Remove ‘You shall not pass’ Virus- Gandalf virus (Browser Hijacker Removal Guide)

A picture of Gandalf saying “you shall not pass” comes up to your computer screen when you launch the browser? Maybe some people feel that the picture of Gandalf is funny. Be careful, the malware bundled with it isn’t funny at all. It is actually a computer virus. The article provides details of removal guide of this virus. Keep reading.

What is “You shall not pass” Virus?

The “you shall not pass” virus is actually browser hijacker, which prevents you from visiting websites. Once installed, whenever you open the browser, it displays a picture of Gandalf to block you visiting other websites. What is browser hijacker? Browser hijacker may override the browser settings or the default home page, redirect the home page to other malicious websites or phishing websites, and deliver your information to the third parties. It is hard to be detected by firewall software for it can pretend to be a component of the Internet explorer.


This virus surreptitiously infects your computer after you download and install some free software, such as Minecraft acc, MSPoints and so on. Once installed, it modifies Windows Hosts file. It is really like a joke as the virus does not ask you pay a fine to access the websites or pop up annoyed advertisements and sponsored links. In fact, the notification of you shall not pass may be a sign that your computer gets backdoor Trojan. This backdoor Trojan is very dangerous. Cyber criminals can steal the sensitive information, such as credit card, bank account, password and so on through the backdoor Trojan. That means cyber criminals can access to your computer without any hassles or complications and monitors the actives of users on the internet. So, it is highly recommended you get rid of this virus urgently.

Remove “You shall not pass” Virus- Gandalf virus (Browser Hijacker Removal Guide)

Option 1: Remove “You shall not pass” Virus- Gandalf virus manually
Step 1 uninstall “You shall not pass” Virus through control panel
Step 2 Repair modified hosts files and DNS settings
Step 3 Remove Gandalf virus and related malware infections using Anvi Smart Defender
Step 4 Repair the modified browser
Step 5: Clean invalid registry entries and leftovers using Cloud System Booster
Option 2- Remove Gandalf Virus through System Restore (Optional Troubleshoot)

step 1

Uninstall “You shall not pass” Virus through control panel

Windows 8
Move mouse cursor to the bottom right corner of the screen. Click Settings on Charms bar and go to Control Panel. Select Uninstall a program and remove Gandalf virus related programs.
Windows 7/Vista
Go to Start, navigate to Control Panel, hit Uninstall a program/Programs and Features, find Gandalf virus related programs, and click on Uninstall.
Windows XP
Go to Start, navigate to Settings and click on Control Panel, navigate to Add or Remove Programs, choose Programs and Features, find Gandalf virus related programs, and hit Remove.
Note: Skip to the next step if the application is not listed in Control Panel.

step 2

Repair modified hosts files and DNS settings

1 Go to start, type C:\WINDOWS\system32\drivers\etc in the search bar
2 Double-click “hosts” file to open it. Choose to open with Notepad or any other text editor.

The Windows hosts file should look the same as in the image below (Windows XP). There should be only one line: localhost (Windows XP) localhost ::1 (Windows Vista/7/8).


Note: If there are more lines, then remove them and save changes.
3 Check out the DNS settings
If your computer fails to access the network, please check the DNS settings according to the following guide:
Launch your Internet Explorer, click on Settings icon or Tools, hit Internet Options in the dropped-down menu, navigate to Connections tab, click on LAN settings, in the LAN settings menu, uncheck the use a proxy server as your LAN, hit OK and close the window. Then retry the browser.



step 3

Remove Gandalf virus and related malware infections using Anvi Smart Defender

In order to be sure that there are no other undesirable files present in your system, run a full system scan with Anvi Smart Defender. Anvi Smart Defender is a powerful malicious software removal tool, which can help users prevent malicious software such as virus, Trojan, adware, spyware and so on. The light and smart swordfish scan engine will not consume extra resources and influence the operation of the computer. And here we recommend you the Anvi Smart Defender antimalware.
Anvi Smart Defender Anti-Malware Software safe and direct download link:
1. Install the free or paid version of Anvi Smart Defender Anti-Malware software
2. Launch the program
3. Scan the malware infecting the computer system

4. Check out the detailed results and remove the malicious files once and for all
Click on View Details to see detailed results and click on Remove button to completely remove the malicious files from your system.



step 4

Repair the modified browser

Internet Explorer
1. Launch Internet Explorer, click on the gear icon (Tools for Windows XP users), and then hit Internet Options.

2. In the Internet Options dialog box, click on the Advanced tab, then click on the Reset button.

3. In the Reset Internet Explorer settings section, check the Delete personal settings box, then click on Reset button.

4. After Internet Explorer finishes resetting, click on Close and then click OK.

Mozilla Firefox
1. Click the Firefox button on the top left corner, go to the Help sub-menu (on Windows XP, click the Help menu at the top of the Firefox window), and hit Troubleshooting Information.

2. Click on the Reset Firefox button in the upper-right corner of the Troubleshooting Information page.

3. To continue, click on Reset Firefox in the confirmation window.
4. Firefox will close and be reset. When it’s done, a window will list the information that was imported. Click Finish.
Google Chrome
1. Click on the Chrome menu button  on the browser toolbar, select Tools > Extensions.

2 In the Extensions tab, remove (by clicking on the Recycle Bin button) Gandalf and Proxy Tool extensions from Google Chrome.
NOTE: Gandalf may have added additional extensions which you will need to remove. We recommend that you remove any unwanted or unknown extensions from Google Chrome.

step 5

Clean invalid registry entries and leftovers using Cloud System Booster

After removing the Gandalf, you may find your computer performs sluggishly for there are invalid registry entries as well as any leftovers left in the computer. It is highly recommended that you get rid of the junks files using Cloud System Booster—a computer cleaner initially designed to clean and optimize your computer by throwing out junk data on disk, registry, and more unneeded Windows files. If you have any question, please feel free to get in touch for help.
1. Download and install Cloud System Booster
2. Run the Cloud System Booster
Click on the Boost button on the main screen to run a full scan, and hit clean button to remove these junk files, malicious registry entries, etc.


Option 2-Remove Gandalf Virus through System Restore (Optional Troubleshoot)
System Restore helps you restore your computer’s system files to an earlier point in time. Sometimes, downloading and installing free software can make your PC be attacked by malicious programs which are always bundled with free software. System Restore can return your PC’s system files and programs to a time when everything was working fine.

Pop-up Ads Blocking Tips
Users often encounter this kind of redirect. The simplest way to block the redirect is to install Anvi AD Blocker which is created to filter malicious websites, phishing websites, pop up ads/flash as well as other websites that you don’t want.
Anvi AD Blocker is a popup ads blocking software preventing spyware from infecting computers. The blocker can effectively blocks malicious advertisements and fishing websites. It is matched with antivirus software to protect computers from viruses in real time.
1 Download Anvi AD Blocker
2 Install and run the program
3 Click MORE>Settings> Click on Blacklist> Hit Add URL> Enter the URL that you want to block> Hit Add and close the window> Click Apply to save all changes.

Social Share Toolbar
Leave a comment


Leave a Reply

Your email address will not be published. Required fields are marked *

Are you human? Click the Apple...