How to Remove Newtab.review “Virus” (Chrome/FF/IE) Jan. 2018 Update


This page aims to help you remove Newtab.review “Virus”. Our removal instructions work for Chrome, Firefox and Internet Explorer, as well as every version of Windows.

Most probably, you came across our page while browsing for an effective solution that can help you remove a program called Newtab.review from your system. Or maybe, various ads, delivered by Newtab.review have started appearing on your monitor and interfering with your browsing experience and you would like to learn if they are caused by some nasty virus infection. Whatever the reasons are, in this article you will find detailed information about this program as well as a detailed removal guide, which can help you uninstall it. Basically, what we are going to describe here is a typical browser hijacker – an ad-generating piece of software, which can integrate with your browser (Chrome, Firefox, IExplorer, etc.) and make some changes to its homepage or search engine with the idea to redirect your searches to various ads. The moment you start browsing the internet, the browser hijacker will start displaying different types of pop-ups, banners, and intrusive new tabs, which may quickly irritate you and make you want you to uninstall this software from your computer permanently.

Newtab.review Removal

Newtab.review “Virus”

Why is Newtab.review “Virus” flooding you with ads?

The main reason for the unstoppable ads redirects and pop-ups that programs like this generate is the strive for aggressive advertising and Pay-Per-Click revenue. Browser hijackers are basically programmed to act as online advertising tools, and the more ads they generate, the bigger the benefits for their creators. Usually, the developers profit via sponsored redirects which increase the traffic to certain sites and prompt the users to click on certain offers, products or services. Such an advertising practice is completely legal, however, some people may find it really irritating because it may often make them interact with content they never had the intention to. For this and a few more reasons, a program like Newtab.review could be classified as potentially unwanted.

How to Remove Newtab.review “Virus”

If you are a Windows user, continue with the guide below.

If you are a Mac user, please use our How to remove Ads on Mac guide.

If you are an Android user, please use our Android Malware Removal guide.


Step1

Some of the steps will likely require you to exit the page. Bookmark it for later reference.

Reboot in Safe Mode (use this guide if you don’t know how to do it).

Step2

WARNING! READ CAREFULLY BEFORE PROCEEDING!

Press CTRL + SHIFT + ESC at the same time and go to the Processes Tab (the “Details” Tab on Win 8 and 10). Try to determine which processes are dangerous. 

malware-start-taskbar

Right click on each of them and select Open File Location. Then scan the files with our free online virus scanner:

Drag and Drop Files Here to Scan
Maximum file size: 128MB.

This scanner is free and will always remain free for our website's users. You can find its full-page version at: https://howtoremove.guide/online-virus-scanner/




Scan Results


Virus Scanner Result
ClamAV
AVG AV
Maldet

After you open their folder, end the processes that are infected, then delete their folders. 

Note: If you are sure something is part of the infection – delete it, even if the scanner doesn’t flag it. No anti-virus program can detect all infections. 

Step3

Hold together the Start Key and R. Type appwiz.cpl –> OK.

appwiz

You are now in the Control Panel. Look for suspicious entries. Uninstall it/them.

Type msconfig in the search field and hit enter. A window will pop-up:

msconfig_opt

Startup —> Uncheck entries that have “Unknown” as Manufacturer or otherwise look suspicious.

Step4

Hold the Start Key and R –  copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A new file will open. If you are hacked, there will be a bunch of other IPs connected to you at the bottom. Look at the image below:

hosts_opt (1)

If there are suspicious IPs below “Localhost” – write to us in the comments.

Open the start menu and search for Network Connections (On Windows 10 you just write it after clicking the Windows button), press enter.

  1. Right-click on the Network Adapter you are using —> Properties —> Internet Protocol Version 4 (ICP/IP), click  Properties.
  2. The DNS line should be set to Obtain DNS server automatically. If it is not, set it yourself.
  3. Click on Advanced —> the DNS tab. Remove everything here (if there is something) —> OK.

DNS

Step5

  • After you complete this step, the threat will be gone from your browsers. Finish the next step as well or it may reappear on a system reboot.

Right click on the browser’s shortcut —> Properties.

NOTE: We are showing Google Chrome, but you can do this for Firefox and IE (or Edge).

browser-hijacker-taskbar-properties

Properties —–> Shortcut. In Target, remove everything after .exe.

ie9-10_512x512  Remove Newtab.review from Internet Explorer:

Open IE, click  IE GEAR —–> Manage Add-ons.

pic 3

Find the threat —> Disable. Go to IE GEAR —–> Internet Options —> change the URL to whatever you use (if hijacked) —> Apply.

firefox-512 Remove Newtab.review from Firefox:

Open Firefoxclick  mozilla menu  ——-> Add-ons —-> Extensions.

pic 6

Find the adware/malware —> Remove.
chrome-logo-transparent-backgroundRemove Newtab.review from Chrome:

Close Chrome. Navigate to:

 C:/Users/!!!!USER NAME!!!!/AppData/Local/Google/Chrome/User Data. There is a Folder called “Default” inside:

Rename the Folder to Backup Default

Rename it to Backup Default. Restart Chrome.

Step6

Type Regedit in the windows search field and press Enter.

Inside, press CTRL and F together and type the threat’s Name. Right click and delete any entries you find with a similar name. If they don’t show up this way, go manually to these directories and delete/uninstall them:

  • HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious.
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random

Are there any suspicious effects and features that Newtab.review may run?

Despite being legal and generally harmless, a browser hijacker could still have some rather shady ways of performing its advertising tasks. For instance – you may notice that Newtab.review is magically showing you ads, that are more or less relevant to your latest online searches. This is because the hijacker may actually be programmed to monitor your browsing activity, analyze it and transmit it to third-party advertisers, who can offer you their ads. The amount of banners and pop-ups you may get exposed to in one single browsing session may also be enormous. You may frequently find yourself redirected to some unfamiliar sites and being prompted to click on various links, the safety of which may not be guaranteed. The risk of catching Ransomware, a Trojan horse or some other nasty virus always exists if you interact with unfamiliar content, that’s why our advice is to be careful with browser hijackers and avoid letting them redirect you on a random basis, or even better, remove them from your system entirely.

Does all that mean that Newtab.review is a version of malware?

Fortunately, no browser hijacker is considered a virus. This software may be annoying and may hide some indirect risks, however, it cannot corrupt your system or cause some serious damage on its own. Real malware, such as Trojans, Ransomware, Spyware and other viruses, typically initiates some pretty destructive processes such as system crashes, data theft or encryption, deletion of files and software, spying and many other types of criminal deeds. Neither Newtab.review nor any other type of browser hijacker can harass you like that. At its worst, this software may flood your screen with ads and redirect you to certain web locations, some of which may be insecure, but it cannot directly run a malicious script on your system.

How you may have ended up with a browser hijacker on your system and how to avoid that in the future?

Browser hijacker invasions are a common problem for many online users. The reason for this is the fact that this software is widely distributed over the internet and is often bundled inside the installers of other attractive programs. The method of “bundling” basically allows the software developers to group two or more pieces of software in one installation and distribute them as one. Oftentimes, programs like Newtab.review are promoted as “suggested components” during the setup of free programs, optimization tools, games and browser applications. However, you are the one to decide whether this “suggested component” will become part of your system or not. Unfortunately, most of the times, when installing a new program, the users don’t read the EULA carefully and run through the setup process without paying attention to small boxes, options like Advanced/ Custom or pre-selected checkups. This way they automatically allow the browser hijacker to get installed, while the only thing they need to do to prevent it is to carefully select the detailed Advanced/ Custom/ Manual options.

SUMMARY:

Name Newtab.review
Type Browser Hijacker
Danger Level Medium (nowhere near threats like Ransomware, but still a security risk)
Symptoms Intrusive generation of ads, sudden page redirects, new homepage or search engine in your browser.
Distribution Method Mostly distributed in free software bundles, torrents, free download links, automatic installers, ads, spam emails and attachments.
Detection Tool We generally recommend SpyHunter or a similar anti-malware program that is updated daily.

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you’ll need to purchase the full version. More information about SpyHunter and steps to uninstall.

If the guide doesn’t help, download the anti-virus program we recommended or try our free online virus scanner. Also, you can always ask us in the comments for help!


Leave a Comment