Critical-service.cc appears in public malware collections and in reports where a home PC suddenly feels “managed”: searches reroute, the homepage won’t stick, and ad tabs open on their own. Treat the domain as a symptom, not a destination.
One persistence path abuses browser policies so settings revert after you fix them, while Task Scheduler launches mshta.exe to fetch a remote HTML application on a timer. You might notice, similar to Forest-entity.cc, Some-othertag.cc and Holiday-forever.cc, a split-second blank window before a new tab appears.
We tested that SpyHunter successfully removes Critical-service.cc* and we recommend using it. It will block Critical-service.cc from reinstalling itself and it will make sure your device is clean from any malware.
Try Free For 7 Days*
Buy now15% OFF if you buy straight without trial.
OFFERCheck whether the browser is marked as managed: in Chrome or Edge, open chrome://policy or edge://policy and scan for entries you didn’t set. Remove unknown extensions, then use the browser’s reset feature to restore startup and search defaults.
Then open Task Scheduler, sort by Last Run Time, and review each task’s Actions; delete any mshta-with-URL tasks, even if several repeat the same command. Run a full SpyHunter 5 antivirus scan, reboot, and rotate key passwords if you suspect an infostealer.
Step-by-Step Browser Hijacker Cleanup Checklist
Work through the checklist in sequence and jot down anything you disable or remove, so you can roll back a change if a site or extension you actually need stops working. This method targets Critical-service.cc, cuts persistent pop-ups, and helps you restore normal browsing across all profiles without guessing which setting triggered the redirects.
Quick Checks to Roll Back Browser Changes
- 1.1Open your browser Settings and review any preferences that Critical-service.cc may have pinned or redirected.
In Chrome, click the ⋮ menu in the upper-right; in Firefox, use the ≡ menu to reach the same options.
Open Extensions or Add-ons, scan the list, and mark anything you did not install. - 1.2Review each add-on by its name, icon, requested permissions, and the full description.
When something feels wrong – confusing branding, generic wording, or unexpected access requests – click Remove.
If you’re undecided, search the exact “extension name” and compare the publisher details with user feedback. - 1.3Open Privacy and security, then choose Site permissions.
Check which sites can use your microphone, camera, location, and notifications.
Remove access you don’t recognize and leave permissions only where you truly need them. - 1.4Still under Site permissions, clear approvals you never meant to allow.
This reduces repeated prompts, loud alerts, and surprise redirects at startup.
Finish by restarting the browser, then verify the unwanted behavior stays gone.
If the pop-ups and redirects stop after these quick checks, the immediate cause was likely an extension or permission you just removed. If the problem comes back, a policy can still be pushing settings each time the browser opens. Keep going to track down leftover enforcement without using a full reset.
SUMMARY:
| Threat name | Critical-service.cc |
| Category | Browser hijacker |
| Scan option |
Some threats reinstall themselves if you don’t delete their core files. We recommend downloading SpyHunter to remove harmful programs for you. This may save you hours and ensure you don’t harm your system by deleting the wrong files. |
Manual Browser Hijacker Cleanup
If your browser shows the message “Managed by your organization,” a policy is overriding normal preferences, so a basic reset may not clear the lock. The steps below point you to the places where those entries live and how to remove them so Critical-service.cc cannot reapply changes when the browser starts. Take notes and restart Windows to confirm results.
1. Identify Active Browser Policies
- 1.1
Open the built-in policy page to see rules that Critical-service.cc may have set for your browser.
In Chrome: chrome://policy
In Edge: edge://policy
Wait for the list to populate, then review unfamiliar entries; use Reload policies to refresh or export for comparison. - 1.2Open each policy and look for random IDs, unusual URLs, or values that don’t match your setup.
Write down anything you can’t explain so you can match it to folders or extension IDs later.
Keep the exact policy Name and Value because those often point to files or registry entries you will remove. - 1.3Go to the browser Extensions page and enable Developer mode.
This view reveals extension IDs and install paths you can use during cleanup.
Copy each suspicious ID into a text file so you can match it to folders on disk. - 1.4If the Extensions page is blocked or disabled, switch to File Explorer.
Working directly in the profile folders lets you continue even when the browser UI is restricted.
Turn on View > Show > Hidden items so the AppData folders appear. - 1.5
Use File Explorer to open:
C:\Users[Your Username]\AppData\Local\Google\Chrome\User Data\Default\Extensions
Each folder name is an extension ID; compare it with your notes, avoid folders you know are legitimate, and make a quick desktop backup before deleting anything. - 1.6
For other Chromium-based browsers (e.g., Brave, Opera), extensions live under a similar AppData path.
Verify the extension ID and location before you remove any folder tied to an unwanted add-on.
Use the browser About page to confirm it is fully closed so files unlock for removal. - 1.7After removing the suspicious folder, return to Extensions with Developer mode still on.
Confirm the entry is gone; if it reappears, repeat the deletion and look for remaining files that restore it.
Click Update in Developer mode to refresh the list and catch silent reinstalls.
Remove Enforced Browser Policies in Windows
Some enforced settings are stored in the Windows Registry, and careless edits can cause instability, so keep your changes narrow and intentional. Use the policy names or extension IDs you wrote down to find matching entries, and remove only what clearly maps back to Critical-service.cc. Check each match twice before deleting.
3. Delete Browser Policy Keys in the Registry
- 3.1Press Win + R, type regedit, then press Enter to open Registry Editor and find policy keys linked to Critical-service.cc.
Before you change anything, use File > Export to create a full registry backup.
Select All under Export range and save the file in Documents or another easy-to-find folder. - 3.2Use Ctrl + F or Edit > Find to search for recorded policy names or extension IDs.
Click Find Next and delete only exact matches that clearly belong to the enforced changes.
Press F3 until no related values remain under HKCU and HKLM. - 3.3
If a key refuses to delete, right-click it, choose Permissions, then Advanced.
Under Owner, click Change, type Everyone, select Check Names, and confirm with OK.
Give Full Control to Administrators and Users so the key and its subkeys can be removed. - 3.4
After ownership is updated, enable Replace owner on subcontainers and objects and Replace all child object permission entries.
Select Apply, then OK, Reboot, and check whether Managed by your organization still appears.
If it disappears, reopen regedit and rerun your searches to confirm the related values did not return.
If a reboot brings the managed banner or forced preferences back, something on the system can be restoring them quietly in the background. The checks below focus on finding the component that keeps rebuilding policy entries tied to Critical-service.cc, without applying broad resets or changing unrelated Windows settings. These steps matter most when fixes don’t stick.
Alternative Ways to Clear Enforced Browser Policies
3. Other Ways to Remove Policy Enforcement
- 3.1
Open Local Group Policy Editor (Win + S → Edit Group Policy) and look for rules that Critical-service.cc may have created.
Expand Administrative Templates in both Computer Configuration and User Configuration to review machine and user scopes. - 3.2
Right-click Administrative Templates → Add/Remove Templates.
Remove templates you never installed, then open Windows Components → Microsoft Edge or Google Chrome and set suspicious entries to Not Configured. - 3.3In Chrome, a tool like Chrome Policy Remover can help surface policy folders that are hard to spot.
Download only from a trusted source, choose Run as administrator, then open chrome://policy → Reload policies to confirm the list is clear. - 3.4Open Task Scheduler → Task Scheduler Library and remove tasks that launch unknown scripts, CMD/PowerShell, or policy loaders at sign-in.
Then check Services for recently added entries from unfamiliar publishers and disable/remove them when they are clearly related.
Uninstall the Hijacker from Chrome, Edge, and Other Browsers
Browser profiles, sync, and stored site data can quietly bring unwanted preferences back after a restart or once you sign in again. To keep Critical-service.cc from reappearing, go through each active profile, reset the specific defaults that were changed, remove noisy permissions, and confirm the extension list stays clean across every browser you actually use.
4. Clear Remaining Browser Changes and Restore Defaults
- 4.1Reopen Extensions/Add-ons and remove anything connected to Critical-service.cc or clearly out of place.
Use built-in pages like chrome://extensions so entries are not hidden behind themed settings screens. - 4.2
Open Clear browsing data and set Time range to All time.
Select cache, cookies, hosted app data, and site settings; keep Saved passwords if needed.
Repeat for each active profile; consider Clear data on exit if reinfection is quick. - 4.3
Go to Privacy and Security > Site settings.
Block or remove unfamiliar entries for notifications, camera, microphone, and location.
Use View permissions and data stored across sites to remove multiple noisy domains at once. - 4.4
Under Search engine → Manage search engines and site search, delete untrusted providers and restore a known one (e.g., Google, Bing, DuckDuckGo).
Remove custom site-search rules added by hijackers. - 4.5Open On startup and Appearance.
Remove unfamiliar URLs set for startup, homepage, or new tab.
Switch back to the browser’s Default theme.
