Google virus: what it is and how to remove it

Google virus is a term for various cyber infections using Google's name for legitimacy, ranging from adware to ransomware. The 2019 guide identified multiple propagation methods including email attachments, bundled software, and fake updates.

Facts checked October 5, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.

Automatic

Get a free scan and check if your PC is infected.

Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.

If the "We are not affiliated with or related to Google Lead Services™ in any way." warning keeps returning, an automatic scan can check browsers, extensions and installed programs in one pass.

Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free.

Do it yourself · free Remove Google virus yourself 3 steps, about 9 minutes, no software needed.

Google ChromeMicrosoft EdgeMozilla FirefoxSafari (Mac)

Google virus: potentially unwanted program malware
Google virus as our 2019 report showed it.

Google virus: summary

NameGoogle virus
TypeTrojan horse/backdoor/malware/potentially unwanted program/survey scam/tech support scam
Infection meansSoftware bundling, third-party sites, spam emails, fake updates, misleading pop-ups, etc.
SymptomsSymptoms of Google virus may vary: PUP infections usually concentrate on advertising by redirecting to suspicious sites and displaying ads on all visited sites; Ransomware viruses lock personal files and prevent their access; Backdoors and trojans usually show no symptoms, although users might experience computer slowdowns, software/system crashes, unknown processes running in the background, etc.
Main dangersMalware infections, installation of potentially unwanted programs, sensitive information disclosure to cybercriminals
ExamplesChrome redirect virus The HoeflerText font wasn't found Chrome Update Center Google Chrome Critical Error Google Chrome Support Centre
Removal

Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged.

Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free.
Show 8 more facts
TerminationYou can delete some of the infections manually, although most serious threats should be terminated with anti-malware software
Detection namesNo Microsoft detection name is known
DistributionNot recorded in the old report
DamageNot recorded in the old report
Evidence10 write-ups by security sites; details still limited
Domainsgoogleleadservice[.]com
First seen17 June 2019
Facts checked5 October 2026

What the Google virus pop-up looks like

a fake virus warning in a browser tab

We are not affiliated with or related to Google Lead Services™ in any way. The term "Google" is used as a synonym for "Search"

Is the Google virus warning real?

What readers reported about Google virus

How to get rid of Funmoods???. Hello guys! I have been using my PC for ages and one day this thing managed to take it over. I can't use Google or Bing anymore! How can I uninstall Funmoods from my computer, help!

A reader, 2013

How to get rid of incredibar?. I ve got a problem, everytime i start firefox it redirects me to other search engine 'MyStart' by IncrediBar. mystart.incredibar.com I'm trying to fing the answers in google, on incredibar virus removal, but it seems there is no information.. how do I get rid of it?

A reader, 2012

How to get rid of incredibar?. My home PC is infected with search.incredibar.com, which automatically redirects my internet browser to the search.incredibar.com browser. This one looks like Google. How can I get rid of this annoying page?Hope that you can assist. Thanks!

A reader, 2012

From the comments under our earlier guide; names and contact details removed.

  • Address: googleleadservice[.]com

From our report of Jun 2019 · not reviewed since

More from our earlier report on Google virus

  • To fix virus damage, we highly recommend scanning the device with

What the Google virus scammers want

From our report of Jun 2019 · not reviewed since

Google virus - a term used to describe a variety of cyber infections and scams related to the name of the tech giant

Google virus is a set of computer infections and scams that use Google's name in order to steal personal user data, trick into installing malicious software, or spend money on useless programs.

Of course, the malicious actors have nothing to do with Google, which probably the best-known company in the world, employing almost 100k employees. Nevertheless, the massive corporation sometimes slips too by failing to block phishing links or letting in malicious apps into Chrome store or Google Play.

Google virus is not tight to one browser or a type of the operating system and can affect Windows, Mac, iOS, and Android users. The broad term also includes a variety of computer infections and, while some, like browser hijackers and adware, are less harmful, threats like trojans, backdoors, ransomware or rootkits can result in serious consequences, such money loss, personal file destruction, or even identity theft.

Besides, many crooks rely on Google's name to make their Google virus scams believable, claiming that the system is infected with viruses, or that users' personal information is at risk. Additionally, survey scams might promise expensive gifts, but in reality, seek users' payment details or make them subscribe for useless services.

All in all, Google virus should be underestimated, and, if you are affected, you should take adequate measures to protect your computer from damage, as well as yourself from hackers who might abuse your sensitive information for evil deeds.

Google virus: potentially unwanted program malware
Google virus in our 2019 report.

From our report of Jun 2019 · not reviewed since

Propagation techniques used by Google virus

Malware can be transmitted in a variety of methods, as hackers behind it are usually sophisticated and look to multiple ways that are less noticeable.

Additionally, malware can use a variety of evasion techniques, making Google virus removal complicated in some cases. Nevertheless, there is always the way to remediate infected machine and get rid of the threat for good.

Malware authors that spread Google virus might use the following propagation techniques:

Nevertheless, most of Google virus variants are mostly cases of adware infections, which are far less threatening.

Some Google viruses might alter the way Windows OS operates, changing its registry or altering the boot sequence.

It is not safe to use your machine until you remove Google virus, as some infections, such as trojans, might be able to steal your personal information that you enter into certain fields (for example, credit card details) or record all your keystrokes.

Alternatively, adware might lead you to phishing and scam sites that either will prompt you to install bogus software and then pay for its licensed version or deceptively subscribe you for some kind of service you do not want or need. On the other hand, threats like The HoeflerText font wasn't found are using a simple trick to install such threats like Locky ransomware, Spora ransomware, or Zeus banking trojan.

  • Malicious spam email attachments or hyperlinks
  • Software bundles
  • Unprotected Remote Desktop connections
  • Exploits
  • Fake updates
  • Pirated or cracked software, etc.
Google virus: malware removal guide
Google virus in our 2019 report.

From our report of Jun 2019 · not reviewed since

Google virus variants

There are many types of infections that might refer to the Google virus term.

In this section, we will describe some of the versions you might encounter in the wild.

From our report of Jun 2019 · not reviewed since

Google redirect

Google redirect virus is probably one of the most common Google virus variants, and it usually indicates adware, or other potentially unwanted program infection.

PUPs often travel within software bundles or are downloaded from third-party sites intentionally, without knowing that the program is potentially dangerous.

As soon as Google redirect virus settles, it takes over the browser and starts displaying alternative search results, which usually come in the form of sponsored links that are located and the top. In such cases, users are often misled by this behavior and click on sponsored links - not genuine Google results, but the links that adware or other PUP is promoting.

This might not only prevent users from finding relevant information but also increase traffic to unknown websites, as well as artificially inflate their rankings. Additionally, not all of the links are secure, and users might end up on malware-compromised sites resulting in Google virus infiltration.

Google redirect virus can also be extremely annoying to deal with, as it can add a layer of pop-ups, deals, banners, offers, and other ads into all sites that users visit. Clicking on such advertisements is not recommended as ad space can be bought by cybercriminals that insert malicious code into the website.

Google virus: variant redirect virus
Google virus in our 2019 report.

From our report of Jun 2019 · not reviewed since

Google Membership Reward

Google Membership Reward belongs to survey scam category.

While it has many similarities with technical support scams, it uses different techniques to make users either disclose their personal information, such as credit card data or make them subscribe to a service they did not intend to. Nevertheless, both categories use deception and social engineering to work.

Most usually, users land on the Google Membership Reward accidentally when they visit a suspicious website or are redirected due to adware or PUP infection.

There, users are informed that they are selected few among other Google users (which is a lie - the message is shown to every visitor), and are eligible to valuable prizes for free - all they have to do is allegedly answer very primitive questions in a survey. The offered gifts vary, but some examples include:

What is more, users are also informed that they only have a mere few minutes to take the survey, as the prize will allegedly be given to somebody else. This tactic is often used by tech support scams too, providing a fake timer that creates an "immediate action" situation where users simply do not have time to think whether or not the claims are true.

However, there is no gift, and all the promises are fake. Do not trust Google Membership Reward if you encounter it, as nobody is trying to give you $1,000 or similar expensive gift for free.

  • $1000 Walmart Giftcard,
  • iPhone X 256 G
  • Samsung Galaxy S8
  • PlayStation 4
Google virus: variant membership rewards
Google virus in our 2019 report.

From our report of Jun 2019 · not reviewed since

Google Lead Services

Google Lead Services, which is also known as GoogleLeadService.com, is a fraudulent website that promotes its advertising services, such as Zip Code Lookup.

Nevertheless, this shady site has nothing to do with the original company, as it only uses the name of it in the hopes of providing a sense of legitimacy.

Thankfully, the developers of the servers are at least decent enough to describe what they actually are, as the fine print reads:

The service itself offers to display banners and another type of ads, that might range from regular size to full page ones. In most cases, these pop-ups, banners, deals, etc., are delivered with the help of adware application that is secretly infiltrated during freeware installation.

Thus, to remove Google Lead Services ads from their browsers, they need to locate and delete adware that is installed on their devices. As usual, we suggest scanning the device with security software or delete the application manually with the help of our instructions.

From our report of Jun 2019 · not reviewed since

Google Chrome 1111 virus

Google Chrome 1111 virus is possibly one of the strangest Google virus variants.

Once infected, the web browsers start displaying strange pop-ups with nothing by "111" or "1111" in them. While the dialogue can be closed, it can often return and spam the web browser.

Nevertheless, this is not the only activity that Google Chrome 1111 virus does. Allegedly, it can also spawn pop-ups that advertise a variety of services or display fake online job offerings, promising earnings of $20,000. However, please do not get lured by these advertisements, as they are all fake or might even be dangerous.

To stop the annoying behavior which constantly disturbs web browsing sessions, you will have to determine what type of malware is installed on your device and terminate it. The best way to do it is by using reputable security software.

Google virus: distribution methods
Google virus in our 2019 report.

From our report of Jun 2019 · not reviewed since

To stay away from malware, use extra caution

While the internet has become much safer in the past 20 years, it does not mean that it is entirely secure.

Nevertheless, some users are simply unaware of that or do not care about the consequences of a cyber infection, thinking that it will not affect them in any way.

While it is true that most potentially unwanted applications will not cause major harm as long as they are deleted on time, other viruses, such as trojans, ransomware or info stealers might result in permanent file/money loss or even identity theft. Besides, careless usage of the computer while infected with an adware might result in exact same consequences.

Staying away from potentially unwanted programs is relatively simple - you need to make sure you look at the installation instructions of shareware carefully and always opt for Advanced/Custom settings. This will allow you to terminate browser add-ons, system optimizers, uninstallers, driver updaters, and similar crapware.

On the other hand, to protect yourself from more sophisticated threats, you need also to do the following, as advised by experts:

  • Install anti-malware software and keep it updated;
  • Patch your operating system as soon as updates become available (do not postpone);
  • Enable Firewall;
  • Only use Remote Desktop services with VPN enabled and select a secure port for it;
  • Make sure you use strong passwords for all your accounts and enable two-factor authentication where possible;
  • Do now download pirated software or its cracks;
  • Make sure all your software updates are set to automatic setting;
  • Use ad-blocker;
  • Be careful with spam emails, as malicious attachments or hyperlinks might result in malware infections.

How to get rid of the Google virus pop-up

The warning is a web page and your PC is not infected by it.

Close it, then remove what keeps bringing it back.

Which browser shows the ads?

  1. Step 1: Remove googleleadservice[.]com from Chrome's notification list

    Chrome keeps a list of every site you once allowed to send notifications, and googleleadservice[.]com is on it. Paste chrome://settings/content/notifications into the address bar, find googleleadservice[.]com under Allowed to send notifications, open the three-dot menu next to it and pick Remove.

    Then click Add next to Not allowed to send notifications and type googleleadservice[.]com, so the site cannot ask a second time. Repeat it in every Chrome profile you use on Windows 11 or Windows 10, since each profile has its own list.

    Chrome Settings, Notifications page with the allowed and not allowed site lists
    Chrome on Windows 11: Settings > Privacy and security > Site settings > Notifications.

    Full procedure with screenshots: Stop website notifications and pop-ups

Instructions for Google Chrome

Remove from Google Chrome

To make sure the virus does not return, Reset Google Chrome browser as explained below:

Delete malicious extensions from Google Chrome:

  1. Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
  2. In the newly opened window, you will see all the installed extensions. Uninstall all suspicious extensions related to the unwanted program by clicking Remove.Remove extensions from Chrome

Clear cache and web data from Chrome:

  1. Click on Menu and pick Settings.
  2. Under Privacy and security, select Clear browsing data.
  3. Select Browsing history, Cookies and other site data, as well as Cached images and files.
  4. Click Clear data.Clear cache and web data from Chrome

Change your homepage:

  1. Click menu and choose Settings.
  2. Look for a suspicious site in the On startup section.
  3. Click on Open a specific or set of pages and click on three dots to find the Remove option.

Reset Google Chrome:

If the previous methods did not help you, reset Google Chrome to eliminate all the unwanted components:

  1. Click on Menu and select Settings.
  2. In the Settings, scroll down and click Advanced.
  3. Scroll down and locate Reset and clean up section.
  4. Now click Restore settings to their original defaults.
  5. Confirm with Reset settings.Reset Chrome 2

Then, whichever browser you use

  1. Step 2: Close the page without touching its buttons

    Press Ctrl + Shift + Esc to open Task Manager, select the browser on Processes and click End task: buttons on the page, including Close and Cancel, can trigger downloads or more pop-ups. When you reopen the browser, do not restore the previous tabs.

    Warning: Never call a number shown in a browser warning; Microsoft and antivirus companies do not put phone numbers in warnings.

    If the page opens again by itself, notifications or an extension are bringing it back. Task Manager works the same in Windows 11 and Windows 10.

    Full procedure with screenshots: Close a frozen app (Task Manager, Force Quit) On uGetFix

  2. Step 3: Scan the PC, then run the offline scan

    A scan finds the parts of Google virus that the manual steps cannot see. In Windows Security > Virus & threat protection > Scan options, start a Full scan and quarantine what it reports.

    Follow it with Microsoft Defender Antivirus (offline scan) > Scan now, which restarts the PC and checks the disk while Windows and the malware are not running.

    It takes about 15 minutes and works the same in Windows 11 and Windows 10. If either scan finds something, run the full scan again after removal until it comes back clean.

    Windows Security Scan options with Microsoft Defender Antivirus offline scan selected
    Windows 11: Windows Security > Virus & threat protection > Scan options.

    Full procedure with screenshots: Run a Microsoft Defender Offline scan

More removal instructions

For programs installed on the PC and older browsers. Open the one you need.

Delete Google virus from your computer to ensure its safe operation

Depending on the type of infection, Google virus removal will vary.

In most cases, simple browser hijackers, adware and other PUPs can be uninstalled via the installed application list manually. Nevertheless, problems might arise even with unwanted programs, as it might not instantly be clear which program is the culprit of redirects and persistent ads.

However, if you downloaded some executable files or installed fake updates, you will have to use reputable security software to remove Google virus from your device altogether. Make sure you perform a full system scan with tools like , or similar.

Once you delete Google virus, you should also reset each of the installed browsers, as traces might still be present, and redirects might not stop right away.

Uninstall from Windows

To terminate Google virus from Windows manually, please follow these instructions:

Uninstall from Windows 10/8:

  1. Type Control Panel into the Windows search box and open the result.
  2. Under Programs, select Uninstall a program.Uninstall from Windows 10/8

Uninstall from Windows 7/XP:

  1. Click on Windows Start > Control Panel (Windows XP users should click on Add/Remove Programs).
  2. In Control Panel, select Programs > Uninstall a program.Uninstall from Windows 7/XP

Remove the unwanted program:

  1. In the Programs and Features window, look for any recently installed suspicious entries, select them, and click Uninstall.
  2. If User Account Control appears, click Yes to confirm, then complete the removal.Uninstall the unwanted program from Windows
Reset Internet Explorer

Remove dangerous add-ons:

  1. Open Internet Explorer, click on the Gear icon (IE menu) on the top-right corner of the browser
  2. Pick Manage Add-ons.
  3. You will see a Manage Add-ons window. Here, look for suspicious plugins. Click on these entries and select Disable.Remove add-ons from Internet Explorer

Change your homepage if it was altered:

  1. Open IE and click on the Gear icon.
  2. Select Internet Options.
  3. In the General tab, delete the Home page address and replace it by your preferred one (for example, Google.com).
  4. Click Apply and then select OK.Reset IE homepage

Delete temporary files:

  1. Press on the Gear icon and select Internet Options.
  2. Under Browsing history, click Delete...
  3. Select relevant fields and press Delete.Clear temporary files from Internet Explorer

Reset Internet Explorer:

  1. Click on Gear icon > Internet options and select Advanced tab.
  2. Select Reset.
  3. In the new window, check Delete personal settings and select Reset.Reset Internet Explorer

Stream videos without limitations, no matter where you are

There are multiple parties that could find out almost anything about you by checking your online activity.

While this is highly unlikely, advertisers and tech companies are constantly tracking you online. The first step to privacy should be a secure browser that focuses on tracker reduction to a minimum.

Even if you employ a secure browser, you will not be able to access websites that are restricted due to local government laws or other reasons. In other words, you may not be able to stream Disney+ or US-based Netflix in some countries. To bypass these restrictions, you can employ a powerful VPN, which provides dedicated servers for torrenting and streaming, not slowing you down in the process.

Data backups are important - recover your lost files

Ransomware is one of the biggest threats to personal data.

Once it is executed on a machine, it launches a sophisticated encryption algorithm that locks all your files, although it does not destroy them. The most common misconception is that anti-malware software can return files to their previous states. This is not true, however, and data remains locked after the malicious payload is deleted.

While regular data backups are the only secure method to recover your files after a ransomware attack, tools such as can also be effective and restore at least some of your lost data.

Questions about Google virus

What is Google virus?

Google virus is a broad term describing various cyber infections and scams that use Google's name to appear legitimate. These include browser hijackers, adware, ransomware, trojans, backdoors, and tech support scams.

The 2019 guide noted that Google's name is exploited by malicious actors because the company is well-known and trusted worldwide. None of these infections actually originate from Google itself; scammers simply misuse the company's reputation to deceive victims.

Is Google virus safe or dangerous?

Danger depends on the specific infection type. Browser hijackers and adware are less harmful but still problematic, causing redirects and intrusive ads. However, trojans, backdoors, ransomware, and rootkits pose serious threats including money loss, file destruction, and identity theft.

Some infections show no visible symptoms while stealing data in the background. All variants should be treated as security threats requiring immediate removal.

What symptoms indicate Google virus infection?

Symptoms vary by infection type. Adware shows excessive ads and redirects to suspicious sites. Ransomware locks personal files and prevents access.

Trojans and backdoors may cause computer slowdowns, software crashes, and unknown background processes. Some infections produce no obvious symptoms while actively stealing data.

Users may experience degraded browser performance, unexpected pop-ups, or changes to browser settings. Noticing any of these warrants a full system scan.

How does Google virus get installed on my computer?

The 2019 guide identified multiple propagation methods:

  • malicious spam email attachments
  • pirated or cracked software
  • fake software updates
  • misleading pop-ups
  • software bundling

Third-party websites and peer-to-peer networks are common distribution points. Users often install Google virus variants unknowingly when downloading freeware with bundled PUPs. Choosing Quick/Default installation settings increases the risk of accidental infection.

Can Google virus steal my passwords and credit card information?

Yes. Some Google virus variants like trojans and backdoors can record your keystrokes or steal data you enter into forms. The old guide confirmed that sensitive information including passwords and credit card details can be compromised.

Remote access trojans allow attackers to steal directly from your machine. This is why immediate removal is critical—leaving the infection active exposes you to ongoing data theft.

What is Google redirect virus?

Google redirect virus is one of the most common Google virus variants, typically indicating adware or potentially unwanted program infection. It forces your browser to display altered search results filled with sponsored links instead of genuine Google results.

Users are misled into clicking fake ads promoting adware or malicious sites. The infection travels within software bundles or is downloaded from third-party sites intentionally without understanding the danger.

Is Google Membership Reward legitimate?

No. Google Membership Reward is a survey scam using deception to steal personal information or trick people into subscribing to unwanted services. The old guide noted it falsely claims users are selected among Google users to receive valuable prizes for free.

In reality, no prizes exist and all promises are fake. Users typically land on this scam after visiting suspicious websites or being redirected by adware infections.

How do I remove Google virus?

Run a full system scan with anti-malware software to detect and remove infections. Some infections can be deleted manually, but serious threats like trojans and ransomware require professional security tools.

After removal, reset all browsers to default settings. For ransomware, isolation is critical to prevent further file encryption. The 2019 guide recommended using reputable anti-malware solutions rather than attempting dangerous manual removal that could compromise your system.

Will Fortect remove Google virus?

Fortect scans Windows for malware and unwanted programs and repairs the system files and settings they change, and its free scan shows what it finds on your PC before you decide anything.

For Google virus, follow the plan above as well: the browser steps take back permissions and settings that no scanner treats as a threat, and uninstalling the program that brought it removes the source.

Run Microsoft Defender's full scan and, if anything was found, its offline scan as a second opinion. If the symptoms are gone after the plan and both scans are clean, there is nothing more to do.

Sources

More removal guides

Questions and experiences: Google virus

Still seeing it, or found something we did not cover? Ask here: members and our editors answer. Reading is open; writing needs a free account.

0 comments

…

5,512 members already hereReading, writing, commenting and voting. 0 verified · 237 joined this year