SecurityWindows

How to remove mail.ru virus

Disclosure: This post contains sponsored links whereby we may receive a commission for any purchases made.

Introduction

In this guide we will take a look at the Mail.ru adware and walk through the process of removing it once in for all off your computer and will work on all versions of Windows as well as the following web browsers:

  • Chrome/Chromium
  • Mozilla Firefox
  • Internet Explorer

This type of adware can be very frustrating and make itself difficult to remove slowing down your computer in the process of it been installed.

What is Mail.ru and how did it get on my computer?

A screenshot of the mail.ru website.

Mai.Ru is a popular email service and web portal based in Russia, whilst the website and portal is a legitimate website their search engine is often bundled with other programs or installed as part of other packages often through other adware programs and installer packages.

Once installed it will go through and set itself as the default homepage passing all your search traffic through the go.mail.ru site making it hard to remove. Programs such as this are referred to as adware and will often slow down your computer in the process.

Recommended tools

This tutorial will primarily make use of MalwareBytes and Super Anti-Spyware to scan for and remove remnants of this adware from your system allowing you to restore your default search engine.

MalwareBytes

Super Anti-Spyware

Mail.ru virus removal

In order to get started go ahead and download and install MalwareBytes from the link above and follow the prompts to complete the installation. Once installed go ahead and open the program from the newly created desktop icon or just search for “Malwarebytes” in the start menu search box.

Upon opening you will see a window similar to the one shown above, from here click on scan and select “full scan” and wait for the scanning process to complete. This process may take a while depending on the speed of your computer which is why we recommend closing all running programs whilst this takes place.

Once complete the scan will prompt you to remove the detected items, from here go ahead and choose remove and follow the prompts to restart your computer.

Now that your PC has powered back on you should notice that the mail.ru adware will be removed however the homepage in your browser may still be pointing to the site.

If this is the case follow the steps below to remove any remaining remnants and restore your browser settings.

Removing go.mail.ru from chrome and other browsers

Now that the scan has completed and removed the malware we still need to check the browser to ensure that the homepage still isn’t in place.

These next set of instructions will walk you through the process of checking your browser for remnants of the adware and restoring your homepage settings back to your preferred search engine.

Chrome users:

In order to check your Chrome settings go ahead and click on the hamburger menu in the top-right hand corner of the screen and choose “settings”.

From here you you will need to choose search engine from the left-hand sidebar, at this point we need to look at the search engine used in the address bar and make sure your preferred search engine is selected from the drop-down list.

Next up check the start-up area to make sure that your preferred search engine URL is listed, if not choose the 3 dots and select edit to replace the URL with your preferred site.

Click on ok and you will have now restored your search engine settings back to normal.

Checking for any rogue extensions

One last thing you will want to look for is any potential rogue extensions which may have installed the adware in the first place.

Simply click the extensions link in the settings page which will show all installed extensions, watch out for any suspicious ones you don’t use here such as document converters, document templates or games which often contain such adware.

If you found an extension you don’t remember installing or don’t recognize go ahead and click remove.

Firefox users:

If your using the Firefox browser simply navigate to the top right-hand corner of the screen and choose the hamburger menu followed by the options button. Similar to Chrome our first point of call will be to check the homepage settings and search engine.

To get started click on the home button on the left-hand sidebar and choose custom URL from the drop-down box. In here you can fill in your favorite search engine or start page e.g. duckduckgo.com or bing.com to set your homepage in place of the old URL.

Next up your going to want to check the search section as well and make sure your preferred search engine is selected from the drop-down box.

Internet Explorer users:

If your still using Internet Explorer then the same steps can be applied using these instructions.

Firstly you will need to click on the cog icon in the top right-handed corner of the screen and choose “internet options” which will bring up some settings. Once selected you will see some settings appear where you can adjust the homepage.

Simply replace this address with your preferred website or search engine if necessary and choose apply followed by the ok button.

Running Super Anti-Spyware for a secondary scan

This step is entirely optional however we recommend it as a machine infected with this type of adware then it may contain other remnants therefore as a precaution we like to run this utility to get a second opinion.

To get started download the program from the link above and follow the prompts to install the program on your computer.

Upon installation go ahead and select the “full scan” button  to commence the malware scan, again this process can take a while depending on your computers performance so you may want to leave it for a while.

A screenshot of the Super Anti-Spyware installer for Windows.

The Super Anti-Spyware file detection window

When Super Anti-Spyware completes it’s scan follow the prompts to remove any detected items and restart your PC to complete the removal.

With all the steps completed you can now rid your system of this adware and restore your favorite search engine or start page instead of the mail.ru homepage.

Other notable anti-malware programs you may like to run:

Spybot search and destroy

Sophos Virus Remover

Keeping yourself protected going forward

In order to protect your system from this type of adware the best step you can take is to always exercise caution when installing software packages to ensure you don’t accidentally proceed whilst checking all check-boxes which will often bundle other packages.

Along with the above it’s also recommended to keep your security software up-to-date, if you don’t have any antivirus protection then we recommend a combination of an on-demand antivirus & MalwareBytes or just the premium version of MalwareBytes depending on your use-case.

Conclusion

I hope you found this guide to be helpful, if so be sure to check out our community page and software utilities for more and this guide with your friends and family.

Last updated on the 3rd of August 2020