Hi Konduparti,

refresh.json is a trojan virus which can be distributed via spam links, malicious torrents and other cost-free programs. To avoid these PC threats, you have to be very careful with your online activities, especially when you are downloading and installing some unfamiliar things.

As soon as refresh.json virus successfully gets installed on your machine, it immediately modifies registry entries and program files. Every time Windows starts the virus always runs itself automatically, taking up lots of networking resources and memory space.

You can remove it by following the below methods:

Method One: Remove refresh.json Manually by uninstalling all unwanted and suspicious programs from Control Panel

1. Right-click at the screen’s bottom-left corner and from the pop-up menu choose "Control Panel" ( or move your mouse cursor to the right edge of your screen -> select Search -> type in Control Panel and click it).



2. Open "Uninstall a program" under "Programs" group
3. Select the program you want to uninstall from the list and choose "Uninstall/Change".



Method 2: Remove all unwanted and suspicious add-ons, extensions, plug-ins from web browsers

1. On your browser, click menu, select More tools > Extensions.
2. On the extension you want to remove, click Remove from Chrome.
3. A notice to remove the extension will appear. Click Remove.



Method 3: Go to C drive, find out all malicious files generated by refresh.json and then remove them manually.

Look at the below locations for refresh.json virus files:

1. C:\Program Files\Common Files\System\refresh.json .exe
2. C:\Program Files (x86)\refresh.json\
3. C:\ProgramData\TEMP\refresh.json
4. C:\Users\Default\AppData\Local\Temp\refresh.json.exe
5. C:\Users\your user account\AppData\Roaming\refresh.json
6. C:\Windows\System32\drivers\refresh.json.sys

Method 4: Remove Registry entries for the virus.

1. Open Registry Editor (Press Win key and R key together, type Regedit in the Run Box, and then hit Enter) ->look for registry entries related to refresh.json and delete them manually.

The regsitry may be found at the below locations:

1. HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random].exe" 
2. HKEY_CLASSES_ROOT\CLSID\[ refresh.json]
3. HKEY_CURRENT_USER\Software\AppDataLow\Software\ refresh.json 
4. HKEY_CURRENT_USER\Software\ refresh.json character
5. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ refresh.json
6. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\BrowserHelperObjects\[random numbers]

I hope this helps.

Regards,
Lokesh