What is the YOU SHALL NOT PASS virus?

The YOU SHALL NOT PASS virus, also referred to as the What is You lookin here? virus is malware categorized as a browser hijacker that utilizes trojan horses. The You Shall Not Pass virus changes internet browser settings and system files, including home pages and default search engines, as well as Windows hosts files, causing internet browsers to redirect to unwanted websites when attempting to visit popular websites such as Facebook, PayPal, and even Botcrawl, as well redirect internet users to a page that displays a picture of a wizard (Gandalf) holding a sword that says “You Shall Not Pass.” The You Shall Not Pass virus and associated third-parties may also display unwanted advertisements.

You shall not pass virus removal

The You Shall Not Pass virus is distributed a variety of ways be that drive-by-download websites, legitimate websites that have been compromised, and other tactics used to distribute trojan horses. The You Shall Not Pass virus has also been reported to spread via email spam, as well as compromised social media posts, and can essentially be contracted from downloading software such as freeware, shareware, codecs, and even torrents. Sometimes You Shall Not Pass infects computer users who suspect they are about to download a useful piece of software, but instead victims of the infection are entrapped to unethical terms they would not agree with if presented in a proper manner.

The You Shall Not Pass virus has been reported to drop several malicious files, change registry settings, and modify windows hosts file to target unwanted URLs and ultimately cause unwanted browser redirects. Victims of the You Shall Not Pass virus have stated that they are redirected to the You Shall Not Pass page when attempting to visit websites such as Facebook, Google, eBay, and more. When infected with the You Shall Not Pass trojan, cyber criminals behind the virus will add new lines to the hosts file in order to redirect domain names to their malicious IP addresses.

You shall not pass website

After your hosts file is modified, whenever you attempt to visit Amazon, eBay, IMDB, Twitter, Bing and other popular websites, you will be redirected to a malicious domain that says “You shall not pass”.

The “You shall not pass” notification is not hard to remove, however in some scenarios the infection will install a piece of Windows malware possibly titled Backdoor:Win32/Fynloski.A.
Backdoor:Win32/Fynloski.A is a trojan horse that allows remote access and complete control of an infected computer system as if they are sitting right behind it.

How to remove the You Shall Not Pass virus

Automatically remove You Shall Not Pass malware – Scan for and automatically remove You Shall Not Pass malware
Manually remove You Shall Not Pass malware – Remove/Uninstall You Shall Not Pass and third-party malware

1. Automatic You Shall Not Pass removal

Use the instructions below to automatically remove You Shall Not Pass and third-party malware, as well as automatically remove unwanted search engines from your home page, default search engine, browser shortcuts, and other hijacked settings using free or paid versions of reputable software.

Malwarebytes Anti-Malware

1. Install the free or paid version of Malwarebytes Anti-Malware.

2. Once Malwarebytes is installed, run the program. If you are using the free version of Malwarebytes you will be prompted to update the database, make sure to do so.

3. On the first tab labeled “Scanner” select the Perform full scan option and click the Scan button to perform a full system scan. Malwarebytes will automatically detect malware infecting the computer system.

Malwarebytes Perform Full Scan

4. Once the malware scan is complete, Malwarebytes may prompt a notice stating malicious objects were detected including trojans capable of spreading the computer infection. Select the malicious objects and click the Remove Selected button to completely remove the malicious files from your computer (the image below shows a file that is NOT selected) or click the Delete button to remove quarantined files.

Malwarebytes Gadgetbox

CCleaner

CCleaner can be used to automatically repair internet browser settings startup up settings, and uninstall pesky software.

1. Install the free or paid version of CCleaner by Piriform.

CCleaner Analyze Cleaner

2. Once installed, open the program and navigate to Cleaner > Windows/Applications and click the Analyze button. Afterwards, click the Run Cleaner button on the bottom right of the program interface.

CCleaner Startup

3. Next, navigate to Tools > Startup and search through each tab starting from windows, internet explorer, etc., all the way to Content Menu, for additional suspicious entries and click Disable and Delete once anything is found.

4. To automatically uninstall unwanted programs, navigate to the Uninstall tab and search for the specific software you suspect may be the culprit of this infection, including freeware, shareware, and even recently installed versions of legitimate software in the list of installed programs. Uninstall the programs as selected.

2. Manual You Shall Not Pass removal

Use the instructions below to manually uninstall unwanted software using generic removal procedures.

How to uninstall You Shall Not Pass malware

1. Access Windows Start Menu and navigate to the Control Panel.

2. Click Uninstall a program or Add and remove a program.

3. In the list of installed programs, search for potentially unwanted software, including software downloaded from websites such as download.com. Once located, double click the unwanted programs or highlight them in the list and click the Uninstall button.

How to remove unwanted add-on and extension

Use the instructions to remove unwanted add-ons, extensions, plugins, and toolbars that may be responsible for unwanted redirections.

Google Chrome

1. Click on the Customize icon (wrench or 3 bar icon) next to the address bar and navigate to Tools > Extensions.

2. Search for the You Shall Not Pass extension and remove it by clicking the trashcan icon next to them.

Mozilla Firefox

1. Type Ctrl+Shift+A.

2. On the Extensions and Plugin search for the You Shall Not Pass add-on and remove it.

Microsoft Internet Explorer

1. Click Tools and select Manage add-ons.

2. On the Toolbars and Extensions tab search for the You Shall Not Pass add-on and remove it if located.