Newtab Viruses - How To Remove?

-
 0
Type: Browser Hijacker
 

Newtab viruses is a popular group of browser hijackers that infect browser’s new tab page and (in some cases) start page. These hijackers are created for the reasons to show advertisements or to distribute other forms of malware.

Newtab hijackers evolved from start page hijackers after tabbed browsing became popular due to Firefox, which was one of the first major browser using tabs in 2002. Before that, hijackers tried either to get full control of browser or changed the start page. However, new tab page allows showing advertisements more frequently without annoying people too much. Thus this became a popular way to push advertisements long term.


How Newtab hijackers differ from other parasites?

Newtab hijackers are different from search hijackers by leaving search page untouched or using another parasite for changing its settings. Furthermore, the search might be just an additional function rather than main way of making profit.

NewTab viruses

Differently from Clickjackers, hijackers do not usually steal clicks. Sure, there are versions of parasites that try to implement all the possible ways to earn money, but these are very rare. This type of malware relies on showing moderate amounts of advertisements by pretending being useful.

Majority of such parasites implement useless toolbars in various bundles for distribution. Common choices of “useful” functions are weather information, links to common services (like facebook and gmail), recipes. Typically, they include some sort of search box too. This search uses either their own engine or one of popular ones, which gives no additional benefit for you. However, they spend a bit more time coding the toolbar so these might have some useful function, though rarely.

Types and families of Newtab hijackers

Majority of newtab hijackers are usually clones under new name. The makers search for freeware apps looking for ways making money or create their own versions of barely useful programs. Then they create webpage or just redirect to their main page on the newtab. There most popular choice today is Myway virus, created by Mindspark. It has its own search engine, however it is distributed with Ask, Yahoo or other search toolbar usually.

Another popular family of hijackers is Eightpoint/ Polarity one or AirFind Corp one. They do not care about creating unique plugins at all thus almost all of them share the design. The technology is owned by Cayman company Eightpoint, which “licenses” to some subsidiary that does dirty work.

Third group of New tab hijackers were created by Imali media that used many domains for their malware. The domains are very alike, and it is hard to see how one hijacker differs from another.

The fourth major group is Infospace.com based hijackers. Infospace is an old meta search engine, which provides search and advertising services for other pages. The most widely known search engine that uses this provider is Dogpile.com (which is completely legitimate); however, it is used by hijackers too. Furthermore, they have another product: Msxml.excite.com new tab virus.

There is also a producer of browser hijackers called Trovi (ClientConnect LTD) and this company is responsible for such aggravating parasites like My-bing.com and Need4search.com. This Israel-based unit promises to enhance users’ browsing experiences, but most of the people ended complaining about unauthorized modifications to their preferences.

There were some hijackers that use name “Newtab” as well, e.g. Newtab.online an Infospace.com based hijacker, Newtab.club hijacker, Newtab.quiklogin.co virus, Betternewtabsearch.com, Startnetab.info, Search.newtabfun.com, Searchnewtab.com, Searchtabnew.com and many others.

Note, that many search hijackers try to hijack new tab and start pages too. However, their removal is more complex as they rely on making money from the search results either by using ad networks or inserting promotions themselves.

Are newtab hijackers legitimate?

Newtab hijackers rarely break law. While some of them might install with help of malware, they try to avoid the most shady of tactics and rely on tricking people during bundle installation or advertise their “useful” functions. So, technically they do not break laws, but they can be categorized as Adware, hijackers or PUPS.

Thus majority of anti-malware programs try to detect and remove all the hijacker types with various success. If you get infected, scan your PC with Reimage or Spyhunter. You can also remove this parasite manually too.


Automatic Newtab Viruses removal tools

 
 
Note: Reimage trial provides detection of parasites and assists in their removal for free. You can remove detected files, processes and registry entries yourself or purchase a full version.  We might be affiliated with some of these programs. Full information is available in disclosure

How to get rid of New Tab hijackers manually

How to remove newtab virus using Windows Control Panel

Many hijackers and adware like Newtab Viruses install some of their components as regular windows programs as well as additional software. This part of malware can be uninstalled from Control Panel. To access it, do the following.
  • Start→Control Panel (older Windows) or press Windows Key→Search and enter Control Panel (Windows 8);
    Control panel
  • Choose Uninstall Program;
    Programs and features
  • Go through a list of programs and select entries related to newtab virus .
    Remove toolbars
  • Click uninstall button.
    Uninstall
  • In many cases anti-malware programs are better at detecting related parasites, thus I recommend installing Spyhunter or Reimage to identify other programs that might be a part of this infection.
    Scan with spyhunter
This method will not remove some of browser plugins therefore proceed to the next part of the removal guide.
Removing Newtab Viruses from your browsers

  Top How To remove Newtab Viruses from Google Chrome:

  • Click on the 3 horizontal lines icon on a browser toolbar and Select More Tools→Extensions
    Extensions
  • Select all malicious extensions and delete them.
    Remove extensions
  • Click on the 3 horizontal lines icon on a browser toolbar and Select Settings
    Open settings
  • Select Manage Search engines
    Manage search engines
  • Remove unnecessary search engines from the list
    Delete search engines
  • Go back to settings. On Startup choose Open blank page (you can remove undesired pages from the set pages link too).
  • If your homepage was changed, click on Chrome menu on the top right corner, select Settings. Select Open a specific page or set of pages and click on Set pages.
    Set pages
  • Delete malicious search websites at a new Startup pages window by clicking “X” next to them.
    Delete start pages

(Optional) Reset your browser’s settings

If you are still experiencing any issues related to newtab virus, reset the settings of your browser to its default settings.

  • Click on a Chrome’s menu button (three horizontal lines) and select Settings.
  • Scroll to the end of the page and click on theReset browser settings button.
    Resset settings
  • Click on the Reset button on the confirmation box.
    Reset approve

If you cannot reset your browser settings and the problem persists, scan your system with an anti-malware program.

  Top

How To remove Newtab Viruses from Firefox:

  • Click on the menu button on the top right corner of a Mozilla window and select the “Add-ons” icon (Or press Ctrl+Shift+A on your keyboard).
    Select add-on
  • Go through Extensions and Addons list, remove everything Newtab Viruses related and items you do not recognise. If you do not know the extension and it is not made by Mozilla, Google, Microsoft, Oracle or Adobe then you probably do not need it.
    Remove add-on
  • If your homepage was changed, click on the Firefox menu in the top right corner, select Options → General. Enter a preferable URL to the homepage field and click Restore to Default.
    Restore default

(Optional) Reset your browser’s settings

If you are still experiencing any issues related to Newtab Viruses, reset the settings of your browser to its default settings.

  • Click on the menu button on the top right corner of a Mozilla Firefox window. Click on the Help button.
    Help button
  • ChooseTroubleshooting Information on the Help menu.
    Troubleshooting
  • Click on theReset Firefox button.
    Refresh firefox
  • Click on the Reset Firefox button on the confirmation box. Mozilla Firefox will close and change the settings to default.
    Refresh firefox approve

(Optional) Steps for older Mozilla Firefox versions:

  • Enter “about:config” in URL bar and hit enter. This will open the settings page
    Abou config
  • Type “Keyword.url” in the search box. Right click and reset it.
    Reset Keyword.url
  • Type “browser.search.defaultengine” in the search box. Right click and reset it.
  • Type “browser.search.selectedengine” in the search box. Right click and reset it.
  • Search for “browser.newtab.url”. Right-click and reset it. This will make sure that the search page won’t launch on every new tab.
  • If the settings revert and the scan with anti-malware programs is clean: close Firefox, open file explorer and enter %AppData% in the address bar. Enter user.js in the search box. If this file exists, rename it and start Firefox again. You will have to repeat the steps above.
    Remove user.js

If the problem persists, scan your system with an anti-malware program to identify malicious entries.

  Top How to remove Newtab Viruses virus from Internet Explorer:

How to remove Newtab Viruses virus from Internet Explorer (older versions):

  • Click on the arrow on the right of the search box.
  • Do the following: on IE8-9 choose Manage Search providers, on IE7 click Change search defaults.
  • Remove the newtab virus from the list.

How to remove Newtab Viruses from IE 11:

  • Click on the Settings icon (top right) → Manage Addons.
    Add-on
  • Go through Toolbars and extensions. Remove everything related to newtab virus and items you do not know that are made not by Google, Microsoft, Yahoo, Oracle or Adobe.
    Disable add-ons
  • Select Search Providers.
    Set search engine
  • If any of these search providers is not available, follow “Find more search providers” in the bottom of the screen and install Google.
    Find search engines
  • Close the Options.
  • If your homepage was changed, click on the Gear icon on the top right corner to open the Internet Explorer menu, select Internet options and choose General tab. Enter a preferable URL to the homepage field and click Apply.
    Restore home page

(Optional) Reset your browser’s settings

If you are still experiencing any issues related to Newtab Viruses, reset the settings of your browser to its default settings.

  • Gear icon→Internet Options.
    Internet options
  • Choose the Advanced tab and click on the Reset Reset settings
  • Select Delete personal settings checkbox and click on the Reset button.
    Reset approve
  • Click on the Close button on the confirmation box, then close your browser.
    Reset

If you cannot reset your browser settings and the problem persists, scan your system with an anti-malware program.

How to remove Newtab Viruses from Microsoft Edge:  Top

Resetting Microsoft Edge setting (Method 1)

  • Open Microsoft Edge and click on More actions button (three dots at the top right corner of the screen), then choose Settings.
    Open settings
  • In the Settings window, click Choose what to clear button.
    Choose clear
  • Select everything that you want to remove and click Clear.
    Clear browsing data
  • Right click on Start and choose Task manager.
    Open task manager
  • In the Processes tab right click on Microsoft Edge and select Go to details.
    Go to details
  • In the Details look for entries named Microsoft Edge, right click on each of them and select End Task to end these entries.
    End Edge task

If the first method didn't work for you, follow the steps of advanced method below. Make sure you backup your data before completing these steps.

Resetting Microsoft Edge setting (Method 2)

  • Navigate to the following folder: C:\Users\%username%\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe Select all of the entries in this folder, right click on them and select Delete.
    Delete files
  • Click Start button and type in “Windows power”. Right click on the Windows PowerShell entry and choose Run as administrator.
    Open powershell
  • When Administrator: Windows PowerShell window appears on your screen, paste in this line after PS: cd C:\WINDOWS\system32 and press Enter: Get-AppXPackage -AllUsers -Name Microsoft.MicrosoftEdge | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)\AppXManifest.xml" -Verbose}
    Run command
Once you finish these steps, Newtab Viruses should be removed from your Microsoft Edge browser.

  Top How to remove Newtab Viruses from Safari:

Remove malicious extensions

  • Click on Safari menu on the top left corner of the screen. Select Preferences.
    Open preferences
  • Select Extensions and uninstall newtab virus and other suspicious extensions.
    Extensions
  • If your homepage was changed, click on Safari menu on the top left corner of the screen. Select Preferences and choose General tab. Enter preferable URL to the homepage field.
    Reset homepage
(Optional) Reset your browser’s settings(older versions)

If you are still experiencing any issues related to Newtab Viruses, reset the settings of your browser to its default settings.

  • Click on Safari menu on the top left corner of the screen. Select Reset Safari…
    Choose reset
  • Select which options you want to reset (usually all of them come preselected) and click on the Reset button.
    Reset

If you cannot reset your browser settings and the problem persists, scan your system with an anti-malware program.

     
 

About the author

 - Main Editor

I have started 2-viruses.com in 2007 after wanting to be more or less independent from single security program maker. Since then, we kept working on this site to make internet better and safer place to use.

 
August 1, 2016 06:21, October 11, 2017 07:17
 
   
 

Leave a Reply

Your email address will not be published. Required fields are marked *