Browser Redirect

How to Remove New Tab Win “Virus” (Chrome/Firefox/IE)

Parasite may reinstall itself multiple times if you don't delete its core files. We recommend downloading SpyHunter to scan for malicious programs installed with it. This may save you hours and cut down your time to about 15 minutes. 

Download SpyHunter Anti-Malware

More information on SpyHunter, steps to uninstallEULAThreat Assessment Criteria, and Privacy Policy.

This page aims to help you remove New Tab Win “Virus”. Our removal instructions work for Chrome, Firefox and Internet Explorer, as well as every version of Windows.

The information that you are going to find in this article is dedicated to a program named New Tab Win. This program is actually a browser hijacker – rather harmless online advertising software, which, despite not as dangerous as a computer virus, may still cause annoyance when it gets installed on your computer.  The effects of New Tab Win may affect the way your browser operates and usually include changes in the default homepage or search engine, as well as unauthorized search redirects and generation of ads, banners, and intrusive pop-ups. Basically, if this program is on your PC, every time you open your Chrome, Firefox, Explorer, or any other browsing app that you are using as default, you may get exposed to a lot of commercials and sponsored web pages. It may be very difficult to close or remove the constant stream of popping new tabs and ads and this may lead to browsing irritation and disturbance. Additionally, you may experience significant sluggishness of the hijacked browser, sudden crashes or unresponsiveness and freezing of the screen, and all in all, you may not be able to surf the web normally unless you fully uninstall the hijacker from your system. In the Removal Guide below you will find detailed instructions on how you can eliminate New Tab Win and bring your browser back to normal, so stay with us and read carefully the information that follows.

New Tab Win

New Tab Win “Virus”

Browser hijackers – getting to know them:

Browser hijackers are very common advertising tools. Online marketers often use them to promote different products, services, and websites and to generate traffic and clicks. However, the security experts may classify these pieces of software as potentially unwanted due to the browsing irritation they may create. Nevertheless, this does not mean that the browser hijackers are malicious programs which can harm your PC. In fact, they have never been related to any malicious or criminal activity since they simply lack the harmful scripts that viruses like Ransomware or Trojans have.

Generally, a program like New Tab Win has simply advertising purposes. Most of the ads that may get displayed on your browser will probably be sponsored by some product and service providers, who may closely cooperate with the developers of the hijacker in order to advertise their products and services. Thanks to methods like Pay-Per-Click, both of the parties can benefit from the redirects and the ads generation. The more the people click on the displayed content, the greater the profit for the developers and the better exposure for the advertised items. This dependency can explain the never-ending stream of pop-ups and suggested sites the hijacker has been programmed to generate.

How to Remove New Tab Win “Virus”

If you have a Windows virus, continue with the guide below.

If you have a Mac virus, please use our How to remove Ads on Mac guide.

If you have an Android virus, please use our Android Malware Removal guide.

If you have an iPhone virus, please use our iPhone Virus Removal guide


Some of the steps will likely require you to exit the page. Bookmark it for later reference.

Reboot in Safe Mode (use this guide if you don’t know how to do it).



We get asked this a lot, so we are putting it here: Removing parasite manually may take hours and damage your system in the process. We recommend downloading SpyHunter to see if it can detect parasite files for you.

Press CTRL + SHIFT + ESC at the same time and go to the Processes Tab (the “Details” Tab on Win 8 and 10). Try to determine which processes are dangerous. 


Right click on each of them and select Open File Location. Then scan the files with our free online virus scanner:

Drag and Drop Files Here to Scan
Maximum file size: 128MB.

This scanner is free and will always remain free for our website's users. You can find its full-page version at:

Scan Results

Virus Scanner Result

After you open their folder, end the processes that are infected, then delete their folders. 

Note: If you are sure something is part of the infection – delete it, even if the scanner doesn’t flag it. No anti-virus program can detect all infections. 


Hold together the Start Key and R. Type appwiz.cpl –> OK.


You are now in the Control Panel. Look for suspicious entries. Uninstall it/them.

Type msconfig in the search field and hit enter. A window will pop-up:


Startup —> Uncheck entries that have “Unknown” as Manufacturer or otherwise look suspicious.


Hold the Start Key and R –  copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A new file will open. If you are hacked, there will be a bunch of other IPs connected to you at the bottom. Look at the image below:

hosts_opt (1)

If there are suspicious IPs below “Localhost” – write to us in the comments.

Open the start menu and search for Network Connections (On Windows 10 you just write it after clicking the Windows button), press enter.

  1. Right-click on the Network Adapter you are using —> Properties —> Internet Protocol Version 4 (ICP/IP), click  Properties.
  2. The DNS line should be set to Obtain DNS server automatically. If it is not, set it yourself.
  3. Click on Advanced —> the DNS tab. Remove everything here (if there is something) —> OK.



  • After you complete this step, the threat will be gone from your browsers. Finish the next step as well or it may reappear on a system reboot.

Right click on the browser’s shortcut —> Properties.

NOTE: We are showing Google Chrome, but you can do this for Firefox and IE (or Edge).


Properties —–> Shortcut. In Target, remove everything after .exe.

ie9-10_512x512  Remove New Tab Win from Internet Explorer:

Open IE, click  IE GEAR —–> Manage Add-ons.

pic 3

Find the threat —> Disable. Go to IE GEAR —–> Internet Options —> change the URL to whatever you use (if hijacked) —> Apply.

firefox-512 Remove New Tab Win from Firefox:

Open Firefoxclick  mozilla menu  ——-> Add-ons —-> Extensions.

pic 6

Find the adware/malware —> Remove.
chrome-logo-transparent-backgroundRemove New Tab Win from Chrome:

Close Chrome. Navigate to:

 C:/Users/!!!!USER NAME!!!!/AppData/Local/Google/Chrome/User Data. There is a Folder called “Default” inside:

Rename the Folder to Backup Default

Rename it to Backup Default. Restart Chrome.


To remove parasite on your own, you may have to meddle with system files and registries. If you were to do this, you need to be extremely careful, because you may damage your system.

If you want to avoid the risk, we recommend downloading SpyHunter
a professional malware removal tool.

More information on SpyHunter, steps to uninstallEULAThreat Assessment Criteria, and Privacy Policy.

Type Regedit in the windows search field and press Enter.

Inside, press CTRL and F together and type the threat’s Name. Right click and delete any entries you find with a similar name. If they don’t show up this way, go manually to these directories and delete/uninstall them:

  • HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious.
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random

Is New Tab Win a virus?

As we already mentioned above, the browser hijackers are not malicious, in fact, they are legitimate. So, you don’t need to get panicked if you ended up with New Tab Win on your system – nothing fatal would happen. A real virus, (such as a Ransomware or a Trojan horse) on the other hand, not only is a creation of a criminal but can be incredibly harmful and may cause irreparable damage to your entire computer. You may catch such a danger in a very stealthy way, without even knowing it and in most of the cases, it will automatically infiltrate your machine.

A browser hijacker can never infect you in a stealthy way. You have to actually install it with the help of a software setup. The advertisers usually use a method called “bundling” which actually allows them to insert ad-generating programs like New Tab Win inside the installer of other programs. Different free applications, audio or video players, software optimization tools, editors, and games may contain additionally bundled hijackers inside their setup. When the users download and run the installation wizard of such bundle, however, they may not be clearly notified about the presence of the additional software unless they carefully customize the installation settings. And since many people often skip the customization process (which includes clicking on the Advanced/ Custom options) they end up with a program like New Tab Win on their system by default. Our advice is to always pay attention and make use of the Advanced/ Custom/ Manual options every time, even if you are installing software from a reputed developer. This way, you will always be in control over the programs that may receive direct or pre-selected permission to become part of your system and you will avoid the need to deal with them later.

Now, to uninstall New Tab Win and remove all of its nagging ads and imposed browser changes, we suggest you follow the instructions in the guide below. A professional automatic tool is also at your disposal, should you need some assistance. Make use of both to bring your browser back to normal.


Name New Tab Win
Type Browser Hijacker
Danger Level Medium (nowhere near threats like Ransomware, but still a security risk)
Symptoms Changes in the default homepage or search engine, as well as unauthorized search redirects and generation of ads, banners, and intrusive pop-ups.
Distribution Method Software bundles, free installers, free download links, torrents, shareware sites, ads, spam messages, email attachments.
Detection Tool

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you’ll need to purchase the full version. More information about SpyHunter and steps to uninstall.

If the guide doesn’t help, download the anti-virus program we recommended or try our free online virus scanner. Also, you can always ask us in the comments for help!

Leave a Comment