Skip to content
  • Active
  • Severity: Medium
  • Browser Hijackers
  • Windows, Mac
  • Verified · Mar 2021

How to remove Direct Search

A step-by-step removal guide for affected devices. Follow the verified procedure below — most readers complete it in under 10 minutes.

Jake Doevan · Computer technology expert

Direct Search – a browser hijacker that uses malicious techniques to stay on your device longer

Direct Search

Direct Search is a browser virus that is very difficult to get rid of. First of all, this potentially unwanted program typically spreads as an extension for Google Chrome and is not installed on purpose. This is because the app developers use software bundling for its distribution, a technique that is notorious for not asking users for direct permission to be installed in the first place.

Once installed, the Direct Search browser hijacker changes the homepage and the new tab address to search-direct.net, which would apply a fake search engine at the middle of the page. By using it, users will be forced to view results from Yahoo or another provider, which would also be filled with ads and sponsored links.

Possibly the most disturbing feature of the Direct Search virus is that it sets up the “Managed by your organization” status on your Chrome, preventing the extension from being deleted in a standard manner. In this article, we will provide instructions on how to get rid of this persistent browser problem once and for all.

Name Direct Search
Type Browser hijacker, potentially unwanted program
IP address 62.210.31.159
Distribution Software bundles, deceptive advertisements, fake update prompts
Symptoms Unknown extension or application is installed on the system; homepage and new tab address are set to search-direct.net; a customized search engine is appended to the homepage; search results are filled with sponsored links and ads
Risks Users who have the app installed are more likely to come across other PUPs and install them. Also, potential privacy risks and monetary losses can be associated with the infection
Elimination While it is usually easy to get rid of a browser extension, in this case it might be difficult to do manually. Thus, either scan your device with SpyHunterCombo Cleaner anti-malware or check for the detailed manual removal instructions below
Optional steps Computer infections can cause significant damage to system files or disrupt normal settings. To revert these changes and remediate the OS, perform a full system scan with FortectIntego repair software

In general, browser hijackers are considered to be minor browser infections. They typically can affect a wide array of browsers, including Google Chrome, Mozilla Firefox, Safari, MS Edge, etc., and are most commonly installed without users knowing the full extent of their functionality. To put it simply, users believe that such a program might be useful, but in reality, it brings nothing but ads and overall negatively impacts the web browsing experience.

Direct Search ticks all the boxes of a typical browser hijacker, which includes:

  • It is a browser extension that can be easily installed;
  • Uses software bundling and unfair ads to spread (in other words, is commonly installed behind users' backs);
  • Changes homepage and new tab address to something else;
  • Appends a fake search engine which redirects all searches to Yahoo;
  • Shows many sponsored links at the top of search results, etc.

Besides all these seemingly visible changes to the web browser, there are plenty of those that are not that apparent. First of all, Direct Search, just like many other programs of such kind, would track users' online activities to later cater to more relevant ads.[1] For that, the developers keep an eye on peoples' IP addresses, visited websites, links clicked, technical device information, and much more.

However, possibly the worst feature of this browser hijacker is the already mentioned “Managed by your organization” feature that is applied to the web browser. With it, the app takes control over browser preferences and completely prevents Direct Search removal.

Direct Search virus

Under regular circumstances, it is not difficult to uninstall a browser extension, although the status change completely alters that. When users try to remove Direct Search in a regular way, they are simply not able to. This mechanic has been used for a while now and very closely reminds of that used by Trojans[2] or other malware.

Direct Search escalates its privileges to achieve this, getting users stuck with it for a while. Therefore, in order to get rid of this persistent browser threat, you should perform a full system scan with a powerful anti-malware or refer to the instructions on how to do it manually below. FortectIntego can help you to clean your web browsers automatically.

Direct Search is just one of many potentially unwanted programs that use this persistence mechanism. In fact, the same developers keep distributing apps that are identical to one another (e.g., Fire Search, Mint Search, Flare Search, or Comet Search).

Handle software bundles with care to avoid automatic installation of PUPs

Most programs can be installed and uninstalled easily. However, some of them do a very good job of staying unnoticed by users after being installed unintentionally in the first place. Such apps can operate in the background for months or even years, delivering intrusive advertisements and cause redirects without users realizing that a PUP has taken over their web browsers. Thus, it is best to practice precautionary measures to prevent the infiltration in the first place.

One of the main reasons why users end up with browser hijackers and other nasties is because they tend to download apps from third-party sources and rush through the installation steps, which is the biggest mistake in this situation. Commonly, such websites monetize on bundled software, which often relies on deception to trick users into installing apps they never wanted in the first place.

Therefore, in order to avoid such a scenario, here are some tips from the novirus.uk[3] experts:

  • Install a robust anti-malware software with PUP detection feature and keep it updated;
  • Always opt for official download sources if possible;
  • When downloading apps, never rush the installation process;
  • Always pick the Advanced or Custom installation settings instead of Recommended/Quick ones;
  • Remove all the ticks from checkboxes that would allow the installation of optional apps;
  • Watch out for misleading offers, misplaced buttons, and other tricks within the installation wizard.

Direct Search virus uninstallation steps

As already mentioned, Direct Search removal might not be as straightforward as it usually is with other browser extensions. To bypass this annoying feature, you might have to rely on powerful security software – simply perform a full system scan, and all its components should be eliminated automatically.

Direct Search browser hijacker

Managed by your organization” is annoying setting that is difficult to deal with. However, if you want to remove Direct Search manually, you should first try to reset the web browser and then delete the contents of the following folder:

C:\Users\[username]\\AppData\Local\Google

If you don't know how to reset your web browser, you can follow the instructions we provide below. It is also a good idea to visit the section of the installed programs on your Windows or Mac machine and uninstall everything suspicious, as these apps could also be causing redirects and show intrusive ads.

Uninstall from Windows

Uninstall from Windows 10/8:

  1. Type Control Panel into the Windows search box and open the result.
  2. Under Programs, select Uninstall a program.Uninstall from Windows 10/8

Uninstall from Windows 7/XP:

  1. Click on Windows Start > Control Panel (Windows XP users should click on Add/Remove Programs).
  2. In Control Panel, select Programs > Uninstall a program.Uninstall from Windows 7/XP

Remove the unwanted program:

  1. In the Programs and Features window, look for any recently installed suspicious entries, select them, and click Uninstall.
  2. If User Account Control appears, click Yes to confirm, then complete the removal.Uninstall the unwanted program from Windows

Delete from macOS

Remove the unwanted application:

  1. From the menu bar, select Go > Applications.
  2. In the Applications folder, look for any suspicious entries, then drag them to Trash (or right-click and pick Move to Trash).Uninstall from Mac

Delete leftover files and folders:

  1. Select Go > Go to Folder.
  2. Enter /Library/Application Support and remove any suspicious folders related to the unwanted program.
  3. Repeat the same check in the /Library/LaunchAgents and /Library/LaunchDaemons folders, deleting any suspicious entries.Delete leftover files from Mac
  4. Finally, empty the Trash to permanently remove the leftovers.

Remove from Microsoft Edge

Delete unwanted extensions from MS Edge:

  1. Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
  2. From the list, pick the extension and click on the Gear icon.
  3. Click Remove.Remove extensions from Edge

Clear cookies and other browser data:

  1. Click on the Menu (three horizontal dots at the top-right of the browser window) and select Settings > Privacy, search, and services..
  2. Under Clear browsing data, pick Choose what to clear.
  3. Select Cookies and other site data and Cached images and files. (apart from passwords, although you might want to include Media licenses as well, if applicable) and click on Clear.Clear Edge browsing data

Restore new tab and homepage settings:

  1. Click the menu icon and choose Settings.
  2. Then find On startup section.
  3. Click Remove next to any suspicious startup page.

Reset MS Edge if the above steps did not work:

  1. Press on Ctrl + Shift + Esc to open Task Manager.
  2. Click on More details arrow at the bottom of the window.
  3. Select Details tab.
  4. Now scroll down and locate every entry with Microsoft Edge name in it. Right-click on each of them and select End Task to stop MS Edge from running.Reset MS Edge

Instructions for Chromium-based Edge

Delete extensions from MS Edge (Chromium):

  1. Open Edge and click select Settings > Extensions.
  2. Delete unwanted extensions by clicking Remove.Remove extensions from Chromium Edge

Clear cache and site data:

  1. Click on Menu and go to Settings.
  2. Select Privacy, search and services.
  3. Under Clear browsing data, pick Choose what to clear.
  4. Under Time range, pick All time.
  5. Select Clear now.Clear browser data from Chroum Edge

Reset Chromium-based MS Edge:

  1. Click on Menu and select Settings.
  2. On the left side, pick Reset settings.
  3. Select Restore settings to their default values.
  4. Confirm with Reset.
  5. This will disable extensions and reset startup pages but will not delete bookmarks, saved passwords, or browsing history.Reset Chromium Edge

Remove from Mozilla Firefox (FF)

Remove dangerous extensions:

  1. Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
  2. Select Add-ons.
  3. In here, select the unwanted extension and click Remove.Remove extensions from Firefox

Reset the homepage:

  1. Click three horizontal lines at the top right corner to open the menu.
  2. Choose Settings.
  3. Under Home, set your preferred homepage and new tab settings.

Clear cookies and site data:

  1. Click Menu and pick Settings.
  2. Go to Privacy & Security section.
  3. Scroll down to locate Cookies and Site Data.
  4. Click on Clear Data...
  5. Select Cookies and Site Data and Temporary cached files and pages, then click Clear.Clear cookies and site data from Firefox

Reset Mozilla Firefox

If clearing the browser as explained above did not help, reset Mozilla Firefox:

  1. Open Mozilla Firefox browser and click the Menu.
  2. Go to Help and then choose Troubleshooting Information.Reset Firefox 1
  3. Under Give Firefox a tune up section, click on Refresh Firefox...
  4. Once the pop-up shows up, confirm the action by pressing on Refresh Firefox.Reset Firefox 2

Remove from Google Chrome

Delete malicious extensions from Google Chrome:

  1. Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
  2. In the newly opened window, you will see all the installed extensions. Uninstall all suspicious extensions related to the unwanted program by clicking Remove.Remove extensions from Chrome

Clear cache and web data from Chrome:

  1. Click on Menu and pick Settings.
  2. Under Privacy and security, select Clear browsing data.
  3. Select Browsing history, Cookies and other site data, as well as Cached images and files.
  4. Click Clear data.Clear cache and web data from Chrome

Change your homepage:

  1. Click menu and choose Settings.
  2. Look for a suspicious site in the On startup section.
  3. Click on Open a specific or set of pages and click on three dots to find the Remove option.

Reset Google Chrome:

If the previous methods did not help you, reset Google Chrome to eliminate all the unwanted components:

  1. Click on Menu and select Settings.
  2. In the Settings, scroll down and click Advanced.
  3. Scroll down and locate Reset and clean up section.
  4. Now click Restore settings to their original defaults.
  5. Confirm with Reset settings.Reset Chrome 2

Delete from Safari

Remove dangerous extensions:

  1. Open Safari, click Safari in the menu at the top-left of the screen, and select Preferences.
  2. Go to the Extensions tab, look for any suspicious entries, and click Uninstall to remove them.Remove extensions from Safari

Clear history and website data:

  1. Click Safari in the menu and pick Clear History.
  2. Set Clear to all history and confirm with Clear History.Clear history from Safari

Reset Safari:

  1. Click Safari in the menu and select Preferences > Advanced.
  2. Enable Show Develop menu in menu bar.
  3. From the menu bar, click Develop and select Empty Caches.Reset Safari

Did this guide help?

Be the first to comment

Spyware News
Privacy preferences

We use cookies to improve your experience and analyze traffic. Some cookies enable embedded content like videos and social posts. Choose what you allow — you can change this anytime.