Opening pages with ads in the chrome browser. How to remove advertising tabs in the browser (Chrome, Firefox, Opera, IE)

If you are facing the problem of constantly redirecting to dubious websites, then chances are that you have been infected with a redirect virus or Google Redirect Virus (redirect virus).

The redirect virus targets Google and other search engines to redirect the user to fake and other infected websites.

In most cases, redirected pages contain many advertisements. These ads usually convince users to pay for something or give away their bank account details. The main function of such viruses, or browser hijackers, is to track user activities and hack into their data. Thus, the redirect virus is quite dangerous.

If your browser opens by itself with ads, then this is also a job. malware. As in the first and second cases, these are AdWare - programs that show unwanted ads. We will talk about how to get rid of this problem, as well as the redirect virus, below.

If your browser starts by itself, opening websites with ads or an error page, then this is the work of malware. This problem is terrible in that it can persist even after you remove the malware. The thing is that even after removing the cause of the problem, the consequences of the malware may remain, as it changes the registry and the Windows task scheduler, making entries in the startup sections and creating tasks. See below for how to fix this problem.

The browser starts by itself and a site with ads opens. Solution

If you do not want your browser to live its own life, constantly opening an unnecessary site, you must remove the system tasks - the source of the problem. To solve it, follow the step-by-step instructions below:

Using the keyboard shortcut "Win + R", open the "Run" window. Paste "taskschd.msc" into this window. Click "OK" to continue.
In the new window that appears, click on the Task Scheduler Library, as in the example below.
You need to find tasks that are to blame for the fact that your browser lives on its own. The names of the tasks do not say anything, since malware is perfectly masked and cannot be detected in this way. Distinctive feature malicious tasks is run once every few minutes. You can select a task and go to the "Triggers" tab to look at the repetition rate.
If you want to know what triggers a task, go to the Actions tab. Malicious programs launch websites using commands.
Disable all questionable tasks that have aroused your suspicions. To do this, click on the task and click "Disable" (do not delete if you are not completely sure about the harmfulness of the task).

Check your browser if the problem is gone or not.

You can remove the redirect virus using antivirus utility. It can be Kaspersky, Malwarebytes Anti Malware or any other antivirus program who can be trusted. Such tools allow you to remove the virus along with all malicious files and unwanted programs. In our example, we will use Malwarebytes Anti-Malware.

Download antivirus Malwarebytes Anti-Malware and install it on your computer following the instructions during the installation process.
Open Malwarebytes Anti-Malware. You will be on the main page.
Go to settings (bottom left), then enable the "Scan" option for rootkits. To do this, click the switch so that it turns green.
Now that you've enabled rootkit scanning, click the Scan button.
Make sure "Threat Scan" is selected, and then click the "Start Scan" button. If an update is available for Malwarebytes, it will automatically download and install it before performing a scan.
Wait for the scan to finish. When it finishes, you will see a screen with all found malware, adware, etc.
Click on "Remove Selected". Antivirus will delete all selected files and add them to quarantine.

On a note! When deleting files, the program may require a reboot (to remove some of them). If you see a notification that a restart is required, restart your computer. If you don't want to reboot, you can turn it off and on again. After removing malicious files, close the program.

Any other antivirus program works in a similar way. First comes the scan, and then you remove malicious files and viruses if they were found. In addition, this method will not only help you get rid of viruses and threats, but will also protect your computer in the future, since an antivirus program must be on every computer. If it is not there, then the computer is not protected, and, therefore, is at risk.

Video - The browser itself opens ads, tabs with ads. Decision

Probably, every user has encountered the fact that his computer, at startup, independently loads a browser in which obscure links open. There are also frequent cases where social networks or obscene or spam blocks appear on the pages of decent content sites. What does this mean and how dangerous is this for your computer?

Advertising on the Internet - what is it like?

that appears in certain places on the site designed specifically for the placement of such advertising. It practically does not interfere and can be blocked by special extensions - anti-banners.
Blocks with ads that appear where they should not be. Ads are not blocked by extensions and when you try to close the block manually, a new tab with ads opens.
Ads that appear in new tabs when the browser is launched.

The second and third are very annoying to users, as they appear where they should not be and it is difficult to deal with them - by closing the tab, you cannot protect yourself from it not appearing again. Why is this happening and how to make sure that ads are no longer opened?

The reason is the virus!

Undoubtedly, many users, when they constantly open tabs with ads, scan their computer for viruses and check startup. Most often, in such cases, the antivirus program does not detect anything, and there is nothing suspicious or superfluous in autoloads. But the problem with the appearance of new tabs is and does not disappear anywhere. If the antivirus did not find any problems, then there are no viruses, but what is it then?

In fact, this is the result of the presence of a kind of "pest". Antivirus programs do not see it due to the fact that it is registered directly in the browser.

He may appear different ways. Sometimes tabs with ads open after installing software from a suspicious developer. AT setup files such software may include other elements, so it is very important during the installation of such programs to pay attention to the whole process and note that in addition to necessary programs it is proposed to set and uncheck the corresponding items in time.

How to get rid of intrusive ads?

If the ads started appearing after software from an unverified developer was installed, it would be logical to simply uninstall the program and all items that were installed with it. But, as practice shows, this does not solve the problem, and tabs with ads still open. You can resolve the issue in the following ways:

change the properties of the web browser shortcut;
use the appropriate utilities.

Browser Shortcut Options and Changing Them

The information is relevant for various browsers: Google Chrome, Mazila, Safari, Opera. An advertisement tab opens due to the properties of the browser shortcut being changed. The antivirus will not be able to determine this, so you will have to check and fix everything manually.

To check if this is the reason for the appearance of new tabs, it is possible in the following way:

Find the browser shortcut on the desktop.
Right-click on the shortcut and select "Properties".
In the window that appears, pay attention to the line "Object" - the path to the browser should be written there. If after the browser name and should be *.exe) there is an address of any site, then the problem is changing the shortcut parameters.

Simply deleting what is written after the location of the browser in the "Object" line will not work - operating system blocks such edits. But there is a solution. To do this, do the following:

Open file location. In the properties of the shortcut there is a button "File Location", it will help you quickly navigate to the right place.
In the list that opens, find the file "Internet browser application".
Select it and call right click mouse context menu.
AT context menu find "Send to" => "Desktop" (create a shortcut).
Remove the old shortcut from the desktop.
After the done actions, check the properties of the new shortcut. The string object must end with the name of the browser with the application extension.

Note: if the old shortcut was pinned to the taskbar, remove it from there and pin the new shortcut.

After performing such actions, the browser opens its start page after launch.

Utilities to combat ads in new tabs

In order not to do all the work of identifying manually, use special utilities. These programs are able to find what your antivirus missed and fix the problem that opens tabs with ads.

In order to check the computer, they install it into the program and then start scanning. Exist free versions similar utilities and paid ones with a trial period. One of these free programs is an Malwarebytes Antimalware. It is easy to use and does not conflict with antiviruses.

No matter how good the utilities are, they are not always able to solve such problems, and therefore you have to manually do everything yourself. Sometimes you even need to demolish all browsers and reinstall them.

By the way, reinstalling the web browser does not always help. Why does a tab with ads open after reinstallation? Most likely, they were not removed during uninstallation hidden folders in which the viruses are preserved. You can find them at C:\Users\username\AppData\Local\, as well as C:\Users\username\AppData\Roaming\.

How to protect yourself from such problems

Some preventive maintenance reduces the risk of difficulties resulting from opening tabs with ads. First of all, you need to pay attention to the antivirus that is installed on the computer. Ideally this should be licensed version with latest updates. Secondly, you should not download and install software from unverified developers. If, nevertheless, there is no other way out, follow the installation process and prevent the installation of unnecessary objects.

Timely inspection and prevention - best defense computer from malware.

So, let's begin. Malicious software can get into a computer in many ways. various ways. And when you notice that there are more ads on the sites, spontaneous pop-up windows and opening tabs, or your work and leisure on the Internet is completely blocked, then most likely you have caught an ill-wisher (virus) somewhere on the Internet.

Through installed extensions

First you need to look into installed extensions browser(s). Useful extensions usually help and simplify the work on the Internet, but there are also malware. In general, we remove unfamiliar and suspicious extensions. Paths where extensions for different browsers are written below:
opera: Opera Menu→Extensions
Google Chrome: Menu→more tools→extensions
Firefox: Menu→Add-ons→Extensions
safari: Menu→settings→extensions
Yandex: Menu→Extras

Editing the hosts file

Through host file, in which dns records can change and, under the guise of a decent site, redirect you to the attacker's twin page, in which you are asked to send the nth amount of money to unlock your account or simply ask you to enter a login, password from a particular resource, thereby receiving easy way access to your registration data. In the hosts file, these addresses can be arbitrarily. You can fix the file by simply opening it in text editor(notepad), check and correct the entries.

Or download (unpack the archive) the original file and copy it along the path: C:\Windows\System32\drivers\etc\

Also CureIt utility by dr.Web checks this file when scanning for viruses (but this process takes longer, although it would not hurt to check).

Editing the dns server in connection properties

We check in the properties of the connection by local network or wireless network whether we have addresses of dns-servers. They can also redirect us to the left pages. However, be careful, providers sometimes provide this information for their connections, but this is rare. Usually everything is there automatically. Control Panel→Network and Internet→Control and Sharing Center→Change adapter settings. We select our connection and in the properties of the connection we select Internet protocol TCP/IPv4 and press properties. Check if the Obtain DNS server address automatically checkbox is checked.

In Internet Options

Internet Options contains global settings connections. The type of connection used, security, etc. Here we are interested in the tab General. We check what the address is when starting the browser, check the box about what to start first and network settings.

Control Panel→Network and Internet→Internet Options

In the window that opens, in the tab General there may be addresses that will be launched when the browser starts, delete them.

Removing spontaneously opening pages from autoload when loading windows

I recently ran into a problem with a man. Starts the computer and after loading the browser starts itself and opens the page specified in autoload. Apparently, he installed something and the program in parallel prescribed to launch a certain site. In this case, even if you remove the program itself, the information on starting the site will still remain and will be launched every time you turn on the computer.

For Windows 7: Press start and enter the command in the search bar msconfig, in the window that appears, click the tab There will be a list of programs that run with the system. Look carefully if there are any lines similar to the site address and uncheck the box next to it, exit with the application of the parameters. You can even check this address by entering it in the address bar of your browser, if that page opens at startup, then this is it.

For Windows 8: Open Task Manager (Ctrl+Alt+Delete), select tab highlight desired parameter and click the disable button.

And of course virus removal

It would not hurt to check your computer for viruses. In most cases, viruses do all sorts of trouble with the computer. I did not write first of all that it is necessary to check the computer for viruses, since, for example, not all extensions to browsers are defined as viruses, but as add-ons. Roughly speaking, they do not cause harm, they just clog with ads, opening tabs, etc. Then antiviruses cannot correct the consequences of the virus. Fix hosts file, fix DNS server records. Even if the antivirus will block the constantly opening site when loading Windows, it will not delete the launch information itself, because for it it is just "the address of some site."

Installing ad-blocking programs and browser extensions

Now let's talk about blockers. About their pros and cons. There are ad blockers and browser extensions. I will not talk about individual programs. I find them uncomfortable. Browser extensions can be downloaded in the browser itself (look for a name like "download extensions") in the search for "ad blockers". Some browsers have a pre-installed blocker, but you need to enable it, look in the settings there.

How wonderful it is to read the text when nothing looms on the sides and the banner does not flash and you do not stumble among the text on advertising some nonsense, knocking you off the text. I am for blockers when there are tons of ads on the site and there is nowhere to go from it. The disadvantages are that sometimes there is useful advertising, tracking your requests on the Internet and there is a result of displaying goods, offers and services of interest. No one just sends a penny to site creators, and due to advertising on the site, perhaps, but rather not, their work on writing articles, domain and hosting pays off. This is where I complained a little. It also happens that as a result of viruses, ads appear on sites and a person simply puts a blocker, in which case the blocker will remove ads, but frames will remain in place of the intended ad and most likely it will not be possible to click the mouse in that place. Some site owners make anti-blockers, thereby asking the visitor to turn off the ad blocker or deny access to the site. However, they can be bypassed. How? Let it be our little secret. Or someone will write in the comments).

Silent download of unwanted content in the background (invisible) mode

This happens when you want to download some program from the Internet, from unverified sources. The bottom line is this: you download the installer, run it, and in the meantime it downloads something else from the Internet, and as a rule, the program does not have the ability to cancel the installation. Antivirus starts sounding the alarm, blocking connections, installed program, but I know for myself that the pest still ends up in the computer. So don't click on suspicious links. Or download an extension from Avast or dr.Web, they will check links.

Quite a few computer users have already encountered such a situation when ads open when they start the browser. Moreover, the browser has its own start, home page, but anyway, after starting the browser, the page of an unknown site opens with advertisements placed there.

There are also situations in which, if several browsers were installed on the user's computer, then all browsers change their start page. After launching any browser, one specific page of the site with advertising will be opened.

This is an unexpected situation: an unsuspecting user launches his browser, and a completely different site will open in the browser window instead of the home page. Usually, on such a page there is an advertisement, and often the same high quality. The user is forced to buy unnecessary goods or funds, sometimes games are advertised on such pages.

In order not to get into such situations, it will be possible to use specialized programs that block ads and filter Internet traffic. One of the best is a program that is designed to block ads, protect personal data, and prevent visiting fraudulent sites. With Adguard, you will be free from annoying pop-up ads or dubious websites.

It is possible that many users have already come across the so-called Ksenia Strizhenko Blog on the Internet. Interestingly, this notorious blog has a large number of different URLs, which speaks to the resourcefulness of its creators.

After opening a web page, the user is immediately bombarded with undisguised advertising. And, basically, these are not advertising banners or ads, but a special advertising article that applications to combat advertising cannot close.

For this image, I chose a more or less decent ad.

Very often, after launching the browser, instead of the home page, a page with ads of not very decent content, intended for adults, opens.

For example, a beauty lying in a draft position. At the same time, the corresponding text advertises products to increase the duration of sexual intercourse.

To put it mildly, not everyone will be pleased to see such ads when launching their browser. It should also be noted that, as a rule, more than one person uses a computer in each family. Therefore, such, so to speak, advertising can be seen not only by adults, but also by children.

Why is this happening? Situations are different, in this article we will analyze the simplest case: adding the address of such a “left” web page with ads to the browser shortcut properties.

Change browser shortcut properties

After installing a program, or after launching an application on your computer, start pages may change in all browsers that are installed on your computer. After launching any browser, it will open start page, for example, with advertising.

By adding an additional web address to the shortcut properties in this way, no other changes will be made to your computer. Therefore, the antivirus program installed on your computer will not consider such a change in the properties of the browser shortcut as a virus. Strictly speaking, such an additional web address is not a virus, because it is just a link to the site.

Let's see how the path to the file location looks like, using the example of a browser Internet Explorer. The file "Application" of the browser (any) has the extension ".exe" (executable file).

You will need to right-click on the browser shortcut. In the "Internet Options" window, in the "Shortcut" tab, in the "Object" field, you can see the path to the executable file, with the ".exe" extension. This file launches the browser.

In the event that in the properties of the browser shortcut, you see a different extension for the file (not “exe”), this means that the file has been modified. We will not analyze this case now.

In our case, the browser's home page is replaced by adding an additional web address of the page of the site containing advertising to the properties of the shortcut.

For example, in the Google Chrome browser, the path to the application will look like this:

C:\Users\Vasiliy\AppData\Local\Google\Chrome\Application\chrome.exe

After adding the address of another page to the properties of the shortcut, the path to the application looks like this:

C:\Users\Vasiliy\AppData\Local\Google\Chrome\Application\chrome.exe https://website/

Here you can see that in the properties of the shortcut, after the file “chrome .. Now, after starting the browser, not the start page that was selected in the browser settings will be opened, but this added page. In this case, main page my site.

The file path will be enclosed in quotation marks if the browser executable is located in the Program Files folder (Internet Explorer, Mozilla Firefox, Opera), or without quotes if the path to the file is in the "AppData" folder (Google Chrome, Yandex.Browser, Amigo).

The browser shortcut can be located not only on the Desktop, but also on the Taskbar. In the event that after launching the browser from the Taskbar, it also opens a page with advertising, you will need to temporarily remove the program from the Taskbar.

Remove link from browser shortcut properties

Such a problem can be solved manually by replacing the browser shortcut. On the this example Google Chrome browser will be used. In other browsers, you will need to follow exactly the same steps.

First, right-click on the browser shortcut, and then select "Properties" from the context menu. After that, the "Internet Options" window will open, in the "Shortcut" tab.

In the "Target:" field, immediately after the path to the application file with the ".exe" extension, you will see an additional link to the site. In most cases, simply deleting such a link from this field will not work, the operating system will block deletion.

Therefore, it will be necessary to do differently. In the "Shortcut" tab, click on the "File Location" button.

After that, a folder window will open in which the file is located - the “application” (browser), in our case the file “chrome.exe”.

A browser shortcut will appear on the desktop, in this case, the shortcut Google browser Chrome. You can open the properties of this shortcut and make sure that there is no longer a "left" link to the site with advertising.

Now you will need to remove the browser shortcut that contains an additional link in its properties. If such a shortcut is pinned to the Taskbar, then also remove this shortcut from there.

Then rename the new shortcut from which you will launch the browser by the name this browser, and pin the shortcut, if necessary, to the taskbar. Follow the same algorithm of actions when removing "left" links from the shortcut properties of other browsers.

If you regularly visit sites of dubious content or download any programs from there, you can be sure that sooner or later your computer will become infected with malware. software. One day it may happen that after restarting the PC, you will find that the browser automatically opens with it, and it immediately opens an incomprehensible link or advertisement. This means that you have become a victim of malware and, of course, you need to fight it so that your confidential data is not “left” to someone else.

The essence of the problem

Most often this happens due to the inattention of the user himself and the lack of effective means protection on the computer. While surfing the web, each of us can become a victim of malware, and it is far from always possible to identify them on our own. Most often, they "hide" under the guise of harmless or even useful programs that we download and run. As a result, after launching the executable file, the malicious code, which can be registered in the system registry, in browser settings and startup. Of course, such programs do not show any kind for the time being, but immediately after turning on the personal computer again, you will see that your browser has also opened, and with it a page with advertising or an unknown search engine. In any case, you need to deal with this scourge, since there is a high probability that your confidential data can be compromised (attackers can steal passwords, logins, data bank cards, names, etc.).

Reasons for the appearance

The reason for this problem is simple. Most likely you downloaded global network some program, game or application and launched the installation package. Malefactors most often disguise their malicious "brainchildren" under potentially useful programs and it has more to do with gaining the trust of the user. Many malicious programs are designed in such a way that their code can only be run manually. In this case, when we run the installation package, we automatically generate malicious code that can be written in those places on the computer where it is needed. Depending on the goals of the attacker, these can be: browser settings, system registry, computer startup settings, even PC hardware (RAM).

As for the browser that automatically opens with the computer, most often, in this way, attackers try to increase their own profit by moving the user to advertiser sites. In the global network, many services are built on the principle that payment is made by visiting certain pages, and the more visits, the greater the profit. It also increases the conversion of the site, its indicators for advertisers, respectively, increases its price. You should not assume that such software is absolutely safe, because you do not know what the attacker intended and introduced into his code. Maybe he added a feature automatic sending user data. In any case, you need to deal with such a problem.

What to do when a browser automatically opens with a website or advertisement when you turn on your computer

Such a problem is gaining momentum today and this is largely due to the fact that antiviruses do not yet recognize this as malware. Of course, you can call the master, but then you will have to pay a pretty sum for petty work. Therefore, try to do everything yourself, especially since the removal procedure itself usually does not take much time. You will be able to cope with this task in just one hour.

Startup cleanup

So, first of all, you need to check the startup parameters. Perhaps one of your browsers is located there and therefore starts up with personal computer. In order to clean the "Startup", you need to do the following:

Open the Start menu;

AT search line at the bottom write msconfig;

Run the msconfig utility

After starting the utility, open the "Startup" tab;

Open the "Startup" tab in the window

Uncheck all unknown programs and save changes.

These manipulations will not be enough, after a reboot, most likely, the ill-fated window will reappear. Don't worry - everything is going according to plan, and the next step is to clean the registry.

Cleaning the registry on a computer

To get started, restart your PC again and when the browser starts, pay attention to the address bar, namely the name of the site that runs first (before the redirect). The thing is that it is the name of the first site that we need. If you do not have time, then immediately after downloading you will be transferred to another, then restart your PC again and repeat the procedure. By the way, in order not to look in a hurry or restart your desktop computer several times, you can simply disconnect it from the Internet. In this case, the browser will open again, but the redirect will not occur, and you will see the site that we need. Next, you have to work with the registry itself:

Press the keyboard shortcut Win + R;

In the window that appears, specify the regedit command and click the "OK" button;

Launching the Registry Editor

In the open "Registry Editor" select the HKEY_USERS folder;

Highlight the HKEY_USERS folder

Press the key combination Ctrl + F on the keyboard and enter the name of the site that was mentioned above (in the example basady);

We start the search for the desired phrase

Found files must be deleted through the context menu.

Delete found fragments

Delete all basady in the registry

In order not to be mistaken with what you are deleting, take a look at the “Value” item in the table below. Pay attention to the address and if the desired name of the site is indicated there, then feel free to click on the "Delete" button. Repeat the search until the search phrase no longer appears in the results.

For simplicity, you can use special software that analyzes and cleans the system registry. For example, use CCleaner Or AdwCleaner. They are quite easy to use, so no one should have any problems working with them. Consider the example of CCleaner:

Run the program;

In the menu on the left, select "Registry";

Cleaning the Registry with CCleaner

Run a scan using the "Search for problems" button;

We look at the search results and click "Fix"

At the end of the procedure, click on the "Fix marked" button.

We confirm the correction of found problems in the registry

If nothing has changed after the reboot, then you should check your computer with an antivirus.

Antivirus check

Like any other malware, it also leaves traces, although it successfully masks them. In some cases, files or folders can be found that again and again restore deleted data in the registry. It is best to use your antivirus and check your computer. Consider the example of Kaspersky Virus Removal Tool:

Open the antivirus window and click on the "Start scan" button;

Click on the "Start Check" button

We are waiting for the end of the procedure and look at the list of errors found;

Checking your computer with antivirus

We look at the scan results and delete unnecessary fragments

Select the "Delete" action for those files that are advertising and click the "Continue" button.

Complete the process and restart your PC.

After a reboot, the device may start rescanning. As a rule, it lasts a little longer, but also shows better results. If other advertising files are found, then repeat the removal procedure.

Removing a page from the browser

Malware often saves information about itself in the browser settings. It is for this reason that at startup an unnecessary page of some search engine or third-party site may appear. All this information can be deleted, returned to mind with your own hands, and you can not be afraid that you somehow manage to harm your computer.

First of all, you will need to work with the browser shortcut, since sites often register themselves in the properties. For this you should:

Right-click on the browser shortcut;

Open "Properties";

Opening the browser properties

Go to the "Shortcut" tab.

In properties go to tab "Shortcut"

Pay attention to the "Object" field, if there is some other name after Application \ chrome.exe Additional Information then feel free to delete it. See also the section " shared folder”, where after the word Application there should also be no values. For best results, do the following:

Launch the "Control Panel";

Opening the "Control Panel"

Select the "Internet Options" option;

Launch "Internet Options"

A network settings window will appear, where we are interested in the "General" tab;

Changing the home page

In the "Home Page" section, the address of the site that interests us can be indicated;

Delete it and save all changes.

After that, most likely, when you start the PC, the browser will no longer be activated, but some data of the embedded code may still remain. You can get rid of them only if you manually change the settings within the web browsers themselves.

If you are using Yandex.Browser:

Click on the image of three lines at the top of the window and open "Settings";

Open "Settings" in Yandex.Browser

Find the "Search" section and select the one you need search engine.

Changing the search engine

If you are using Google Chrome:

Find the image of three dots at the top of the window and select "Settings" from the menu;

Settings in Chrome

In the "Open at startup" section, click on the "Add" button and delete the addresses you do not know, and then change the parameter itself to the "New Tab" position;

Change launch options to New Tab

In the "Search" section, specify the search engine you need. It is advisable to remove all unknown site addresses, which can be done using the "Configure search engines" button.

Change the search engine in the browser