How to Remove Chromesearch.win

What Is Chromesearch.win?

How to delete https://chromesearch.win/search/?q=... virus (“This setting is enforced by your administrator”)

If your default search engine has been set to Web (Default), keyword: chromesearch.win, query URL: https://chromesearch.win/search/?q=%s&uid=[…] without your participation, and your browser is claiming that “this setting is enforced by your administrator”, then a browser hijacker is at fault. A browser hijacker is a piece of software that changes default search and sometimes other browser settings to generate traffic for specific sites by forcing users to visit those sites repeatedly. In this particular case the browser hijacker also makes changes to Windows Group Policy which is designed for corporate networks and allows admins to manage programs and settings on their users’ computers. Chromesearch.win browser hijacker uses this Windows feature to make chromesearch.win “enforced by your administrator” and essentially unremovable. This step-by-step removal guide will help you to reset Group Policy and get rid of Chromesearch.win.

How Did Chromesearch.win End up on My PC?

Browser hijackers have various ways of distribution but the most common is bundling with freeware: when you install a free program or game, usually the installer will offer you to install several more apps that you can decline. Sometimes those apps are hidden, and you will see them only if you select “custom” installation instead of an “express” or a “recommended” one. Pirated software also can be a source of browser hijackers, as well as other PUPs (potentially unwanted programs) and often even malware.

How to Remove Chromesearch.win

Before going after the browser hijacker itself you need to delete Group Policy files.
Note: this solution is for home computers only. If your computer at work is infected, contact IT personnel instead.

  1. Open %WINDIR%\System32\GroupPolicy folder (just copy that path and paste into the address bar of Windows Explorer). Delete the contents of that folder.
  2. Next open %WINDIR%\System32\GroupPolicyUsers and delete the contents.
  3. Restart the computer.

Alternatively, you can open Command Prompt (right-click and select “Run as Administrator”) and enter following commands one by one:
rd /S /Q “%WinDir%\System32\GroupPolicyUsers”
rd /S /Q “%WinDir%\System32\GroupPolicy”
gpupdate /force

After that you may use our instructions to remove Chromesearch.win manually, and/or run an anti-malware program to get rid of this browser hijacker and make sure no other malware and adware is present on your PC. You may try SpyHunter by Enigma Software; it has excellent detection rate when it comes to malware and PUPs.

DOWNLOAD REMOVAL TOOL

Note: Spyhunter will scan your computer for free and report all malicious files and settings that it finds as well as their locations, however automatic removal will require a purchase.

Other good anti-malware software:
Zemana AntiMalware
HitmanPro

If you are a user of Mac OS X, try Malwarebytes Anti-Malware for Mac.

You can also remove Chromesearch.win by hand using the following instructions.

Remove Chromesearch.win From Browsers:

To get rid of Chromesearch.win, either reset browser settings or remove any new and suspicious extensions from browsers and set new tab page and default search provider.

Reset Google Chrome Settings:

Note: This will disable your extensions and themes, clear cookies and site data, as well as change content settings, start page, new tab page and search engine to default.

  1. Open a new tab.
  2. Copy and paste into the address bar: chrome://settings/resetProfileSettings
  3. Press Enter.
  4. In the dialog box click Reset.
Alternative Way to Get Rid of Chromesearch.win in Google Chrome:
  1. Click on three dots menu button three dots menu at the top right corner of the window.
  2. Select More toolsExtensions.
  3. To remove an extension, click on a trashcan to the right of it.
  4. Click Remove in the dialog box.
  5. Right-click the address bar and select Edit search engines….
  6. Click on three dots button three dots menu next to the search provider you want and select Make default.
  7. Click on three dots button three dots menu next to hijacker search engine and select Remove from list.
  8. Click on back arrow at the top of the page (near Manage search engines).
  9. Under On startup section select Open the New Tab page.
  10. Scroll to the top. Under Appearance section enable Show Home button setting.
  11. Clear the textfield of the existing address. Put the one you want or select New Tab page.
  12. Close Settings tab.
  13. Note: If you cannot access the Extensions page, click on the top left corner of Chrome window and open Task Manager. End processes for any unfamiliar extensions that are running. Then go to the Extensions page and delete these extensions.
    Alternatively, go to %LocalAppData%\Google\Chrome\User Data\Default\Extensions (just copy that path and paste into the address bar of Windows Explorer/File Explorer). Delete all folders within (that will remove all your installed extensions) or search the Internet for the folders’ names to figure out which extension compares to which folder and delete suspicious ones.

Reset Mozilla Firefox Settings:

Note: Your extensions and themes, among other things, will get deleted.

  1. Click on menu button Menu button.
  2. Click on help button Help button and select Troubleshooting Information.
  3. Click Refresh Firefox… in the top-right corner.
  4. In the dialog box click Refresh Firefox.
Alternative Way to Get Rid of Chromesearch.win in Mozilla Firefox:
  1. Click on menu button Menu button and select Add-ons.
  2. Go to Extensions tab.
  3. To uninstall an add-on, click on Remove button next to it.
  4. Note: If the extension is impossible to delete, click on Menu button => Help button => Restart with Add-ons Disabled…. In dialog boxes click Restart => Start in Safe Mode. Repeat steps 1-3. Restart Firefox in normal mode after you are finished.

  5. Click on the search icon in the search bar and click Change Search Settings.
  6. Select search engine you want from the drop-down menu.
  7. Highlight the hijacker search engine in the table below and click Remove.
  8. Go to General tab.
  9. Under Startup section click Restore to Default button.

Reset Internet Explorer Settings:

Note: This will remove most of your saved browser data, including extensions, passwords and the majority of browser settings.

  1. Click Tools button Tools button in the top-right corner.
  2. Select Internet options.
  3. Go to Advanced tab.
  4. Click Reset… button.
  5. Put checkmark in Delete personal settings checkbox.
  6. Click Reset.
Alternative Way to Get Rid of Chromesearch.win in Internet Explorer:
  1. Click Tools button Tools button in the top-right corner.
  2. Select Manage add-ons.
  3. In the drop-down menu under Show: select All add-ons.
  4. To delete an add-on, double-click it; in the new window click Remove.
  5. Go to Search Providers tab.
  6. Right-click the search engine you want and click Set as default.
  7. Right-click the hijacker search engine and click Remove.
  8. Click Close.
  9. Click Tools button Tools button.
  10. Select Internet options.
  11. Under Home page section click Use new tab or enter the URL you want.
  12. Click OK.

Reset Opera Settings:

Note: This will delete all saved data including bookmarks and passwords and return the browser to freshly installed state.

  1. Exit Opera browser.
  2. Open File Explorer.
  3. Go to C:\Users\username\AppData\Roaming\Opera\Opera, where username is the name of your Windows account.
  4. Find and delete Operapref.ini file.
Alternative Way to Get Rid of Chromesearch.win in Opera:
  1. Press Ctrl +Shift + E keys to open extensions manager.
  2. To remove an add-on, click on the x button next to it.
  3. Click OK when asked to confirm.
  4. Click on the top-left corner, select Settings.
  5. In the Search section select one of the search engines from the list.
  6. In the On startup section select Open the start page.
  7. Click OK.

Remove Chromesearch.win From Programs and Features:

Go to Programs and Features, uninstall suspicious programs, programs you don’t remember installing, or programs you installed just before Chromesearch.win appeared on your browser. When you are not sure if a program is safe, look for the answer on the Internet.

Windows XP:

  1. Click Start.
  2. In the Start menu select Settings => Control Panel.
  3. Find and click Add or Remove Programs.
  4. Click on the program.
  5. Click Remove.

Windows Vista:

  1. Click Start.
  2. In the Start menu select Control Panel.
  3. Find and click Uninstall a program.
  4. Click on the program.
  5. Click Uninstall.

Windows 7:

  1. Click Start.
  2. In the Start menu select Control Panel.
  3. Find and select Programs and Features or Uninstall a program.
  4. Click on the program.
  5. Click Uninstall.

Windows 8 / Windows 8.1:

  1. Press and hold Windows key Windows key and hit X key.
  2. Select Programs and Features from the menu.
  3. Click on the program.
  4. Click Uninstall.

Windows 10:

  1. Press and hold Windows key Windows key and hit X key.
  2. Select Programs and Features from the menu.
  3. Click on the program.
  4. Click Uninstall.

How to Protect Your PC From Chromesearch.win and Other Browser Hijackers:

  • Get a powerful anti-malware software, capable of detecting and eliminating PUPs. Having several on-demand scanners would be a good idea too.
  • Keep Windows firewall enabled or get a third-party one.
  • Keep your OS, browsers and security utilities updated. Malware creators find new browser and OS vulnerabilities to exploit all the time. Software writers, in turn, release patches and updates to get rid of the known vulnerabilities and lesser the chance of malware penetration. Antivirus program’s signature databases get updated every day and even more often to include new virus signatures.
  • Adjust your browsers’ settings to block pop-ups and to load plug-ins only when clicked.
  • Download and use Adblock, Adblock Plus, uBlock or one of the similar trustworthy extensions for blocking third-party advertisements on web-sites.
  • Don’t just click on any link you see while browsing the web. That applies particularly to links in comments, on forums, or in instant messengers. Pretty often these are spam links. Sometimes they are used for increasing the traffic to websites, but often enough they will land you on pages that will try to execute a malicious code and infect your computer. Links from your friends are suspect too: the person who shares a cute video might not know that the page contains threatening script.
  • Don’t download software from unverified web-sites. You can easily download a trojan (malware that pretends to be a useful application); or some unwanted programs could get installed along with the app.
  • When installing freeware or shareware, be sensible and don’t rush through the process. Choose Custom or Advanced installation mode, look for checkboxes that ask for your permission to install third-party apps and uncheck them, read End User License Agreement to make sure nothing else is going to get installed. You can make exceptions for the apps you know and trust, of course. If declining from installing unwanted programs is not possible, we advise you to cancel the installation completely.

18 thoughts on “How to Remove Chromesearch.win

  1. Reply
    rohit - November 14, 2017

    Sir

    You are Awesome , I followed google’s instruction and failed,even tried to run anti maleware.

    Open %WINDIR%\System32\GroupPolicy folder (just copy that path and paste into the address bar of Windows Explorer). Delete the contents of that folder.
    Next open %WINDIR%\System32\GroupPolicyUsers and delete the contents.
    Restart the computer.

    This Works!!!

  2. Reply
    TV - November 14, 2017

    Dear Sir,
    thank you too. Same problem, same successful solution as Mr. Rohit.
    Everything else including Zemana etc. did not work.

    TV

  3. Reply
    artivis - November 14, 2017

    Great! This worked, I tried all the other solutions, antimalware software and nothing helped… removing the GroupPolicy folders (one is a hidden system folder) worked as a charm.. Thank You!!!

  4. Reply
    John - November 14, 2017

    Thank you so much…

  5. Reply
    Ron - November 15, 2017

    thx

  6. Reply
    Aman khan - November 15, 2017

    Thank you so much. Very helpful article

  7. Reply
    Swapnendu - November 15, 2017

    Thanks for the solution –
    Open %WINDIR%\System32\GroupPolicy folder (just copy that path and paste into the address bar of Windows Explorer). Delete the contents of that folder.
    Next open %WINDIR%\System32\GroupPolicyUsers and delete the contents.
    It worked very nicely

  8. Reply
    liAmirali - November 16, 2017

    Thank you so much

  9. Reply
    Charlie Hughes - November 18, 2017

    Thank you so much for providing this fix. I am in you debt.

  10. Reply
    shupli - November 21, 2017

    I had chromesearch.win in Google Chrome browser, this helped me: [deleted]
    1. Instal Zemana AntiMalware
    2. Scan system
    3. ok

  11. Reply
    ye - November 21, 2017

    thanks fam u da real mvp

  12. Reply
    JC - November 22, 2017

    Hallelujah! Thank you So much! This worked for me 🙂

  13. Reply
    srigeetha - December 1, 2017

    Finallyyy this worked thank you so much :))))))

  14. Reply
    Pin - December 2, 2017

    Thanks Editor !

    It’s work i found this useful

    Alternatively, you can open Command Prompt (right-click and select “Run as Administrator”) and enter following commands one by one:
    rd /S /Q “%WinDir%\System32\GroupPolicyUsers”
    rd /S /Q “%WinDir%\System32\GroupPolicy”
    gpupdate /force

    It almost wasted my 1 hour to search around in internet. have tried numerous of way but only update the group policy help me.

  15. Reply
    Ong - December 5, 2017

    Thank you so much

  16. Reply
    mANUEL - December 7, 2017

    Thank you, no dubious publicity for sponsors, simply solid, proven advice and IT TOTALLY WORKED!

  17. Reply
    R3za - December 10, 2017

    Thank u so much,i be tring 2 day for this problem and try any program,finaly the(zemana malware)fixed my problem.tnx

  18. Reply
    fadzli - December 11, 2017

    thank you so much, it really works

Leave a Reply

Your email address will not be published. Required fields are marked *

Scroll to top