Severity scale:  
  (9/100)

Remove CapitaSearch (Removal Instructions) - Chrome, Firefox, IE, Edge

removal by Linas Kiguolis - - | Type: Browser Hijackers

CapitaSearch is a sponsored search engine that displays altered search results and poses the risk of redirects to dangerous domains

CapitaSearch malware

CapitaSearch is an intrusive browser hijacker that triggers redirects to sponsored content on the Yahoo engine after making multiple setting changes on the web browser. As a potentially unwanted program (PUP)[1], it spreads in the disguise of other free programs and manages to infiltrate the default web browser without being noticed. It exhibits compatibility with Google Chrome, Mozilla Firefox, Microsoft Edge, Internet Explorer, Safari, and other web browsers. In other words, it may set search.capita.space search engine, CapitaSearch start window, drop various toolbars, change the new tab window, and initiate other unapproved modifications.

Name CapitaSearch
Type Browser hijacker, Potentially Unwanted Program (PUP)
Related search.capita.space search engine, 'Managed by your organization' Chrome settings enabled
Compatibility Google Chrome, Mozilla Firefox, Microsoft Edge, Internet Explorer, Safari, etc.
Distribution This misleading search engine takes advantage of the infamous software bundling distribution strategies. It spreads hidden under freeware Quick installation set up as a pre-selected item and expects the user to fail to recognize it
Symptoms The main symptom is related to changes in the web browser: modified start page, search engine, new tab window, etc. Besides, it may trigger sponsored links within search results, commercial pop-up ads, browser's redirects, and similar side effects
Task The CapitaSearch virus seeks to promote affiliate websites, spread malware, distort visitors' traffic, collect browsing-related information about people, and similar. 
Danger The browser-based plug-ins is not dangerous. Its functionality and goals are marketing oriented, though there is a potential risk of downloading malware
Removal Manual removal of a browser hijacker is possible, though not recommended. Due to the distribution of bundling, there's a high probability that there are many PUPs on the system. Therefore, a scan with a reputable anti-virus is recommended
Malware damage PUPs initiate various changes within web browsers. However, they are also capable of distorting the system's settings and files, which is why experts recommend optimizing the system's performance after malware removal. For that, we recommend using Reimage Reimage Cleaner Intego

The CapitaSearch hijacker exhibits the typical behavior of a browser hijacker. It replaces the start page, search site, new tab window, and generates other web browser modifications without explicitly asking for a user’s consent. Besides, it stealthily uses tracking cookies to spy on a user’s web browsing activities.

If you have a suspicion that CapitaSearch virus infected your PC, the most typical symptoms you should be encountering are the following:

  • The default search engine replaced by search.capita.space
  • New tab URL and the start page replaced by this domain or other unknown website
  • New web browser plug-ins added
  • Suspicious links positioned within search results
  • Sponsored Yahoo search results displayed
  • Web browser’s redirects keep disrupting activities
  • Misleading ads positioned on any website that you visit, etc.

Although posing a minimal risk, CapitaSearch is closely related to adware and other malware, meaning that its purpose is to gain profit from advertisements and web traffic. This browser hijacker has an in-built database of domains to promote; therefore, your web browser will continuously redirect to websites that you are not willing to visit. 

Moreover, it may generate various ads, pop-ups, banners, and hyperlinks on random websites, which not only cover the content that you want to see but also redirect to dubious third-party websites. Keep in mind that the CapitaSearch virus may be involved in PUP distribution and regularly reroute your web browser to malware download websites. 

Data harvesting is yet another reason for CapitaSearch removal. The plug-in that it drops is accompanied by tracking cookies[2], which settle within each browser installed on the system and start collecting the following entries:

  • Search queries
  • Websites visited
  • IP address
  • Technical details of the web browser
  • E-mail address
  • Geolocation

Although data collected is non-personally identifiable, sharing it with third parties is not advisable as they may use it for improving advertising strategies and providing users with more appealing content. Unfortunately, those ads and promoted websites are of no use to the user. 

In addition to the aforementioned browser changes, CapitaSearch enables the 'Managed by your organization' Chrome feature. Due to this, the web browser generates a pop-up window stating that Google Chrome is managed by the organization and prevents the user from modifying settings manually. This setting is established to enable certain Chrome's parameters on workplace PC. However, third-party apps, including browser hijackers, can take control over various policies and start managing Chrome in the disguise of an organization. 

It is possible to disable 'Managed by your organization' feature by accessing Chrome's settings, clicking on the dots at the bottom of the drop-down menu, and selecting disable. However, the parameters will be restored once you restart the web browser. Therefore, it's important to remove CapitaSearch virus in the first place. 

CapitaSearch virus
CapitaSearch is a browser hijacker that can compromise web browser's settings and display sponsored search results

Proper CapitaSearch removal requires a full system scan with a reliable anti-malware program. Since this ad-supported application spreads by bundling, usually it gets installed along with adware or PUPs. 

According to NoVirus.uk[3] experts, malware can significantly decrease the web browser's performance, affect download speed, corrupt boot-up processes, injected addition Windows registry entries. CapitaSearch removal can fix almost all web browsing related issues. However, malware elimination is not sufficient to restore the system to the pre-malware state. Thus, it is also advisable to perform PC's recovery with a tool like Reimage Reimage Cleaner Intego

The more freeware downloads – the more PUPs on the system

We must admit that some freeware turns out to be handy tools for improving web browsing performance and everyday activities. However, downloading them recklessly just for trying is dangerous because those free programs are frequently used for PUP dissemination. 

Freeware developers earn a commission fee for every add-on, plug-in, toolbar, or whatnot that is installed to users' PCs as an additional component. Thus, it may be presumed that every third free app on third-party download websites contains additional pre-checked items. 

Luckily, unpacking the bundle is not difficult. All you have to do is to opt for Advanced or Custom installation option and monitor the process carefully. When a setup window stating that you agree with the installation of browser-based plug-ins emerge, untick the checkbox before clicking the Next button. That's it. The freeware will be installed PUP-free. 

In addition, you should be cautious when browsing the net, especially when some ads redirect you to unknown websites. Third-party domains may be involved in PUP distribution and contain click-to-download ads. 

CapitaSearch redirect
CapitaSearch enables 'Managed by your organization' feature on Chrome

CapitaSearch removal should be implemented once it hijacks Chrome

Seeing that the web browser's settings have been altered without your permission is an indication of a browser hijacker's attack. Do not underestimate the capabilities of a reliable-looking third-party search engine or new tab window. They may be set to promote dangerous content, display links to phishing websites, or initiate other campaigns to gain whatever profit they need. Having this in mind, CapitaSearch removal should not be postponed. 

The only reliable way to remove CapitaSearch malware from the system is to run a scan with an anti-malware tool. Upon that, delete suspicious plug-ins from a web browser or, at best, reset the browser's settings. If, however, you prefer manual removal, rely on a guide submitted by our security experts. 

You may remove virus damage with a help of Reimage Reimage Cleaner Intego. SpyHunter 5Combo Cleaner and Malwarebytes are recommended to detect potentially unwanted programs and viruses with all their files and registry entries that are related to them.

Offer
do it now!
Download
Reimage Happiness
Guarantee
Download
Intego Happiness
Guarantee
Compatible with Microsoft Windows Supported versions Compatible with OS X Supported versions
What to do if failed?
If you failed to remove virus damage using Reimage Intego, submit a question to our support team and provide as much details as possible.
Reimage Intego has a free limited scanner. Reimage Intego offers more through scan when you purchase its full version. When free scanner detects issues, you can fix them using free manual repairs or you can decide to purchase the full version in order to fix them automatically.
Alternative Software
Different software has a different purpose. If you didn’t succeed in fixing corrupted files with Reimage, try running SpyHunter 5.
Alternative Software
Different software has a different purpose. If you didn’t succeed in fixing corrupted files with Intego, try running Combo Cleaner.

To remove CapitaSearch, follow these steps:

Get rid of CapitaSearch from Windows systems

Get rid of CapitaSearch hijacker on Windows without a delay. The following guide explains how to do that.

  1. Click Start Control Panel Programs and Features (if you are Windows XP user, click on Add/Remove Programs). Click 'Start -> Control Panel -> Programs and Features' (if you are 'Windows XP' user, click on 'Add/Remove Programs').
  2. If you are Windows 10 / Windows 8 user, then right-click in the lower left corner of the screen. Once Quick Access Menu shows up, select Control Panel and Uninstall a Program. If you are 'Windows 10 / Windows 8' user, then right-click in the lower left corner of the screen. Once 'Quick Access Menu' shows up, select 'Control Panel' and 'Uninstall a Program'.
  3. Uninstall CapitaSearch and related programs
    Here, look for CapitaSearch or any other recently installed suspicious programs.
  4. Uninstall them and click OK to save these changes. Right click on each of suspicious entries and select 'Uninstall'
  5. Remove CapitaSearch from Windows shortcuts
    Right click on the shortcut of Mozilla Firefox and select Properties. Right click on browsers' icon and select 'Properties'
  6. Go to Shortcut tab and look at the Target field. Delete malicious URL that is related to your virus. Select 'Shortcut' tab and delete 'http://isearch.babylon.com...' or other suspicious URL

Repeat steps that are given above with all browsers' shortcuts, including Internet Explorer and Google Chrome. Make sure you check all locations of these shortcuts, including Desktop, Start Menu and taskbar.

Uninstall CapitaSearch from Mac OS X system

Although Mac OS is less vulnerable to malware, these days there are many PUPs targeting Macs, and CapitaSearch virus may be one of them. If your device got hit, make sure to clean malware away.

  1. If you are using OS X, click Go button at the top left of the screen and select Applications. Cick 'Go' and select 'Applications'
  2. Wait until you see Applications folder and look for CapitaSearch or any other suspicious programs on it. Now right click on every of such entries and select Move to Trash. Click on every malicious entry and select 'Move to Trash'

Erase CapitaSearch from Internet Explorer (IE)

  1. Remove dangerous add-ons
    Open Internet Explorer, click on the Gear icon (IE menu) on the top right corner of the browser and choose Manage Add-ons. Click on menu icon and select 'Manage add-ons'
  2. You will see a Manage Add-ons window. Here, look for CapitaSearch and other suspicious plugins. Disable these entries by clicking Disable: Right click on each of malicious entries and select 'Disable'
  3. Change your homepage if it was altered by virus:
    Click on the gear icon (menu) on the top right corner of the browser and select Internet Options. Stay in General tab.
  4. Here, remove malicious URL and enter preferable domain name. Click Apply to save changes. Delete malicious URL, enter your desired domain name and click 'Apply' to save changes
  5. Reset Internet Explorer
    Click on the gear icon (menu) again and select Internet options. Go to Advanced tab.
  6. Here, select Reset.
  7. When in the new window, check Delete personal settings and select Reset again to complete CapitaSearch removal. Go to 'Advanced' tab and click on 'Reset' button. Now select 'Delete personal settings' and click on 'Reset' button again

Eliminate CapitaSearch from Microsoft Edge

Reset Microsoft Edge settings (Method 1):

  1. Launch Microsoft Edge app and click More (three dots at the top right corner of the screen).
  2. Click Settings to open more options.
  3. Once Settings window shows up, click Choose what to clear button under Clear browsing data option. Go to Settings and select 'Choose what to clear'
  4. Here, select all what you want to remove and click Clear. Select 'Clear' button
  5. Now you should right-click on the Start button (Windows logo). Here, select Task Manager. Open the start menu and select 'Task Manager'
  6. When in Processes tab, search for Microsoft Edge.
  7. Right-click on it and choose Go to details option. If can’t see Go to details option, click More details and repeat previous steps. Right-click 'Microsoft Edge' and select 'Go to details' Select 'More details' if 'Go to details' option fails to show up
  8. When Details tab shows up, find every entry with Microsoft Edge name in it. Right click on each of them and select End Task to end these entries. Find Microsoft Edge entries and select 'End Task'

Resetting Microsoft Edge browser (Method 2):

If Method 1 failed to help you, you need to use an advanced Edge reset method.

  1. Note: you need to backup your data before using this method.
  2. Find this folder on your computer: C:\Users\%username%\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe.
  3. Select every entry which is saved on it and right click with your mouse. Then Delete option. Go to Microsoft Edge folder on your computer, right-click every entry and click 'Delete'
  4. Click the Start button (Windows logo) and type in window power in Search my stuff line.
  5. Right-click the Windows PowerShell entry and choose Run as administrator. Find Windows PowerShell, right-click it and select 'Run as administrator'
  6. Once Administrator: Windows PowerShell window shows up, paste this command line after PS C:\WINDOWS\system32> and press Enter:
    Get-AppXPackage -AllUsers -Name Microsoft.MicrosoftEdge | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register $($_.InstallLocation)\AppXManifest.xml -Verbose}
    Copy and paste a required command and press 'Enter'

Once these steps are finished, CapitaSearch should be removed from your Microsoft Edge browser.

Remove CapitaSearch from Mozilla Firefox (FF)

  1. Remove dangerous extensions
    Open Mozilla Firefox, click on the menu icon (top right corner) and select Add-ons Extensions. Click on menu icon and select 'Add-ons'
  2. Here, select CapitaSearch and other questionable plugins. Click Remove to delete these entries. Select 'Extensions' and look for malicious entries. Click 'Remove' to get rid of each of them
  3. Change your homepage if it was altered by virus:
    Click on the menu (top right corner), choose Options General.
  4. Here, delete malicious URL and enter preferable website or click Restore to default.
  5. Click OK to save these changes. When in 'General' tab, delete malicious URL from 'Home Page' section or click on 'Restore to Default' button. Click 'OK' to save changes
  6. Reset Mozilla Firefox
    Click on the Firefox menu on the top left and click on the question mark. Here, choose Troubleshooting Information. Click on menu icon and then on '?'. Select 'Troubleshooting Information'
  7. Now you will see Reset Firefox to its default state message with Reset Firefox button. Click this button for several times and complete CapitaSearch removal. Click on 'Reset Firefox' button for a couple of times

Delete CapitaSearch from Google Chrome

This browser hijacker primarily targeted Google Chrome as it may not only replace search engines but can also enable 'Managed by your organization' feature, allowing it to take administrative privileges over Chrome's policies. If it compromised your browser, here's what you have to do:

  1. Delete malicious plugins
    Open Google Chrome, click on the menu icon (top right corner) and select Tools Extensions. Click on menu icon. Select 'Tools' and 'Extensions'
  2. Here, select CapitaSearch and other malicious plugins and select trash icon to delete these entries. Look for malicious entries and delete each of them by clicking on the Trash bin icon
  3. Change your homepage and default search engine if it was altered by your virus
    Click on menu icon and choose Settings.
  4. Here, look for the Open a specific page or set of pages under On startup option and click on Set pages. After clicking on menu and 'Settings', select 'Set pages'
  5. Now you should see another window. Here, delete malicious search sites and enter the one that you want to use as your homepage. Click 'X' to remove malicious URLs
  6. Click on menu icon again and choose Settings Manage Search engines under the Search section. When in 'Settings', select 'Manage search engines...'
  7. When in Search Engines..., remove malicious search sites. You should leave only Google or your preferred domain name. Click 'X' to remove malicious URLs
  8. Reset Google Chrome
    Click on menu icon on the top right of your Google Chrome and select Settings.
  9. Scroll down to the end of the page and click on Reset browser settings. When in 'Settings', scroll down to 'Reset browser settings' button and click on it
  10. Click Reset to confirm this action and complete CapitaSearch removal. Click on 'Reset' button to complete your removal

Get rid of CapitaSearch from Safari

  1. Remove dangerous extensions
    Open Safari web browser and click on Safari in menu at the top left of the screen. Once you do this, select Preferences. Click on 'Safari' and select 'Preferences'
  2. Here, select Extensions and look for CapitaSearch or other suspicious entries. Click on the Uninstall button to get rid each of them. Go to 'Extensions' and uninstall malicious add-ons
  3. Change your homepage if it was altered by virus:
    Open your Safari web browser and click on Safari in menu section. Here, select Preferences as it was displayed previously and select General.
  4. Here, look at the Homepage field. If it was altered by CapitaSearch, remove unwanted link and enter the one that you want to use for your searches. Remember to include the "http://" before typing in the address of the page. When in 'General', delete malicious URL and enter your desired domain name
  5. Reset Safari
    Open Safari browser and click on Safari in menu section at the top left of the screen. Here, select Reset Safari.... Click on 'Safari' and select 'Reset Safari...'
  6. Now you will see a detailed dialog window filled with reset options. All of those options are usually checked, but you can specify which of them you want to reset. Click the Reset button to complete CapitaSearch removal process. Select all options and click on 'Reset' button

About the author

Linas Kiguolis
Linas Kiguolis - Expert in social media

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Linas Kiguolis
About the company Esolutions

References

Removal guides in other languages


Your opinion regarding CapitaSearch