Skip to content
Spyware news
  • Active
  • Severity: High
  • Stealing programs
  • Windows, Mac
  • Verified · Feb 2018

How to remove Baidu.com

A step-by-step removal guide for affected devices. Follow the verified procedure below — most readers complete it in under 10 minutes.

Gabriel E. Hall · Passionate web researcher

Understand the risks that emerge from using Baidu.com

Hao123 image

Baidu.com is a legitimate Chinese search engine that has evolved into one of the biggest search providers. Since malevolent people seek quick and easy profits, they developed highly unreliable browser extensions, plug-ins and other programs to disguise under the name of a verified search engine. Analysts from Wubingdu.cn[1] warn that not all services of this website are safe to use.

There have been various discussions on the web about Hao123 by Baidu, which is a browser plug-in provided by this search engine. IT experts even classify some its versions as potentially unwanted or ad-supported programs alongside the browser hijacker category. It means that after being installed on the system, the virus takes control over each of web browsers and alters the default search provider, the start page, and a new tab window by force. This way, third parties that sponsor this malicious plug-in version get the chance to present their unreliable links to inexperienced computer users.

That's why you may start noticing redirects to the suspicious websites that are certainly irrelevant to the search terms that you have entered. Due to Hao123 redirect tendency, you might land on an infected page as well. According to our research, it currently transfers people to Hao123.com, cn.hao123.com and similar sites that are used for affiliate marketing purposes.

The reason why Hao123 by Baidu redirects to sponsored domains and bombards you with commercial content is that it aims to generate pay-per-click revenue for its developers. The potentially unwanted program (PUP) identifies particular users' preferences and creates more relevant and personalized advertisements, apps, and websites. As a result, people get confused and unable to identify the origins of the intrusive ads. Developers take advantage of it since people willingly click on the questionable advertisements and increase their profits.

The screenshot of Hao123 hijacker and Skype virus

Unfortunately, the US Senate approved the legislation for online advertisers to trade and sell your browsing data among themselves and partners[2]. Needless to say, that the line between users' privacy and its violation becomes more than transparent. Likewise, similar laws only encourage crooks and malevolent people of various ilk to engage in the activities of creating browser hijackers.

Though the privacy policy of baidu.com commits to protecting your privacy, there is no applicable Privacy Policy provided on Hao 123 website. In relation, the ad-supported program may collect personally identifiable information as well. The suspicious and disturbing content provided on the main page only enforces such assumptions. That's why you are strongly advised to remove Hao123 by Baidu with the help of FortectIntego. Of course, you can also use an alternative anti-spyware program. 

IT technicians spotted Skype virus spreading links to the browser hijacker

Recently, victims of Skype virus reported about the message that contains a suspicious link to Baidu website[3]. Crooks managed to hack the system and send the malicious text to the infected computers. What is more, the link contained the skype name of the recipient contact. Such feature might have tempted more credible users to click on the link.

According to the behavior of this malware, it operates as a computer worm — when a gullible person clicks on the link, all of his or her contacts receive the fraudulent link as well.

The specifications of this malware also resemble Facebook video virus which sends a video file with the personal profile picture to lure users into clicking on the malicious link without having the slightest suspicion of the virtual infection. These deceptive distribution methods have helped to successfully infiltrate various types of viruses worldwide. 

Therefore, if you notice the presence of this Skype virus redirecting to Baidu link, do not click on it, ignore it. It might be beneficial to change your password and check your system whether it does not contain any questionable applications as well. 

Hao123 hijacker's distribution techniques

You can protect your system from potentially unwanted programs (PUPs) and other malicious applications by understanding the methods that hackers employ to distribute them. 

Since users pay little attention to the installation wizards, they often end up installing questionable optional software along with the primary one. This is an extremely popular distribution technique called bundling when the contrivers spread PUPs in one package with freeware.

To avoid falling into the trap of the browser hijacker, make sure you choose Custom/Advanced settings next time you download a new program. They disclose optional attachments and applications. Furthermore, watch for irrelevant add-ons and remove the checkmarks from them.

Note that well-known apps such as Skype and Java may also contain shady attachments, so should pay extreme attention while installing popular programs as well. It will reduce the risk of experiencing the annoying after-effects of Hao123 virus.

Removing Hao123 by Baidu from my computer

We suggest you to remove Hao123 automatically with the help of a professional security software. It is the easiest way to uninstall all additional PUPs that might be secretly infiltrated into your system and disrupting your browsing experience.

You should start by downloading an anti-malware program of your choice and running a full system scan. After it is done, you will be free from the browser hijacker. Additionally, we offer free Hao123 removal instructions that will help you to eliminate the suspicious plug-in manually. 

Experts answer to the FAQ related to Baidu.com

The question: Can i fully rely on Baidu.com? Is there any possibility that it is a browser hijacker?

IT technicians answer: As mentioned before, Baidu.com is a legitimate search engine widely used among Chinese computer users. Even though it is safe, crooks managed to take advantage of it and created not so reliable plug-ins such as Hao123. Thus, you should stay away from suspicious browser extensions or add-ons and remove them as soon as you notice their presence.

Uninstall from Windows

Uninstall from Windows 10/8:

  1. Type Control Panel into the Windows search box and open the result.
  2. Under Programs, select Uninstall a program.Uninstall from Windows 10/8

Uninstall from Windows 7/XP:

  1. Click on Windows Start > Control Panel (Windows XP users should click on Add/Remove Programs).
  2. In Control Panel, select Programs > Uninstall a program.Uninstall from Windows 7/XP

Remove the unwanted program:

  1. In the Programs and Features window, look for any recently installed suspicious entries, select them, and click Uninstall.
  2. If User Account Control appears, click Yes to confirm, then complete the removal.Uninstall the unwanted program from Windows

Delete from macOS

Remove the unwanted application:

  1. From the menu bar, select Go > Applications.
  2. In the Applications folder, look for any suspicious entries, then drag them to Trash (or right-click and pick Move to Trash).Uninstall from Mac

Delete leftover files and folders:

  1. Select Go > Go to Folder.
  2. Enter /Library/Application Support and remove any suspicious folders related to the unwanted program.
  3. Repeat the same check in the /Library/LaunchAgents and /Library/LaunchDaemons folders, deleting any suspicious entries.Delete leftover files from Mac
  4. Finally, empty the Trash to permanently remove the leftovers.

Reset Internet Explorer

Remove dangerous add-ons:

  1. Open Internet Explorer, click on the Gear icon (IE menu) on the top-right corner of the browser
  2. Pick Manage Add-ons.
  3. You will see a Manage Add-ons window. Here, look for suspicious plugins. Click on these entries and select Disable.Remove add-ons from Internet Explorer

Change your homepage if it was altered:

  1. Open IE and click on the Gear icon.
  2. Select Internet Options.
  3. In the General tab, delete the Home page address and replace it by your preferred one (for example, Google.com).
  4. Click Apply and then select OK.Reset IE homepage

Delete temporary files:

  1. Press on the Gear icon and select Internet Options.
  2. Under Browsing history, click Delete...
  3. Select relevant fields and press Delete.Clear temporary files from Internet Explorer

Reset Internet Explorer:

  1. Click on Gear icon > Internet options and select Advanced tab.
  2. Select Reset.
  3. In the new window, check Delete personal settings and select Reset.Reset Internet Explorer

Remove from Microsoft Edge

Delete unwanted extensions from MS Edge:

  1. Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
  2. From the list, pick the extension and click on the Gear icon.
  3. Click Remove.Remove extensions from Edge

Clear cookies and other browser data:

  1. Click on the Menu (three horizontal dots at the top-right of the browser window) and select Settings > Privacy, search, and services..
  2. Under Clear browsing data, pick Choose what to clear.
  3. Select Cookies and other site data and Cached images and files. (apart from passwords, although you might want to include Media licenses as well, if applicable) and click on Clear.Clear Edge browsing data

Restore new tab and homepage settings:

  1. Click the menu icon and choose Settings.
  2. Then find On startup section.
  3. Click Remove next to any suspicious startup page.

Reset MS Edge if the above steps did not work:

  1. Press on Ctrl + Shift + Esc to open Task Manager.
  2. Click on More details arrow at the bottom of the window.
  3. Select Details tab.
  4. Now scroll down and locate every entry with Microsoft Edge name in it. Right-click on each of them and select End Task to stop MS Edge from running.Reset MS Edge

Instructions for Chromium-based Edge

Delete extensions from MS Edge (Chromium):

  1. Open Edge and click select Settings > Extensions.
  2. Delete unwanted extensions by clicking Remove.Remove extensions from Chromium Edge

Clear cache and site data:

  1. Click on Menu and go to Settings.
  2. Select Privacy, search and services.
  3. Under Clear browsing data, pick Choose what to clear.
  4. Under Time range, pick All time.
  5. Select Clear now.Clear browser data from Chroum Edge

Reset Chromium-based MS Edge:

  1. Click on Menu and select Settings.
  2. On the left side, pick Reset settings.
  3. Select Restore settings to their default values.
  4. Confirm with Reset.
  5. This will disable extensions and reset startup pages but will not delete bookmarks, saved passwords, or browsing history.Reset Chromium Edge

Remove from Mozilla Firefox (FF)

Remove dangerous extensions:

  1. Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
  2. Select Add-ons.
  3. In here, select the unwanted extension and click Remove.Remove extensions from Firefox

Reset the homepage:

  1. Click three horizontal lines at the top right corner to open the menu.
  2. Choose Settings.
  3. Under Home, set your preferred homepage and new tab settings.

Clear cookies and site data:

  1. Click Menu and pick Settings.
  2. Go to Privacy & Security section.
  3. Scroll down to locate Cookies and Site Data.
  4. Click on Clear Data...
  5. Select Cookies and Site Data and Temporary cached files and pages, then click Clear.Clear cookies and site data from Firefox

Reset Mozilla Firefox

If clearing the browser as explained above did not help, reset Mozilla Firefox:

  1. Open Mozilla Firefox browser and click the Menu.
  2. Go to Help and then choose Troubleshooting Information.Reset Firefox 1
  3. Under Give Firefox a tune up section, click on Refresh Firefox...
  4. Once the pop-up shows up, confirm the action by pressing on Refresh Firefox.Reset Firefox 2

Remove from Google Chrome

Delete malicious extensions from Google Chrome:

  1. Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
  2. In the newly opened window, you will see all the installed extensions. Uninstall all suspicious extensions related to the unwanted program by clicking Remove.Remove extensions from Chrome

Clear cache and web data from Chrome:

  1. Click on Menu and pick Settings.
  2. Under Privacy and security, select Clear browsing data.
  3. Select Browsing history, Cookies and other site data, as well as Cached images and files.
  4. Click Clear data.Clear cache and web data from Chrome

Change your homepage:

  1. Click menu and choose Settings.
  2. Look for a suspicious site in the On startup section.
  3. Click on Open a specific or set of pages and click on three dots to find the Remove option.

Reset Google Chrome:

If the previous methods did not help you, reset Google Chrome to eliminate all the unwanted components:

  1. Click on Menu and select Settings.
  2. In the Settings, scroll down and click Advanced.
  3. Scroll down and locate Reset and clean up section.
  4. Now click Restore settings to their original defaults.
  5. Confirm with Reset settings.Reset Chrome 2

Delete from Safari

Remove dangerous extensions:

  1. Open Safari, click Safari in the menu at the top-left of the screen, and select Preferences.
  2. Go to the Extensions tab, look for any suspicious entries, and click Uninstall to remove them.Remove extensions from Safari

Clear history and website data:

  1. Click Safari in the menu and pick Clear History.
  2. Set Clear to all history and confirm with Clear History.Clear history from Safari

Reset Safari:

  1. Click Safari in the menu and select Preferences > Advanced.
  2. Enable Show Develop menu in menu bar.
  3. From the menu bar, click Develop and select Empty Caches.Reset Safari

3 comments

Log in to post your comment
Log in to comment
Editor's pick · tested 2026

Fortect Intego

9.4 / 10 9.6 / 10 Best overall pick
  • Real-time ransomware shield
  • Free 14-day trial, no card
  • Cleans the threats listed above

Ad — we may earn a commission if you buy via this link.

Get protected →Get protected → Read our full review Read our full review

Read in your language

Still worried? Run a free check.

Scan a URL or domain in seconds — no install, no signup. Powered by 60+ engines.

Trusted by 2.4M+ readers this year.

Spyware news
Powered by  GDPR Cookie Compliance
Privacy preferences

We use cookies to improve your experience and analyze traffic. Some cookies enable embedded content like videos and social posts. Choose what you allow — you can change this anytime.