Remove GillCom virus

GillCom is a browser hijacker. GillCom browser hijacker modifies web browser configurations to Fxsmash.xyz and displays fake advertisements on your computer using the web browser.

GillCom is usually recommended on the internet as a helpful tool by the fake website chrome-extensions.xyz. According to the GillCom developers to enhance the browser functionality.

However, in reality, GillCom is a browser hijacker that collects all kinds of browsing data from your browser settings.

The web browsing data collected by the GillCom adware is used for advertising purposes. The browsing data is sold to advertising networks. Because GillCom gathers browsing data from your browser, GillCom is also classified as (PUP) Potentially Unwanted Program.

GillCom browser extension will install itself in the Google Chrome, Firefox, Internet Explorer and Edge browser. No major browser developer yet notices this browser hijacker as dangerous.

Uninstall GillCom extension from Google Chrome

1. Open Google Chrome
2. Type chrome://extensions/ in the Google Chrome address bar and press ENTER on your keyboard.
3. Find the “GillCom” browser extension and click Remove.

If the extension is managed by your organization, download chrome policy remover.
Unzip the file, right-click the .bat, and run as administrator.

Instructions for Mac OS X at the end of this instruction.

Uninstall GillCom extension from Firefox

1. Open Firefox
2. Type about:addons in the Firefox address bar and press ENTER on your keyboard.
3. Find the “GillCom” browser extension and click the three dots on the right of the GillCom extension.
   Select Remove from the menu to remove GillCom from the Firefox browser.

Uninstall GillCom add-on from Internet Explorer

1. Open Internet Explorer
2. Click the menu (wrench icon) in the top right.
3. Open Manage Addons from the menu.
4. Remove GillCom from Extensions and Toolbars.
5. On the left open Search Providers settings.
6. Find GillCom Search and Remove GillCom Search.

Do you still have GillCom in Internet Explorer?

1. Open Windows Control Panel.
2. Go to Uninstall a program.
3. Click “installed on” column to sort the recently installed applications by date.
4. Select GillCom and click Uninstall.
5. Follow GillCom uninstall instructions.

Follow the next steps to either fully remove GillCom adware from Windows or Mac. Scroll down for Mac instructions.

Remove GillCom adware from Windows

Remove GillCom adware with Malwarebytes

Malwarebytes is a complete malware removal tool for Windows.

Malwarebytes is free to use.

The GillCom adware redirects your web browser to misleading advertisements that encourage adware applications.
Make sure to completely clean your computer from adware with Malwarebytes. Malwarebytes is an essential tool in the fight against malware.

Download Malwarebytes

Install Malwarebytes, follow on-screen instructions. Click Scan to start a malware-scan.

Wait for the Malwarebytes scan to finish. Once completed, review the GillCom adware detections.

Click Quarantine to continue.

Reboot Windows after all the adware detections are moved to quarantine.

Continue to the next step to remove unwanted programs and malware

Remove unwanted programs and malware with Sophos HitmanPRO

In this malware removal step, we will start a second scan to make sure there are no malware remnants left on your computer. HitmanPRO is a cloud scanner that scans every active file for malicious activity on your computer and sends it to the Sophos cloud for detection. In the Sophos cloud both Bitdefender antivirus and Kaspersky antivirus scan the file for malicious activities.

Download HitmanPRO

When you have downloaded HitmanPRO install the HitmanPro 32-bit or HitmanPRO x64. Downloads are saved to the Downloads folder on your computer.

Open HitmanPRO to start installation and scan.

Accept the Sophos HitmanPRO license agreement to continue. Read the license agreement, check the box, and click on Next.

Click the Next button to continue Sophos HitmanPRO installation. Make sure to create a copy of HitmanPRO for regular scans.

HitmanPRO begins with a scan, wait for the antivirus scan results.

When the scan is done, click Next and activate the free HitmanPRO license. Click on Activate Free license.

Enter your e-mail for a Sophos HitmanPRO free thirty days license. Click on Activate.

The free HitmanPRO license is successfully activated.

You’ll be presented with the malware removal results, click Next to continue.

Malicious software was partially removed from your computer. Restart your computer to complete removal.

Bookmark this page before you reboot your computer to continue the next GillCom removal steps.

Continue to the next step to reset the Chrome, Firefox, or Microsoft Edge web browser (optional)

If you still have problems with the web browser consider a full reset of the web browser.

Reset Google Chrome

In the Google Chrome address bar type, or copy and paste: chrome://settings/resetProfileSettings

Click the Reset Settings button to fully reset Google Chrome to the default settings. When you are done restart the Chrome browser.

Reset Mozilla Firefox

In the Firefox address bar type, or copy and paste: about:support
Click the Refresh Firefox button to fully reset Firefox to the default settings. When you are done restart the Firefox browser.

Reset Microsoft Edge

In the Microsoft Edge address bar type, or copy and paste: edge://settings/resetProfileSettings
Click the Refresh button to fully reset Edge to the default settings. When you are done restart the Microsoft Edge browser.

Your Windows computer is now free from adware, malware, and unwanted programs. If you still have problems ask for my help using the comments.

Uninstall GillCom adware from Mac

Remove GillCom with Malwarebytes for Mac

In this first step for Mac, you need to remove GillCom adware that is responsible for the unwanted advertisements with Malwarebytes for Mac. Malwarebytes is the best software to remove unwanted programs, adware, and browser hijackers from your Mac. Malwarebytes is free to detect and remove adware on your Mac computer.

Download Malwarebytes (Mac OS X)

You can find the Malwarebytes installation file in the Downloads folder on your Mac. Double click the installation file to begin.

Follow instructions in the Malwarebytes installation file. Click the Get Started button.

Where are you installing Malwarebytes on a personal computer or on a work computer? Make your choice by clicking any of the buttons.

Make your choice to either use the Free version of Malwarebytes or the Premium version. The premium versions include protection against ransomware and offer real-time protection against malware.
Both Malwarebytes free and premium are able to detect and remove malware from your Mac.

Malwarebytes needs “Full Disk Access” permission in Mac OS X to scan your harddisk for malware. Click Open Preferences.

In the left panel click on “Full Disk Access”. Check the Malwarebytes Protection and close the settings.

Go back to Malwarebytes and click the Scan button to begin scanning your Mac for malware.

Click on the Quarantine button to delete the found malware.

Reboot your Mac to complete the malware removal process.

When the removal process is done, continue to the next step.

Continue to the next step to remove unwanted browser settings from Safari, Chrome, or Firefox (Mac)

Uninstall GillCom adware from Safari for Mac

Open the Safari browser. In the left top corner click on Safari. In the Safari menu click on Preferences. Open the “Extensions” tab.
Click on the extension you would like to remove, make sure to check for GillCom installed Safari extension, and click on “Uninstall”.

Uninstall GillCom from Google Chrome for Mac

Open the Google Chrome browser on Mac. In the address bar type: chrome://extensions/. Verify all listed browser extensions.
If you notice a GillCom extension, click the Remove button to uninstall the GillCom extension from Google Chrome.

Some malware programs create policy’s to prevent users from resetting browser configurations such as the web browser’s homepage and the search engine. If you cannot change your homepage or search engine in the Google Chrome browser you might want to remove the policies created by the malware to restore the browser’s configurations.

Remove unwanted profile from your Mac

First, you need to remove unwanted profiles from your Mac, follow the steps.

Click the Apple symbol () in the top left corner on Mac OS X, click on “Preferences” in the menu bar, and select “Profiles”. If profiles don’t exist you do not have any malicious profile installed on your Mac.

Select the “AdminPrefs“, “Chrome Profile“, or “Safari profile” and delete it.

Next, you need to check if there are policies created for Google Chrome. Open the Chrome browser, in the address bar type: chrome://policy.
If there are policies loaded into the Chrome browser, follow the steps below to remove the policies.

On the Applications folder on your Mac, go to Utilities and Open the Terminal application.

Enter the following commands in the Terminal application, press ENTER after each command.

Remove “Managed by your Organization” from Google Chrome on Mac

Some adware and malware on Mac force the browser’s homepage and search engine using a setting known as “Managed by your organization”. If you see the browser extension or settings in Google chrome is forced using the “Managed by your organization” setting, follow the steps below.

Make sure to bookmark this webpage and open it in another web browser, you need to Quit Google Chrome.

On the Applications folder on your Mac, go to Utilities and Open the Terminal application.

Enter the following commands in the Terminal application, press ENTER after each command.

Restart Google Chrome when you are done.

Uninstall GillCom Add-on from Mozilla Firefox for Mac

Open the Firefox browser. In the address bar type: about:addons. Verify all installed Firefox add-ons.
If you notice the GillCom add-on, click the Remove button to uninstall the add-on from Firefox.

Your Mac should be free of malware, and the GillCom adware. If you still need help you ask for my help in the comments.