How to remove RuntimeBroker.exe virus [Windows 10, 8, 7, XP]

The malicious software such as RuntimeBroker.exe adware virus family that alters the settings of web-browsers usually affects only the Google Chrome, Internet Explorer, Mozilla Firefox and Microsoft Edge. However, possible situations, when any other web-browsers will be affected too. The virus may change the Target property of a internet browser’s shortcut, so every time you open the web-browser, instead of your start page, you will see an annoying ads.

We strongly advise that you perform the step by step guide below that will help you to get rid of RuntimeBroker.exe adware using the standard features of Windows and some proven freeware.

Remove RuntimeBroker.exe virus

In the steps below, we’ll try to cover the Google Chrome, Microsoft Internet Explorer, FF and Microsoft Edge and provide general advice to delete RuntimeBroker.exe . You may find some minor differences in your Microsoft Windows install. No matter, you should be okay if you follow the steps outlined below: uninstall all suspicious and unknown programs, reset internet browsers settings, fix browsers shortcuts, remove harmful scheduled tasks, use free malicious software removal tools. Read it once, after doing so, please print this page as you may need to close your internet browser or reboot your personal computer.

Manual RuntimeBroker.exe adware removal

If you perform exactly the steps below you should be able to delete the RuntimeBroker.exe adware virus from your computer.

Delete suspicious programs using MS Windows Control Panel

In order to remove potentially unwanted software like this virus, open the Microsoft Windows Control Panel and click on “Uninstall a program”. Check the list of installed programs. For the ones you do not know, run an Internet search to see if they are adware, hijacker or potentially unwanted programs. If yes, delete them off. Even if they are just a applications that you do not use, then uninstalling them off will increase your machine start up time and speed dramatically.

It will display the Windows Control Panel as shown in the following example.

Next, click “Uninstall a program”
It will open a list of all programs installed on your personal computer. Scroll through the all list, and remove any suspicious and unknown applications. To quickly find the latest installed programs, we recommend sort applications by date in the Control panel.

Remove unwanted Scheduled Tasks

If an intrusive ad web-page opens automatically on Windows startup or at equal time intervals, then you need to check the Task Scheduler Library and remove all the tasks that have been created by unwanted software.

Press Windows and R keys on the keyboard together. This shows a dialog box that called Run. In the text field, type “taskschd.msc” (without the quotes) and press OK. Task Scheduler window opens. In the left-hand side, click “Task Scheduler Library”, as displayed in the following example.

In the middle part you will see a list of installed tasks. Please choose the first task, its properties will be display just below automatically. Next, press the Actions tab. Pay attention to that it launches on your machine. Found something like “explorer.exe http://site.address” or “chrome.exe http://site.address”, then remove this malicious task. If you are not sure that executes the task, check it through a search engine. If it’s a component of the adware, then this task also should be removed.

Having defined the task that you want to remove, then press on it with the right mouse button and choose Delete as on the image below.

Repeat this step, if you have found a few tasks which have been created by ‘ad-supported’ applications. Once is finished, close the Task Scheduler window.

Fix web-browser shortcuts, changed by adware virus

When the adware virus is started, it can also change the internet browser’s shortcuts, adding an argument like “http://site.address” into the Target field. Due to this, every time you start the internet browser, it will display an annoying web page.

Right click on the shortcut of infected browser as displayed in the figure below.

Select the “Properties” option and it will display a shortcut’s properties. Next, press the “Shortcut” tab and then delete the “http://site.address” string from Target field like below.

Then click OK to save changes. Repeat the step for all browsers that are rerouted to an annoying web site.

How to automatically remove RuntimeBroker.exe adware

Run malware removal utilities to delete RuntimeBroker.exe adware automatically. The free applications tools specially made for browser hijackers, adware and other potentially unwanted software removal. These tools can delete most of virus from Google Chrome, Firefox, Microsoft Edge and IE. Moreover, it can remove all components of adware from Windows registry and system drives.

Run Zemana Anti-malware to get rid of RuntimeBroker.exe virus

We recommend you to run the Zemana Anti-malware that are completely clean your computer of RuntimeBroker.exe adware virus. Moreover, the utility will help you to remove PUPs, malware, toolbars and browser hijacker infections that your PC system can be infected too.

Download Zemana Free on your personal computer by clicking on the following link.

Once downloading is complete, close all software and windows on your computer. Open a directory in which you saved it. Double-click on the icon that’s called Zemana.AntiMalware.Setup as on the image below.

When the setup starts, you will see the “Setup wizard” which will allow you install Zemana Anti-Malware (ZAM) on your PC system.

Once setup is finished, you will see window as shown in the figure below.

Now click the “Scan” button to perform a system scan with this utility for the RuntimeBroker.exe adware that causes browsers to display unwanted pop-up advertisements. A scan may take anywhere from 10 to 30 minutes, depending on the number of files on your machine and the speed of your system. When a threat is found, the number of the security threats will change accordingly. Wait until the the checking is finished.

After the checking is complete, Zemana Anti Malware (ZAM) will show you the results. Review the scan results and then click “Next” button.

The Zemana Free will begin to get rid of RuntimeBroker.exe adware which cause unwanted pop up advertisements to appear.

Run Malwarebytes to remove RuntimeBroker.exe virus

Delete RuntimeBroker.exe manually is difficult and often the virus is not completely removed. Therefore, we suggest you to run the Malwarebytes Free that are completely clean your system. Moreover, the free program will help you to get rid of malware, potentially unwanted applications, toolbars and hijackers that your PC can be infected too.

Download MalwareBytes Free on your computer from the following link.

After downloading is finished, close all windows on your PC. Further, launch the file named mb3-setup. If the “User Account Control” prompt pops up as shown on the image below, click the “Yes” button.

It will display the “Setup wizard” that will allow you install MalwareBytes Free on the system. Follow the prompts and don’t make any changes to default settings.

Once setup is complete successfully, press Finish button. Then MalwareBytes Anti Malware (MBAM) will automatically run and you may see its main window as displayed below.

Next, press the “Scan Now” button .MalwareBytes Free program will scan through the whole computer for the ad supported software that causes multiple undesired advertisements and pop ups. A system scan can take anywhere from 5 to 30 minutes, depending on your system. While the MalwareBytes AntiMalware tool is checking, you can see number of objects it has identified as being infected by malware.

As the scanning ends, a list of all items found is produced. In order to get rid of all threats, simply click “Quarantine Selected” button.

The MalwareBytes AntiMalware (MBAM) will remove RuntimeBroker.exe that causes a lot of intrusive pop-up advertisements and add items to the Quarantine. Once finished, you can be prompted to restart your computer. We recommend you look at the following video, which completely explains the process of using the MalwareBytes to remove browser hijackers, ad supported software and other malware.

Delete RuntimeBroker.exe adware from web-browsers with AdwCleaner

AdwCleaner is a free removal tool that can be downloaded and use to remove RuntimeBroker.exe adware virus which causes undesired pop-up ads, hijackers, malware, potentially unwanted software, toolbars and other threats from your PC system. You can use this tool to detect threats even if you have an antivirus or any other security program.

1. Download AdwCleaner by clicking on the following link and save it directly to your MS Windows Desktop.
   
   

   AdwCleaner download
   220743 downloads
   Version: 8.3.2
   Author: Xplode, MalwareBytes
   Category: Security tools
   Update: April 28, 2022
   
2. Select the file location as Desktop, and then click Save.
3. After downloading is done, run the AdwCleaner, double-click the adwcleaner_xxx.exe file.
4. If the “User Account Control” prompts, click Yes to continue.
5. Read the “Terms of use”, and click Accept.
6. In the AdwCleaner window, click the “Scan” to perform a system scan for the RuntimeBroker.exe that causes browsers to display annoying advertisements. A scan may take anywhere from 10 to 30 minutes, depending on the count of files on your PC and the speed of your computer.
7. Once the scan is done, you will be opened the list of all detected items on your personal computer. Review the report and then press “Clean”. If the AdwCleaner will ask you to reboot your machine, click “OK”.

The step-by-step tutorial shown in detail in the following video.

How to stay safe online

Using an ad blocker program like AdGuard is an effective way to alleviate the risks. Additionally, adblocker applications will also protect you from malicious advertisements and web pages, and, of course, stop redirection chain to ad sites and other unwanted web pages.

Download AdGuard program by clicking on the following link. Save it on your MS Windows desktop or in any other place.

After the download is complete, run the downloaded file. You will see the “Setup Wizard” screen as on the image below.

Follow the prompts. When the setup is finished, you will see a window as on the image below.

You can click “Skip” to close the install program and use the default settings, or click “Get Started” button to see an quick tutorial that will allow you get to know AdGuard better.

In most cases, the default settings are enough and you don’t need to change anything. Each time, when you run your computer, AdGuard will launch automatically and block popup ads, as well as other harmful or misleading web-sites. For an overview of all the features of the application, or to change its settings you can simply double-click on the AdGuard icon, which is located on your desktop.

Prevent RuntimeBroker.exe from installing

The adware usually spreads bundled with another program in the same installer. The risk of this is especially high for the various free programs downloaded from the Internet. The developers of the programs are hoping that users will use the quick setup mode, that is simply to click the Next button, without paying attention to the information on the screen and don’t carefully considering every step of the installation procedure. Thus, the virus can infiltrate your computer without your knowledge. Therefore, it’s very important to read all the information that tells the program during installation, including the ‘Terms of Use’ and ‘Software license’. Use only the Manual, Custom or Advanced installation mode. This mode will allow you to disable all optional and unwanted applications and components.

Finish words

Now your personal computer should be free of the RuntimeBroker.exe adware which cause undesired pop-ups to appear. Uninstall AdwCleaner. We suggest that you keep AdGuard (to help you stop unwanted popup advertisements and intrusive harmful sites) and Zemana Free (to periodically scan your PC for new adware viruss and other malicious software). Probably you are running an older version of Java or Adobe Flash Player. This can be a security risk, so download and install the latest version right now.

If you are still having problems while trying to delete RuntimeBroker.exe virus from the Windows then ask for help in our Spyware/Malware removal forum.