Smart New Tab Virus Removal

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.


  

This page aims to help you remove the Smart New Tab Virus. These Smart New Tab Virus removal instructions work for all versions of Windows. The virus is commonly known for redirecting 

We are convinced that you did not came upon this article by accident,i.e., by randomly surfing the web. If you are reading this text, then you have most likely encountered Smart New Tab Virus and are wondering ‘what the heck is this?’; ‘how do I protect my PC from the attack?’; and ‘how do I remove the virus?’ Well, we’ve got some good news for you: this article will tell you all of this information and the instructions provided are suitable for Chrome, Mozilla Firefox and Internet Explorer.

Without further explanations let’s get to the topic now: the Smart New Tab Virus

Smart New Tab Virus

Smart New Tab Virus

What the heck is Smart New Tab Virus?

This is a virus that isn’t considered to be risky, but that is a misconception. Every malware is not only a potential threat for your system and information, but it is a very active hazard that many don’t take into consideration until one day they find their lovable device simply dead.

The virus could be quite vulnerable. By this we mean that it usually slows the performance of your PC and many glitches come up that you have not experienced before. Random bugs show-up here and there in between your files or even a browser redirecting may occur. For example, you are looking into one webpage and suddenly random and additional pages open up and/or tabs. The information presented on them could be absolutely meaningful at first gaze, but it could also be quite disgusting. Either way, this is a very,very bad sign and you should be aware of what to do if it happens to you.

The presence of Smart New Tab Virus into your system may cause you to lose content of important files or the entire files as a whole.

How do I protect my PC from Smart New Tab Virus attacks?

There are many ways you could do that. Obviously, there are plenty of anti-virus programs out there that you could purchase and install on your computer, but they are not always the solution you are looking for. Some of them don’t even provide a 100% protection against all types of viruses.It is always best to know how to do things yourself — ‘the old fashioned way’. For this reason we have given you a prepared to use removal guide that will teach you step-by-step how to uninstall the virus off your PC.

Other things you could do are (not a complete list as there are many other possibilities for ‘virus-insurance’):

  • Pay attention when you’re downloading a file. Make sure you don’t use the default and/or automated settings when performing the download. It is always best to select what you want and don’t want in the advanced settings space. This will guarantee you maximum protection against software bundling. In short, software bundling is when you think that you are downloading one file, but in reality you are downloading many files. Almost always, all of them are virus carriers.
  • Look carefully for how many advertisements you see on the websites you visit. Avoid sites with too many pop-up ads that could either appear as banners or flashing boxes. These can show-up in the top,bottom, corner or even worse, in the middle of your screen.
  • Before opening e-mails, look into the subject field, the name of the sender, the hour it arrived in your inbox and size of letter. Phishing e-mails are imitations of letters sent to you by your friends, especially if you have added them into your address book. These are quite tricky and people easily get caught into their nets. These are viruses! If you happen to open one of them and you see a blank page, flashing text or self-dissapearing content, then now that it is a virus and immediately close the e-mail, browser, reboot your computer. If you have a good anti-virus program, you might want to scan it too.

You don’t need to hire an IT specialist to remove Smart New Tab Virus of your PC. You don’t need to throw your device away either. You need to be confident that you can manage the problem on your own and this confidence comes through knowledge. We invite you to read carefully the attached removal guide as your confidence against the malware begins with it.

SUMMARY:

Name Smart New Tab
Type Browser Hijacker
Danger Level Medium
Symptoms  bugs, browser redirects, unwanted files, redirects to smartnewtab.com
Distribution Method e-mails, pop-up ads, too many commercials
Detection Tool

 

Smart New Tab Virus Removal


Readers are interested in:

 

Step1

Reboot in Safe Mode (use this guide if you don’t know how to do it).

This was the first preparation.

Step2

WARNING!
To remove parasite, you may have to meddle with system files and registries. Making a mistake and deleting the wrong thing may damage your system.
Avoid this by using SpyHunter - a professional Parasite removal tool.

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.

Reveal All Hidden Files and Folders.

  • Do not skip this  – Smart New Tab Virus may have hidden some of its files.

Hold together the Start Key and R. Type appwiz.cpl –> OK.

appwiz

You are now in the Control Panel. Look for suspicious entries. Uninstall it/them.

Type msconfig in the search field and hit enter. A window will pop-up:

msconfig_opt

Startup —> Uncheck entries that have “Unknown” as Manufacturer.

Step3

Hold the Start Key and R –  copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A new file will open. If you are hacked, there will be a bunch of other IPs connected to you at the bottom. Look at the image below:

hosts_opt (1)

If there are suspicious IPs below “Localhost” – write to us in the comments.

Step4

Right click on the browser’s shortcut —> Properties.

NOTE: We are showing Google Chrome, but you can do this for Firefox and IE (or Edge).

browser-hijacker-taskbar-properties

Properties —–> Shortcut. In Target, remove everything after .exe.

ie9-10_512x512  Remove the Malware from Internet Explorer:

Open IE, click  IE GEAR —–> Manage Add-ons.

pic 3

Find the malware —> Disable. Go to IE GEAR —–> Internet Options —> change the URL to whatever you use (if hijacked) —> Apply.

firefox-512 Remove Smart New Tab Virus from Firefox:

Open Firefoxclick  mozilla menu  ——-> Add-ons —-> Extensions.

pic 6

Find the adware/malware —> Remove.


chrome-logo-transparent-backgroundRemove Smart New Tab Virus from Chrome:

Close Chrome. Navigate to:

 C:/Users/!!!!USER NAME!!!!/AppData/Local/Google/Chrome/User Data. There is a Folder called “Default” inside:

Rename the Folder to Backup Default

Rename it to Backup Default. Restart Chrome.

  • At this point the malware is gone from Chrome, but complete the entire guide or it may reappear on a system reboot.

Step5

Press CTRL + SHIFT + ESC simultaneously. Go to the Processes Tab. Try to determine which ones are a virus. Google them or ask us in the comments.

BIG WARNING! READ CAREFULLY BEFORE PROCEEDING!

This is the most important and difficult part. If you delete the wrong file, it may damage your system irreversibly. If you can not do this,
>> Download SpyHunter - a professional parasite scanner and remover.

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.

Right click on each of the virus processes separately and select Open File LocationEnd the process after you open the folder. Just to make sure we don’t delete any programs you mistakenly took for a virus, copy the folders somewhere, then delete the directories you were sent to.

malware-start-taskbar

Step6

Type Regedit in the windows search field and press Enter.

Inside, press CTRL and F together and type the virus’s Name. Right click and delete any entries you find with a similar name. If they don’t show this way, go manually to these directories and delete/uninstall them:

  • HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious.
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random

Remember to leave us a comment if you run into any trouble!

Was this guide helpful?

  • Alessandro Pelliccioni

    down.baidu2016.com
    123.sogou.com
    http://www.czzsyzgm.com
    These are suspicious.

     
    • HowToRemove.Guide Team

      Hello,

      All of these are Chinese sites and unfortunately I am not familiar with the language. They could be suspicious – can you tell me how did you came across these sites, were they promoted by the Ads?

       
    • Bruce Gigis

      I have those too! And where should i delete these viruses ?

       
  • HowToRemove.Guide Team

    Heya,

    You should definitely delete this one. It is used by a variety of browser hijackers and spy applications on order to track your online activity.

    Try shutting it down and deleting associated files. If you are having trouble and it reappears let me know for more detailed instructions.

     
  • HowToRemove.Guide Team

    Hello,

    Yes, all of these should be deleted.

    Let me know how it worked out.

     
  • HowToRemove.Guide Team

    Hello again Coni,

    If the process does not reappear after you deleted it you should be OK. Not all viruses write in the registry.

    If it gives you any more trouble let me know.

     
  • HowToRemove.Guide Team

    Hi again Coni,

    Did you perform everything else written in the guide? Did you have problems with one or more of the steps? TData is most definitely malicious, but i may not be connected to Smartnewtabs adware.

    I’ll be waiting for your answer.

     
  • Bruce Gigis

    Is this the one I should delete ?

     
    • HowToRemove.Guide Team

      Hello Bruce,

      Unfortunately your screenshot only shows me the folders. DId these came up connected with the virus when you did the search?

       
      • Bruce Gigis

        I cleared some of the virus. Now for the last one (I think) is the one that pop out new tab whenever i click anywhere on the browser.

         
        • HowToRemove.Guide Team

          Hi again Bruce,

          Did you go through the full guide? Are you still getting popup ads?

           
          • Bruce Gigis

            I still getting popups but decreased. I’ll try again the full guide and let you know.

             
          • HowToRemove.Guide Team

            Allright.

             
  • Noa Strand

    how do i remove this??

     
    • HowToRemove.Guide Team

      Hello Noa,

      Try doing the instructions written in the guide. If you still have the virus afterwards contact me to determine what went wrong.

       
  • Kamel Msaoubi

    It works for me ! Thank you very much, very nice tutorial ! I learnt a lot.

     
    • HowToRemove.Guide Team

      Glad we could help 🙂

       
  • HowToRemove.Guide Team

    Hi Erik,

    These two lines should be the only ones there. Leave them be.

     
  • Rime

    I found Tile Data model server, that’s not the one, right? I’m talking about the TDataSvr

     
    • HowToRemove.Guide Team

      Hi,

      No, this is a different service. You should leave it alone.

      Let me know if you have more questions.

       
  • Bill

    I have these entries underneath the ones that said local host; this is in reference to step 3.
    127.0.0.1 down.baidu2016..com

    127.0.0.1 123.sogou..com

    127.0.0.1 http://www.czzsyzgm..com

    127.0.0.1 http://www.czzsyzxl..com

     
    • HowToRemove.Guide Team

      Hi Bill,

      Yes, you should delete them all, then save the file.

      If you have any problems doing that let me know.

       
      • jeeohlee

        I had the same ip thing as the guy above…At the first attempt it wouldn’t let me change it…but in the second attempt it allowed me to change it…is there something wrong about this?

         
  • HowToRemove.Guide Team

    Hi Charles,

    I am confident that the guide works as it has helped a lot of people already. Either you’ve been hit by a new strain or you are missing or not doing something properly. Either way I’d recommend that you purchase the program we recommend – SpyHunter. It has an option to contact the engineers directly and have them look into your PC. I can do only so much remotely.

     
  • jeeohlee

    itsays i dont have access

     
    • HowToRemove.Guide Team

      Hi there,

      Can you elaborate?

       
      • jeeohlee

        Well…its done now…

         
        • HowToRemove.Guide Team

          Allright, glad you were able to resolve it on your own 🙂

           
  • Remi

    I can’t remove the file because it needs permission from Trusted Installer, How do I sort this out? (Also the virus is labelled “search” with a pink icon.

     
    • HowToRemove.Guide Team

      Hi Remi,

      Did you turn on safe mode first? Also try right clicking on the file -> properties -> use as administrator.

      Let me know how it goes please.

       
  • Harris

    Hello these are the ip’s that I found

    127.0.0.1 down.baidu2016..com

    127.0.0.1 123.sogou..com

    127.0.0.1 http://www.czzsyzgm..com

    127.0.0.1 http://www.czzsyzxl..com

     
    • HowToRemove.Guide Team

      Hi Harris,

      Those IPs were left behind by the virus and you need to delete them. Do it, then save the file as normal.

      Let me know if everything is OK after that.

       
  • HowToRemove.Guide Team

    Glad we could help!

     
  • HowToRemove.Guide Team

    Hi Steven,

    Editing the registry is mostly cleanup work, if you are still getting redirected the main body of the virus is still there.

    You can try downloading SpyHunter from one of our banners. The scan service is free and it will tell you where the last virus files are hidden. You can go to those directories and delete them yourself if you don’t want to pay for the program.

    Let me know if you encounter any problems with that please.

     
  • HowToRemove.Guide Team

    Hi, there

    rhino acme and x.acme are unfamiliar to me and I couldn’t find anything positive about them. Could be old leftovers, but could be installed by the malware too. I recommend that you delete them.
    ]Let me know if you encounter any issues.

     
  • Michael Lim

    127.0.0.1 down.baidu20.16.com

    127.0.0.1 123.sogou..com

    127.0.0.1 http://www.czzsyzgm..com

    127.0.0.1 http://www.czzsyzxl..com

     
    • HowToRemove.Guide Team

      Hi Michael,

      You should delete all these lines. Let me know if you have any problems with permission to edit the file.

       
  • HowToRemove.Guide Team

    Hi there,

    Please type Notepad in windows search, then right click on the executable and select run as administrator. When the program starts select the open menu and navigate to the Hosts file manually. You should now be able to save it.

     
  • HowToRemove.Guide Team

    Hi,

    Hmm, that’s weird. We tested SpyHunter on our machines and it was able to find it.

    Which browser you are using?

     
  • HowToRemove.Guide Team

    Hi Marco,

    If you don’t want to pay for the program you can use it to look at these file locations of the virus files and delete them from there.

     
  • HowToRemove.Guide Team

    HI Matt,

    Can you tell me which browser you are using? Do you get the Ads in other browsers?

     
    • Matt Majic

      I use chrome, and just checked on firefox and I don’t think the ads are there

       
      • HowToRemove.Guide Team

        Hi again Matt,

        In this case try resetting your chrome profile. Go to the Settings and look for the account panel. Create yourself a new account, then delete the old one.

        Did it help?

         
        • Matt Majic

          Actually I think the ads left chrome – maybe deleting the regedit keys had a delayed reaction?
          Thanks heaps

           
          • HowToRemove.Guide Team

            Glad we could help!

             
  • HowToRemove.Guide Team

    Hi Akshat,

    There is nothing special about this. Just delete the lines with the bad IPs.

    if you cannot save the file afterwards you need to close without saving, then run Notepad as admin (search for the exe. right click run as admin), then open the hosts file from the files->open menu from inside notepad.

     
    • Euan

      Sorry, how do you open the hosts file, where actually is it?

       
      • HowToRemove.Guide Team

        This is covered in the guide. Follow the instructions and it will open automatically.

         
  • HowToRemove.Guide Team

    Hi Suresh.

    You need to delete those lines. Let me know if you encounter any problems.

     
    • b1623549

      when i have deleted these lines how/where do i save the document

       
      • HowToRemove.Guide Team

        Hi there,

        You need to search for Notepad in windows search, right click on it and select Run as admin. When the program runs use the inside “Open” menu to open the hosts file and delete the lines.

         
  • HowToRemove.Guide Team

    Hi Akshat, which browser do you use? Do you get the Ads in other browsers too?

     
  • Sani

    these are the suspicious ip addresses

    127.0.0.1 down.baidu2016..com

    127.0.0.1 123.sogou..com

    127.0.0.1 http://www.czzsyzgm..com

    127.0.0.1 http://www.czzsyzxl..com
    please guide me what to do

     
    • HowToRemove.Guide Team

      Hi Sani, what you need to do is simply delete those lines from the file, then save it. If you don’t get permission to do that first run Notepad as an admin (search for notepad in windows search,, right click on exe-> run as admin) and then open the Hosts file from the inside menu of Notepad: File->Open.

       
  • HowToRemove.Guide Team

    Hi Madison, you shouldn’t (and can’t) delete the “default” file. Let me know if you need any more help!

     
  • HowToRemove.Guide Team

    Delete in in the regular way – by pressing Del.

     
  • HowToRemove.Guide Team

    All of these IPs are related to the Adware, I recommend that you delete them and save the file after that.

    Let me know if you encounter any problems.

     
  • HowToRemove.Guide Team

    Hi Sue, can you download SpyHunter and run a system scan? That you can do for free. Can you tell me if it finds anything related to the smart new tabs and which location it finds them?

     
  • HowToRemove.Guide Team

    Hi rizwan, did you already try all steps of the guide?

     
    • Dan

      i did last step and it helped ))) thanks

       
      • HowToRemove.Guide Team

        You are welcome! 🙂

         
    • ♥monu (ღ˘⌣˘)♥ ℒ♡ⓥℯ ㄚ

      nothing helped I don’t even have any suspicious ip’s but shit comes up
      when I Try to open new tab redirects to some darn sites super irritating :/

       
      • HowToRemove.Guide Team

        Hi monu,
        what kind of sites that? Can you post them here so we can help you.

         
        • ♥monu (ღ˘⌣˘)♥ ℒ♡ⓥℯ ㄚ

          Idk crap dating sites and shopping sites especially smart new web site -_-

           
          • HowToRemove.Guide Team

            Did you try to follow our guide step by step? Did you execute them in Safe Mode ?

             
          • ♥monu (ღ˘⌣˘)♥ ℒ♡ⓥℯ ㄚ

            http://www.smartnewtab..com/watch?key=789abde37b5504009a8be714a52d3458

             
          • HowToRemove.Guide Team

            At this point is probably best to download SpyHunter from one of our banners above and use the free scanner feature. The scanner will locate the infected files where you can manually remove them. Contact us if you need further help.

             
  • HowToRemove.Guide Team

    I’d definitely delete these if I were you. They look completely suspicious.
    Did that help you?

     
  • HowToRemove.Guide Team

    Do you remember installing an asian program or something like that? I have no idea if you should remove it, it might be a legitimate program.
    I suggest you download the scanner from one of our ads and try to find the infected files that way.

     
  • HowToRemove.Guide Team

    Can you please elaborate? Which step are you on?

     
  • HowToRemove.Guide Team

    Hello David,

    Could you please provide us with some more details about the exact issue?

     
  • HowToRemove.Guide Team

    Hi there, absolutely don’t download anything.

    Proceed with the rest of the guide.

     
  • HowToRemove.Guide Team

    Can you please share what these IPs are? Some may be safe, others probably not, but I can’t know until you reply 🙂

     
  • HowToRemove.Guide Team

    Hi Manohar, you need to run Notepad as admin first, then open the Hosts file from the Open menu inside the program. That should allow you access.

     
  • All these steps can’t remove the virus on my chrome:/

     
    • HowToRemove.Guide Team

      Hi Yasser, check your DNS settings too.

       
  • HowToRemove.Guide Team

    Delete them all from the file and save it.

     
  • HowToRemove.Guide Team

    No problem 🙂

     
  • HowToRemove.Guide Team

    Hi Sierra, you need to open the Notepad program as admin first. Search for notepad and right click -> run as admin on it. Use the Open menu from the inside to open the hosts file and get permission to save it.

     
  • HowToRemove.Guide Team

    Hi Ted, try just smart tab or other combinations of the spelling. This is not actually a virus, but an Adware (thought it will not refer to itself like that).

     
    • Ted Voon

      I tried the different searching of smart-tab, couldn’t find 🙁

       
      • HowToRemove.Guide Team

        Hi again Ted, maybe they got smarter and used a different name. Used to work before, damn. You can try downloading Spyhunter and using it to search for the virus. Search with the program is free (removal is paid though) and will point you to the right folders if you want to delete manually.

         
  • Vyan Nanda

    I found a registry folder like this:

    HKEY_CURRENT_USERSOFTWARE32CF2C7CE253DCB757BB00542E6E5C15

    Is it the virus source?

     
    • HowToRemove.Guide Team

      Hello Vyan,

      It is impossible to say just be looking at this entry. If you have suspicions it might be best if you download and install the scanner from one of our banners.

       
  • HowToRemove.Guide Team

    Hi,

    Yes, you can try that. Tell us if it works or if you need additional help.

     
  • HowToRemove.Guide Team

    In the field write this: notepad %windir%/system32/Drivers/etc/hosts

    You’ll open a file that may contain a bunch of IPs and suspicious domain names. If anything looks suspicious delete it – you are not in danger of breaking anything while doing that.

     
  • HowToRemove.Guide Team

    Hi Joey,
    can you please post some of the lines you think suspicious here so we can check them ?

     
  • ramirez
    • HowToRemove.Guide Team

      Hi ramirez,
      these IPs are fine. We researched them and they turned out to be harmless.

       
      • Inno Ferrer

        how about this?
        127.0.0.1 down.baidu2016..com

        127.0.0.1 123.sogou..com

        127.0.0.1 http://www.czzsyzgm..com

        127.0.0.1 http://www.czzsyzxl..com

        127.0.0.1 union.baidu2019..com

         
        • HowToRemove.Guide Team

          Hi Inno,
          these IPs are fine. We checked them and they turned out to be legit.

           
  • Jen Cal

    Can you help me with this? It’s starting to bug me off. Whenever I type something on google’s search bar, this bar pops up and the words I’m typing suddenly shows up on this fraud tab and if I click enter, it would direct me to play bar and then to another search engine. Please help me. Also smart new tab suddenly just pops up. I tried using adblock and it kinda work in a way that I don’t see them specially the smartnew tab. However, in the case of that fake search tab, it doesn’t show up anymore but appears as a white space. Help please

     
    • HowToRemove.Guide Team

      Hi Jen,
      we have another guide for your Play Bar issue https://howtoremove.guide/play-bar-net-chrome-virus-removal/. Also try following the steps we provide in the guide under Safe Mode, to be sure you have removed every malicious content you have in your OS. Keep us posted if you need further help.

       
  • HowToRemove.Guide Team

    Hi Duck,
    if you don’t find the name of the virus here so it isn’t here. Did you press Ctrl + F to find you virus somewhere there ?

     
  • HowToRemove.Guide Team

    Hi hunter, you delete both.

     
  • HowToRemove.Guide Team

    Hi again, addresses that start with 127.0.0.1 are actually blocked from getting opened on your PC. Those you don’t need to delete.

     
  • HowToRemove.Guide Team

    Hi 念來過反會才頭木,
    Does Smart New Tab still persist in your system ?Did you manage to complete the guide in Safe Mode ?

     
  • HowToRemove.Guide Team

    Well, if you are having problems with Smart New Tab, you should definitely remove those and save the changes, since the unwanted software might be coming from them