Severity scale:  

Remove (Removal Instructions) - Oct 2016 update

removal by Gabriel E. Hall - - | Type: Browser hijacker

Is my computer infected with virus?

If virus has been showing up on your web browser, you are hijacked. Technically, it is a browser hijacker and a potentially unwanted program which is very similar to Each of these questionable search engines seeks to push PC users into thinking that it is a legitimate and trustworthy search engine that can be used instead of Google, Bing, Yahoo or other reputable search provider. However, you should not expect trustworthy search results from this questionable search engine which seeks to redirect its users to sponsored domains and earn the money. This search provider belongs to a well known developer called Imali Media. It has already launched tends of similar PUPs that have been actively spread in a bundle with freeware and shareware as optional components. We highly recommend avoiding,, and similar hijackers that belong to the same developer. If you have been bothered by any of these suspicious search engines, you need to remove with its components with Reimage or other reliable security software. Otherwise, you can expect running into various problems caused by this redirect virus.

Relevant search results and fast surfing are the main promises that are promised by this search engine. Nevertheless, before installing it on your computer, you should know that it has already been labeled as a browser hijacker. As soon as it infiltrates the system, it modifies its settings so that it could start its work as soon as victim reboots the affected computer. It starts working by launching its cookies and tracking its victim for some time. According to the developer of this hijacker, it collects only non-personal information. However, it fails to inform what third parties are capable of using it for their own needs. We believe that this is the first reason why should you think about removal. Secondly, before you let this suspicious search engine stay on your computer, you should know about the redirect issue that it causes right after it collects needed amount of information about user’s search habits. redirect activity is initiated by showing altered search results and filling them with different pop-up ads. If you don’t want to end up on a questionable website, make sure that you stay away from this search engine. Finally, keep in mind that such search engines have been actively used for promoting tech support and similar services that can lead you to the money loss and additional problems on your computer. To stay safe, you should avoid Imali Media products.

The example of ads

Why does this search engine function?

Questions about

As we have already mentioned, the main reason why its developers seek to initiate  redirect is a need to earn the money. In most of the cases, they display altered search results and trick people into visiting third-party websites that are trying to increase their popularity. In exchange for that, these parties pay the money. The main issue with hijack is that you can never know what website you will be redirected to. Also, you may find serious issues while trying to get rid of this search engine. As a rule, changing browser’s settings back to normal brings no results as “browser helper objects” that travel along with this application are used for leading people to inability to reset these settings. Speaking of further dangers, you should know that virus may also collect IP addresses, visited website URLs, search queries, geographical location, platform type. This ability is not revealed clearly to PC users by its developers.

Where did this browser hijacker come from?

Most frequently, the virus spreads through “bundling ” – prevalent marketing method. This method relies on freeware, such as PDF creators, photo or audio editing tools, download managers, movie players, etc. Beware that virus may be attached to the software you are about to install. The attachment can be hidden behind “Basic” or “Quick” installation options, so you should avoid them. Being aware of this trick, you should select Advanced installation option only and uncheck all check marks claiming that you want to change your star page or the default search engine. If you need help with removal, jump to the next page.

How can I get rid of virus?

To sum up, whether you are an experienced or freshly-made Internet user, you should try to stay away from questionable search engines that are presented as alternatives to the well-known ones (Google, Bing, etc.). In fact, hundreds of websites should be avoided because they are considered suspicious. The most common feature of browser hijackers is the tendency to hijack people’s browsers and modify their default settings.

If you are infected with virus, you have two options that can help you to get rid of it. The first option leading to the elimination of this PUP is a manual removal method. In this case, you should follow a detailed removal guide which is given below. However, keep in mind that this process requires time and thoroughness. To prevent problems that may reappear after removing it, we recommend you to remove with the help of updated anti-spyware. It will detect and remove the hijacker and all possible malware left in your system. Update the software regularly and you can be sure that your computer stays safe in the future as well.

You can remove virus damage automatically with a help of one of these programs: Reimage, SpyHunter 5Combo Cleaner, Malwarebytes. We recommend these applications because they detect potentially unwanted programs and viruses with all their files and registry entries that are related to them.

do it now!
Reimage (remover) Happiness
Reimage (remover) Happiness
Compatible with Microsoft Windows Supported versions Compatible with OS X Supported versions
What to do if failed?
If you failed to remove virus damage using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to remove virus damage. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.
Alternative Software
Different security software includes different virus database. If you didn’t succeed in finding malware with Reimage, try running alternative scan with SpyHunter 5.
Alternative Software
Different security software includes different virus database. If you didn’t succeed in finding malware with Reimage, try running alternative scan with Combo Cleaner.

To remove, follow these steps:

Erase from Windows systems

To remove from the system and avoid its reappearance in the future, make sure you uninstall all Imali Media-related programs. FunTVTab, NewTabTv and others can re-install this PUP on your computer after some time.

  1. Click Start Control Panel Programs and Features (if you are Windows XP user, click on Add/Remove Programs). Click 'Start -> Control Panel -> Programs and Features' (if you are 'Windows XP' user, click on 'Add/Remove Programs').
  2. If you are Windows 10 / Windows 8 user, then right-click in the lower left corner of the screen. Once Quick Access Menu shows up, select Control Panel and Uninstall a Program. If you are 'Windows 10 / Windows 8' user, then right-click in the lower left corner of the screen. Once 'Quick Access Menu' shows up, select 'Control Panel' and 'Uninstall a Program'.
  3. Uninstall and related programs
    Here, look for or any other recently installed suspicious programs.
  4. Uninstall them and click OK to save these changes. Right click on each of suspicious entries and select 'Uninstall'
  5. Remove from Windows shortcuts
    Right click on the shortcut of Mozilla Firefox and select Properties. Right click on browsers' icon and select 'Properties'
  6. Go to Shortcut tab and look at the Target field. Delete malicious URL that is related to your virus. Select 'Shortcut' tab and delete '' or other suspicious URL

Repeat steps that are given above with all browsers' shortcuts, including Internet Explorer and Google Chrome. Make sure you check all locations of these shortcuts, including Desktop, Start Menu and taskbar.

Uninstall from Mac OS X system

  1. If you are using OS X, click Go button at the top left of the screen and select Applications. Cick 'Go' and select 'Applications'
  2. Wait until you see Applications folder and look for or any other suspicious programs on it. Now right click on every of such entries and select Move to Trash. Click on every malicious entry and select 'Move to Trash'

Get rid of from Internet Explorer (IE)

  1. Remove dangerous add-ons
    Open Internet Explorer, click on the Gear icon (IE menu) on the top right corner of the browser and choose Manage Add-ons. Click on menu icon and select 'Manage add-ons'
  2. You will see a Manage Add-ons window. Here, look for and other suspicious plugins. Disable these entries by clicking Disable: Right click on each of malicious entries and select 'Disable'
  3. Change your homepage if it was altered by virus:
    Click on the gear icon (menu) on the top right corner of the browser and select Internet Options. Stay in General tab.
  4. Here, remove malicious URL and enter preferable domain name. Click Apply to save changes. Delete malicious URL, enter your desired domain name and click 'Apply' to save changes
  5. Reset Internet Explorer
    Click on the gear icon (menu) again and select Internet options. Go to Advanced tab.
  6. Here, select Reset.
  7. When in the new window, check Delete personal settings and select Reset again to complete removal. Go to 'Advanced' tab and click on 'Reset' button. Now select 'Delete personal settings' and click on 'Reset' button again

Eliminate from Microsoft Edge

Reset Microsoft Edge settings (Method 1):

  1. Launch Microsoft Edge app and click More (three dots at the top right corner of the screen).
  2. Click Settings to open more options.
  3. Once Settings window shows up, click Choose what to clear button under Clear browsing data option. Go to Settings and select 'Choose what to clear'
  4. Here, select all what you want to remove and click Clear. Select 'Clear' button
  5. Now you should right-click on the Start button (Windows logo). Here, select Task Manager. Open the start menu and select 'Task Manager'
  6. When in Processes tab, search for Microsoft Edge.
  7. Right-click on it and choose Go to details option. If can’t see Go to details option, click More details and repeat previous steps. Right-click 'Microsoft Edge' and select 'Go to details' Select 'More details' if 'Go to details' option fails to show up
  8. When Details tab shows up, find every entry with Microsoft Edge name in it. Right click on each of them and select End Task to end these entries. Find Microsoft Edge entries and select 'End Task'

Resetting Microsoft Edge browser (Method 2):

If Method 1 failed to help you, you need to use an advanced Edge reset method.

  1. Note: you need to backup your data before using this method.
  2. Find this folder on your computer: C:\Users\%username%\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe.
  3. Select every entry which is saved on it and right click with your mouse. Then Delete option. Go to Microsoft Edge folder on your computer, right-click every entry and click 'Delete'
  4. Click the Start button (Windows logo) and type in window power in Search my stuff line.
  5. Right-click the Windows PowerShell entry and choose Run as administrator. Find Windows PowerShell, right-click it and select 'Run as administrator'
  6. Once Administrator: Windows PowerShell window shows up, paste this command line after PS C:\WINDOWS\system32> and press Enter:
    Get-AppXPackage -AllUsers -Name Microsoft.MicrosoftEdge | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register $($_.InstallLocation)\AppXManifest.xml -Verbose}
    Copy and paste a required command and press 'Enter'

Once these steps are finished, should be removed from your Microsoft Edge browser.

Delete from Mozilla Firefox (FF)

  1. Remove dangerous extensions
    Open Mozilla Firefox, click on the menu icon (top right corner) and select Add-ons Extensions. Click on menu icon and select 'Add-ons'
  2. Here, select and other questionable plugins. Click Remove to delete these entries. Select 'Extensions' and look for malicious entries. Click 'Remove' to get rid of each of them
  3. Change your homepage if it was altered by virus:
    Click on the menu (top right corner), choose Options General.
  4. Here, delete malicious URL and enter preferable website or click Restore to default.
  5. Click OK to save these changes. When in 'General' tab, delete malicious URL from 'Home Page' section or click on 'Restore to Default' button. Click 'OK' to save changes
  6. Reset Mozilla Firefox
    Click on the Firefox menu on the top left and click on the question mark. Here, choose Troubleshooting Information. Click on menu icon and then on '?'. Select 'Troubleshooting Information'
  7. Now you will see Reset Firefox to its default state message with Reset Firefox button. Click this button for several times and complete removal. Click on 'Reset Firefox' button for a couple of times

Remove from Google Chrome

To fix Google Chrome browser, you need to uninstall Imali Media-related add-ons, including FunTVTab, NewTabTv, Secure Finder and others.

  1. Delete malicious plugins
    Open Google Chrome, click on the menu icon (top right corner) and select Tools Extensions. Click on menu icon. Select 'Tools' and 'Extensions'
  2. Here, select and other malicious plugins and select trash icon to delete these entries. Look for malicious entries and delete each of them by clicking on the Trash bin icon
  3. Change your homepage and default search engine if it was altered by your virus
    Click on menu icon and choose Settings.
  4. Here, look for the Open a specific page or set of pages under On startup option and click on Set pages. After clicking on menu and 'Settings', select 'Set pages'
  5. Now you should see another window. Here, delete malicious search sites and enter the one that you want to use as your homepage. Click 'X' to remove malicious URLs
  6. Click on menu icon again and choose Settings Manage Search engines under the Search section. When in 'Settings', select 'Manage search engines...'
  7. When in Search Engines..., remove malicious search sites. You should leave only Google or your preferred domain name. Click 'X' to remove malicious URLs
  8. Reset Google Chrome
    Click on menu icon on the top right of your Google Chrome and select Settings.
  9. Scroll down to the end of the page and click on Reset browser settings. When in 'Settings', scroll down to 'Reset browser settings' button and click on it
  10. Click Reset to confirm this action and complete removal. Click on 'Reset' button to complete your removal

Erase from Safari

  1. Remove dangerous extensions
    Open Safari web browser and click on Safari in menu at the top left of the screen. Once you do this, select Preferences. Click on 'Safari' and select 'Preferences'
  2. Here, select Extensions and look for or other suspicious entries. Click on the Uninstall button to get rid each of them. Go to 'Extensions' and uninstall malicious add-ons
  3. Change your homepage if it was altered by virus:
    Open your Safari web browser and click on Safari in menu section. Here, select Preferences as it was displayed previously and select General.
  4. Here, look at the Homepage field. If it was altered by, remove unwanted link and enter the one that you want to use for your searches. Remember to include the "http://" before typing in the address of the page. When in 'General', delete malicious URL and enter your desired domain name
  5. Reset Safari
    Open Safari browser and click on Safari in menu section at the top left of the screen. Here, select Reset Safari.... Click on 'Safari' and select 'Reset Safari...'
  6. Now you will see a detailed dialog window filled with reset options. All of those options are usually checked, but you can specify which of them you want to reset. Click the Reset button to complete removal process. Select all options and click on 'Reset' button

About the author

Gabriel E. Hall
Gabriel E. Hall - Passionate web researcher

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Gabriel E. Hall
About the company Esolutions

Removal guides in other languages

  1. Helene says:
    March 4th, 2016 at 7:18 am

    Is there a shorter version of this tutorial?

  2. Seung says:
    March 4th, 2016 at 7:23 am

    I was thinking the exact same thing 😀 It looks complicated but its better than nothing

  3. 07Audhild says:
    March 4th, 2016 at 7:19 am

    Thanks, I removed this virus! Its nice to know I can come always come to this site for some advice

  4. Mikkel says:
    March 4th, 2016 at 7:21 am

    INCREDIBLE. I just downloaded SpyHunter and it found a bunch of viruses in my pc. Now it works much faster!!

Your opinion regarding