How to Remove cosmeticsrc.com Virus? (Removal Steps)

How to Get Rid of cosmeticsrc.com Virus

cosmeticsrc.com is an newly identified webhijack virus dropped by Adware that inserts web browser as a popup ads. Different from legit webpage ad, cosmeticsrc.com is enabled without users’ approval, and it never give users a option to delete or disable it. Even though you delete it with some antivirus tools temporally, it is able to come up after system restart. By hiding on your PC deeply, cosmeticsrc.com will run unwanted Windows services when you launch system, and it runs harmful processes silently to connect your browser with remote server that transfers ads.

It collects your browser statistic and learn what you may be interested in, then it helps its partners send some ads related with search query you used, so as to gain your clicks and sell you something. It’s better not clicking any ad or popup from cosmeticsrc.com, because it may take you some websites that contain spyware which steals your sensitive information.  Tons of ads by cosmeticsrc.com slow down your Internet, redirects your search engine results and crash down your browser randomly. Besides, cosmeticsrc.com and some other PUPs downloaded by it degrade your system performance and cause many trouble to you if you leave them on your PC. Now you should follow the guides below to delete all threats and malware hiding there, read steps now:

cosmeticsrc.com Removal Process

Part 1. Manually Remove cosmeticsrc.com on Windows OS

Part 2. Manually Remove cosmeticsrc.com on Mac OS


Part 1. Manually Remove cosmeticsrc.com on Windows OS

(Some of the steps will likely require you to exit the page. Bookmark it for later reference.)

Step 1 – Uninstall malicious programs from Control Panel.

uninstall cosmeticsrc.com

  • 1. Press “Windows key + R key” together to open Run window
  • 2. Input “control panel” in Run window and hit Enter key to open Control Panel
  • 3. Click Uninstall a program:
  • 4. Right-click programs which may be related with cosmeticsrc.com and click Uninstall:
If you cannot uninstall an unwanted or suspicious program from Control Panel, we recommend downloading SpyHunter anti-malware to see whether it will find related malware on your system:

   ↓ Download SpyHunter Anti-Malware

More information about SpyHunter, steps to uninstall, EULA, Threat Assessment Criteria, and Privacy Policy. Free scanner checks if your computer is infected. To remove malware, you’ll need to purchase the full version of SpyHunter.


Step 2 – Remove malicious extensions from web browsers.

(NOTE – Please Bookmark This Page because some operations may restart or close your system or web browser)

Chrome

remove cosmeticsrc.com on chrome

On Chrome: Launch up Google Chrome> click Chrome menu > click Tools> click Extension> select extensions which may be related with cosmeticsrc.com> click trash bin

Firefox

remove cosmeticsrc.com on firefox

On Firefox: Open Firefox, navigate to browser menu in the top right > select Add-ons > select add-ons which may be related with cosmeticsrc.com> remove it with Disable or Remove button.

Internet Explorer

remove cosmeticsrc.com on firefox

On IE: Open Internet Explorer >click Tools > click Manager Add-on Tools and Extensions> select extensions which may be related with cosmeticsrc.com > click Remove or Disable button.

Microsoft Edge

On Microsoft Edge: (Reset default homepage and search engine to remove cosmeticsrc.com associated hijacker)

(NOTE – Please Bookmark This Page because some operations may restart or close your system or web browser)

Reset Edge homepage: Click More (…) > click Settings > select A specific page or pages under “Open with” > select Custom to type your favorite website.

Reset Edge search engine: Click More (…) > click Settings > Click View advanced settings > Click <Add new> under “Search in the address bar with”> type your favorite search engine >click Add as default.

If you cannot delete an unwanted search engine or extension from web browser, we recommend downloading SpyHunter’s Malware Scanner to see whether it will find related Adware or Hijacker on your PC:

   ↓ Download SpyHunter Anti-Malware

More information about SpyHunter, steps to uninstall, EULA, Threat Assessment Criteria, and Privacy Policy. Free scanner checks if your computer is infected. To remove malware, you’ll need to purchase the full version of SpyHunter.

 


Step 3 Find and remove malicious registry entries of cosmeticsrc.com or malicious program.

NoteIn case any suspicious files, unwanted program, unwanted browser extension, or unwanted search engine cannot be removed manually, it is often caused by malicious program, which may adds files to registry or make changes in registry . Therefore, to uninstall such stubborn items, you need to find and remove malicious files in the Registry Editor. Check the steps below:

1. Press “Windows key + R key” together to open Run window;

2. Input “regedit” in Run window and hit Enter key to open Registry;

get rid of cosmeticsrc.com manually

3. Click Edit menu and select Find >> Type virus’s name into it and click Find Next >> Right click on the files and click Delete (Only If you can determine that they are related with malware):

delete cosmeticsrc.com manually

If you cannot determine which registry files are malicious, do not take risk to delete any file, that may damage your system. To avoid the risk, we recommend downloading SpyHunter and see whether it will find malicious registry files  for you:

   ↓ Download SpyHunter Anti-Malware

More information about SpyHunter, steps to uninstall, EULA, Threat Assessment Criteria, and Privacy Policy. Free scanner checks if your computer is infected. To remove malware, you’ll need to purchase the full version of SpyHunter.


 

Step 4 – Disable Notifications of suspicious websites on Web Browsers.

If some unwanted pop-ups or ads still appear on web browser, please try to disable their Notifications on all web browsers:

Edge

On Microsoft Edge

  • Launch Edge browser
  • Click on menu button of Microsoft Edge
  • Click Settings
  • Click “View advanced settings”
  • Click “Manage” under “Website permissions”
  • Find the unwanted URL and click the X (Clear) button to remove the URL.

Chrome

On Google Chrome

  • Click the three-dots Menu button on the right upper corner
  • Click “Settings” >> Scroll down to the bottom and click “Advanced
  • Click on “Content settings” in the Privacy and Security section
  • Click “Notifications
  • Find the unwanted URL >> Click the three dots next to the URL >> click “Block” or “Remove

Firefox

On Firefox

  • Launch Firefox
  • Click the Menu button (three bars) on the right upper corner >> Select “Options
  • Click on “Privacy & Security” on the left hand side of the screen
  • Scroll down to the “Permissions” >> Click the “Settings” button next to “Notifications”
  • Find the unwanted URL >> Click the drop-down menu and select “Block

IE'

On Internet Explorer

  • Launch IE
  • Click the Gear button on the right upper corner >> Select “Internet options”
  • Click “Privacy” tab and click “Settings” under “Pop-up Blocker” section
  • Find the unwanted URL and Click the “Remove” button

NOTE – If the instructions above do not work, please download SpyHunter Anti-malware to scan entire system.


Step 5 (Optional) – Reset Web Browser Settings

Edge

On Microsoft Edge

  • Click the three horizontal dots icon >> Select Settings.
  • Click the “Choose what to clear” button
  • Click Show more >> Select everything >> click the “Clear” button.

Chrome

On Google Chrome

  • Click the Chrome menu icon >> Select Settings
  • Scroll down to the bottom and click the Advanced
  • Scroll down to the bottom >> Click the Reset button

Firefox

On Firefox

  • Click the Firefox menu at the top right corner >> click Help
  • Select Troubleshooting Information
  • Click the “Refresh Firefox” button

IE

On Internet Explorer

Click on the gear icon >> Click “Internet Options”

Select the “Advanced” tab >> Click “Reset”button

NOTE – If the instructions above do not solve your problems, please download SpyHunter Anti-malware to scan entire system.



Part 2. Manually Remove cosmeticsrc.com on Mac OS

(Some of the steps will likely require you to exit the page. Bookmark it for later reference.)

Step 1.Quick malicious process.

  1. Click the Go button and select Utilities folder;
  2. Locate the Activity Monitor icon on the screen and double-click on it
  3. Under Activity Monitor, find a suspicious-looking process, select it and click Quit Process
  4. A dialog should pop up, asking if you are sure you would like to quit the troublemaking process. Select the Force Quit option
If you cannot determine which process is malicious, we recommend downloading Combo Cleaner and see whether it will find  malicious apps  for you:

↓ Download Combo Cleaner Antivirus For Mac 

 More information about Combo Cleaner, steps to uninstall, EULA, and Privacy Policy. Free scanner checks if your computer is infected. To remove malware, you’ll need to purchase the full version of Combo Cleaner.


Step 2.Uninstall malicious programs from Mac.

uninstall sss on mac

Open the Finder >> Go to the Applications folder >> Find out malicious apps and Click Move to Trash >> Enter your password if requested.


Step 3. Delete malware-generated files in the following folders:

/Library/LaunchAgents folder;
Library/Application Support folder;
~/Library/LaunchAgents folder;
/Library/LaunchDaemons folder;

/Library/LaunchAgents

– In Finder, choose “Go” then click on “Go to Folder“:

delete cosmeticsrc.com on mac

– In the Go to Folder… bar, type: /Library/LaunchAgents:

get rid of cosmeticsrc.com on mac

In the “LaunchAgents” folder, look for any recently-added suspicious files and move them to the Trash. Here are some examples of malicious files generated by malware:

cosmeticsrc.com, “com.cosmeticsrc.comDaemon”, “com.cosmeticsrc.com, “com.cosmeticsrc.com.plist”, “com.adobe.fpsaud.plist” “installmac.AppRemoval.plist”, “myppes.download.plist”, “mykotlerino.ltvbit.plist”, etc.

uninstall cosmeticsrc.com on mac

Library/Application Support

– In Finder, choose “Go” then click on “Go to Folder“:

– In the Go to Folder… bar, type: Library/Application Support:

In the “Application Support” folder, look for any recently-added suspicious files and move them to the Trash. Here are some examples of malicious files generated by malware:

cosmeticsrc.com, “com.cosmeticsrc.comDaemon”, “com.cosmeticsrc.com, “com.cosmeticsrc.com.plist”, “com.adobe.fpsaud.plist” “installmac.AppRemoval.plist”, “myppes.download.plist”, “mykotlerino.ltvbit.plist”, etc.

~/Library/LaunchAgents

– In Finder, choose “Go” then click on “Go to Folder“:

– In the Go to Folder… bar, type: ~/Library/LaunchAgentst:

In the “LaunchAgentst” folder, look for any recently-added suspicious files and move them to the Trash. Here are some examples of malicious files generated by malware:

cosmeticsrc.com, “com.cosmeticsrc.comDaemon”, “com.cosmeticsrc.com, “com.cosmeticsrc.com.plist”, “com.adobe.fpsaud.plist” “installmac.AppRemoval.plist”, “myppes.download.plist”, “mykotlerino.ltvbit.plist”, etc.

/Library/LaunchDaemons

– In Finder, choose “Go” then click on “Go to Folder“:

– In the Go to Folder… bar, type: /Library/LaunchDaemon:

In the “LaunchDaemon” folder, look for any recently-added suspicious files and move them to the Trash. Here are some examples of malicious files generated by malware:

cosmeticsrc.com, “com.cosmeticsrc.comDaemon”, “com.cosmeticsrc.com, “com.cosmeticsrc.com.plist”, “com.adobe.fpsaud.plist” “installmac.AppRemoval.plist”, “myppes.download.plist”, “mykotlerino.ltvbit.plist”, etc

If you cannot determine which files are generated by malware, do not take risk to delete any file, that may damage your system. To avoid the risk, we recommend downloading Combo Cleaner and see whether it will find malicious files  for you:

↓ Download Combo Cleaner Antivirus For Mac 

 More information about Combo Cleaner, steps to uninstall, EULA, and Privacy Policy. Free scanner checks if your computer is infected. To remove malware, you’ll need to purchase the full version of Combo Cleaner.


Step 4. Delete malicious extensions From Safari / Chrome / Firefox.

Safari

delete cosmeticsrc.com from safari

Open Safari >> Click Safari menu button and choose Preferences >> Select the Extensions tab >> Select the suspicious extension and click Uninstall.

Firefox

delete cosmeticsrc.com from Mac Firefox

Open Firefox >> Click the menu button >> select Add-ons >> Determine the suspicious or unwanted extension, click the Disable or Remove button.

Chrome

delete cosmeticsrc.com from Mac Chrome

Run Chrome >> Click the three-dot menu button in the upper-right corner >> Select the More Tools >> Click Extensions >> Determine the suspicious or unwanted extension, click on the Trash icon >> Click Remove


Step 5. Use Combo Cleaner to re-diagnose your Mac and see if it is 100% clean:

To make sure that your system is not infected at all, it’s better to run a scan with Combo Cleaner Antivirus and see if it will detect any remaining unwanted items:

↓ Download Combo Cleaner Antivirus For Mac 

 More information about Combo Cleaner, steps to uninstall, EULA, and Privacy Policy. Free scanner checks if your computer is infected. To remove malware, you’ll need to purchase the full version of Combo Cleaner.

– Once combocleaner.dmg installer is downloaded, double-click it to install;

– Then launch Combo Cleaner and click “Start Combo Scan” button;

– Combo Cleaner will scan your Mac for malware infections. Once the scan is completed, remove any found infections.

cosmeticsrc.com removal on mac