Hey you,
BE IN THE KNOW!

35,000 ransomware infections per month and you still believe you are protected?

Sign up to receive:

  • alerts
  • news
  • free how-to-remove guides

of the newest online threats - directly to your inbox:


Get Rid of Ads by RunBooster from Your PC

Article created to provide assistance in removing RunBooster Adware from your computer.

A program that is classified as potentially unwanted by security experts, called RunBooster has been reported to display numerous advertisements on the computers It is installed. The software aims to perform numerous modifications to the user’s computer, including changing web browser settings to display numerous third-party content. Since such content may often be advertisements of unknown origin, users are strongly advised to take extreme care and focus on removing RunBooster PUP from their computer immediately. One way to do is if you read this article carefully.

Threat Summary

Name RunBooster
Type PUA
Short Description May display various advertisements for profit by pay-per click schemes.
Symptoms You can be redirected from your homepage while trying to search the Web, and it’s the same with the new tab setting. You can see adverts in your browser caused by this unwanted software. Sets a task in Windows Task Scheduler.
Distribution Method Freeware Installations, Bundled Packages
Detection Tool See If Your System Has Been Affected by RunBooster

Download

Malware Removal Tool

User Experience Join Our Forum to Discuss RunBooster.

How Did I Get RunBooster on My Computer

This program may be spread via the so-called bundling method. These type of silent installation is included together with another installer of a program that the user may have intentionally downloaded. Such programs are often freeware, like media players, torrent download clients, CD/DVD recording software and other things most users seek and often use. To make profit, some dubious third-party websites may bundle apps, like RunBooster and hence slither it onto your computer. This is why experts advise:

1.Stay away from websites that you know nothing about or check them at least. One way to do it is in scamadviser.com
2.Always look for the official download site for the app you want to download.
3.Perform a check for bundled apps during the installation process by always going through every step in the “Custom” or “Advanced” installation option.

RunBooster – More Information

As soon as RunBooster is enabled on your computer, it immediately installs itself and ads what appears to be an uninstaller in Windows Programs and Features. After installation, users may see a small pop-up box, explaining the installation is complete:

“Application was successfully installed.”

Then, RunBooster schedules a task in the Windows Task Scheduler to run it’s “updater”, located at:

Drive:\Program Files\RunBooster\RunBoosterUpdateTask64.exe

For some reason, a folder, called RunBoosterUpdateTask also appears at:

Drive:\Windows\System32\Tasks

The main executable of the program may be the one, located in Program Files:

Drive:\Program Files\RunBooster\RunBoosterService64.exe

The RunBooster PUA also creates multiple registry sub-keys and in them adds values that are customized to change different settings. The created and/or modified sub-keys are the following:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RunBooster
HKEY_LOCAL_MACHINE\SOFTWARE\RunBooster\Cryptography
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\RunBooster
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinDivert1.2
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinDivert1.2\Enum
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinDivert1.2\Parameters\Wdf

Among the activity of RunBooster, there may be multiple different actions performed, such as:

  • Collect information on your computer.
  • Collect information about online browsing history.
  • Gather data on online clicks.
  • Display advertisements that are targeted specifically for you.
  • Display various other redirects.
  • Slow-down your computer significantly.
  • Install other unwanted software.

In any scenario, malware researchers strongly advise users to take the necessary steps towards the removal of this ransomware infection from your computer. The primary reason for this is that while such programs are made to make profit via third-party advertisement, not all advertisements are guaranteed to be safe and may infect your computer with malware.

Remove RunBooster Completely

In order to eliminate this ransomware infection from your computer, it is of high recommendation to follow the removal instructions below. They are created to help you remove this potentially unwanted program in full by first isolating it and then following methodological removal methods. But if you feel unsure or have no experience in manual removal of unwanted software, experts always advise to instead try using an anti-malware scanner that will swiftly and effectively take care of this situation for you.

Manually delete RunBooster from Windows and your browser

Note! Substantial notification about the RunBooster threat: Manual removal of RunBooster requires interference with system files and registries. Thus, it can cause damage to your PC. Even if your computer skills are not at a professional level, don’t worry. You can do the removal yourself just in 5 minutes, using a malware removal tool.

1. Remove or Uninstall RunBooster in Windows
2. Remove RunBooster from Your Browser
3. Fix registry entries created by RunBooster on your PC

Automatically remove RunBooster by downloading an advanced anti-malware program

1. Remove RunBooster with SpyHunter Anti-Malware Tool
2. Back up your data to secure it against attacks related to RunBooster in the future
Optional: Using Alternative Anti-Malware Tools

Vencislav Krustev

A network administrator and malware researcher at SensorsTechForum with passion for discovery of new shifts and innovations in cyber security. Strong believer in basic education of every user towards online safety.

More Posts - Website

Please wait...

Subscribe to our newsletter

Want to be notified when our article is published? Enter your email address and name below to be the first to know.