Why does my search engine keep changing to Yahoo?

Yahoo is a legitimate search engine, but if your search bar changes to Yahoo without your input, then that’s a red flag. If your search engine keeps changing to Yahoo even after you switch it to something else, odds are that you have malware on your device—most likely a browser hijacker.

In this post, we’ll explain what a browser hijacker is, how you can remove the malware, and how you can prevent malware such as browser hijackers from invading your device again.

What is a browser hijacker?

A browser hijacker is a type of malware. You’re probably familiar with the word “malware” but just in case you’re not, malware is malicious software. While motives can vary, one common aim of this invasive software is to steal data. Malware can also disrupt devices and networks.

Just one of many types of malware is a browser hijacker. This is created with the intention of modifying your internet browser settings without your knowledge or consent. Not only can a browser hijacker change your search engine, it can also change your home page.

What are some of the risks of a browser hijacker?

A browser hijacker can forcefully redirect you to certain websites and change your home page. They might be phishing sites, or sites laden with intrusive ads. Some browser hijackers and adware inject ads into your browser.

Some browser hijackers may even contain spyware in the form of a keylogger. A keylogger records keystrokes and, as a result, is capable of gathering some very sensitive (and valuable) information. This includes login credentials, online banking details, and private messages. Some of the consequences of keyloggers (essentially a form of spyware) includes cyber stalking and identity theft. Needless to say, browser hijackers can pose all sorts of problems.

How do browser hijackers infect a device?

Browser hijackers have multiple ways to infect a device. One of the most common is through the installation of a compromised web browser toolbar, extension, or add-on. These are typically bundled with free software or found on third-party sites. You can also get a browser hijacker by downloading a malicious email attachment, opening an infected file, or clicking the wrong link on a malicious website.

In the overwhelming majority of cases, it’s not the user’s intention to download and install the browser hijacker. Most people won’t know that a browser hijacker is bundled with a particular set of files or software. Changes can be small, from adding a new toolbar to more serious hijackings that redirect the user to malicious websites.

What are the signs of a browser hijacker?

Think you’ve already been infected by a browser hijacker? Here are a few of the telltale signs that can help you confirm your suspicions:

• Your browser’s default search engine keeps changing to another (such as Yahoo)
• A new toolbar, plugin, or extensions has appeared in your browser that you didn’t knowingly install
• You are forcefully redirected to shady websites
• More pop-up ads than usual appear in your browser
• Web pages load more slowly than usual
• Your home page has changed without your input

Some browser hijackers are more discreet than others, and may be more difficult to detect. This is especially true if their goal is to spy on you.

How to remove a browser hijacker

The good news is that most browser hijackers aren’t too difficult to remove. The quickest and easiest way to remove a browser hijacker is by running antivirus or anti-malware software.

Here’s how to use an antivirus to remove a browser hijacker:

1. Download and install a trusted antivirus program. Our best antivirus providers include Norton 360 and TotalAV.
2. Open the antivirus app and perform a full scan of your device.
3. Let the antivirus quarantine and remove the infected files.

While the easiest way to remove a browser hijacker is usually with quality antivirus software, you may be able to manually remove it yourself. Below, we explain how you can do this.

How to reset your browser

It can also be a good idea to reset your browser to its default settings. We’ll explain how to do this with the most popular browsers. Note that resetting your browser removes plugins in Firefox and Edge. However, it only disables them in Chrome so we’ll also explain how to fully remove plugins (also referred to as extensions) within Chrome browser.

Chrome

1. Open Chrome.
2. Click on More (the three dots in the top right corner) and go to Settings.
3. Select Reset settings > Restore settings to their original defaults > Reset settings.

And here’s how to remove plugins within Chrome:

1. Open Chrome
2. Click More (three dots or lines in the top right).
3. Select Extensions from the list.
4. Go to the extension (plugin) you’d like to delete and select Remove.
5. Click Remove again to confirm.

Firefox

1. Open Firefox.
2. Click on the three horizontal lines in the top right corner.
3. Select Help followed by More troubleshooting information.
4. Click on Refresh Firefox. Press Refresh Firefox again to confirm.

Edge

1. Open Microsoft Edge.
2. Click on the three horizontal dots in the top right corner and then select Settings.
3. Select Reset Settings from the left hand menu.
4. Click on Restore settings to their default values and press Reset to confirm.

Safari

Safari is a lot more complicated to reset because there’s no single reset button available. Instead, you need to clear your Safari history and cache, and delete extensions, bookmarks, and plug-ins.

Here’s how to clear your Safari history:

1. Open Safari.
2. Click on Safari on the menu bar and select Preferences (or Settings).
3. Select Privacy from the top of the window that appears.
4. Go to Manage Website Data and then click Remove All.

Here’s how to clear clear your Safari cache:

1. Select Safari followed by Preferences.
2. Click on the Advanced tab.
3. Tick the box next to Show Develop menu.
4. Click on the Develop menu and select Empty Caches.

Here’s how to remove Safari extensions:

1. Click on the Safari menu and select Preferences.
2. Select the Extensions tab.
3. Check the box next to an extension followed by Uninstall.

Here’s how to delete Safari bookmarks:

1. Click the Sidebar button in the toolbar.
2. Go to Bookmarks.
3. Right-click on each bookmark and hit Delete.

Here’s how to delete Safari plugins:

1. In Finder, click on the Go menu and select Library.
2. Open the Internet Plug-ins folder.
3. Drag the plug-ins to the trash can.

In some cases, the browser hijacker will be installed on your system as an app, rather than a browser extension or add-on. You will need to uninstall it as you would other programs:

Removing a browser hijacker on Windows

1. Click on the Windows logo in the bottom left corner of the screen.
2. Type Control Panel in the search bar.
3. Click on Uninstall a program underneath Programs.
4. Sort the listed programs by Installed On.
5. Select any suspicious software and click Uninstall.

Removing a browser hijacker on Mac

By following the below steps, you can see all of the applications on your Mac, including those that are hidden that run in the background.

1. Click on the Apple icon in the top left corner of the screen.
2. Select About This Mac followed by Overview>System Report.
3. Go to Applications under the Software section.
4. Using Last Modified, arrange the applications to show those most recently modified.
5. Proceed to uninstall any unknown applications by going to Finder>Applications and dragging the relevant program to the trash on the far right end of the dock.

Browser hijackers: FAQs