changes search settings.
QY_PLUGIN.EXE also causes an appearance of popup ads and browser redirecting.

QY_PLUGIN.EXE is very annoying and hard to get rid of.

Will you remove it?

0 0

Download Removal Tool for Free

People say

You have 2 ways to remove QY_PLUGIN.EXE:

1. Remove Automatically.
2. Remove Manually.

Why I recommend you to use an automatic way?

1. You know only one virus name: "QY_PLUGIN.EXE", but usually you have infected by a bunch of viruses.
   The UnHackMe program detects this threat and all others.
2. UnHackMe is quite fast! You need only 5 minutes to check your PC.
3. UnHackMe uses the special features to remove hard in removal viruses. If you remove a virus manually, it can prevent deleting using a self-protecting module. If you even delete the virus, it may recreate himself by a stealthy module.
4. UnHackMe is small and compatible with any antivirus.
5. UnHackMe is fully free for 30-days!

Here’s how to remove QY_PLUGIN.EXE virus automatically:

STEP 1: Install UnHackMe (1 minute)

STEP 2: Scan for malware using UnHackMe (1 minute)

STEP 3: Remove QY_PLUGIN.EXE virus (3 minutes)

So it was much easier to fix such problem automatically, wasn't it?
That is why I strongly advise you to use UnHackMe for remove QY_PLUGIN.EXE redirect or other unwanted software.

How to remove QY_PLUGIN.EXE manually:

STEP 1: Check all shortcuts of your browsers on your desktop, taskbar and in the Start menu. Right click on your shortcut and change it's properties.

You can see QY_PLUGIN.EXE at the end of shortcut target (command line). Remove it and save changes.

In addition, check this command line for fake browser's trick.
For example, if a shortcut points to Google Chrome, it must have the path:
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe.
Fake browser may be: …\Appdata\Roaming\HPReyos\ReyosStarter3.exe.
Also the file name may be: “chromium.exe” instead of chrome.exe.

STEP 2: Investigate the list of installed programs and uninstall all unknown recently installed programs.

STEP 3: Open Task Manager and close all processes, related to QY_PLUGIN.EXE in their description. Discover the directories where such processes start. Search for random or strange file names.

Remove QY_PLUGIN.EXE virus from running processes

STEP 4: Inspect the Windows services. Press Win+R, type in: services.msc and press OK.

Remove QY_PLUGIN.EXE virus from Windows services

Disable the services with random names or contains QY_PLUGIN.EXE in it's name or description.

STEP 5: After that press Win+R, type in: taskschd.msc and press OK to open Windows Task Scheduler.

Delete any task related to QY_PLUGIN.EXE. Disable unknown tasks with random names.

STEP 6: Clear the Windows registry from QY_PLUGIN.EXE virus.
Press Win+R, type in: regedit.exe and press OK.

Remove QY_PLUGIN.EXE virus from Windows registry

Find and delete all keys/values contains QY_PLUGIN.EXE.

STEP 7: Remove QY_PLUGIN.EXE from Google Chrome.

STEP 8: Remove QY_PLUGIN.EXE from Internet Explorer.

Set Internet Explorer Homepage

STEP 9: Remove QY_PLUGIN.EXE from Mozilla Firefox.

Change Firefox Home Page

STEP 10: And at the end, clear your basket, temporal files, browser's cache.

But if you miss any of these steps and only one part of virus remains – it will come back again immediately or after reboot.

Related Files:
%PROGRAM FILES%\IQIYI VIDEO\LSTYLE\5.6.40.4071\QYPOPWNDDLL.DLL
%PROGRAM FILES%\IQIYI VIDEO\LSTYLE\5.6.40.4071\QYUNINST.EXE
%PROGRAM FILES%\IQIYI VIDEO\LSTYLE\5.6.40.4071\QY_PLUGIN.EXE
%PROGRAM FILES%\IQIYI VIDEO\LSTYLE\5.6.40.4071\ROOT.DLL
%PROGRAM FILES%\IQIYI VIDEO\LSTYLE\5.6.40.4071\RS_HTTP.DLL

File Information QY_PLUGIN.EXE:

Virustotal = 1/62
MD5 = 809D220A0B4AF4C80D66427E1E990F52
File Size: 809872
OriginalFilename: Qy_plugin.exe
FileDescription: ????????
InternalName: ?????
CompanyName: ???
LegalCopyright: Copyright (C) 2017 ??? All Rights Reserved

---

I use UnHackMe for cleaning ads and viruses from my friend's computers, because it is extremely fast and effective.

STEP 1: Download UnHackMe for free

UnHackMe removes Adware/Spyware/Unwanted Programs/Browser Hijackers/Search Redirectors from your PC easily.

UnHackMe is compatible with most antivirus software.
UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and backdoors. VirusTotal (0/56).
System Requirements: Windows 2000-Windows 8.1/10 32 or 64-bit. UnHackMe uses minimum of computer resources.

STEP 2: Double click on UnHackMe_setup.exe

You will see a confirmation screen with verified publisher: Greatis Software.

Once UnHackMe has installed the first Scan will start automatically

STEP 3: Carefully review the detected threats!

Click Remove button or False Positive.

Enjoy!

Note: There is a rating embedded within this post, please visit this post to rate it.