No matter how careful you are with your browsing, downloads, and online habits, you can still end up getting something sketchy installed on your PC or attached to your browser. You might think you haven’t downloaded anything unwanted but malware has its ways of slipping through the cracks without you realizing.
Case in point, many users recently reported a browser hijacker called Zepisu.com, and most of those users have no idea how it got there. No shady downloads, no pirated software, and yet the hijacker is there, controlling their browser, redirecting their searches, and being an overall annoyance.
We tested that SpyHunter successfully removes Zepisu.com* and we recommend using it. It will block Zepisu.com from reinstalling itself and it will make sure your device is clean from any malware.
Try Free For 7 Days*
Buy now15% OFF if you buy straight without trial.
OFFERIf you are among those users, don’t worry, you most likely don’t have some serious malware in your PC that’s empowering the hijacker.
Zepisu and other such hijackers like Luckfusion.info and Newtab.art are often distributed via harmless software like console game emulators and open-source game mods. Sometimes they even enter the browser after the user absent-mindedly clicks “Allow” on a site pop-up and then forgets about it. In any case, your response should still be the same – to remove the hijacker. And since deleting it manually can be a bit tricky, I’ve prepared a helpful guide to show you the exact steps to delete this malware
Step-by-Step Guide to Removing Zepisu
Go through these steps in order and write down what you disable or remove so you can reverse it if something important stops working. This steady cleanup targets Zepisu, cuts recurring pop-ups and notification spam, and helps you regain control while you stabilize Chrome, Edge, Firefox, and other browsers.
Quick steps to roll back browser changes
- 1.1Open your browser’s Settings and start undoing changes introduced by Zepisu.
In Chrome, use the ⋮ menu; in Firefox, open the ≡ menu to reach the same controls.
Go to Extensions or Add-ons, scan the list, and mark anything unfamiliar for removal. - 1.2Check each add-on’s name, icon, requested permissions, and the full description.
Watch for generic wording or details that don’t match – select Remove when something looks off.
When unsure, search the exact “extension name” to verify the publisher and current feedback. - 1.3Open Privacy and security, then Site permissions.
Review which sites can use your microphone, camera, location, and notifications.
Turn off entries you don’t recognize and keep a short allow-list so legitimate sites still work. - 1.4In Site permissions, remove any domains you never meant to approve.
This reduces repeated prompts, push-notification spam, and forced startup pages.
When done, restart the browser and confirm the unwanted behavior is gone.
If pop-ups and redirects stop after this pass, you likely removed the trigger. If they continue, a policy may be restoring changes at startup. Continue with the sections below to find and remove leftovers without performing broad resets.
SUMMARY:
| Threat | Zepisu.com |
| Category | Browser hijacker |
| Scanner |
Some threats reinstall themselves if you don’t delete their core files. We recommend downloading SpyHunter to remove harmful programs for you. This may save you hours and ensure you don’t harm your system by deleting the wrong files. |
If you have a Windows virus, continue with the guide below.
If you have a Mac virus, please use our How to remove Ads on Mac guide.
If you have an Android virus, please use our Android Malware Removal guide.
If you have an iPhone virus, please use our iPhone Virus Removal guide
Manually Remove the Zepisu Browser Hijacker
When the browser shows “Managed by your organization,” startup policies are locking important options, so a simple reset often won’t remove the lock. The tasks below help you identify and delete the entries that let Zepisu reapply settings, while keeping edits deliberate so you can revert changes after rebooting Windows.
1. See which browser policies are applied
- 1.1
Open the browser policy page to see rules that may have been pushed by Zepisu.
In Chrome: chrome://policy
In Edge: edge://policy
Let the list populate, inspect unfamiliar entries, and use Reload policies to refresh or export. - 1.2Review each policy for strange IDs or values that look randomly generated.
Write down anything suspicious so you can match it to a folder name or extension ID later.
Save the exact policy Name and Value; these often point to the keys or paths you will remove. - 1.3Open the browser’s Extensions page and switch on Developer mode.
That view reveals extension IDs and install paths you can use during cleanup.
Copy any questionable ID into a text file so you can match it to folders on disk. - 1.4If Extensions won’t open or is disabled, use File Explorer instead.
Working directly in profile folders keeps you moving even when the browser UI is locked.
Turn on View > Show > Hidden items so AppData appears. - 1.5
In File Explorer, open:
C:\Users[Your Username]\AppData\Local\Google\Chrome\User Data\Default\Extensions
Each folder name is an extension ID. Compare IDs to your notes, avoid removing folders you know are legitimate, and copy anything you plan to delete to the desktop first as a quick backup. - 1.6
Other Chromium-based browsers (including Brave and Opera) keep extensions under a similar AppData layout.
Double-check the extension ID and location before deleting any folder tied to an unwanted add-on. - 1.7After deleting the suspect folder, go back to Extensions with Developer mode still enabled.
Confirm the extension is gone; if it reappears, repeat the folder check and look for leftovers that reinstall it.
Select Update in Developer mode to refresh the list and catch silent reinstalls.
Remove Zepisu Policies from Windows
Some browser restrictions are written into the Windows Registry, and careless edits there can cause instability. Change only entries that clearly relate to Zepisu and skip broad deletions. This removes policy hooks that survive simple browser resets while keeping the system stable, predictable, and reversible.
2. Delete policy keys in the Registry
- 2.1Press Win + R, type regedit, and press Enter to open Registry Editor and start tracking policy keys associated with Zepisu.
Before you change anything, go to File > Export and create a backup.
Select All under Export range and save it in Documents or another easy folder. - 2.2Use Ctrl + F or Edit > Find to search for the policy names you noted or the related extension IDs.
Choose Find Next, then remove only exact matches that obviously connect to the unwanted changes.
Press F3 repeatedly until nothing related remains under HKCU and HKLM. - 2.3
If a key won’t delete, right-click it, choose Permissions, then Advanced.
Under Owner, click Change, type Everyone, select Check Names, and confirm with OK.
Give Full Control to Administrators and Users so you can remove the key and its subkeys. - 2.4
After ownership is updated, enable Replace owner on subcontainers and objects and Replace all child object permission entries.
Click Apply, then OK, Reboot, and see whether the Managed by your organization banner still appears.
If it’s gone, open regedit again and re-run your searches to make sure the values don’t return.
Scheduled tasks, services, and local policy files can silently restore browser settings after you think you’ve finished cleaning up. Aim your changes at items that clearly connect to Zepisu so you don’t break unrelated features with broad resets. Use the focused checks below, verify each edit, then restart Windows to confirm the managed banner and forced settings stay gone.
Other Options to Clear Zepisu-Enforced Policies
3. Extra ways to remove Zepisu.com policy enforcement
- 3.1
Open Local Group Policy Editor (Win + S → Edit Group Policy) and check for browser rules that Zepisu may have added.
Expand Administrative Templates under both Computer Configuration and User Configuration to review device-wide and per-user settings. - 3.2
Right-click Administrative Templates → Add/Remove Templates.
Remove templates you didn’t install, then open Windows Components → Microsoft Edge or Google Chrome and switch questionable rules to Not Configured. - 3.3In Chrome, a tool like Chrome Policy Remover may help reveal persistent policy folders.
Get it from a trusted source, Run as administrator, then open chrome://policy → Reload policies to confirm the page is cleared. - 3.4Open Task Scheduler → Task Scheduler Library and remove tasks that launch unknown scripts, CMD/PowerShell, or policy loaders at logon.
In Services, look for recently added entries from unknown publishers and disable or remove the ones that clearly relate to the changes.
Remove Zepisu from Chrome, Edge, and Other Browsers
Browser profiles, sync, and cached site data can bring back altered preferences as soon as you sign in again or reopen the app. To keep Zepisu from resurfacing, confirm your defaults, permissions, and search providers, then clear saved data that allows unwanted rules to persist across sessions and profiles.
4. Remove remaining Zepisu.com changes in your browsers
- 4.1Open Extensions/Add-ons again and uninstall anything connected to Zepisu or that clearly doesn’t belong.
Use built-in pages like chrome://extensions so themes and UI changes can’t hide entries. - 4.2
Open Clear browsing data and set Time range to All time.
Remove cache, cookies, hosted app data, and site settings; keep Saved passwords if needed.
Repeat for each profile; if the issue returns quickly, enable Clear data on exit for a short period. - 4.3
Open Privacy and Security > Site settings.
Block or remove unknown entries for notifications, camera, microphone, and location.
Use View permissions and data stored across sites to remove multiple noisy domains at once. - 4.4
Open Search engine → Manage search engines and site search, remove untrusted providers and restore a known one (e.g., Google, Bing, DuckDuckGo).
Delete custom site-search rules added by hijackers. - 4.5Open On startup and Appearance.
Remove unfamiliar URLs used for the startup page, homepage, or new tab.
Switch back to the browser’s Default theme.
