We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
JS/Medfos
Aliases: JS/Redirector.NIQ trojan (ESET) Trojan.JS.Medfos (Ikarus)
Summary
Windows Defender detects and removes this threat.
This family of threats are malicious JavaScript files that redirect web searches to pay-per-click advertising sites.
This threat might be installed on your PC from a Win32/Medfos variant.
Use the following free Microsoft software to detect and remove this threat:
- Microsoft Defender Antivirus for Windows 10 and Windows 8.1, or Microsoft Security Essentials for Windows 7 and Windows Vista
- Microsoft Safety Scanner
- Microsoft Windows Malicious Software Removal Tool
You should also run a full scan. A full scan might find other, hidden malware.
Remove browser add-ons
You may need to remove add-ons from your browser:
- Manage add-ons in Internet Explorer
- Disable or remove Add-ons in Firefox
- Uninstall extensions in Chrome
You can also visit our advanced troubleshooting page or search the Microsoft virus and malware community for more help.
If you’re using Windows XP, see our Windows XP end of support page.
