Boyu.com.tr is a search engine that is promoted through findflarex.com. Its a malicious browser extensions and browser hijackers.
When installed, these browser hijackers modify your web browser’s configuration by adding “Your browser is managed by your organization” and automatically send all searches through Boyu.com.tr.
It will add a KSEARCHY extension to your browser, which you cannt remove.
it will set Boyu.com.tr as default search engine.
It will add startup script in C:\Users\PCOwner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TradeTokenElite.url
KSEARCHY Boyu.com.tr browser hijacker will redirect all your search traffic through findflarex.com to Boyu.com.tr
HOW TO REMOVE (only for Chrome Browser)
1)Close your chrome
2)List all your extensions added to the browser, so you can add later.
Delete all extensions.
3)Save Chrome BookMarks.
4)Uninstall Chrome.
5)Delete C:\Users\PCOwner\AppData\Local\Google
6)Delete startup script in C:\Users\URID\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TradeTokenElite.url
7)Install fresh Chrome.
8)Check if KSEARCHY Extension still there or not.
9)if still there
Change your default search engine:
change your default search engine in Google Chrome:
Click the Chrome menu icon (at the top right corner of Google Chrome),
select “Settings”, in the “Search engine” section,
click “Manage search engines…”, in the opened list look for “boyu.com.tr”,
when located click the three vertical dots near this URL and select “Delete”. if its allow.(You are Lucky)
10)If Extensions still there, then go to
C:\Users\PCOwner\AppData\Local\Google\Chrome\User Data\Default\Extensions
there should not be any extensions in above path.
If you find any files/directories in C:\Users\PCOwner\AppData\Local\Google\Chrome\User Data\Default\Extensions
eg:
gkklafnihmmlbkgpbcfjbfcdcpcmmemk
nmmhkkegccagdldgiimedpiccmgmieda
rename as
gkklafnihmmlbkgpbcfjbfcdcpcmmemk.old
nmmhkkegccagdldgiimedpiccmgmieda.old
then creat 2 files
gkklafnihmmlbkgpbcfjbfcdcpcmmemk
nmmhkkegccagdldgiimedpiccmgmieda
and delete renamed both files
gkklafnihmmlbkgpbcfjbfcdcpcmmemk.old
nmmhkkegccagdldgiimedpiccmgmieda1.old
12)Now run regedit and search for
gkklafnihmmlbkgpbcfjbfcdcpcmmemk
nmmhkkegccagdldgiimedpiccmgmieda
entries, if find, just delete it. also search for KSEARCHY, findflarex.com, Boyu.com.tr and delete it.
reboot.
install malware scanner, Antivirus to check further.
NOW YOU SHOULD NOT HAVE ANY BROWSER REDIRECT OR UNWANTED EXTENSIONS.
Any problem, please comment