Severity scale:  

Remove virus (Removal Instructions) - Nov 2016 update

removal by Olivia Morelli - - | Type: Browser hijacker

Can I trust virus?

Questions about virus virus is a malicious search engine that should be avoided. No matter that it looks like a convenient way to search the web, this questionable search tool can hijack your computer without your approval and then change its settings. Typically, it adds related browser extensions and alters the start page, the default search engine and new tab URL. After each of these alterations are finished, the victim starts noticing redirects to site. This web address looks like an ordinary search engine which seems like any other web search tool. Sadly, it cannot be trusted because it might trick you into clicking on sponsored search results, which are not only relevant but also can open dangerous third-party websites. Although we cannot claim that all of these search results are deceptive, you should still be careful. After adding your search query to this search engine, you can be redirected to which is another questionable search engine. In addition, you can start noticing third-party ads, slow downs and similar problems that can result on strange websites. The best solution would be to avoid these sites and remove from the system. 
Display of search engine and bogus search results

The only reason why this site causes these redirects is pay-per-click revenue. However, ads that are displayed via this search engine can redirect you to questionable Internet sites. Besides, you should think about removal because it is capable of tracking its victims. Beware that such activities are used for collecting people’s search terms, information about their mostly visited websites, details related to their computers and so on. It might be a harmless activity but ww should warn you that non-personal data can also be used for identity theft and similar uses! If you want to protect yourself, you should uninstall virus without any delay. The fastest way to do that is to check the entire computer system for threats. For that you can use Reimage Reimage Cleaner Intego or SpyHunter 5Combo Cleaner software. However, you can also perform this task with the help of manual removal guide which is revealed down below. 

Methods used to proliferate the number of users

Of course, you can access this website by yourself and set it as your homepage manually. You might also change your homepage settings and set this search tool as startup page as well. However, if you haven’t initiated these changes but this search engine appears in your browser, it means that you have become a victim of hijack. Please do not be mistaken and do not confuse the word “hijack” with “hack.” This program hijacks user’s computer system only after receiving permission to do that, so you need to learn how to take away such authorization. When you install computer programs, check what lies behind “Advanced” or “Custom” settings. These settings can reveal what programs are bundled with your downloaded application, and allows to reject them. Users often install additional unwanted software because they think that “Default” or “Standard” settings are reliable. In most cases, these settings are auto-selected and include user’s agreements to install all “recommended” software. This software can include hijackers, adware programs, and other annoying parasites.

How to remove virus?

In order to uninstall virus, check the instructions provided below. Feel free to choose either manual or automatic removal technique – you can quickly uninstall this hijacker using one of the anti-spyware programs we recommend, or, if you prefer, delete it manually. Please remember that despite being non-malicious, this browser hijacker is still an unwanted program, which can leave your computer vulnerable to malware attacks. That is why removal should be carried out with care. Although you might find these instructions confusing, give them a try and remove this malware manually:

You may remove virus damage with a help of Reimage Reimage Cleaner Intego. SpyHunter 5Combo Cleaner and Malwarebytes are recommended to detect potentially unwanted programs and viruses with all their files and registry entries that are related to them.

do it now!
Reimage Happiness
Intego Happiness
Compatible with Microsoft Windows Supported versions Compatible with OS X Supported versions
What to do if failed?
If you failed to remove virus damage using Reimage Intego, submit a question to our support team and provide as much details as possible.
Reimage Intego has a free limited scanner. Reimage Intego offers more through scan when you purchase its full version. When free scanner detects issues, you can fix them using free manual repairs or you can decide to purchase the full version in order to fix them automatically.
Alternative Software
Different software has a different purpose. If you didn’t succeed in fixing corrupted files with Reimage, try running SpyHunter 5.
Alternative Software
Different software has a different purpose. If you didn’t succeed in fixing corrupted files with Intego, try running Combo Cleaner. virus snapshot hijacker om Google Chrome web browserSafari browser affected by virusThe image showing how virus infects Mozilla hijacker om Google Chrome web browser

To remove virus, follow these steps:

Remove from Windows systems

Using instructions provided below, go to the program’s list on your computer. Here, click on “Installed on” to sort programs by the date they have been installed one the system. Then you should find two suspicious program – uTorrent Packages and AION. Click on uTorrent Packages and select Uninstall/Change. An Uninstall Manager will show up, and ask you which program do you wish to uninstall. Click on UNINSTALL button next to REACHit option, then add a tick next to the line saying, “Remove this manager from Add/Remove programs” and click Close. Then in the Programs list, find AION, click on it, and then click Uninstall/Change again. You might receive a pop-up message, but click OK in case it shows up. Refresh the list by right-clicking on an empty spot in it and selecting Refresh. Now that you have uninstalled these programs, clean each of your web browsers now. Here is an example (Firefox) how to clean browser shortcuts: 

Right-click on Firefox shortcut on the desktop and select Properties. Then go to Shortcut tab if you aren’t there already, and in the Target field, find hllp:// URL and delete it. After that, click Apply and then OK.

Do the same with Chrome and IE browser’s shortcuts.

  1. Click Start Control Panel Programs and Features (if you are Windows XP user, click on Add/Remove Programs). Click 'Start -> Control Panel -> Programs and Features' (if you are 'Windows XP' user, click on 'Add/Remove Programs').
  2. If you are Windows 10 / Windows 8 user, then right-click in the lower left corner of the screen. Once Quick Access Menu shows up, select Control Panel and Uninstall a Program. If you are 'Windows 10 / Windows 8' user, then right-click in the lower left corner of the screen. Once 'Quick Access Menu' shows up, select 'Control Panel' and 'Uninstall a Program'.
  3. Uninstall and related programs
    Here, look for or any other recently installed suspicious programs.
  4. Uninstall them and click OK to save these changes. Right click on each of suspicious entries and select 'Uninstall'
  5. Remove from Windows shortcuts
    Right click on the shortcut of Mozilla Firefox and select Properties. Right click on browsers' icon and select 'Properties'
  6. Go to Shortcut tab and look at the Target field. Delete malicious URL that is related to your virus. Select 'Shortcut' tab and delete '' or other suspicious URL

Repeat steps that are given above with all browsers' shortcuts, including Internet Explorer and Google Chrome. Make sure you check all locations of these shortcuts, including Desktop, Start Menu and taskbar.

Delete from Mac OS X system

  1. If you are using OS X, click Go button at the top left of the screen and select Applications. Cick 'Go' and select 'Applications'
  2. Wait until you see Applications folder and look for or any other suspicious programs on it. Now right click on every of such entries and select Move to Trash. Click on every malicious entry and select 'Move to Trash'

Erase from Mozilla Firefox (FF)

In Mozilla Firefox, go to settings, and under Home Page field click Restore to Default button. Then go to Search tab and, if you can see value anywhere, delete it. 

The image showing how virus infects Mozilla

  1. Remove dangerous extensions
    Open Mozilla Firefox, click on the menu icon (top right corner) and select Add-ons Extensions. Click on menu icon and select 'Add-ons'
  2. Here, select and other questionable plugins. Click Remove to delete these entries. Select 'Extensions' and look for malicious entries. Click 'Remove' to get rid of each of them
  3. Change your homepage if it was altered by virus:
    Click on the menu (top right corner), choose Options General.
  4. Here, delete malicious URL and enter preferable website or click Restore to default.
  5. Click OK to save these changes. When in 'General' tab, delete malicious URL from 'Home Page' section or click on 'Restore to Default' button. Click 'OK' to save changes
  6. Reset Mozilla Firefox
    Click on the Firefox menu on the top left and click on the question mark. Here, choose Troubleshooting Information. Click on menu icon and then on '?'. Select 'Troubleshooting Information'
  7. Now you will see Reset Firefox to its default state message with Reset Firefox button. Click this button for several times and complete removal. Click on 'Reset Firefox' button for a couple of times

Eliminate from Google Chrome

Open Chrome settings and scroll down. Then find On Startup Panel and click on Set pages option. Here, remove value and add your preferred URL there. Click OK. Then, change the preference to “Open the New Tab page.” Behind the Appearance tab, you will see link again. Click Change, delete this URL from the field and select Use the New Tab page. Click OK. Then deselect Show Home button option. Next, go to Search engines section and click on Manage Search engines. Delete tech-connect value from there. hijacker om Google Chrome web browser


  1. Delete malicious plugins
    Open Google Chrome, click on the menu icon (top right corner) and select Tools Extensions. Click on menu icon. Select 'Tools' and 'Extensions'
  2. Here, select and other malicious plugins and select trash icon to delete these entries. Look for malicious entries and delete each of them by clicking on the Trash bin icon
  3. Change your homepage and default search engine if it was altered by your virus
    Click on menu icon and choose Settings.
  4. Here, look for the Open a specific page or set of pages under On startup option and click on Set pages. After clicking on menu and 'Settings', select 'Set pages'
  5. Now you should see another window. Here, delete malicious search sites and enter the one that you want to use as your homepage. Click 'X' to remove malicious URLs
  6. Click on menu icon again and choose Settings Manage Search engines under the Search section. When in 'Settings', select 'Manage search engines...'
  7. When in Search Engines..., remove malicious search sites. You should leave only Google or your preferred domain name. Click 'X' to remove malicious URLs
  8. Reset Google Chrome
    Click on menu icon on the top right of your Google Chrome and select Settings.
  9. Scroll down to the end of the page and click on Reset browser settings. When in 'Settings', scroll down to 'Reset browser settings' button and click on it
  10. Click Reset to confirm this action and complete removal. Click on 'Reset' button to complete your removal

Get rid of from Internet Explorer (IE)

Open your browser, go to its settings and open Internet options panel. In the Home page section, delete and enter your preferred one. Delete browsing history then, and alter search engine settings. Remove any entries or components related to this browser hijacker. 

  1. Remove dangerous add-ons
    Open Internet Explorer, click on the Gear icon (IE menu) on the top right corner of the browser and choose Manage Add-ons. Click on menu icon and select 'Manage add-ons'
  2. You will see a Manage Add-ons window. Here, look for and other suspicious plugins. Disable these entries by clicking Disable: Right click on each of malicious entries and select 'Disable'
  3. Change your homepage if it was altered by virus:
    Click on the gear icon (menu) on the top right corner of the browser and select Internet Options. Stay in General tab.
  4. Here, remove malicious URL and enter preferable domain name. Click Apply to save changes. Delete malicious URL, enter your desired domain name and click 'Apply' to save changes
  5. Reset Internet Explorer
    Click on the gear icon (menu) again and select Internet options. Go to Advanced tab.
  6. Here, select Reset.
  7. When in the new window, check Delete personal settings and select Reset again to complete removal. Go to 'Advanced' tab and click on 'Reset' button. Now select 'Delete personal settings' and click on 'Reset' button again

Remove from Safari

To remove virus from Safari, you should eliminate suspicious add-ons from this browser and reset it. To see them, you need to go to Safari’s Preferences..

Safari browser affected by virus


  1. Remove dangerous extensions
    Open Safari web browser and click on Safari in menu at the top left of the screen. Once you do this, select Preferences. Click on 'Safari' and select 'Preferences'
  2. Here, select Extensions and look for or other suspicious entries. Click on the Uninstall button to get rid each of them. Go to 'Extensions' and uninstall malicious add-ons
  3. Change your homepage if it was altered by virus:
    Open your Safari web browser and click on Safari in menu section. Here, select Preferences as it was displayed previously and select General.
  4. Here, look at the Homepage field. If it was altered by, remove unwanted link and enter the one that you want to use for your searches. Remember to include the "http://" before typing in the address of the page. When in 'General', delete malicious URL and enter your desired domain name
  5. Reset Safari
    Open Safari browser and click on Safari in menu section at the top left of the screen. Here, select Reset Safari.... Click on 'Safari' and select 'Reset Safari...'
  6. Now you will see a detailed dialog window filled with reset options. All of those options are usually checked, but you can specify which of them you want to reset. Click the Reset button to complete removal process. Select all options and click on 'Reset' button

About the author

Olivia Morelli
Olivia Morelli - Ransomware analyst

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Olivia Morelli
About the company Esolutions

Removal guides in other languages

  1. Oblivi0n says:
    September 12th, 2016 at 6:04 am

    Thanks for sharing info about I was planning to use this search engine, but now I am glad that I didnt.

  2. Jordan008 says:
    September 12th, 2016 at 6:05 am

    I have been attacked by a different browser hijacker a while ago; yesterday, my mom asked why website appears in her browser and i immediately recognized that it is a browser hijacker. as always, I came to this site for removal instructions. Thanks again!

  3. Willym says:
    September 12th, 2016 at 6:06 am

    I just cannot stand computer viruses! Its so hard to remove them!

  4. mcqueen says:
    September 12th, 2016 at 6:07 am has redirected be to some really suspicious sites. I wonder if this search engine is safe to use. Maybe it is better to avoid it!

Your opinion regarding virus