What is %LOCAL APPDATA%\CEF?

Some people found  %LOCAL APPDATA%\CEF on their PCs. AdwCleaner detects this folder as malicious.

But usually %LOCAL APPDATA%\CEF is a folder for storing data created by applications using CEF.

The Chromium Embedded Framework (CEF) is a simple framework for embedding Chromium-based browsers in other applications:
https://bitbucket.org/chromiumembedded/cef

How dangerous is CEF?

Usually CEF folder contains USER DATA subfolder. It also contains subfolder related to the CEF applications.

My verdict: %LOCAL APPDATA%\CEF cannot be marked as malicious, because it is only a container for sub-folders. You do not delete Program Files if one sub-folder is bad.

How to remove CEF malware?

Some CEF applications may contain adware/spyware etc. In this case I suggest you to delete a subfolder related to the malicious application.
Some legitimate application like Steam, Google Widevine use CEF.

Be careful to avoid damage your PC!
You can always check your PC for adware/malware/TRojans/spyware using UnHackMe.

---

I use UnHackMe for cleaning ads and viruses from my friend's computers, because it is extremely fast and effective.

1. Download UnHackMe

for free UnHackMe removes Adware/Spyware/Unwanted Programs/Browser Hijackers/Search Redirectors from your PC easily.

UnHackMe is compatible with most antivirus software.
UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and backdoors. VirusTotal (0/56).
System Requirements: Windows 2000-Windows 8.1/10 32 or 64-bit. UnHackMe uses minimum of computer resources.

2. Double click on UnHackMe_setup.exe

You will see a confirmation screen with verified publisher: Greatis Software.

Once UnHackMe has installed has installed the first Scan will start automatically

3. Carefully review the detected threats!

Click Remove button or False Positive.

Enjoy!

This is weired error.

I found a solution here:

https://social.technet.microsoft.com/Forums/en-US/ef6e7acc-b1db-40e2-b037-bccc06a9e813/error-1083-the-executable-program-that-this-service-is-configured-to-run-in-does-not-implement-the?forum=winservergen

I tried to start AeLookupSvc service and got 1083 error.

1. Open Services.msc

2. Open the properties of the service that wont start
3. Open regedit.exe
Go to the key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AeLookupSvc
Change ImagePath value to:
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
4. Go to the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost
Create REG_MULTI_SZ value with name LocalServiceAndNoImpersonation.
Set value to AeLookupSvc.
5. Close regedit. Open service.msc and start the service.

---

I use UnHackMe for cleaning ads and viruses from my friend's computers, because it is extremely fast and effective.

1. Download UnHackMe

for free UnHackMe removes Adware/Spyware/Unwanted Programs/Browser Hijackers/Search Redirectors from your PC easily.

UnHackMe is compatible with most antivirus software.
UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and backdoors. VirusTotal (0/56).
System Requirements: Windows 2000-Windows 8.1/10 32 or 64-bit. UnHackMe uses minimum of computer resources.

2. Double click on UnHackMe_setup.exe

You will see a confirmation screen with verified publisher: Greatis Software.

Once UnHackMe has installed has installed the first Scan will start automatically

3. Carefully review the detected threats!

Click Remove button or False Positive.

Enjoy!

How to remove a virus (or redirect) and restore home page and search engine in Mozilla Firefox

Step 1: Check your Firefox shortcut

1. Right click on your Mozilla Firefox shortcut on the desktop or in the start menu or on the taskbar.
2. Choose ‘Properties.
3. Select a ‘Shortcut’ tab.
4. Remove a malicious web site from the end of the command line.
5. Click OK to save changes.

Step 2: Remove Malicious Add-ons
Click on the Firefox menu button (located at the top right corner).

1. Click on the ‘Add-ons’ button.
2. Choose ‘Extensions’.
3. Remove malicious extensions.
   Pay attention! Extension with ‘Adblock’ name may be not a real Adblock extension. It may be a fake extension. You can remove all extensions and then download only required extensions from a Mozilla web site.

Remove Mozilla Firefox extensions

Step 3: Set your Firefox Home Page

1. Click on the menu button.
2. Choose Options.
3. Set the option: ‘When Firefox starts’ to ‘Show my homepage‘.
4. Type in your homepage URL in the ‘Home Page’ field.

Change Firefox Home Page

 Step 4: Change Default Search Engine

1. Click on the menu button.
2. Choose Options.
3. Select the Search tab.
4. Select your preferred search engine from drop down menu.

If it does not help, then reset your Firefox to the default state

1. Click on the menu button.
2. Click on ‘?’ button.
3. Choose ‘Troubleshooting information’ from the list.
4. Click ‘Reset Firefox’ button.
5. Confirm resetting Firefox.

---

I use UnHackMe for cleaning ads and viruses from my friend's computers, because it is extremely fast and effective.

1. Download UnHackMe

for free UnHackMe removes Adware/Spyware/Unwanted Programs/Browser Hijackers/Search Redirectors from your PC easily.

UnHackMe is compatible with most antivirus software.
UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and backdoors. VirusTotal (0/56).
System Requirements: Windows 2000-Windows 8.1/10 32 or 64-bit. UnHackMe uses minimum of computer resources.

2. Double click on UnHackMe_setup.exe

You will see a confirmation screen with verified publisher: Greatis Software.

Once UnHackMe has installed has installed the first Scan will start automatically

3. Carefully review the detected threats!

Click Remove button or False Positive.

Enjoy!

How to remove a virus (or redirect) and restore home page and search engine in Google Chrome

Step 1: Check your Google Chrome shortcut

1. Right click on your Google Chrome shortcut on the desktop or in the start menu or on the taskbar.
2. Choose ‘Properties.
3. Select a ‘Shortcut‘ tab.
4. Remove a malicious web site from the end of the command line.
   Pay attention! You need to check that the shortcut target is real Google Chrome!
   Correct path:
   C:\Documents and Settings\UserName\Local Settings\Application Data\Google\Chrome\chrome.exe
   C:\Users\UserName\AppData\Local\Google\Chrome
   C:\Program Files (x86)\Google\Application\chrome.exe
5. Click OK to save changes.

Step 2: Remove Malicious Extensions

Remove Virus from Chrome Extensions

1.  Click on the Chrome menu icon.
2.  Choose Settings.
3.  Select Extensions.
   Also, you can type in: chrome://extensions as the URL.
4.  Remove all unknown or not used extensions. All extensions are optional for using Google Chrome!

Step 3: Next, check pre-installed extensions in Windows registry

Remove Windows registry pre-installed Chrome extensions

1.  Click Start menu, Search.
2.  Type in: regedit.exe.
3.  Go to the registry key:
   HKEY_LOCAL_MACHINE\Software\Wow6432\Google\Chrome\Extensions
   If you have Windows 32-bit, you the key
   HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions
4. Delete all sub-keys. They are optional for using Google Chrome.

Step 4: Set your Startup Homepage

Set Chrome Startup Homepage

1.  Click on the Chrome menu icon.
2.  Choose Settings.
3.  Select Settings tab.
4.  Set “Open a specific page or set of pages” .
5.  Remove malicious URL from a list. Click on the Close button when you move a mouse pointer over an item.
6. Add your own startup homepage URL.

Step 5: Change your Default Search Engine

Set Chrome Default Search Engine

1.  Click on the Chrome menu icon.
2.  Choose Settings.
3.  Select Settings tab.
4. Click Manage Search Engine.
5. Delete malicious or unused search engines.
   Choose your favorite search engine.

Step 6: Reset your Chrome settings if your browser is still infected

Reset Chrome Settings

1.  Click on the Chrome menu icon.
2.  Choose Settings.
3. Select Settings tab.
4.  Select Show Advanced Settings.
5. Click Reset Settings.

---

I use UnHackMe for cleaning ads and viruses from my friend's computers, because it is extremely fast and effective.

1. Download UnHackMe

for free UnHackMe removes Adware/Spyware/Unwanted Programs/Browser Hijackers/Search Redirectors from your PC easily.

UnHackMe is compatible with most antivirus software.
UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and backdoors. VirusTotal (0/56).
System Requirements: Windows 2000-Windows 8.1/10 32 or 64-bit. UnHackMe uses minimum of computer resources.

2. Double click on UnHackMe_setup.exe

You will see a confirmation screen with verified publisher: Greatis Software.

Once UnHackMe has installed has installed the first Scan will start automatically

3. Carefully review the detected threats!

Click Remove button or False Positive.

Enjoy!

How to remove a virus (or redirect) and restore home page and search engine in Internet Explorer

Step 1: Check your Internet Explorer Shortcut

1. Right click on your Internet Explorer shortcut on the desktop or in the start menu or on the taskbar.
2. Choose ‘Properties.
3. Select a ‘Shortcut‘ tab.
4. Remove a malicious web site from the end of the command line.

Step 2: Remove Malicious Add-ons from Internet Explorer:

Remove malicious Internet Explorer add-on

1. Click on the “gear” icon, “Manage Add-ons” or choose in menu “Tools”, “Add-ons”.
2. Choose an item and click Remove.

Step 3: Set your Homepage for Internet Explorer

Set Internet Explorer Homepage

1. Click on the “gear” and choose “Internet Options”. Also, you can use main menu “Tools“, “Internet Options“.
2. Edit your home page.

Step 4: Set Internet Explorer Search Engine

Set Internet Explorer Search Engine

1. Click on the “gear” and choose “Manage Add-ons“. Also, you can use main menu “Tools“, “Manage Add-ons“.
2.  Select “Search Providers“.
3.  Delete malicious search providers.
   Set your favorite search engine.

Step 5: Reset your Internet Explorer to Default Settings
If the previous steps do not help you:

1. Click “Tools” in the main menu.
2. Click “Internet Options“.
3. Click “Advanced“.
4. Click Reset.

---

I use UnHackMe for cleaning ads and viruses from my friend's computers, because it is extremely fast and effective.

1. Download UnHackMe

for free UnHackMe removes Adware/Spyware/Unwanted Programs/Browser Hijackers/Search Redirectors from your PC easily.

UnHackMe is compatible with most antivirus software.
UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and backdoors. VirusTotal (0/56).
System Requirements: Windows 2000-Windows 8.1/10 32 or 64-bit. UnHackMe uses minimum of computer resources.

2. Double click on UnHackMe_setup.exe

You will see a confirmation screen with verified publisher: Greatis Software.

Once UnHackMe has installed has installed the first Scan will start automatically

3. Carefully review the detected threats!

Click Remove button or False Positive.

Enjoy!