Severity scale:  

Remove virus (Simple Removal Guide)

removal by Olivia Morelli - - | Type: Browser hijacker redirect virus – how to get rid of it?

Has virus affected your Chrome browser? If so, you might want to perform some changes in your browser to restore your previous homepage. Sadly, this is not going to be an easy thing to do. It appears that this potentially unwanted program (PUP) adds MyPrivateSearch extension to Chrome, inserts PHPSESSID cookie to track user’s search activity, and might carry out more adjustments on the affected PC. If you have become a victim of this browser hijacker, you probably know what kind of website it sets as Chrome homepage. Users who are planning to install this program should know that it sets a suspicious search engine to appear on Chrome’s start page. It is highly advisable to avoid using this search engine, because its search results can trigger redirects to unknown Internet sites. Some of these sites might be entirely legitimate, but others can provide harmful content, so it goes without saying that you should avoid visiting such sites.

Questions about virus

The purpose of this search engine is to generate pay-per-click revenue. That is why this search engine provides “Ads related to [user’s search query] above regular search results. It wants the user to click on them and visit third-party websites that it promotes. Sadly, we have already stated that these sites can be insecure, so we advise you to be careful when browsing through them. For your own sake, we recommend thinking about removal. There are many more trustworthy search engines available on world wide web, including Google, Bing, or Yahoo. However, before you attempt to set any of these sites as your new homepage, remove first. We highly recommend using ReimageIntego for that. It is also possible to delete this program manually, but we do not recommend choosing this removal option unless you are an advanced PC user. browser hijacker is not a trustworthy program

How does this program spread?

Are you surprised because hijack happened without your knowledge? If so, you probably do not know how such programs spread. They are mostly distributed with a help of software distribution method called bundling. This method allows to pack several programs together and spread them as one. Typically, it is impossible to identify which program is bundled and which one is not – for that, the user needs to check program’s installation settings. Only Advanced and Custom settings provide information about these additions, so make sure you pick one of these rather than Default or Standard option. Users make mistake when they give priority to installation settings marked as “recommended. ” Exactly these settings typically hide proposals to install additional software along the preferred one.

The best removal method

If you seek to remove virus from your system, you probably wonder what is the best way to do it. To be honest, there are only two ways to remove this browser hijacker from the system. You can employ an automatic spyware removal program like ReimageIntego and let it scan your system, find components of PUPs and malware, and eliminate them automatically. However, you can go the harder way and try to remove this potentially unwanted program manually. For that, you should carefully follow comprehensive removal instructions. We have prepared such instructions for you – these are provided below this article.

You may remove virus damage with a help of ReimageIntego. SpyHunter 5Combo Cleaner and Malwarebytes are recommended to detect potentially unwanted programs and viruses with all their files and registry entries that are related to them.

do it now!
Reimage Happiness
Intego Happiness
Compatible with Microsoft Windows Supported versions Compatible with OS X Supported versions
What to do if failed?
If you failed to remove virus damage using Reimage Intego, submit a question to our support team and provide as much details as possible.
Reimage Intego has a free limited scanner. Reimage Intego offers more through scan when you purchase its full version. When free scanner detects issues, you can fix them using free manual repairs or you can decide to purchase the full version in order to fix them automatically.
Alternative Software
Different software has a different purpose. If you didn’t succeed in fixing corrupted files with Reimage, try running SpyHunter 5.
Alternative Software
Different software has a different purpose. If you didn’t succeed in fixing corrupted files with Intego, try running Combo Cleaner.

To remove virus, follow these steps:

Uninstall from Windows systems

Carefully uninstall MyPrivateSession application from your computer via Control Panel > All programs. Then follow instructions given below to eliminate remains of this browser hijacker.

  1. Click Start Control Panel Programs and Features (if you are Windows XP user, click on Add/Remove Programs). Click 'Start -> Control Panel -> Programs and Features' (if you are 'Windows XP' user, click on 'Add/Remove Programs').
  2. If you are Windows 10 / Windows 8 user, then right-click in the lower left corner of the screen. Once Quick Access Menu shows up, select Control Panel and Uninstall a Program. If you are 'Windows 10 / Windows 8' user, then right-click in the lower left corner of the screen. Once 'Quick Access Menu' shows up, select 'Control Panel' and 'Uninstall a Program'.
  3. Uninstall and related programs
    Here, look for or any other recently installed suspicious programs.
  4. Uninstall them and click OK to save these changes. Right click on each of suspicious entries and select 'Uninstall'
  5. Remove from Windows shortcuts
    Right click on the shortcut of Mozilla Firefox and select Properties. Right click on browsers' icon and select 'Properties'
  6. Go to Shortcut tab and look at the Target field. Delete malicious URL that is related to your virus. Select 'Shortcut' tab and delete '' or other suspicious URL

Repeat steps that are given above with all browsers' shortcuts, including Internet Explorer and Google Chrome. Make sure you check all locations of these shortcuts, including Desktop, Start Menu and taskbar.

Eliminate from Mac OS X system

Check your applications and if you can find MyPrivateSearch app, or programs related to it, move it/them to Trash.

If your macOS is displaying some infection symptoms, proceed with the following guide:

Remove virus from Applications folder:

  1. From the menu bar, select Go > Applications.
  2. In the Applications folder, look for virus-related entries.
  3. Click on the app and drag it to Trash (or right-click and pick Move to Trash)Uninstall from Mac 1

To fully remove virus, you need to access Application Support, LaunchAgents, and LaunchDaemons folders and delete relevant files:

  1. Select Go > Go to Folder.
  2. Enter /Library/Application Support and click Go or press Enter.
  3. In the Application Support folder, look for any dubious entries related to virus and then delete them.
  4. Now enter /Library/LaunchAgents and /Library/LaunchDaemons folders the same way and terminate all the virus-related entries.Uninstall from Mac 2
WindowsMac OS XGoogle Chrome

Get rid of from Google Chrome

Look for MyPrivateSearch extension in Chrome and delete it.

  1. Delete malicious plugins
    Open Google Chrome, click on the menu icon (top right corner) and select Tools Extensions. Click on menu icon. Select 'Tools' and 'Extensions'
  2. Here, select and other malicious plugins and select trash icon to delete these entries. Look for malicious entries and delete each of them by clicking on the Trash bin icon
  3. Change your homepage and default search engine if it was altered by your virus
    Click on menu icon and choose Settings.
  4. Here, look for the Open a specific page or set of pages under On startup option and click on Set pages. After clicking on menu and 'Settings', select 'Set pages'
  5. Now you should see another window. Here, delete malicious search sites and enter the one that you want to use as your homepage. Click 'X' to remove malicious URLs
  6. Click on menu icon again and choose Settings Manage Search engines under the Search section. When in 'Settings', select 'Manage search engines...'
  7. When in Search Engines..., remove malicious search sites. You should leave only Google or your preferred domain name. Click 'X' to remove malicious URLs
  8. Reset Google Chrome
    Click on menu icon on the top right of your Google Chrome and select Settings.
  9. Scroll down to the end of the page and click on Reset browser settings. When in 'Settings', scroll down to 'Reset browser settings' button and click on it
  10. Click Reset to confirm this action and complete removal. Click on 'Reset' button to complete your removal

Do not let government spy on you

The government has many issues in regards to tracking users' data and spying on citizens, so you should take this into consideration and learn more about shady information gathering practices. Avoid any unwanted government tracking or spying by going totally anonymous on the internet. 

You can choose a different location when you go online and access any material you want without particular content restrictions. You can easily enjoy internet connection without any risks of being hacked by using Private Internet Access VPN.

Control the information that can be accessed by government any other unwanted party and surf online without being spied on. Even if you are not involved in illegal activities or trust your selection of services, platforms, be suspicious for your own security and take precautionary measures by using the VPN service.

Backup files for the later use, in case of the malware attack

Computer users can suffer from data losses due to cyber infections or their own faulty doings. Ransomware can encrypt and hold files hostage, while unforeseen power cuts might cause a loss of important documents. If you have proper up-to-date backups, you can easily recover after such an incident and get back to work. It is also equally important to update backups on a regular basis so that the newest information remains intact – you can set this process to be performed automatically.

When you have the previous version of every important document or project you can avoid frustration and breakdowns. It comes in handy when malware strikes out of nowhere. Use Data Recovery Pro for the data restoration process.

About the author
Olivia Morelli
Olivia Morelli - Ransomware analyst

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Olivia Morelli
About the company Esolutions

  1. bells says:
    August 30th, 2016 at 11:46 am

    This virus spreads along with goPrivate extension.

  2. Borisso says:
    August 30th, 2016 at 11:47 am

    This has disappeared after I removed MyPrivateSearch extension 🙂

  3. Antidote says:
    August 30th, 2016 at 11:47 am

    Reimage removed this and several other PUPs from my browser, cleaned cookies as well. I find it useful – i dont like to delete computer parasites manually. Im just lazy :p its much easier

Your opinion regarding virus