(Solved!) How to remove RED-LUX.EXE virus FOREVER? Here is your "RED-LUX.EXE" Removal Guide

Be careful! Full path on computer: %COMMON APPDATA%\VOYASOLLAM\RED-LUX.EXE

What is RED-LUX.EXE?

After being downloaded, RED-LUX.EXE hijacks your browser and changes search settings.
RED-LUX.EXE also causes an appearance of popup ads and browser redirecting.

RED-LUX.EXE is very annoying and hard to get rid of.

Will you remove it?

0 0

Download Removal Tool for Free

People say

You have 2 ways to remove RED-LUX.EXE:

1. Remove Automatically.
2. Remove Manually.

Why I recommend you to use an automatic way?

1. You know only one virus name: "RED-LUX.EXE", but usually you have infected by a bunch of viruses.
   The UnHackMe program detects this threat and all others.
2. UnHackMe is quite fast! You need only 5 minutes to check your PC.
3. UnHackMe uses the special features to remove hard in removal viruses. If you remove a virus manually, it can prevent deleting using a self-protecting module. If you even delete the virus, it may recreate himself by a stealthy module.
4. UnHackMe is small and compatible with any antivirus.
5. UnHackMe is fully free for 30-days!

Here’s how to remove RED-LUX.EXE virus automatically:

STEP 1: Install UnHackMe (1 minute)

STEP 2: Scan for malware using UnHackMe (1 minute)

STEP 3: Remove RED-LUX.EXE virus (3 minutes)

So it was much easier to fix such problem automatically, wasn't it?
That is why I strongly advise you to use UnHackMe for remove RED-LUX.EXE redirect or other unwanted software.

How to remove RED-LUX.EXE manually:

STEP 1: Check all shortcuts of your browsers on your desktop, taskbar and in the Start menu. Right click on your shortcut and change it's properties.

You can see RED-LUX.EXE at the end of shortcut target (command line). Remove it and save changes.

In addition, check this command line for fake browser's trick.
For example, if a shortcut points to Google Chrome, it must have the path:
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe.
Fake browser may be: …\Appdata\Roaming\HPReyos\ReyosStarter3.exe.
Also the file name may be: “chromium.exe” instead of chrome.exe.

STEP 2: Investigate the list of installed programs and uninstall all unknown recently installed programs.

STEP 3: Open Task Manager and close all processes, related to RED-LUX.EXE in their description. Discover the directories where such processes start. Search for random or strange file names.

Remove RED-LUX.EXE virus from running processes

STEP 4: Inspect the Windows services. Press Win+R, type in: services.msc and press OK.

Remove RED-LUX.EXE virus from Windows services

Disable the services with random names or contains RED-LUX.EXE in it's name or description.

STEP 5: After that press Win+R, type in: taskschd.msc and press OK to open Windows Task Scheduler.

Delete any task related to RED-LUX.EXE. Disable unknown tasks with random names.

STEP 6: Clear the Windows registry from RED-LUX.EXE virus.
Press Win+R, type in: regedit.exe and press OK.

Remove RED-LUX.EXE virus from Windows registry

Find and delete all keys/values contains RED-LUX.EXE.

STEP 7: Remove RED-LUX.EXE from Google Chrome.

STEP 8: Remove RED-LUX.EXE from Internet Explorer.

Set Internet Explorer Homepage

STEP 9: Remove RED-LUX.EXE from Mozilla Firefox.

Change Firefox Home Page

STEP 10: And at the end, clear your basket, temporal files, browser's cache.

But if you miss any of these steps and only one part of virus remains – it will come back again immediately or after reboot.

Related Files:
%COMMON APPDATA%\VOYASOLLAM\NIMJOYRON.DAT
%COMMON APPDATA%\VOYASOLLAM\PTMM0QI1.XML
%COMMON APPDATA%\VOYASOLLAM\RED-LUX.EXE
%COMMON APPDATA%\VOYASOLLAM\RED-LUX.EXE.CONFIG
%COMMON APPDATA%\VOYASOLLAM\ROUNDFLEX.BIN

File Information RED-LUX.EXE:

Virustotal = 44/59
MD5 = 0D508A37EB3484293EEDD54A8696AA24
File Size: 114688
FileVersion: 2.0.0.12
LegalCopyright: Copyright (C) 2015

---

I use UnHackMe for cleaning ads and viruses from my friend's computers, because it is extremely fast and effective.

STEP 1: Download UnHackMe for free

UnHackMe removes Adware/Spyware/Unwanted Programs/Browser Hijackers/Search Redirectors from your PC easily.

UnHackMe is compatible with most antivirus software.
UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and backdoors. VirusTotal (0/56).
System Requirements: Windows 2000-Windows 8.1/10 32 or 64-bit. UnHackMe uses minimum of computer resources.

STEP 2: Double click on UnHackMe_setup.exe

You will see a confirmation screen with verified publisher: Greatis Software.

Once UnHackMe has installed the first Scan will start automatically

STEP 3: Carefully review the detected threats!

Click Remove button or False Positive.

Enjoy!

Note: There is a rating embedded within this post, please visit this post to rate it.