How to Remove “Lucky Search 123” (Firefox/Chrome)

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.


This page aims to help you remove “Lucky Search 123”. These “Lucky Search 123” removal instructions work for Firefox,Chrome and Internet Explorer/Edge, as well as every version of Windows.

In the event that you’ve been infected with a browser hijacker, more specifically “Lucky Search 123” – you’ve come to the right place. We’re guessing you came to the realization that “Lucky Search 123” might be integrated with your browser (Chrome, Firefox, Edge) by noticing some of the most typical of its traits: redirecting your searches to unknown webpages, substituting your homepage and default search engine for those of its own and showering you with an uncontrollable stream of ads. Well, luckily we’ve assembled a removal guide just for this case; you will find it further down on this page, simply follow the instruction and they will lead you to the successful removal of “Lucky Search 123” and all its components. However, we advise you to read through the following few paragraphs, as they contain basic, but necessary information regarding this type of programs.

Is “Lucky Search 123” a virus?

This is usually the first thing that comes to mind, when users become infected with a hijacker, especially when it’s the first time this happens. Browser hijackers are not malicious, they are not viruses and have never been categorized as such. The highest they may rank on the danger scale is as potentially unwanted programs or PUP’s, which isn’t particularly high. But it’s not very low, either. There are certain risks associated to keeping such software on your machine, the least of which involves its performance. Programs like “Lucky Search 123” tend to call on a lot of your computer’s resources in order to generate their massive ad campaigns and over time this could lead to a significant slacking in its overall performance. You might begin to witness browser crashes, an overly long load time of more and more of your apps and even system errors. But, as pointed out, these should be the least of your worries.

Risks tied to browser hijackers

As hijacker developers use the Pay Per Click scheme to make a profit from their software, they tend to employ certain questionable tactics to benefit from it as much as possible. In order to produce ads that would have a higher chance of getting clicked, they tend to research user’s browsing activity and use the gathered information to adjust the numerous popups and banners and their contents. Though this may seem pretty clever at first, on second reading this practice does raise a solid amount of concern as to how this data is kept, where it goes to, who has access to it and what it may be potentially used for later on. And the developers do indeed have a reputation for selling this information to various third parties, so there’s rarely ever smoke without fire.

Another rather disturbing factor that may push you towards removing the invasive program even more is directly related to the ads that you see on your screen. It can happen that certain hackers and cybercriminals may exploit a given ad and corrupt it by embedding it with a virus, like ransomware, for example. This is a very dangerous thing and ads like these are referred to as malvertisements. Clicking on one of them will get you infected in no time and more often than not, you won’t have the slightest idea of what hit you until it’s already too late. Though it’s fairly rare that you would land on an ad like that from the number of those produced by “Lucky Search 123”, it’s still a possibility and one you’d rather keep far, far away from.

Preventing an infection

Browser hijackers, along with adware and other potentially unwanted programs are most commonly distributed through program bundles. If you’re a fan of freeware and shareware and enjoy the benefits of files sharing sites and open source download platforms, chances are that’s exactly how you got infected. Developers like to package their software together with these free ad-distributing programs, because hardly anyone would go out of their way to download a hijacker on its own. It’s important that you customize the installation of any newly downloaded software, because only then will be aware of the rest of the components of the package. To do this all you need to do is choose the advanced or custom settings in the setup wizard and you’ll then see a list of all the added programs. You will also be able to unselect whichever ones you don’t want installed on your computer and the issue will have been averted without even getting a chance to become one.  

SUMMARY:

Name “Lucky Search 123”
Type Browser Hijacker
Danger Level Medium (nowhere near threats like Ransomware, but still a security risk)
Symptoms  Changed homepage and/or default search engine and distribution of large amount of ads
Distribution Method Progrma bundles, most commonly available for download on various file sharing websites. 
Detection Tool

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you’ll need to purchase the full version.
More information about SpyHunter and steps to uninstall.

 

How to Remove “Lucky Search 123”


 

Step1

Some of the steps will likely require you to exit the page. Bookmark it for later reference.

Reboot in Safe Mode (use this guide if you don’t know how to do it).

Step2

WARNING!
To remove parasite, you may have to meddle with system files and registries. Making a mistake and deleting the wrong thing may damage your system.
Avoid this by using SpyHunter - a professional Parasite removal tool.

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.

Reveal All Hidden Files and Folders.

  • Do not skip this  – “Lucky Search 123” may have hidden some of its files.

Hold together the Start Key and R. Type appwiz.cpl –> OK.

appwiz

You are now in the Control Panel. Look for suspicious entries. Uninstall it/them.

Type msconfig in the search field and hit enter. A window will pop-up:

msconfig_opt

Startup —> Uncheck entries that have “Unknown” as Manufacturer or otherwise look suspicious.

Step3

Hold the Start Key and R –  copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A new file will open. If you are hacked, there will be a bunch of other IPs connected to you at the bottom. Look at the image below:

hosts_opt (1)

If there are suspicious IPs below “Localhost” – write to us in the comments.

Open the start menu and search for Network Connections (On Windows 10 you just write it after clicking the Windows button), press enter.

  1. Right-click on the Network Adapter you are using —> Properties —> Internet Protocol Version 4 (ICP/IP), click  Properties.
  2. The DNS line should be set to Obtain DNS server automatically. If it is not, set it yourself.
  3. Click on Advanced —> the DNS tab. Remove everything here (if there is something) —> OK.

DNS

Step4

Right click on the browser’s shortcut —> Properties.

NOTE: We are showing Google Chrome, but you can do this for Firefox and IE (or Edge).

browser-hijacker-taskbar-properties

Properties —–> Shortcut. In Target, remove everything after .exe.

ie9-10_512x512  Remove “Lucky Search 123” from Internet Explorer:

Open IE, click  IE GEAR —–> Manage Add-ons.

pic 3

Find the threat —> Disable. Go to IE GEAR —–> Internet Options —> change the URL to whatever you use (if hijacked) —> Apply.

firefox-512 Remove “Lucky Search 123” from Firefox:

Open Firefoxclick  mozilla menu  ——-> Add-ons —-> Extensions.

pic 6

Find the adware/malware —> Remove.
chrome-logo-transparent-backgroundRemove “Lucky Search 123” from Chrome:

Close Chrome. Navigate to:

 C:/Users/!!!!USER NAME!!!!/AppData/Local/Google/Chrome/User Data. There is a Folder called “Default” inside:

Rename the Folder to Backup Default

Rename it to Backup Default. Restart Chrome.

  • At this point the threat is gone from Chrome, but complete the entire guide or it may reappear on a system reboot.

Step5

Press CTRL + SHIFT + ESC simultaneously. Go to the Processes Tab. Try to determine which ones are dangerous. Google them or ask us in the comments.

WARNING! READ CAREFULLY BEFORE PROCEEDING!

This is the most important and difficult part. If you delete the wrong file, it may damage your system irreversibly. If you can not do this,
>> Download SpyHunter - a professional parasite scanner and remover.

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.

Right click on each of the problematic processes separately and select Open File LocationEnd the process after you open the folder, then delete the directories you were sent to.

malware-start-taskbar

Step6

Type Regedit in the windows search field and press Enter.

Inside, press CTRL and F together and type the threat’s Name. Right click and delete any entries you find with a similar name. If they don’t show this way, go manually to these directories and delete/uninstall them:

  • HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious.
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random

Remember to leave us a comment if you run into any trouble!

Was this guide helpful?