This page aims to help you remove the Smart New Tab Virus. These Smart New Tab Virus removal instructions work for all versions of Windows. The virus is commonly known for redirecting
We are convinced that you did not came upon this article by accident,i.e., by randomly surfing the web. If you are reading this text, then you have most likely encountered Smart New Tab Virus and are wondering ‘what the heck is this?’; ‘how do I protect my PC from the attack?’; and ‘how do I remove the virus?’ Well, we’ve got some good news for you: this article will tell you all of this information and the instructions provided are suitable for Chrome, Mozilla Firefox and Internet Explorer.
Without further explanations let’s get to the topic now: the Smart New Tab Virus
Smart New Tab Virus
This is a virus that isn’t considered to be risky, but that is a misconception. Every malware is not only a potential threat for your system and information, but it is a very active hazard that many don’t take into consideration until one day they find their lovable device simply dead.
The virus could be quite vulnerable. By this we mean that it usually slows the performance of your PC and many glitches come up that you have not experienced before. Random bugs show-up here and there in between your files or even a browser redirecting may occur. For example, you are looking into one webpage and suddenly random and additional pages open up and/or tabs. The information presented on them could be absolutely meaningful at first gaze, but it could also be quite disgusting. Either way, this is a very,very bad sign and you should be aware of what to do if it happens to you.
The presence of Smart New Tab Virus into your system may cause you to lose content of important files or the entire files as a whole.
There are many ways you could do that. Obviously, there are plenty of anti-virus programs out there that you could purchase and install on your computer, but they are not always the solution you are looking for. Some of them don’t even provide a 100% protection against all types of viruses.It is always best to know how to do things yourself — ‘the old fashioned way’. For this reason we have given you a prepared to use removal guide that will teach you step-by-step how to uninstall the virus off your PC.
Other things you could do are (not a complete list as there are many other possibilities for ‘virus-insurance’):
- Pay attention when you’re downloading a file. Make sure you don’t use the default and/or automated settings when performing the download. It is always best to select what you want and don’t want in the advanced settings space. This will guarantee you maximum protection against software bundling. In short, software bundling is when you think that you are downloading one file, but in reality you are downloading many files. Almost always, all of them are virus carriers.
- Look carefully for how many advertisements you see on the websites you visit. Avoid sites with too many pop-up ads that could either appear as banners or flashing boxes. These can show-up in the top,bottom, corner or even worse, in the middle of your screen.
- Before opening e-mails, look into the subject field, the name of the sender, the hour it arrived in your inbox and size of letter. Phishing e-mails are imitations of letters sent to you by your friends, especially if you have added them into your address book. These are quite tricky and people easily get caught into their nets. These are viruses! If you happen to open one of them and you see a blank page, flashing text or self-dissapearing content, then now that it is a virus and immediately close the e-mail, browser, reboot your computer. If you have a good anti-virus program, you might want to scan it too.
You don’t need to hire an IT specialist to remove Smart New Tab Virus of your PC. You don’t need to throw your device away either. You need to be confident that you can manage the problem on your own and this confidence comes through knowledge. We invite you to read carefully the attached removal guide as your confidence against the malware begins with it.
| Name | Smart New Tab |
| Type | Browser Hijacker |
| Detection Tool | Some threats reinstall themselves if you don't delete their core files. We recommend downloading SpyHunter to remove harmful programs for you. This may save you hours and ensure you don't harm your system by deleting the wrong files. |
down.baidu2016.com
123.sogou.com
http://www.czzsyzgm.com
These are suspicious.
Hello,
All of these are Chinese sites and unfortunately I am not familiar with the language. They could be suspicious – can you tell me how did you came across these sites, were they promoted by the Ads?
I have those too! And where should i delete these viruses ?
Heya,
You should definitely delete this one. It is used by a variety of browser hijackers and spy applications on order to track your online activity.
Try shutting it down and deleting associated files. If you are having trouble and it reappears let me know for more detailed instructions.
Hello,
Yes, all of these should be deleted.
Let me know how it worked out.
Hello again Coni,
If the process does not reappear after you deleted it you should be OK. Not all viruses write in the registry.
If it gives you any more trouble let me know.
Hi again Coni,
Did you perform everything else written in the guide? Did you have problems with one or more of the steps? TData is most definitely malicious, but i may not be connected to Smartnewtabs adware.
I’ll be waiting for your answer.
Is this the one I should delete ?
Hello Bruce,
Unfortunately your screenshot only shows me the folders. DId these came up connected with the virus when you did the search?
I cleared some of the virus. Now for the last one (I think) is the one that pop out new tab whenever i click anywhere on the browser.
Hi again Bruce,
Did you go through the full guide? Are you still getting popup ads?
I still getting popups but decreased. I’ll try again the full guide and let you know.
Allright.
how do i remove this??
Hello Noa,
Try doing the instructions written in the guide. If you still have the virus afterwards contact me to determine what went wrong.
It works for me ! Thank you very much, very nice tutorial ! I learnt a lot.
Glad we could help 🙂
Hi Erik,
These two lines should be the only ones there. Leave them be.
I found Tile Data model server, that’s not the one, right? I’m talking about the TDataSvr
Hi,
No, this is a different service. You should leave it alone.
Let me know if you have more questions.
I have these entries underneath the ones that said local host; this is in reference to step 3.
127.0.0.1 down.baidu2016..com
127.0.0.1 123.sogou..com
127.0.0.1 http://www.czzsyzgm..com
127.0.0.1 http://www.czzsyzxl..com
Hi Bill,
Yes, you should delete them all, then save the file.
If you have any problems doing that let me know.
I had the same ip thing as the guy above…At the first attempt it wouldn’t let me change it…but in the second attempt it allowed me to change it…is there something wrong about this?
Hi Charles,
I am confident that the guide works as it has helped a lot of people already. Either you’ve been hit by a new strain or you are missing or not doing something properly. Either way I’d recommend that you purchase the program we recommend – SpyHunter. It has an option to contact the engineers directly and have them look into your PC. I can do only so much remotely.
itsays i dont have access
Hi there,
Can you elaborate?
Well…its done now…
Allright, glad you were able to resolve it on your own 🙂
I can’t remove the file because it needs permission from Trusted Installer, How do I sort this out? (Also the virus is labelled “search” with a pink icon.
Hi Remi,
Did you turn on safe mode first? Also try right clicking on the file -> properties -> use as administrator.
Let me know how it goes please.
Hello these are the ip’s that I found
127.0.0.1 down.baidu2016..com
127.0.0.1 123.sogou..com
127.0.0.1 http://www.czzsyzgm..com
127.0.0.1 http://www.czzsyzxl..com
Hi Harris,
Those IPs were left behind by the virus and you need to delete them. Do it, then save the file as normal.
Let me know if everything is OK after that.
Glad we could help!
Hi Steven,
Editing the registry is mostly cleanup work, if you are still getting redirected the main body of the virus is still there.
You can try downloading SpyHunter from one of our banners. The scan service is free and it will tell you where the last virus files are hidden. You can go to those directories and delete them yourself if you don’t want to pay for the program.
Let me know if you encounter any problems with that please.
Hi, there
rhino acme and x.acme are unfamiliar to me and I couldn’t find anything positive about them. Could be old leftovers, but could be installed by the malware too. I recommend that you delete them.
]Let me know if you encounter any issues.
127.0.0.1 down.baidu20.16.com
127.0.0.1 123.sogou..com
127.0.0.1 http://www.czzsyzgm..com
127.0.0.1 http://www.czzsyzxl..com
Hi Michael,
You should delete all these lines. Let me know if you have any problems with permission to edit the file.
Hi there,
Please type Notepad in windows search, then right click on the executable and select run as administrator. When the program starts select the open menu and navigate to the Hosts file manually. You should now be able to save it.
Hi,
Hmm, that’s weird. We tested SpyHunter on our machines and it was able to find it.
Which browser you are using?
Hi Marco,
If you don’t want to pay for the program you can use it to look at these file locations of the virus files and delete them from there.
HI Matt,
Can you tell me which browser you are using? Do you get the Ads in other browsers?
I use chrome, and just checked on firefox and I don’t think the ads are there
Hi again Matt,
In this case try resetting your chrome profile. Go to the Settings and look for the account panel. Create yourself a new account, then delete the old one.
Did it help?
Actually I think the ads left chrome – maybe deleting the regedit keys had a delayed reaction?
Thanks heaps
Glad we could help!
Hi Akshat,
There is nothing special about this. Just delete the lines with the bad IPs.
if you cannot save the file afterwards you need to close without saving, then run Notepad as admin (search for the exe. right click run as admin), then open the hosts file from the files->open menu from inside notepad.
Sorry, how do you open the hosts file, where actually is it?
This is covered in the guide. Follow the instructions and it will open automatically.
Hi Suresh.
You need to delete those lines. Let me know if you encounter any problems.
when i have deleted these lines how/where do i save the document
Hi there,
You need to search for Notepad in windows search, right click on it and select Run as admin. When the program runs use the inside “Open” menu to open the hosts file and delete the lines.
Hi Akshat, which browser do you use? Do you get the Ads in other browsers too?
these are the suspicious ip addresses
127.0.0.1 down.baidu2016..com
127.0.0.1 123.sogou..com
127.0.0.1 http://www.czzsyzgm..com
127.0.0.1 http://www.czzsyzxl..com
please guide me what to do
Hi Sani, what you need to do is simply delete those lines from the file, then save it. If you don’t get permission to do that first run Notepad as an admin (search for notepad in windows search,, right click on exe-> run as admin) and then open the Hosts file from the inside menu of Notepad: File->Open.
Hi Madison, you shouldn’t (and can’t) delete the “default” file. Let me know if you need any more help!
Delete in in the regular way – by pressing Del.
All of these IPs are related to the Adware, I recommend that you delete them and save the file after that.
Let me know if you encounter any problems.
Hi Sue, can you download SpyHunter and run a system scan? That you can do for free. Can you tell me if it finds anything related to the smart new tabs and which location it finds them?
Hi rizwan, did you already try all steps of the guide?
i did last step and it helped ))) thanks
You are welcome! 🙂
nothing helped I don’t even have any suspicious ip’s but shit comes up
when I Try to open new tab redirects to some darn sites super irritating :/
Hi monu,
what kind of sites that? Can you post them here so we can help you.
Idk crap dating sites and shopping sites especially smart new web site -_-
Did you try to follow our guide step by step? Did you execute them in Safe Mode ?
http://www.smartnewtab..com/watch?key=789abde37b5504009a8be714a52d3458
At this point is probably best to download SpyHunter from one of our banners above and use the free scanner feature. The scanner will locate the infected files where you can manually remove them. Contact us if you need further help.
I’d definitely delete these if I were you. They look completely suspicious.
Did that help you?
Do you remember installing an asian program or something like that? I have no idea if you should remove it, it might be a legitimate program.
I suggest you download the scanner from one of our ads and try to find the infected files that way.
Can you please elaborate? Which step are you on?
Hello David,
Could you please provide us with some more details about the exact issue?
Hi there, absolutely don’t download anything.
Proceed with the rest of the guide.
Can you please share what these IPs are? Some may be safe, others probably not, but I can’t know until you reply 🙂
Hi Manohar, you need to run Notepad as admin first, then open the Hosts file from the Open menu inside the program. That should allow you access.
All these steps can’t remove the virus on my chrome:/
Hi Yasser, check your DNS settings too.
Delete them all from the file and save it.
No problem 🙂
Hi Sierra, you need to open the Notepad program as admin first. Search for notepad and right click -> run as admin on it. Use the Open menu from the inside to open the hosts file and get permission to save it.
Hi Ted, try just smart tab or other combinations of the spelling. This is not actually a virus, but an Adware (thought it will not refer to itself like that).
I tried the different searching of smart-tab, couldn’t find 🙁
Hi again Ted, maybe they got smarter and used a different name. Used to work before, damn. You can try downloading Spyhunter and using it to search for the virus. Search with the program is free (removal is paid though) and will point you to the right folders if you want to delete manually.
I found a registry folder like this:
HKEY_CURRENT_USERSOFTWARE32CF2C7CE253DCB757BB00542E6E5C15
Is it the virus source?
Hello Vyan,
It is impossible to say just be looking at this entry. If you have suspicions it might be best if you download and install the scanner from one of our banners.
Hi,
Yes, you can try that. Tell us if it works or if you need additional help.
In the field write this: notepad %windir%/system32/Drivers/etc/hosts
You’ll open a file that may contain a bunch of IPs and suspicious domain names. If anything looks suspicious delete it – you are not in danger of breaking anything while doing that.
Hi Joey,
can you please post some of the lines you think suspicious here so we can check them ?
127.0.0.1 keystone.mwbsys..com
127.0.0.1 sirius.mwbsys..com
127.0.0.1 bactem.mwbsys..com
please help me with this
email
michaelramirez789@yahoo.com
Hi ramirez,
these IPs are fine. We researched them and they turned out to be harmless.
how about this?
127.0.0.1 down.baidu2016..com
127.0.0.1 123.sogou..com
127.0.0.1 http://www.czzsyzgm..com
127.0.0.1 http://www.czzsyzxl..com
127.0.0.1 union.baidu2019..com
Hi Inno,
these IPs are fine. We checked them and they turned out to be legit.
Can you help me with this? It’s starting to bug me off. Whenever I type something on google’s search bar, this bar pops up and the words I’m typing suddenly shows up on this fraud tab and if I click enter, it would direct me to play bar and then to another search engine. Please help me. Also smart new tab suddenly just pops up. I tried using adblock and it kinda work in a way that I don’t see them specially the smartnew tab. However, in the case of that fake search tab, it doesn’t show up anymore but appears as a white space. Help please
Hi Jen,
we have another guide for your Play Bar issue https://howtoremove.guide/play-bar-net-chrome-virus-removal/. Also try following the steps we provide in the guide under Safe Mode, to be sure you have removed every malicious content you have in your OS. Keep us posted if you need further help.
Hi Duck,
if you don’t find the name of the virus here so it isn’t here. Did you press Ctrl + F to find you virus somewhere there ?
Hi hunter, you delete both.
Hi again, addresses that start with 127.0.0.1 are actually blocked from getting opened on your PC. Those you don’t need to delete.
Hi 念來過反會才頭木,
Does Smart New Tab still persist in your system ?Did you manage to complete the guide in Safe Mode ?
Well, if you are having problems with Smart New Tab, you should definitely remove those and save the changes, since the unwanted software might be coming from them