Omniboxes Virus - How To Remove?

-
 1
Type: Browser Hijacker
 

Omniboxes is the name of the website that is accessible at omniboxes.com. Basically this website is just a search box that transfers your search query to the Google and display legitimate results. So why we are talking about the website which is legitimate on the malware research website? Because of the way it is distributed and the methods employed to direct traffic to this particular website.

The term “Omnibox” itself means combined search and url entry box in browsers like Google Chrome or Firefox, that allows instant access to google results or opens page if it matches URL format. Some extensions can provide additional functionality to it as well. However, the omnibox.com hijacker has little to do with browser’s internal omnibox except the name and ability to hijack the browser. ComputerHope describes this entry box as an additional tool that can process searches and do mathematical calculations.


The homepage of Omniboxes virus is designed perfectly to match the design of Google – it is done in order to trick users into thinking that they are using a reliable search engine. However, every search submitted to Omniboxes is tracked and you can be redirected to any other website anytime.

Omniboxes virus remove

Problems regarding Omniboxes

Even though this tool might look like reliable and useful one, there are some specific features why we categorise it as a malware. For the same reason users prefer not to have it installed on a computer, yet sometimes struggle to get rid of it.

User “Kostis” is describing a pretty common scenario regarding Omniboxes virus on TomsGuide forum:

Hi guys,
so I made a mistake and downloaded a bundle with a .exe file. Then I made another one and installed it. After my display stuttered a little bit, I noticed that something was wrong. When I went to Chrome, I noticed that the homepage was omniboxes.net and the browser itself was full of ads. I went and reset Windows uninstalling all programs and cleaning the hard drive straight away. But after I logged in into my Microsoft account and went to IE, the homepage was still the same omniboxes thing. However it had an instruction about uninstalling this add – on as it turned out to be. But my question is – is my computer and particularly browsing safe? Or is it still somehow infected? I must know this as I do online transactions and etc. on my PC. AVG scan showed nothing but a few tracking cookies.

This entry basically describes everything that is wrong with this tool. It can be listed either as a browser hijacker or adware infection, yet we prefer description of browser hijacker for this one. First of all, this tool is traveling as a bundle to free software. Users download some programs from the Internet for free and Omniboxes extension comes as bundle to it. Obviously you can disable this feature during the installation, but the problem is that users tend to run through the installations without paying much of the attention. This way computers get infected with this annoying application.

Order of events after the installation is clear – all your web browsers will be modified and you probably won’t be happy about that. Homepage will be set to omniboxes.com, you will see additional advertisements and address box will be replaced with Omnibox, regardless you like it or not.

Technical information and removal instructions

This product was developed by SuperNet Technology Co. Limited and we believe that it’s not the only malicious product they have released to the surface. For instance, mysites123.com virus looks exactly the same and perform same malicious actions. In addition to that, there are other tools that are exactly the same as omniboxes.com, such as Mystartsearch.com virus. Their privacy policy states that Finder Digital Media was original developer of this software, though we can’t find any registration copies of this company, thus it might be that there is one same legal person behind both of these companies, distributing the same infection by the different name.

Domain of Omniboxes malware was registered back in 2015 and this malware has been active ever since. Other details of registration are hidden, thus that’s not a good sign as well. However, the company itself is registered at UNIT 17, 9/F., HO KING COMMER CIAL CENTRE 2-16 FA YUEN STREET MONGKOK KL, HONG KONG.

Another technical problem regarding Omniboxes – it might be really difficult to ditch the cookies deployed by this infection. That means your activity will be tracked long after you remove the virus itself. For this particular reason we suggest to get yourself trustworthy anti-malware tool to do this removal job – it will make sure that everything that needs to be removed will be removed.

You can use either Reimage or SpyHunter for this task. Both of these applications should deal with Omniboxes hijacker just perfectly. On the other hand, if you think that there is no need to download no anti-malware software, manual removal of this infection is possible too. It might require some advanced cyber security knowledge, therefore we have developed a step-by-step Omniboxes manual removal guide to assist you – check it out below this article.

If there is any questions regarding this virus, you can always ask them in the comments box below the post.


Automatic Omniboxes virus removal tools

 
 
Note: Reimage trial provides detection of parasites and assists in their removal for free. You can remove detected files, processes and registry entries yourself or purchase a full version.  We might be affiliated with some of these programs. Full information is available in disclosure

Completely eliminate Omniboxes virus

How to remove Omniboxes virus using Windows Control Panel

Many hijackers and adware like Omniboxes virus install some of their components as regular windows programs as well as additional software. This part of malware can be uninstalled from Control Panel. To access it, do the following.
  • Start→Control Panel (older Windows) or press Windows Key→Search and enter Control Panel (Windows 8);
    Control panel
  • Choose Uninstall Program;
    Programs and features
  • Go through a list of programs and select entries related to Omniboxes virus .
    Remove toolbars
  • Click uninstall button.
    Uninstall
  • In many cases anti-malware programs are better at detecting related parasites, thus I recommend installing Spyhunter or Reimage to identify other programs that might be a part of this infection.
    Scan with spyhunter
This method will not remove some of browser plugins therefore proceed to the next part of the removal guide.
Removing Omniboxes virus from your browsers

  Top How To remove Omniboxes virus from Google Chrome:

  • Click on the 3 horizontal lines icon on a browser toolbar and Select More Tools→Extensions
    Extensions
  • Select all malicious extensions and delete them.
    Remove extensions
  • Click on the 3 horizontal lines icon on a browser toolbar and Select Settings
    Open settings
  • Select Manage Search engines
    Manage search engines
  • Remove unnecessary search engines from the list
    Delete search engines
  • Go back to settings. On Startup choose Open blank page (you can remove undesired pages from the set pages link too).
  • If your homepage was changed, click on Chrome menu on the top right corner, select Settings. Select Open a specific page or set of pages and click on Set pages.
    Set pages
  • Delete malicious search websites at a new Startup pages window by clicking “X” next to them.
    Delete start pages

(Optional) Reset your browser’s settings

If you are still experiencing any issues related to Omniboxes virus, reset the settings of your browser to its default settings.

  • Click on a Chrome’s menu button (three horizontal lines) and select Settings.
  • Scroll to the end of the page and click on theReset browser settings button.
    Resset settings
  • Click on the Reset button on the confirmation box.
    Reset approve

If you cannot reset your browser settings and the problem persists, scan your system with an anti-malware program.

  Top

How To remove Omniboxes virus from Firefox:

  • Click on the menu button on the top right corner of a Mozilla window and select the “Add-ons” icon (Or press Ctrl+Shift+A on your keyboard).
    Select add-on
  • Go through Extensions and Addons list, remove everything Omniboxes virus related and items you do not recognise. If you do not know the extension and it is not made by Mozilla, Google, Microsoft, Oracle or Adobe then you probably do not need it.
    Remove add-on
  • If your homepage was changed, click on the Firefox menu in the top right corner, select Options → General. Enter a preferable URL to the homepage field and click Restore to Default.
    Restore default

(Optional) Reset your browser’s settings

If you are still experiencing any issues related to Omniboxes virus, reset the settings of your browser to its default settings.

  • Click on the menu button on the top right corner of a Mozilla Firefox window. Click on the Help button.
    Help button
  • ChooseTroubleshooting Information on the Help menu.
    Troubleshooting
  • Click on theReset Firefox button.
    Refresh firefox
  • Click on the Reset Firefox button on the confirmation box. Mozilla Firefox will close and change the settings to default.
    Refresh firefox approve

(Optional) Steps for older Mozilla Firefox versions:

  • Enter “about:config” in URL bar and hit enter. This will open the settings page
    Abou config
  • Type “Keyword.url” in the search box. Right click and reset it.
    Reset Keyword.url
  • Type “browser.search.defaultengine” in the search box. Right click and reset it.
  • Type “browser.search.selectedengine” in the search box. Right click and reset it.
  • Search for “browser.newtab.url”. Right-click and reset it. This will make sure that the search page won’t launch on every new tab.
  • If the settings revert and the scan with anti-malware programs is clean: close Firefox, open file explorer and enter %AppData% in the address bar. Enter user.js in the search box. If this file exists, rename it and start Firefox again. You will have to repeat the steps above.
    Remove user.js

If the problem persists, scan your system with an anti-malware program to identify malicious entries.

  Top How to remove Omniboxes virus virus from Internet Explorer:

How to remove Omniboxes virus virus from Internet Explorer (older versions):

  • Click on the arrow on the right of the search box.
  • Do the following: on IE8-9 choose Manage Search providers, on IE7 click Change search defaults.
  • Remove the Omniboxes virus from the list.

How to remove Omniboxes virus from IE 11:

  • Click on the Settings icon (top right) → Manage Addons.
    Add-on
  • Go through Toolbars and extensions. Remove everything related to Omniboxes virus and items you do not know that are made not by Google, Microsoft, Yahoo, Oracle or Adobe.
    Disable add-ons
  • Select Search Providers.
    Set search engine
  • If any of these search providers is not available, follow “Find more search providers” in the bottom of the screen and install Google.
    Find search engines
  • Close the Options.
  • If your homepage was changed, click on the Gear icon on the top right corner to open the Internet Explorer menu, select Internet options and choose General tab. Enter a preferable URL to the homepage field and click Apply.
    Restore home page

(Optional) Reset your browser’s settings

If you are still experiencing any issues related to Omniboxes virus, reset the settings of your browser to its default settings.

  • Gear icon→Internet Options.
    Internet options
  • Choose the Advanced tab and click on the Reset Reset settings
  • Select Delete personal settings checkbox and click on the Reset button.
    Reset approve
  • Click on the Close button on the confirmation box, then close your browser.
    Reset

If you cannot reset your browser settings and the problem persists, scan your system with an anti-malware program.

How to remove Omniboxes virus from Microsoft Edge:  Top

Resetting Microsoft Edge setting (Method 1)

  • Open Microsoft Edge and click on More actions button (three dots at the top right corner of the screen), then choose Settings.
    Open settings
  • In the Settings window, click Choose what to clear button.
    Choose clear
  • Select everything that you want to remove and click Clear.
    Clear browsing data
  • Right click on Start and choose Task manager.
    Open task manager
  • In the Processes tab right click on Microsoft Edge and select Go to details.
    Go to details
  • In the Details look for entries named Microsoft Edge, right click on each of them and select End Task to end these entries.
    End Edge task

If the first method didn't work for you, follow the steps of advanced method below. Make sure you backup your data before completing these steps.

Resetting Microsoft Edge setting (Method 2)

  • Navigate to the following folder: C:\Users\%username%\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe Select all of the entries in this folder, right click on them and select Delete.
    Delete files
  • Click Start button and type in “Windows power”. Right click on the Windows PowerShell entry and choose Run as administrator.
    Open powershell
  • When Administrator: Windows PowerShell window appears on your screen, paste in this line after PS: cd C:\WINDOWS\system32 and press Enter: Get-AppXPackage -AllUsers -Name Microsoft.MicrosoftEdge | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)\AppXManifest.xml" -Verbose}
    Run command
Once you finish these steps, Omniboxes virus should be removed from your Microsoft Edge browser.

  Top How to remove Omniboxes virus from Safari:

Remove malicious extensions

  • Click on Safari menu on the top left corner of the screen. Select Preferences.
    Open preferences
  • Select Extensions and uninstall Omniboxes virus and other suspicious extensions.
    Extensions
  • If your homepage was changed, click on Safari menu on the top left corner of the screen. Select Preferences and choose General tab. Enter preferable URL to the homepage field.
    Reset homepage
(Optional) Reset your browser’s settings(older versions)

If you are still experiencing any issues related to Omniboxes virus, reset the settings of your browser to its default settings.

  • Click on Safari menu on the top left corner of the screen. Select Reset Safari…
    Choose reset
  • Select which options you want to reset (usually all of them come preselected) and click on the Reset button.
    Reset

If you cannot reset your browser settings and the problem persists, scan your system with an anti-malware program.

     
 

About the author

 - Malware researcher

Continuous ads and struggles to browser the Internet due to web-based malware is what really grinds my gears. That’s why my main goal is to fight against malware like adware or web hijackers and provide our readers with efficient solutions in this particular field. Keeping up to date with newest trends in cyber security world is a must nowadays and thus my interest goes way beyond malware infections – IoT security, international cyber wars and hacking outbreaks are under my radar as well.

 
September 14, 2017 06:15, September 14, 2017 06:15
 
   
 

One thought on “Omniboxes virus

1 Comment
  1. Omniboxes just kept going back even after I disabled it on my Chrome browser. Every time I restart computer or browser alone, this fricking website just show up as a homepage once again. Then I scanned my computer with Reimage and it seems like the virus is gone for good. It have been two days since it’s gone and I hope it will stay this way. Anyway, thanks for the advice.

Leave a Reply

Your email address will not be published. Required fields are marked *