Removal Guide

Threat Level:
Rate this Article:
Comments (0)
Article Views: 531
Category: Browser Hijackers

Sometimes your default homepage may change without your permission, and if is set as your main search engine, you can be sure that your system has been affected by a browser hijacker. A browser hijacker is a type of computer security threat that enters the target system with the intention to make money for its creators. However, while the schemes they use may not be malicious, it could still present specific threats that should not be ignored by any user. Therefore, you should remove from your system before this browser hijacker exposes you to something very dangerous.

However, deleting this program from your computer is not the only thing you need to do. It is very likely that you have more unwanted applications installed on your PC because that is how this browser hijacker manages to access target systems. While most of the similar programs get distributed in software packages that users download from file-sharing websites, our researchers say that usually hides in pop-ups that appear on your window when you access particular websites. Of course, it could be that those pop-ups are generated by the site itself, but there is also a good chance you have other freeware applications installed on your PC that make those pop-ups appear, too.

This means that you need to exercise safe web browsing habits to avoid and all the applications that might be associated with it. In other words, you could have installed potentially harmful applications way before this browser hijacker arrived at your system. But now that it does run on your computer, you have one more issue to take care of. belongs to a group of similar programs, and this family does not seem to stop growing. We do know that,,, and a number of other hijackers are practically the same as, so it seems that whoever is responsible for spawning them uses the same pattern for all the programs they release. works on the Firefox, Chrome, and Internet Explorer browsers. It will modify the default search engine, homepage, and the new tab settings to continue tracking your online activity. When the hijacker has taken over your browser, it can know what websites you visit and what you usually look for online. What’s more, also displays modified search results. So when this program knows your likes and preferences, it can modify the search results in a way that they will look attractive to you, and you will feel more inclined to click them.

Most of the results would lead you to commercial websites, where you would generate a financial profit to the hijacker and its associates with your mouse clicks. However, some of the links could also be embedded by malevolent third parties because the hijacker does not check the third-party sources that make use of its advertising space.

Having these security issues in mind, you obviously have to delete right now. If you find manual removal too tedious, you can always make use of the SpyHunter free scanner to do the job for you. Choose what is best for you and your system because your data security should be one of your top concerns.

How to Remove


  1. Press Win+R and enter %AppData%. Press OK.
  2. Navigate to Mozilla\Firefox\Profiles\[Unique User ID]\extensions.
  3. Remove the @Package.xpi file.
  4. Open Mozilla\Firefox\Profiles\[Unique User ID]\jetpack.
  5. Remove the @Package folder. Go to Mozilla\Firefox\Profiles\[Unique User ID].
  6. Use Notepad to open the prefs.js file.
  7. Remove this string: user_pref("browser.startup.homepage", "");
  8. Save changes and exit the file.


  1. Press Win+R and enter %LocalAppData%. Press OK.
  2. Open Google\Chrome\User Data\Default.
  3. Delete these files: Preferences, Secure Preferences, and Web Data.

Internet Explorer

  1. Press Win+R and the Run prompt will open.
  2. Type regedit into the Open box and press Enter.
  3. Open HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main.
  4. On the right side, right-click Start Page value.
  5. Choose Modify and edit your homepage address. Press OK.
  6. Navigate to HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes.
  7. Remove the {4113711F-0E95-47BC-8005-A10CB4A2A9B5} key under SearchScopes.
  8. Open HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall.
  9. Remove the {28e56cfb-e30e-4f66-85d8-339885b726b8} key below Uninstall.
  10. Exit Registry Editor and press Win+R once more.
  11. Enter %AppData% and click OK.
  12. Remove the {28e56cfb-e30e-4f66-85d8-339885b726b8} file.
Download Remover for *
*SpyHunter scanner, published on this site, is intended to be used only as a detection tool. To use the removal functionality, you will need to purchase the full version of SpyHunter. Screenshots:


Your email address will not be published.


Enter the numbers in the box to the right *