Browser Keeps Redirecting? How to Remove Redirect Viruses
You search for something on Google and end up on a sketchy search engine you've never seen. Or every link redirects through ad-filled pages before reaching the real site. Browser redirect infections are one of the most annoying malware types — here's how to clean them out.
What's Happening
Browser redirects are caused by one of three things:
- Malicious extensions: A browser extension is intercepting your searches and redirecting them
- Modified browser settings: Your homepage, default search engine, or new tab page has been changed by malware
- DNS hijacking: Your computer's DNS settings point to a malicious server that redirects traffic
Step 1: Remove Suspicious Extensions
Chrome
- Type chrome://extensions in the address bar
- Review every extension. Remove anything you don't recognize or didn't intentionally install
- Pay special attention to extensions with vague names like "Search Helper," "Web Companion," "SafeSearch," or "Browser Protector"
Firefox
- Type about:addons in the address bar
- Click Extensions and remove anything suspicious
Edge
- Type edge://extensions in the address bar
- Review and remove suspicious extensions
Step 2: Reset Browser Settings
Even after removing the extension, the settings it changed may persist:
- Chrome: Settings → Reset settings → Restore settings to their original defaults
- Firefox: Help → More Troubleshooting Information → Refresh Firefox
- Edge: Settings → Reset settings → Restore settings to their default values
Step 3: Check DNS Settings
Some malware changes your DNS to route all traffic through a malicious server:
- Open Settings → Network & Internet → your connection → Hardware properties
- Check DNS server assignment. It should say "Automatic (DHCP)" or your ISP's DNS. If it shows unfamiliar IP addresses, change it back to automatic or use 8.8.8.8 / 1.1.1.1
Step 4: Scan for Malware
- Run a full Windows Defender scan: Settings → Privacy & Security → Windows Security → Virus & threat protection → Scan options → Full scan
- Download and run Malwarebytes Free (malwarebytes.com) for a second-opinion scan — it catches things Defender sometimes misses
- Run AdwCleaner (also by Malwarebytes) — specifically designed for browser hijackers and adware
Step 5: Check Installed Programs
Go to Settings → Apps → Installed apps and sort by install date. Look for programs installed around when the redirects started. Common culprits include "Web Companion" by Adaware, "Search Protect" by Conduit, or anything with "toolbar" in the name. Uninstall them.
Prevention
- Only install browser extensions from the official stores (Chrome Web Store, Firefox Add-ons)
- Read extension permissions before installing — a coupon finder shouldn't need to "read and change all your data on all websites"
- When installing free software, always choose "Custom" or "Advanced" installation and uncheck bundled offers
- Keep Windows Defender's real-time protection enabled
If the redirects persist after all these steps, the infection may be deeper — a rootkit or system-level hijack. These are quick to fix via remote session because we can see exactly what's running on your system and remove it at the source.