What is JollyWallet?

JollyWallet – a browser extension that comes without user consent. JollyWallet is not a virus, but it is malware. After penetration into the PC, it starts to display a ton of unnecessary advertising with different content (banners, coupons, links to ad sites, and so on). JollyWallet promises to help the user to save money. JollyWallet shows the most “best” offer. In fact, these offers are not valid. JollyWallet created in order to allow users to spend money on nothing. JollyWallet changes the homepage. It can add a toolbar that is difficult to hide. JollyWallet displays ads constantly during your browsing. JollyWallet can also transfer your personal data to third parties. This program increases the traffic and reduces the performance of your computer. If you find JollyWallet on your PC, then you need to remove it urgently.

jollywallet

How JollyWallet gets on your PC?

Penetration of such programs depends largely on the care of users. Most of malware comes bundled with other programs that the user downloads from the free sites. Few are closely watching the installation process, and sometimes do not know that their computer is at risk. Always read the user’s agreement and don’t press “Next” button once. First, make sure that the program is safe. Select advanced installation type. Remember that there are many similar programs in the Internet. Read reviews about the programs, and if your computer is already infected, then use the instructions below.

How to remove JollyWallet from your computer?

To uninstall JollyWallet remove it from Control Panel, then delete all files and regkeys.

In our view, there are 3 products that potentially have JollyWallet in their database. You can try to use them for removing JollyWallet.

Recommended Solution:

Norton is a powerful removal tool. It can remove all instances of newest viruses, similar to JollyWallet – files, folders, registry keys.

 

Download Norton*Trial version of Norton provides detection of computer viruses for FREE. To remove malware, you have to purchase the full version of Norton.

Alternative Solution:

Thor Antivirus – detects files, registry values and folders of viruses that show the same behavior as JollyWallet.

 

Download Norton
 

You can try both of these products to remove JollyWallet

Or uninstall JollyWallet manually.

Removing from Control Panel

Windows XP:

  1. Click Start.
  2. Control Panel.
  3. Then click Add or Remove Programs.
  4. Find JollyWallet.
  5. Click Uninstall.

Learn more about uninstallation of programs in Windows XP.

Windows 7/Windows Vista:

  1. Click Start.
  2. Then Control Panel.
  3. Click Uninstall a Program.
  4. Find JollyWallet and click Uninstall.

Learn more about uninstallation of programs in Windows 7.

Windows 8/Windows 8.1:

  1. Open the Menu.
  2. Click Search.
  3. After that click Apps.
  4. Then Control Panel.
  5. Then as in Windows 7, click Uninstall a Program under Programs.
  6. Find JollyWallet, select it and click Uninstall.

Learn more about uninstallation of programs in Windows 8 (8.1).

After that remove JollyWallet from your browser.

Google Chrome:

  1. Open Google Chrome
  2. Push Alt + F.
  3. Click Tools.
  4. Choose Extensions.
  5. Find JollyWallet.
  6. Click the trash can icon to remove it.

Learn more about removing extensions from Chrome.

Mozilla Firefox:

  1. Open Firefox.
  2. Push Shift + Ctrl + A.
  3. Choose JollyWallet.
  4. Click Disable or Remove button.

Learn more about removing extensions from Firefox.

Internet Explorer:

  1. Open IE.
  2. Push Alt + T.
  3. Click Manage Add-ons.
  4. Select Toolbars and Extensions.
  5. Click Disable JollyWallet.
  6. Click More information link in the left-bottom corner.
  7. Click Remove button.
  8. If this button is grayed out – perform alternative steps.

Learn more about removing extensions from IE.

Remove following registry entries:


Key: HKLMSOFTWAREClassesCLSID{11111111-1111-1111-1111-110111251155}
Key: HKLMSOFTWAREClassesCLSID{22222222-2222-2222-2222-220122252255}
Key: HKLMSOFTWAREClassesInterface{55555555-5555-5555-5555-550155255555}
Key: HKLMSOFTWAREClassesInterface{66666666-6666-6666-6666-660166256655}
Key: HKLMSOFTWAREClassesTypeLib{44444444-4444-4444-4444-440144254455}
Key: HKLMSOFTWAREClassesCrossriderApp0012555.BHO
Key: HKLMSOFTWAREClassesCrossriderApp0012555.Sandbox
Key: HKLMSOFTWAREMicrosoftInternet ExplorerLow RightsElevationPolicy{11111111-1111-1111-1111-110111251155}
Key: HKLMSOFTWAREMicrosoftInternet ExplorerLow RightsElevationPolicy{21111111-1111-1111-1111-110111251155}
Key: HKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{11111111-1111-1111-1111-110111251155}
Key: HKLMSOFTWAREMicrosoftWindowsCurrentVersionUninstallJollyWallet
Key: HKUS-1-5-21-823518204-789336058-1417001333-500SoftwareMicrosoftSystemCertificatesCACertificates495847A93187CFB8C71F840CB7B41497AD95C64F
Key: HKUS-1-5-21-823518204-789336058-1417001333-500SoftwareMicrosoftWindowsCurrentVersionExtSettings{11111111-1111-1111-1111-110111251155}
Key: HKUS-1-5-21-823518204-789336058-1417001333-500SoftwareMicrosoftWindowsCurrentVersionExtStats{11111111-1111-1111-1111-110111251155}
Key: HKUS-1-5-21-823518204-789336058-1417001333-500SoftwareCrossrider
Key: HKUS-1-5-21-823518204-789336058-1417001333-500SoftwareCr_Installer
Key: HKUS-1-5-21-823518204-789336058-1417001333-500SoftwareInstalledBrowserExtensionsJollyWallet
Key: HKUS-1-5-21-823518204-789336058-1417001333-500SoftwareJollyWallet

Then remove following files:


Updater12555.exe
ButtonUtil.dll
JollyWallet-bg.exe
JollyWallet.dll
JollyWallet.exe
Uninstall.exe

And following folders


C:Documents and Settings{Username}Application DataMozillaFirefoxProfilesrzvd4qfz.defaultextensionscrossriderapp12555@crossrider.com
C:Documents and Settings{Username}Local SettingsApplication DataGoogleChromeUser DataDefaultdatabaseschrome-extension_jiekonljbeipfklhchhdjddejaennfnl_0
C:Documents and Settings{Username}Local SettingsApplication DataGoogleChromeUser DataDefaultExtensionsjiekonljbeipfklhchhdjddejaennfnl
C:Program FilesJollyWallet

Written by Rami Douafi

Leave a Reply

Time limit is exhausted. Please reload CAPTCHA.