Severity scale:  

Google virus. The latest versions revealed (recovery guide for 2019)

removal by Jake Doevan - - | Type: Malware

Google virus – a term used to describe a variety of cyber infections and scams related to the name of the tech giant

Google virusGoogle virus is a set of computer infections that uses the name of the legitimate company in order to proliferate malware onto victims' devices

Google virus is a set of computer infections and scams that use Google's name in order to steal personal user data, trick into installing malicious software, or spend money on useless programs. Of course, the malicious actors have nothing to do with Google, which probably the best-known company in the world, employing almost 100k employees.[1] Nevertheless, the massive corporation sometimes slips too by failing to block phishing links or letting in malicious apps into Chrome store or Google Play.[2]

Name Google virus
Type Trojan horse/backdoor/malware/potentially unwanted program/survey scam/tech support scam
Infection means Software bundling, third-party sites, spam emails, fake updates, misleading pop-ups, etc. 
Symptoms Symptoms of Google virus may vary:

  • PUP infections usually concentrate on advertising by redirecting to suspicious sites and displaying ads on all visited sites;
  • Ransomware viruses lock personal files and prevent their access;
  • Backdoors and trojans usually show no symptoms, although users might experience computer slowdowns, software/system crashes, unknown processes running in the background, etc.
Main dangers  Malware infections, installation of potentially unwanted programs, sensitive information disclosure to cybercriminals 
Termination  You can delete some of the infections manually, although most serious threats should be terminated with anti-malware software
Optimization To fix virus damage, we highly recommend scanning the device with Reimage Reimage Cleaner Intego

Google virus is not tight to one browser or a type of the operating system and can affect Windows, Mac, iOS, and Android users. The broad term also includes a variety of computer infections and, while some, like browser hijackers and adware, are less harmful, threats like trojans, backdoors, ransomware[3] or rootkits can result in serious consequences, such money loss, personal file destruction, or even identity theft.

Besides, many crooks rely on Google's name to make their Google virus scams believable, claiming that the system is infected with viruses, or that users' personal information is at risk. Additionally, survey scams might promise expensive gifts, but in reality, seek users' payment details or make them subscribe for useless services.

All in all, Google virus should be underestimated, and, if you are affected, you should take adequate measures to protect your computer from damage, as well as yourself from hackers who might abuse your sensitive information for evil deeds.

Propagation techniques used by Google virus

Malware can be transmitted in a variety of methods, as hackers behind it are usually sophisticated and look to multiple ways that are less noticeable. Additionally, malware can use a variety of evasion techniques, making Google virus removal complicated in some cases. Nevertheless, there is always the way to remediate infected machine and get rid of the threat for good.

Malware authors that spread Google virus might use the following propagation techniques:

  • Malicious spam email attachments or hyperlinks
  • Software bundles
  • Unprotected Remote Desktop connections[4]
  • Exploits[5]
  • Fake updates
  • Pirated or cracked software, etc.

Nevertheless, most of Google virus variants are mostly cases of adware infections, which are far less threatening. To find out if your machine is infected with malware or a potentially unwanted program, it would be best to scan your computer with security software to detect and terminate most of the viruses.

Some Google viruses might alter the way Windows OS operates, changing its registry[6] or altering the boot sequence. To revert these changes and fix infected system files, scan your device with Reimage Reimage Cleaner Intego.

It is not safe to use your machine until you remove Google virus, as some infections, such as trojans, might be able to steal your personal information that you enter into certain fields (for example, credit card details) or record all your keystrokes.

Alternatively, adware might lead you to phishing and scam sites that either will prompt you to install bogus software and then pay for its licensed version or deceptively subscribe you for some kind of service you do not want or need. On the other hand, threats like The HoeflerText font wasn’t found are using a simple trick to install such threats like Locky ransomware, Spora ransomware, or Zeus banking trojan.

Google virus infectionGoogle virus is type of computer infection that can enter users' machines in various methods, including spam email attachments or bundled software

Google virus variants

There are many types of infections that might refer to the Google virus term. In this section, we will describe some of the versions you might encounter in the wild.

Google redirect 

Google redirect virus is probably one of the most common Google virus variants, and it usually indicates adware, or other potentially unwanted program infection. PUPs often travel within software bundles or are downloaded from third-party sites intentionally, without knowing that the program is potentially dangerous.

As soon as Google redirect virus settles, it takes over the browser and starts displaying alternative search results, which usually come in the form of sponsored links that are located and the top. In such cases, users are often misled by this behavior and click on sponsored links – not genuine Google results, but the links that adware or other PUP is promoting.

This might not only prevent users from finding relevant information but also increase traffic to unknown websites, as well as artificially inflate their rankings. Additionally, not all of the links are secure, and users might end up on malware-compromised sites resulting in Google virus infiltration. 

Google virus redirect

Google redirect virus can also be extremely annoying to deal with, as it can add a layer of pop-ups, deals, banners, offers, and other ads into all sites that users visit. Clicking on such advertisements is not recommended as ad space can be bought by cybercriminals that insert malicious code into the website.

Google Membership Reward 

Google Membership Reward belongs to survey scam category. While it has many similarities with technical support scams,[7] it uses different techniques to make users either disclose their personal information, such as credit card data or make them subscribe to a service they did not intend to. Nevertheless, both categories use deception and social engineering to work.

Most usually, users land on the Google Membership Reward accidentally when they visit a suspicious website or are redirected due to adware or PUP infection. There, users are informed that they are selected few among other Google users (which is a lie – the message is shown to every visitor), and are eligible to valuable prizes for free – all they have to do is allegedly answer very primitive questions in a survey. The offered gifts vary, but some examples include:

  • $1000 Walmart Giftcard,
  • iPhone X 256 G
  • Samsung Galaxy S8
  • PlayStation 4

What is more, users are also informed that they only have a mere few minutes to take the survey, as the prize will allegedly be given to somebody else. This tactic is often used by tech support scams too, providing a fake timer that creates an “immediate action” situation where users simply do not have time to think whether or not the claims are true.

However, there is no gift, and all the promises are fake. Do not trust Google Membership Reward if you encounter it, as nobody is trying to give you $1,000 or similar expensive gift for free.

Google virus Membership  rewardsGoogle Membership rewards survey scam tries to make users believe that they are eligible for an expensive gift

Google Lead Services

Google Lead Services, which is also known as, is a fraudulent website that promotes its advertising services, such as Zip Code Lookup. Nevertheless, this shady site has nothing to do with the original company, as it only uses the name of it in the hopes of providing a sense of legitimacy.

Thankfully, the developers of the servers are at least decent enough to describe what they actually are, as the fine print reads:

We are not affiliated with or related to Google Lead Services™ in any way. The term “Google” is used as a synonym for “Search”

The service itself offers to display banners and another type of ads, that might range from regular size to full page ones. In most cases, these pop-ups, banners, deals, etc., are delivered with the help of adware application that is secretly infiltrated during freeware installation.

Thus, to remove Google Lead Services ads from their browsers, they need to locate and delete adware that is installed on their devices. As usual, we suggest scanning the device with security software or delete the application manually with the help of our instructions.

Google Chrome 1111 virus 

Google Chrome 1111 virus is possibly one of the strangest Google virus variants. Once infected, the web browsers start displaying strange pop-ups with nothing by “111” or “1111” in them. While the dialogue can be closed, it can often return and spam the web browser.

Nevertheless, this is not the only activity that Google Chrome 1111 virus does. Allegedly, it can also spawn pop-ups that advertise a variety of services or display fake online job offerings, promising earnings of $20,000. However, please do not get lured by these advertisements, as they are all fake or might even be dangerous.

To stop the annoying behavior which constantly disturbs web browsing sessions, you will have to determine what type of malware is installed on your device and terminate it. The best way to do it is by using reputable security software.

To stay away from malware, use extra caution

Google virus distributionDepending on the type of infection, Google virus can use simple software bundling for its distribution. Nevertheless, spam emails or brute-forcing can also be used by more sophisticated threats

While the internet has become much safer in the past 20 years, it does not mean that it is entirely secure. Nevertheless, some users are simply unaware of that or do not care about the consequences of a cyber infection, thinking that it will not affect them in any way.

While it is true that most potentially unwanted applications will not cause major harm as long as they are deleted on time, other viruses, such as trojans, ransomware or info stealers might result in permanent file/money loss or even identity theft. Besides, careless usage of the computer while infected with an adware might result in exact same consequences.

Staying away from potentially unwanted programs is relatively simple – you need to make sure you look at the installation instructions of shareware carefully and always opt for Advanced/Custom settings. This will allow you to terminate browser add-ons, system optimizers, uninstallers, driver updaters, and similar crapware.

On the other hand, to protect yourself from more sophisticated threats, you need also to do the following, as advised by experts:[8]

  • Install anti-malware software and keep it updated;
  • Patch your operating system as soon as updates become available (do not postpone);
  • Enable Firewall;
  • Only use Remote Desktop services with VPN enabled and select a secure port for it;[9]
  • Make sure you use strong passwords for all your accounts and enable two-factor authentication where possible;
  • Do now download pirated software or its cracks;
  • Make sure all your software updates are set to automatic setting;
  • Use ad-blocker;
  • Be careful with spam emails, as malicious attachments or hyperlinks might result in malware infections.

Delete Google virus from your computer to ensure its safe operation

Depending on the type of infection, Google virus removal will vary. In most cases, simple browser hijackers, adware and other PUPs can be uninstalled via the installed application list manually. If you are not sure how to do that, you can check our instructions below. Nevertheless, problems might arise even with unwanted programs, as it might not instantly be clear which program is the culprit of redirects and persistent ads.

However, if you downloaded some executable files or installed fake updates, you will have to use reputable security software to remove Google virus from your device altogether. Make sure you perform a full system scan with tools like Reimage Reimage Cleaner Intego, SpyHunter 5Combo Cleaner or similar.

Once you delete Google virus, you should also reset each of the installed browsers, as traces might still be present, and redirects might not stop right away.

You may remove virus damage with a help of Reimage Reimage Cleaner Intego. SpyHunter 5Combo Cleaner and Malwarebytes are recommended to detect potentially unwanted programs and viruses with all their files and registry entries that are related to them.

do it now!
Reimage Happiness
Intego Happiness
Compatible with Microsoft Windows Supported versions Compatible with OS X Supported versions
What to do if failed?
If you failed to remove virus damage using Reimage Intego, submit a question to our support team and provide as much details as possible.
Reimage Intego has a free limited scanner. Reimage Intego offers more through scan when you purchase its full version. When free scanner detects issues, you can fix them using free manual repairs or you can decide to purchase the full version in order to fix them automatically.
Alternative Software
Different software has a different purpose. If you didn’t succeed in fixing corrupted files with Reimage, try running SpyHunter 5.
Alternative Software
Different software has a different purpose. If you didn’t succeed in fixing corrupted files with Intego, try running Combo Cleaner.

To remove Google virus, follow these steps:

Uninstall Google from Windows systems

To terminate Google virus from Windows manually, please follow these instructions:

  1. Click Start Control Panel Programs and Features (if you are Windows XP user, click on Add/Remove Programs). Click 'Start -> Control Panel -> Programs and Features' (if you are 'Windows XP' user, click on 'Add/Remove Programs').
  2. If you are Windows 10 / Windows 8 user, then right-click in the lower left corner of the screen. Once Quick Access Menu shows up, select Control Panel and Uninstall a Program. If you are 'Windows 10 / Windows 8' user, then right-click in the lower left corner of the screen. Once 'Quick Access Menu' shows up, select 'Control Panel' and 'Uninstall a Program'.
  3. Uninstall Google and related programs
    Here, look for Google or any other recently installed suspicious programs.
  4. Uninstall them and click OK to save these changes. Right click on each of suspicious entries and select 'Uninstall'
  5. Remove Google from Windows shortcuts
    Right click on the shortcut of Mozilla Firefox and select Properties. Right click on browsers' icon and select 'Properties'
  6. Go to Shortcut tab and look at the Target field. Delete malicious URL that is related to your virus. Select 'Shortcut' tab and delete '' or other suspicious URL

Repeat steps that are given above with all browsers' shortcuts, including Internet Explorer and Google Chrome. Make sure you check all locations of these shortcuts, including Desktop, Start Menu and taskbar.

Remove Google from Mac OS X system

Macs are not immune to cyber infections – the myth has been debunked many times. Thus, if your browsers show strange behavior, delete the potentially unwanted app from your device as follows:

If your macOS is displaying some infection symptoms, proceed with the following guide:

Remove Google from Applications folder:

  1. From the menu bar, select Go > Applications.
  2. In the Applications folder, look for Google-related entries.
  3. Click on the app and drag it to Trash (or right-click and pick Move to Trash)Uninstall from Mac 1

To fully remove Google, you need to access Application Support, LaunchAgents, and LaunchDaemons folders and delete relevant files:

  1. Select Go > Go to Folder.
  2. Enter /Library/Application Support and click Go or press Enter.
  3. In the Application Support folder, look for any dubious entries related to Google and then delete them.
  4. Now enter /Library/LaunchAgents and /Library/LaunchDaemons folders the same way and terminate all the Google-related entries.Uninstall from Mac 2

Eliminate Google from Google Chrome

To make sure the virus does not return, Reset Google Chrome browser as explained below:

  1. Delete malicious plugins
    Open Google Chrome, click on the menu icon (top right corner) and select Tools Extensions. Click on menu icon. Select 'Tools' and 'Extensions'
  2. Here, select Google and other malicious plugins and select trash icon to delete these entries. Look for malicious entries and delete each of them by clicking on the Trash bin icon
  3. Change your homepage and default search engine if it was altered by your virus
    Click on menu icon and choose Settings.
  4. Here, look for the Open a specific page or set of pages under On startup option and click on Set pages. After clicking on menu and 'Settings', select 'Set pages'
  5. Now you should see another window. Here, delete malicious search sites and enter the one that you want to use as your homepage. Click 'X' to remove malicious URLs
  6. Click on menu icon again and choose Settings Manage Search engines under the Search section. When in 'Settings', select 'Manage search engines...'
  7. When in Search Engines..., remove malicious search sites. You should leave only Google or your preferred domain name. Click 'X' to remove malicious URLs
  8. Reset Google Chrome
    Click on menu icon on the top right of your Google Chrome and select Settings.
  9. Scroll down to the end of the page and click on Reset browser settings. When in 'Settings', scroll down to 'Reset browser settings' button and click on it
  10. Click Reset to confirm this action and complete Google removal. Click on 'Reset' button to complete your removal

Delete Google from Internet Explorer (IE)

Remove dangerous add-ons:

  1. Open Internet Explorer, click on the Gear icon (IE menu) on the top-right corner of the browser
  2. Pick Manage Add-ons.
  3. You will see a Manage Add-ons window. Here, look for Google and other suspicious plugins. Click on these entries and select Disable.Remove add-ons from Internet Explorer

Change your homepage if it was altered:

  1. Open IE and click on the Gear icon.
  2. Select Internet Options.
  3. In the General tab, delete the Home page address and replace it by your preferred one (for example,
  4. Click Apply and then select OK.Reset IE homepage

Delete temporary files:

  1. Press on the Gear icon and select Internet Options.
  2. Under Browsing history, click Delete…
  3. Select relevant fields and press Delete.Clear temporary files from Internet Explorer

Reset Internet Explorer:

  1. Click on Gear icon > Internet options and select Advanced tab.
  2. Select Reset.
  3. In the new window, check Delete personal settings and select Reset again to complete Google removal.Reset Internet Explorer

Erase Google virus from Microsoft Edge

Delete unwanted extensions from MS Edge:

  1. Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
  2. From the list, pick the Google-related extension and click on the Gear icon.
  3. Click on Uninstall at the bottom.Remove extensions from Edge

Clear cookies and other browser data:

  1. Click on the Menu (three horizontal dots at the top-right of the browser window) and select Privacy & security.
  2. Under Clear browsing data, pick Choose what to clear.
  3. Select everything (apart from passwords, although you might want to include Media licenses as well, if applicable) and click on Clear.Clear Edge browsing data

Reset MS Edge if that above steps did not work:

  1. Press on Ctrl + Shift + Esc to open Task Manager.
  2. Click on More details arrow at the bottom of the window.
  3. Select Details tab.
  4. Now scroll down and locate every entry with Microsoft Edge name in it. Right-click on each of them and select End Task to stop MS Edge from running.Reset MS Edge

If this solution failed to help you, you need to use an advanced Edge reset method. Note that you need to backup your data before proceeding.

  1. Find the following folder on your computer: C:\\Users\\%username%\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe.
  2. Press Ctrl + A on your keyboard to select all folders.
  3. Right-click on them and pick DeleteAdvanced MS Edge reset 1
  4. Now right-click on the Start button and pick Windows PowerShell (Admin).
  5. When the new window opens, copy and paste the following command, and then press Enter:

    Get-AppXPackage -AllUsers -Name Microsoft.MicrosoftEdge | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml” -VerboseAdvanced MS Edge reset 2

Instructions for Chromium-based Edge

Delete extensions from MS Edge (Chromium):

  1. Open Edge and click select Settings > Extensions.
  2. Delete unwanted extensions by clicking Remove.Remove extensions from Chromium Edge

Clear cache and site data:

  1. Click on Menu and go to Settings.
  2. Select Privacy and services.
  3. Under Clear browsing data, pick Choose what to clear.
  4. Under Time range, pick All time.
  5. Select Clear now.Clear browser data from Chroum Edge

Reset Chromium-based MS Edge:

  1. Click on Menu and select Settings.
  2. On the left side, pick Reset settings.
  3. Select Restore settings to their default values.
  4. Confirm with Reset.Reset Chromium Edge

Get rid of Google from Mozilla Firefox (FF)

Firefox is not immune to Google virus as the scam misusing its name can appear on this browser as well. Make sure you reset it if you were involved into this scam somehow.

  1. Remove dangerous extensions
    Open Mozilla Firefox, click on the menu icon (top right corner) and select Add-ons Extensions. Click on menu icon and select 'Add-ons'
  2. Here, select Google and other questionable plugins. Click Remove to delete these entries. Select 'Extensions' and look for malicious entries. Click 'Remove' to get rid of each of them
  3. Change your homepage if it was altered by virus:
    Click on the menu (top right corner), choose Options General.
  4. Here, delete malicious URL and enter preferable website or click Restore to default.
  5. Click OK to save these changes. When in 'General' tab, delete malicious URL from 'Home Page' section or click on 'Restore to Default' button. Click 'OK' to save changes
  6. Reset Mozilla Firefox
    Click on the Firefox menu on the top left and click on the question mark. Here, choose Troubleshooting Information. Click on menu icon and then on '?'. Select 'Troubleshooting Information'
  7. Now you will see Reset Firefox to its default state message with Reset Firefox button. Click this button for several times and complete Google removal. Click on 'Reset Firefox' button for a couple of times

Uninstall Google from Safari

  1. Remove dangerous extensions
    Open Safari web browser and click on Safari in menu at the top left of the screen. Once you do this, select Preferences. Click on 'Safari' and select 'Preferences'
  2. Here, select Extensions and look for Google or other suspicious entries. Click on the Uninstall button to get rid each of them. Go to 'Extensions' and uninstall malicious add-ons
  3. Change your homepage if it was altered by virus:
    Open your Safari web browser and click on Safari in menu section. Here, select Preferences as it was displayed previously and select General.
  4. Here, look at the Homepage field. If it was altered by Google, remove unwanted link and enter the one that you want to use for your searches. Remember to include the "http://" before typing in the address of the page. When in 'General', delete malicious URL and enter your desired domain name
  5. Reset Safari
    Open Safari browser and click on Safari in menu section at the top left of the screen. Here, select Reset Safari.... Click on 'Safari' and select 'Reset Safari...'
  6. Now you will see a detailed dialog window filled with reset options. All of those options are usually checked, but you can specify which of them you want to reset. Click the Reset button to complete Google removal process. Select all options and click on 'Reset' button

Access your website securely from any location

When you work on the domain, site, blog, or different project that requires constant management, content creation, or coding, you may need to connect to the server and content management service more often. It is a hassle when your website is protected from suspicious connections and unauthorized IP addresses.

The best solution for creating a tighter network could be a dedicated/fixed IP address. If you make your IP address static and set to your device, you can connect to the CMS from any location and do not create any additional issues for server or network manager that need to monitor connections and activities. This is how you bypass some of the authentications factors and can remotely use your banking accounts without triggering suspicious with each login. 

VPN software providers like Private Internet Access can help you with such settings and offer the option to control the online reputation and manage projects easily from any part of the world. It is better to clock the access to your website from different IP addresses. So you can keep the project safe and secure when you have the dedicated IP address VPN and protected access to the content management system.

Backup files for the later use, in case of the malware attack

Computer users can suffer from data losses due to cyber infections or their own faulty doings. Ransomware can encrypt and hold files hostage, while unforeseen power cuts might cause a loss of important documents. If you have proper up-to-date backups, you can easily recover after such an incident and get back to work. It is also equally important to update backups on a regular basis so that the newest information remains intact – you can set this process to be performed automatically.

When you have the previous version of every important document or project you can avoid frustration and breakdowns. It comes in handy when malware strikes out of nowhere. Use Data Recovery Pro for the data restoration process.

About the author
Jake Doevan
Jake Doevan - Computer technology expert

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Jake Doevan
About the company Esolutions

Removal guides in other languages

Your opinion regarding Google virus