Friday, August 14, 2009

stop from opening in browser

Does your browser automatically opens ?

This is probably a virus or worm which doesn't harm your computer system but only opens the link i.e. uncondinationably. Actually this is a browser hijacker effecting IE (Internet Explorer) and Firefox. It simply promotes thenewspedia by opening up the site randomly while you are browsing or opens up along with homepage even if you have no set it as your homepage.

As a browser hijacker, it takes controll over your browser so you should immediately remove it as to avoid future harms. So here's the removal steps:


This is caused by a file named nissan.exe and here I have described 3 methods to remove it.


Open registry editor by going to Start->run->regedit and hit enter.

Navigate to

you will see an entry named "taskman" with a value similar to "C:\RECYCLER\S-1-5-21-3028898713-081331...

Double click it and you'll see its path like C:\RECYCLER\S-1-5-21-3028898713-0813311981-684376638-1852\nissan.exe

This file is the cause of the mess as it tells windows to execute the file. So, you have to delete the key "taskman" but before that copy your path address (C:\RECYCLER\S-1-5-21-3028898713-0813311...\) except nissan.exe and navigate to the folder by pasting it in run. Now delete the key.

When you open the folder recycler folder nothing will be shown. This is because it is set to super hidden state. Use "attrib -h -s -r" command in run like start->run->[attrib -h -s -r C:\RECYCLER\S-1-5-21-3028898713-0813311981-684376638-1852\nissan.exe] to remove any attribute and then delete it.

Or alternatively, you can use "unlocker" to delete the folder. This is a free and handy utility to move or kill or delete files when locked by other windows services.

Download link:


Use malwarebytes anti-malware. This is a free tool for removing any malwares, worms, trojans, etc and is updated frequently so I would suggest trying and downloading their free anti-malware as you might have other worms too.

You can use this direct removal tool too

If this helped you pls do comment.


  1. my pleasure..
    if you have any other problems then feel free to ask.

  2. This comment has been removed by a blog administrator.

  3. THANKS a LOT froM TaCOLaND !!

    pD :: u are a GooD Person ;)

    pD2 :: i choose Opera ¡!

  4. thanx

    @iim.vxk, i switch opera, mozilla n chrome.
    opera beta 3, its cool with unlimited tabs

  5. well tried EVERYTHING possible din work as even if we delete the key using spyware doctor or any antimalware recreates itself...what WORKED..was TROJAN REMOVER 6.8.1 update it..u may use the 30 days detects NISSAN.exe prevents it from running & renames it...use that option during works wonders...

  6. my choice was "unlocker",,, unlock folder and delete, simple.

  7. i cannot change attrib to the folder!!

    i even use cmd, navigate to the folder but nothing happens.... unlock does not show the folder...

  8. Thanks friends, I finally got rid of that pest, and also Troyan Remover worked fine removing that NISSAN.exe, :)

  9. I tried Unlocker, nothing. Then I tried several others: Ad Aware, Reanimator, Trojan Remover. Still nothing... some of them didn't even recognice that there was something funny going on in the Register whilst they did scan it...

    Then I came across Malwarebytes'Anti-Malware. It detected 33 (!) other trojans as well, none of wich the other programs detected. So, that program would be my recommendation. It removed this piece of crap of both my XP and Vista machines!

  10. ^^ yes malwarebytes sure does the job, here's an even faster one, give a shot to hazardshield, it even removes your messenger cookies.

  11. I did the regedit you recommended and used unlocker. It was a huge pain, but finally it is fixed! Thank you for your help!

  12. Funky stuff, Zoras. You are a gent and a scholar. Many thanks, M

  13. i want to know more about how this malware work where i will get this info. Thanks for this usefull info. and i quit surprise with this virus behavior. nice maware.

  14. Thanks man!

    I used the Unlocker and the Malwarebytes.
    But when I open the Registry, I still have the "Taskman" key with the same value (with .../nissan.exe) in the end. Does this right?
    I am not very into IT, but I am very happy that I tried something myself. But, did I make a mistake or that's normal?

  15. What do you think about AVG 8.5 Free Antivirus and Spyware Terminator in combination?

    Thanks in advance!

  16. GRazie! Thank you!

  17. Thanks a lot my dear friend,,,,i used unlocker and deleted the entry....
    Thanks a lot... :)

  18. i tried doing the steps that removes the atteributes but i still cant see the folder i need to delete.. pls help T_T

  19. ^^ actually, recycler is a windows system file, so it's hidden. to view it open my computer and select tools menu -> Folder Options. There click on "Show hidden files and folders" and uncheck "Hide protected operating system files" and ok.

    Now goto ur C drive and u'll see ur hidden files along with recycler. Then find "nissan.exe" and delete it.

    Note: Don't delete recycler. It's a system file

  20. @ about AVG 8.5 Free Antivirus and Spyware Terminator, add zone alarm to it.

    @"I am not very into IT" gr8 job! well u forgot to delete the registry key. just delete the "taskman" key from registry and ur done.

    thanks 4 all the comments

  21. I can't connect to microsoft website or any antivirus website, if i give a proxy adress in my browser. so no update is possible. can you help me?
    Thank you. Keybfr

  22. Cheers, you did a great job!!! Greetings from the end of the world in Niger!

  23. Grand merci! C'est fantastique!!! :-)
    From Senegal.

  24. @KEYBFR

  25. help
    i using method II
    i use quick scan on the malvare
    but it can find the taskman .... nissan.exe
    after finish scan
    it found the injected
    n told me restart pc
    after restart pc no more problem
    but after 2days
    the problem come back again
    how should i do ?
    i blurring on method I
    blurring start from paragraph 5
    i copy the path address
    but after that you say paste in at run there
    but i paste nothing come out

  26. copy your path address (C:\RECYCLER\S-1-5-21-3028898713-0813311...\) "except nissan.exe" and navigate to the folder by pasting it in run. Now delete the key.
    Use "attrib -h -s -r" in cmd if its hidden.

  27. Hi there,

    tried all 3 methods (well you have to pay to get a licence for the soft used in n°3, no way...), and I had no luck at all, the thing keeps coming back...

  28. Please help. nissan is not getting deleted from the folder C:\RECYCLER\S-1-5-21-3162694132-5732335592-260337274-6296

    What shall I do next? I tried eveything..restarted...closed all the programs to delete above file

  29. I could not find nissan.exe in Recycler folder, "attrib" did not work for some reason. Went to safe mode, and situation was the same.
    I eventually emptied recycle bin in safe mode and that seemed to solved the problem.
    Ofcourse first I erased the key in registry.

  30. Method 1 worked for me! (though the unlocker link mentioned here is dead)
    I downloaded unlocker at using the mirror link.

    thanks a lot for sharing this! you really made my day.

  31. sorry it was:

  32. but is i use malware i have to deactivate antivirus?

  33. you can also remove the virus using AVG 9 and best of all its free

  34. thank u, but i have avira antivirus, and i scaned but stil appears that, when i turn on computer or suddenly apears that site.

  35. Method 1 worked fine for me so far

  36. Just Download Simple Remover
    1)Extract this exe in to the C drive root
    2)Restart your winxp pc in safe mode with command prompt
    3)run this utility

  37. Sorry Link Changed

  38. Thanks a lot
    It do help me to clean the worm

  39. Thanks a lot to all the ones who worked on this!!!
    It really started annoying me, the autostart ups!
    Thaks, the file is gone and so is the struggle with the program... :D

  40. @uploader i was really dumb that i didn't think of making the remover.. gud job
    i'll be sure to make one for n00bs. Ask me if u got any problemo.. ;-p

  41. I used Zone Alarm, Malwarebyte and CCleaner as an alternative for registry and now he's gone thx dude about the tips!

  42. NissanRemover did work, thanks a lot. Tried method 1, but i was deny to delete that nissan.exe file.

  43. Dear Zoras,

    I really appreciate your kind advice in detail on this blog of you.
    I did work with the method II, the unlocker program to delete the nissan folder in the RECYCLER. Now the file is gone and so is the struggle with this kind of browser hijacker.

    Thanks and regards,
    from Seoul in Korea

  44. thanks a lot


  45. thanks a lot, your help is much appreciated.
    Martin (France)

  46. Hey there,

    This helped me..

    Just to let who are reading here.. I downloaded and installed a C++ Resource Builder named Resource Builder 3.0 and that it how my computer was infected by this adware.

    Anyways I guess as I have followed Zoras instructions, the adware is removed.

    Thanks Zoras

  47. Hi there

    Having it removed is great. It took me several hours before I get to method II above. But clean also your USB keys! This malware replicate to USB using autorun.inf so everytime you connect your USB key, it is back (for some reasons, my avast does not block it entirely). Some hints:
    . disable completely autorun
    . on XP, stop working as administrator

    Good luck

  48. I have the nissan.exe and will try these tips, thanks! I also have something called mic.exe and avast is not really doing anything about it! It's on my C drive as well as my USB sticks. HELP!

  49. I got this file from another friend's pen drive.
    AutoRun was disabled and opened using WinRar's browser. Was able to delete it from within WinRar, and booted from linux to scan for more malware on local NTFS drives.
    Avast/AVG doesn't detect it. Kaspersky/NOD32/F-Secure does correct it though...
    [I would Kill Explorer.exe if it wasn't needed]

  50. Hello, I do not agree with the previous commentator - not so simple

  51. Everything is very open with a very clear clarification of the challenges.
    It was truly informative. Your website is very helpful.
    Many thanks for sharing!

    my web page ... minecraft Giftcode

  52. Download All Recent Games, Movies, Apps, Mobile Stuff
    and everything else for free at http://www.

    You can download from the following categories

    Full Version Applications for Android, iOS, MAC, Windows

    Full Version Games for Linux, MAC, PC, PS3, Wii, Wii U, XBOX360 and other systems
    Full Movies And Cinema Movies BDRiP, Cam, DVDRiP, DVDRiP
    Old, DVDSCR, HDRiP, R5, SCR, Staff Picks, Telecine, Telesync,
    Full Music Album MP3s and Music Videos Music, Albums, iTunes, MViD, Singles/EPs
    Full Version Ebooks eBook Magazines

    Download all you want for free at

  53. I was suggested this blog through my cousin. I'm now not sure whether this publish is written by means of him as no one else know such targeted about my trouble. You're wonderful!

    Feel free to visit my web blog - buy gems with coins dragonvale

  54. We absolutely love your blog and find nearly all of your post's to be what precisely I'm looking for.
    Does one offer guest writers to write content for you personally?
    I wouldn't mind producing a post or elaborating on a few of the subjects you write regarding here. Again, awesome web site!

    Feel free to surf to my blog post ... food arts and crafts for kids

  55. It's the best time to make some plans for the future and it is time to be happy. I have read this post and if I may I wish to recommend you some attention-grabbing issues or tips. Maybe you could write subsequent articles referring to this article. I desire to learn more things about it!

    Feel free to visit my site - Fail Compilation 2012

  56. certainly like your website but you have to check the spelling on several of your posts.
    Many of them are rife with spelling problems and I find it very troublesome to
    tell the truth on the other hand I will surely come again again.

    Here is my web blog; videos of funny videos

  57. What's up to every , for the reason that I am genuinely keen of reading this blog's post to be updated regularly.
    It carries pleasant stuff.

    My web page; Refinance Appraisal

  58. Link exchange is nothing else however it is only placing the other person's weblog link on your page at proper place and other person will also do same for you.

    My webpage - dragonvale computer game

  59. Nice post. I was checking continuously this blog and I am impressed!
    Very useful information specially the last part :) I care for
    such info much. I was seeking this certain info for a long time.
    Thank you and good luck.

    Check out my blog: xbox 360 cheats

  60. Hello everyone, it's my first visit at this site, and paragraph is in fact fruitful for me, keep up posting such posts.

    Feel free to surf to my web blog; auto clicker for adfly

  61. I really like what you guys are usually up too.
    This kind of clever work and exposure! Keep up the amazing works guys
    I've you guys to blogroll.

    Feel free to surf to my web page: Aimbot and Wallhack

  62. You need to be a part of a contest for one of the most
    useful sites on the internet. I will recommend this site!

    Visit my site: sharecash Downloader 2013

  63. Hi there friends, its enormous piece of writing about tutoringand fully defined,
    keep it up all the time.

    Stop by my web-site: Free Playstation Network Cards

  64. Genuinely no matter if someone doesn't be aware of after that its up to other users that they will assist, so here it takes place.

    Here is my page: forgot my password

  65. Sweet blog! I found it while surfing around on Yahoo News.
    Do you have any suggestions on how to get listed in Yahoo News?
    I've been trying for a while but I never seem to get there! Many thanks

    Here is my website; google password hacking

  66. We're a group of volunteers and opening a new scheme in our community. Your web site offered us with valuable information to work on. You've done a
    formidable job and our whole community will be thankful to you.

    my webpage - make extra cash

  67. What i do not understood is in fact how you are not really a lot more smartly-liked than you may be right now.
    You are very intelligent. You recognize thus considerably when it comes to this topic, made me for my part consider it from numerous
    varied angles. Its like women and men don't seem to be involved unless it's
    one thing to do with Girl gaga! Your own stuffs nice. At all times maintain
    it up!

    My web site ... free Psn code

  68. Hello to all, how is all, I think every one is getting more from this web page, and your views are
    pleasant designed for new people.

    my website; play and get Minecraft for free