Smart New Tab Virus Removal


  

This page aims to help you remove the Smart New Tab Virus. These Smart New Tab Virus removal instructions work for all versions of Windows. The virus is commonly known for redirecting 

We are convinced that you did not came upon this article by accident,i.e., by randomly surfing the web. If you are reading this text, then you have most likely encountered Smart New Tab Virus and are wondering ‘what the heck is this?’; ‘how do I protect my PC from the attack?’; and ‘how do I remove the virus?’ Well, we’ve got some good news for you: this article will tell you all of this information and the instructions provided are suitable for Chrome, Mozilla Firefox and Internet Explorer.

Without further explanations let’s get to the topic now: the Smart New Tab Virus

Smart New Tab Virus

Smart New Tab Virus

What the heck is Smart New Tab Virus?

This is a virus that isn’t considered to be risky, but that is a misconception. Every malware is not only a potential threat for your system and information, but it is a very active hazard that many don’t take into consideration until one day they find their lovable device simply dead.

The virus could be quite vulnerable. By this we mean that it usually slows the performance of your PC and many glitches come up that you have not experienced before. Random bugs show-up here and there in between your files or even a browser redirecting may occur. For example, you are looking into one webpage and suddenly random and additional pages open up and/or tabs. The information presented on them could be absolutely meaningful at first gaze, but it could also be quite disgusting. Either way, this is a very,very bad sign and you should be aware of what to do if it happens to you.

The presence of Smart New Tab Virus into your system may cause you to lose content of important files or the entire files as a whole.

How do I protect my PC from Smart New Tab Virus attacks?

There are many ways you could do that. Obviously, there are plenty of anti-virus programs out there that you could purchase and install on your computer, but they are not always the solution you are looking for. Some of them don’t even provide a 100% protection against all types of viruses.It is always best to know how to do things yourself — ‘the old fashioned way’. For this reason we have given you a prepared to use removal guide that will teach you step-by-step how to uninstall the virus off your PC.

Other things you could do are (not a complete list as there are many other possibilities for ‘virus-insurance’):

  • Pay attention when you’re downloading a file. Make sure you don’t use the default and/or automated settings when performing the download. It is always best to select what you want and don’t want in the advanced settings space. This will guarantee you maximum protection against software bundling. In short, software bundling is when you think that you are downloading one file, but in reality you are downloading many files. Almost always, all of them are virus carriers.
  • Look carefully for how many advertisements you see on the websites you visit. Avoid sites with too many pop-up ads that could either appear as banners or flashing boxes. These can show-up in the top,bottom, corner or even worse, in the middle of your screen.
  • Before opening e-mails, look into the subject field, the name of the sender, the hour it arrived in your inbox and size of letter. Phishing e-mails are imitations of letters sent to you by your friends, especially if you have added them into your address book. These are quite tricky and people easily get caught into their nets. These are viruses! If you happen to open one of them and you see a blank page, flashing text or self-dissapearing content, then now that it is a virus and immediately close the e-mail, browser, reboot your computer. If you have a good anti-virus program, you might want to scan it too.

You don’t need to hire an IT specialist to remove Smart New Tab Virus of your PC. You don’t need to throw your device away either. You need to be confident that you can manage the problem on your own and this confidence comes through knowledge. We invite you to read carefully the attached removal guide as your confidence against the malware begins with it.

SUMMARY:

Name Smart New Tab
Type Browser Hijacker
Danger Level Medium
Symptoms  bugs, browser redirects, unwanted files, redirects to smartnewtab.com
Distribution Method e-mails, pop-up ads, too many commercials
Detection Tool We generally recommend SpyHunter or a similar anti-malware program that is updated daily.

 

Smart New Tab Virus Removal


Readers are interested in:

 

Step1

Reboot in Safe Mode (use this guide if you don’t know how to do it).

This was the first preparation.

Step2

Reveal All Hidden Files and Folders.

  • Do not skip this  – Smart New Tab Virus may have hidden some of its files.

Hold together the Start Key and R. Type appwiz.cpl –> OK.

appwiz

You are now in the Control Panel. Look for suspicious entries. Uninstall it/them.

Type msconfig in the search field and hit enter. A window will pop-up:

msconfig_opt

Startup —> Uncheck entries that have “Unknown” as Manufacturer.

Step3

Hold the Start Key and R –  copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A new file will open. If you are hacked, there will be a bunch of other IPs connected to you at the bottom. Look at the image below:

hosts_opt (1)

If there are suspicious IPs below “Localhost” – write to us in the comments.

Step4

Right click on the browser’s shortcut —> Properties.

NOTE: We are showing Google Chrome, but you can do this for Firefox and IE (or Edge).

browser-hijacker-taskbar-properties

Properties —–> Shortcut. In Target, remove everything after .exe.

ie9-10_512x512  Remove the Malware from Internet Explorer:

Open IE, click  IE GEAR —–> Manage Add-ons.

pic 3

Find the malware —> Disable. Go to IE GEAR —–> Internet Options —> change the URL to whatever you use (if hijacked) —> Apply.

firefox-512 Remove Smart New Tab Virus from Firefox:

Open Firefoxclick  mozilla menu  ——-> Add-ons —-> Extensions.

pic 6

Find the adware/malware —> Remove.


chrome-logo-transparent-backgroundRemove Smart New Tab Virus from Chrome:

Close Chrome. Navigate to:

 C:/Users/!!!!USER NAME!!!!/AppData/Local/Google/Chrome/User Data. There is a Folder called “Default” inside:

Rename the Folder to Backup Default

Rename it to Backup Default. Restart Chrome.

  • At this point the malware is gone from Chrome, but complete the entire guide or it may reappear on a system reboot.

Step5

Press CTRL + SHIFT + ESC simultaneously. Go to the Processes Tab. Try to determine which ones are a virus. Google them or ask us in the comments.

BIG WARNING! READ CAREFULLY BEFORE PROCEEDING!

Right click on each of the virus processes separately and select Open File LocationEnd the process after you open the folder. Just to make sure we don’t delete any programs you mistakenly took for a virus, copy the folders somewhere, then delete the directories you were sent to.

malware-start-taskbar

Step6

Type Regedit in the windows search field and press Enter.

Inside, press CTRL and F together and type the virus’s Name. Right click and delete any entries you find with a similar name. If they don’t show this way, go manually to these directories and delete/uninstall them:

  • HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious.
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random

Remember to leave us a comment if you run into any trouble!


98 Comments

    • Hello,

      All of these are Chinese sites and unfortunately I am not familiar with the language. They could be suspicious – can you tell me how did you came across these sites, were they promoted by the Ads?

  • Heya,

    You should definitely delete this one. It is used by a variety of browser hijackers and spy applications on order to track your online activity.

    Try shutting it down and deleting associated files. If you are having trouble and it reappears let me know for more detailed instructions.

  • Hello again Coni,

    If the process does not reappear after you deleted it you should be OK. Not all viruses write in the registry.

    If it gives you any more trouble let me know.

  • Hi again Coni,

    Did you perform everything else written in the guide? Did you have problems with one or more of the steps? TData is most definitely malicious, but i may not be connected to Smartnewtabs adware.

    I’ll be waiting for your answer.

    • Hello Noa,

      Try doing the instructions written in the guide. If you still have the virus afterwards contact me to determine what went wrong.

    • Hi Bill,

      Yes, you should delete them all, then save the file.

      If you have any problems doing that let me know.

      • I had the same ip thing as the guy above…At the first attempt it wouldn’t let me change it…but in the second attempt it allowed me to change it…is there something wrong about this?

  • Hi Charles,

    I am confident that the guide works as it has helped a lot of people already. Either you’ve been hit by a new strain or you are missing or not doing something properly. Either way I’d recommend that you purchase the program we recommend – SpyHunter. It has an option to contact the engineers directly and have them look into your PC. I can do only so much remotely.

  • I can’t remove the file because it needs permission from Trusted Installer, How do I sort this out? (Also the virus is labelled “search” with a pink icon.

    • Hi Remi,

      Did you turn on safe mode first? Also try right clicking on the file -> properties -> use as administrator.

      Let me know how it goes please.

    • Hi Harris,

      Those IPs were left behind by the virus and you need to delete them. Do it, then save the file as normal.

      Let me know if everything is OK after that.

  • Hi Steven,

    Editing the registry is mostly cleanup work, if you are still getting redirected the main body of the virus is still there.

    You can try downloading SpyHunter from one of our banners. The scan service is free and it will tell you where the last virus files are hidden. You can go to those directories and delete them yourself if you don’t want to pay for the program.

    Let me know if you encounter any problems with that please.

  • Hi, there

    rhino acme and x.acme are unfamiliar to me and I couldn’t find anything positive about them. Could be old leftovers, but could be installed by the malware too. I recommend that you delete them.
    ]Let me know if you encounter any issues.

    • Hi Michael,

      You should delete all these lines. Let me know if you have any problems with permission to edit the file.

  • Hi there,

    Please type Notepad in windows search, then right click on the executable and select run as administrator. When the program starts select the open menu and navigate to the Hosts file manually. You should now be able to save it.

  • Hi,

    Hmm, that’s weird. We tested SpyHunter on our machines and it was able to find it.

    Which browser you are using?

  • Hi Marco,

    If you don’t want to pay for the program you can use it to look at these file locations of the virus files and delete them from there.

      • Hi again Matt,

        In this case try resetting your chrome profile. Go to the Settings and look for the account panel. Create yourself a new account, then delete the old one.

        Did it help?

  • Hi Akshat,

    There is nothing special about this. Just delete the lines with the bad IPs.

    if you cannot save the file afterwards you need to close without saving, then run Notepad as admin (search for the exe. right click run as admin), then open the hosts file from the files->open menu from inside notepad.

      • Hi there,

        You need to search for Notepad in windows search, right click on it and select Run as admin. When the program runs use the inside “Open” menu to open the hosts file and delete the lines.

    • Hi Sani, what you need to do is simply delete those lines from the file, then save it. If you don’t get permission to do that first run Notepad as an admin (search for notepad in windows search,, right click on exe-> run as admin) and then open the Hosts file from the inside menu of Notepad: File->Open.

  • Hi Madison, you shouldn’t (and can’t) delete the “default” file. Let me know if you need any more help!

  • All of these IPs are related to the Adware, I recommend that you delete them and save the file after that.

    Let me know if you encounter any problems.

  • Hi Sue, can you download SpyHunter and run a system scan? That you can do for free. Can you tell me if it finds anything related to the smart new tabs and which location it finds them?

  • Do you remember installing an asian program or something like that? I have no idea if you should remove it, it might be a legitimate program.
    I suggest you download the scanner from one of our ads and try to find the infected files that way.

  • Can you please share what these IPs are? Some may be safe, others probably not, but I can’t know until you reply 🙂

  • Hi Manohar, you need to run Notepad as admin first, then open the Hosts file from the Open menu inside the program. That should allow you access.

  • Hi Sierra, you need to open the Notepad program as admin first. Search for notepad and right click -> run as admin on it. Use the Open menu from the inside to open the hosts file and get permission to save it.

  • Hi Ted, try just smart tab or other combinations of the spelling. This is not actually a virus, but an Adware (thought it will not refer to itself like that).

      • Hi again Ted, maybe they got smarter and used a different name. Used to work before, damn. You can try downloading Spyhunter and using it to search for the virus. Search with the program is free (removal is paid though) and will point you to the right folders if you want to delete manually.

  • I found a registry folder like this:

    HKEY_CURRENT_USERSOFTWARE32CF2C7CE253DCB757BB00542E6E5C15

    Is it the virus source?

    • Hello Vyan,

      It is impossible to say just be looking at this entry. If you have suspicions it might be best if you download and install the scanner from one of our banners.

  • In the field write this: notepad %windir%/system32/Drivers/etc/hosts

    You’ll open a file that may contain a bunch of IPs and suspicious domain names. If anything looks suspicious delete it – you are not in danger of breaking anything while doing that.

  • Hi Joey,
    can you please post some of the lines you think suspicious here so we can check them ?

  • Can you help me with this? It’s starting to bug me off. Whenever I type something on google’s search bar, this bar pops up and the words I’m typing suddenly shows up on this fraud tab and if I click enter, it would direct me to play bar and then to another search engine. Please help me. Also smart new tab suddenly just pops up. I tried using adblock and it kinda work in a way that I don’t see them specially the smartnew tab. However, in the case of that fake search tab, it doesn’t show up anymore but appears as a white space. Help please

  • Hi Duck,
    if you don’t find the name of the virus here so it isn’t here. Did you press Ctrl + F to find you virus somewhere there ?

  • Hi again, addresses that start with 127.0.0.1 are actually blocked from getting opened on your PC. Those you don’t need to delete.

  • Hi 念來過反會才頭木,
    Does Smart New Tab still persist in your system ?Did you manage to complete the guide in Safe Mode ?

  • Well, if you are having problems with Smart New Tab, you should definitely remove those and save the changes, since the unwanted software might be coming from them

Leave a Comment