Browser Redirect

Remove Newsearch123 Virus Removal From Chrome/Firefox

Parasite may reinstall itself multiple times if you don't delete its core files. We recommend downloading SpyHunter to scan for malicious programs installed with it. This may save you hours and cut down your time to about 15 minutes. 

Download SpyHunter Anti-Malware

More information on SpyHunter, steps to uninstallEULAThreat Assessment Criteria, and Privacy Policy.

This page aims to help you remove Virus. These Newsearch removal instructions work for Chrome, Firefox and Internet Explorer, as well as every version of Windows. Oem_newsearch123 is a potential mistake associated with this virus – it has been displayed to numerous users lately. Virus is a potential computer virus of the Browser Redirect sub-class of malware. Generally considered a somewhat less dangerous type of virus than most of its counterparts, this Browser Redirect application is extremely annoying and can become a nuisance fairly quickly. Not only that – you also need to be wary that by keeping it on your system for a prolonged period of time you exponentially increase the chance that more dangerous malware might infiltrate your defenses.

The Newsearch123 homepage

The homepage

The main attribute of Browser Redirect viruses are, as the name suggests, the advertisements that will keep showing on your desktop for as long as your browser is active. There is also the possibility of browser redirects – when you try to open a specific website, but instead wind up on a completely different one that is also potentially fraudulent.

What is dangerous about the Virus?

As if the endless supply of advertisements and browser redirects were not bad enough already there are other significant drawbacks to having this malware remain on your PC for long

  • There is a considerably drop-off in system performance, especially visible on older systems. Due to the significantly higher load that your CPU and physical memory will need to handle every time an ads pop-ups, this will inevitably negatively impact your computer’s performance.
  • You have probably caught up to the curious fact that most of the displayed ads seem somewhat familiar. In fact they are all related to your recent web page visits and search engine queries. That can only mean one thing – the virus has access to your web cache and cookies. Even more disturbingly – all of your stored user names and passwords might be in danger as well. This is especially threatening if you are using some form of online payment. And let’s face it – nowadays most people do. Keep that in mind and change your passwords after you have gotten rid of the virus once and for all.

It is possible that some parts or maybe even whole Steps in our removal guide bear no semblance to your particular problems with Virus. This is no coincidence. There are different versions of the virus floating about and it would be really hard to tailor a specific guide for each one of them, so we’ve tried to cover for all. If any part is not applicable just skip it and continue with the rest of our guide. If some questions remain unanswered or if you need some more information you can easily post it in our comments section. We always strive for quick and interactive communication with our readers.


Type Browser Hijacker
Danger Level Medium.
Symptoms  A great amount of unwanted and annoying ads, browser redirecting, slowed down computer.
Distribution Method Compromised executable files, software bundled installations.
Detection Tool Malware and Adware are notoriously difficult to track down, since they actively try to deceive you. Use this professional parasite scanner to make sure you find all files related to the infection.Sponsored


If the removal guide helps you, remember: a thank you in the comments goes a long way to warm our hearts!
1: Enter Safe Mode.
2: Remove Virus from Chrome, Firefox and Internet Explorer.
3: Remove attachments to browser shortcuts.
4: Uninstall the virus from your Add/Remove Programs.
5: Permanently delete the threat from Task Manager’s processes.
6: Uninstall the virus from Regedit and Msconfig.

Remove Newsearch123. Virus Removal From Chrome/Firefox



Reboot in Safe Mode (use this guide if you don’t know how to do it).

This was the first preparation.


To remove parasite on your own, you may have to meddle with system files and registries. If you were to do this, you need to be extremely careful, because you may damage your system.

If you want to avoid the risk, we recommend downloading SpyHunter
a professional malware removal tool.

More information on SpyHunter, steps to uninstallEULAThreat Assessment Criteria, and Privacy Policy.

The first thing you absolutely must do is Reveal All Hidden Files and Folders.

  • Do not skip this step. Virus may have hidden some of its files and you need to see them.

Note that Virus has spread to all your browsers. This means that in addition to removing it from Chrome and Firefox you will need to repeat Step 2 for all other possible web browsers you might have. Most people don’t know that, but it is important to remove the virus completely and utterly and not leave any trace of it or you would be risking its swift return in full force, typically after a system reboot.


ie9-10_512x512 Remove the Malware from Internet Explorer:

Open IE, click IE GEAR —–> Manage Add-ons.

pic 3

Find the malware. Remove it by pressing Disable. If your Home Page has been hijacked, go to IE GEAR —–> Internet Options> change the URL to whatever you use —> Apply. Reset Your IE Settings

firefox-512 Remove Virus from Firefox:

Open Firefox, click mozilla menu (top right) ——-> Add-ons —-> Extensions.

pic 6

Find the Browser Redirect/malware —> Remove. Refresh Your Firefox Settings.

chrome-logo-transparent-background Remove Virus from Chrome:

Start Chrome, click chrome menu icon —–>More Tools —–> Extensions. Find the malware and select chrome-trash-icon

pic 8

Click chrome menu icon —> Settings —> Search —> Manage Search Engines. Delete everything but your normal search engines. Reset Your Chrome Settings.


Right click on the browser’s shortcut —> Properties.

NOTE: We are showing Google Chrome, but you can do this for Firefox and IE (or Edge) as well.


Properties —–> Shortcut. In Target, remove everything after .exe.


Hold together the Start Key and R. Type appwiz.cpl –> OK.


You are now in the Control Panel. Look for suspicious entries. Uninstall it/them. If you see a screen like this when you click Uninstall, choose NO:


Hold the Start Key and R copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A new file will open. If you are hacked, there will be a bunch of other IPs connected to you at the bottom. Look at the image below:

hosts_opt (1)

If there are suspicious IPs below “Localhost” – write to us in the comments.

Open the Start Menu, type “Control Panel” in the search box —> Enter. Network and Internet —> Network and Sharing Center —> Change Adapter Settings. Right-click your Internet connection —> Properties.

In Networking, left click Internet Protocol Version 4 —> Properties. If everything is normal, your window will look like this:

DNS Settings

If it’s not, click on the two “automatic” choices. NOTE: If you are in a domain network, contact your Domain Administrator so he can make these settings, or this may break your Internet Connection.


Press CTRL + SHIFT + ESC simultaneously. Go to the Processes Tab. Try to determine which ones are a virus. Google them or ask us in the comments.


Please be warned – what is to follow from here on out is extremely important to the full and undeniable removal of Virus from your system and cannot be skipped. At the same time we want to be absolutely clear that some readers might find the remaining steps hard to accomplish and somewhat tricky. Keep in mind that you will need to alter important system files and even a small mistake or deviation from our instructions are almost sure to lead to some very significant and devastating consequences to your device.

We cannot in good conscious encourage you to continue unless you are absolutely sure you can handle the possible negative outcome regarding your computer. If you are not, then we strongly urge you to consider instead downloading and using a professional anti-malware solution. This would be a way safer and minimally attention requiring approach.



Right click on each of the virus processes and select Open File Location, then End the process. Copy the folders somewhere (as a backup if you make a mistake) and delete the directories you were sent to.


Type msconfig in the search field and hit enter. A window will pop-up:


Go in Startup —> Uncheck entries that have “Unknown” as Manufacturer.

Type Regedit in the windows search field and press Enter.

Once inside, press CTRL and F together and type the virus’s Name. Right click and delete any entries you find with a similar name. If they don’t show this way, go manually to these directories and delete/uninstall them:

  • HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious.
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random


  • Hi Hakim,

    DId you go through the our guide already? Resetting the chrome browser should fix this, but if you have not already removed the malware it is just going to change it again.

  • Hi John,

    Did you try deleting your current account and creating a new one? I mean Chrome account – go to options and navigate to accounts section.

Leave a Comment