Remove Virus (Chrome/FF/IE)

Gretaith Virus

The Virus in Depth

Gretaith Virus will trick you into subscribing for its Push notifications

Most people do not particularly like of some obscure piece of software is messing with their browser and tinkering with its settings without their permission, and yet many people tend to ignore such annoyances and allow them to stay there and keep on doing what they have been programmed to do. Though this would probably not directly harm your computer in any way, it is still important to not allow any software to make changes and execute tasks in your browser unless you have given you permission for that.

 A commonly used term describing any such software, that may try to place a new homepage in the browser, initiate annoying page-redirects or change the search engine with some new one, is browser hijacker. If you have recently noticed any sketchy activity in your Chrome, Edge, Safari, or Firefox browser, and especially if your homepage has been changed to, then you most probably have a hijacker in your system and you should do something about its removal and uninstallation.

Why may having a hijacker be bad for your system?

Before we answer this question, we should first make it clear that the browser hijacker apps are different from Trojan Horses or any other form of malware like Spyware, Ransomware and the like. The browser hijackers can certainly be quite irritating to have in your system but they are normally not programmed to cause harm or to carry out other malicious activities.

 Now, with that out of the way, you should still know that having a hijacker attached to your browser may potentially lead to some indirect issues. One such issue is the increased potential for malware attacks on your computer. While the hijackers like the one which has made, or your new homepage aren’t normally supposed to expose your machines to danger, they may still indirectly contribute to that by redirecting you to sites with questionable contents and unreliable ads. You certainly don’t need us to tell you why it is important to stay away from online addresses that seem sketchy, but if you have a hijacker in your computer, landing on some such address may happen automatically. This could, in turn, lead to the infection of your computer with all kinds of nasty malware – Trojans, Rootkits, Spyware, and even Ransomware cryptoviruses can all get in your computer if you don’t make sure to avoid sites that may be used to spread them. Because of this, uninstalling the hijacker from your browser and removing the homepage is something we strongly advise you to do.

How to remove

Simply changing your homepage back to the one preferred by you will probably not work – the browser hijacker will bring back the homepage as soon as you restart your browser. This is why you must make sure that the hijacker behind all this gets removed and uninstalled before you try to restore your browser’s settings. We can help you achieve that – use the guide and/or the removal tool that have been posted below and if you do everything correctly, as instructed, you should be able to take care of this annoyance in no time.


Type  Browser Hijacker
Danger Level Medium (nowhere near threats like Ransomware, but still a security risk)
Symptoms The browser hijackers are likely to make annoying and unwanted changes in your browser – you would immediately notice them as soon as you start a new browsing session.
Distribution Method Usually, the hijacker are included in software bundles and distributed alongside other programs.








How To Remove Pop up “Virus” Android Removal guide Mac Removal guide.

The following guide is only for windows users, it will help our readers get rid of the unpleasant software. Follow the instructions and complete each step for best results. If you have any questions, feel free to ask them using our comment section down below.

Preparation: Entering Safe Mode and Revealing Hidden Files and Folders

Before you proceed with the actual removal instructions, you will need to take two extra steps in order to ensure that the guide has maximum effect.

For best results, we advise our readers to boot into Safe Mode prior to attempting to remove If you do not know how to do that, here is a separate How to Enter Safe Mode guide.

Also, in order to be able to see any potentially undesirable files, you should reveal any hidden files and folders on your PC – here is how to do that.

Removing From Windows

Step 1: Checking the Task Manager

Before we start deleting files related to we want to make sure that all services related to the viruses are killed before we proceed. 

Open your Task Manager by using the Ctrl + Shift + Esc keys and go to the Processes tab. Look for any suspicious processes. For example, any unfamiliar process that uses high amounts of RAM and/or CPU. If you aren’t sure if a certain process comes from malware, tell us in the comments.

Right-click on any process that you consider shady and select Open File Location. Delete anything from the file location of the process.


Step 2: Disabling Startup programs

Use the Winkey + R keyboard combination to open the Run search bar and type msconfig. Hit Enter and in the newly opened window, go to the Startup tab. There, look for suspicious entries with unknown manufacturer or ones that have the name on them. Right-click on those, and select disable.

Step 3: Uninstalling unwanted programs

Go to Start Menu > Control Panel > Uninstall a Program. Click on Installed On to sort the entries by date from most recent to oldest and look through the programs that come at the top of the list. Right-click on any entries that appear shady and unwanted and then select Uninstall to remove them from your PC. If you see the name in the list of programs, be sure to remove the software without hesitation.

Step 4: Checking for shady IP’s

Open your Start Menu and copy-paste notepad %windir%/system32/Drivers/etc/hosts in the search bar. In the notepad file, look below Localhost and see if there are any IP addresses there. If there are some, send them to us in the comments and we will tell you if you should take any action. [add_forth_banner]

Step 5: Cleaning-up the browsers

You will also have to uninstall any undesirable browser extensions from your browser programs. Here’s how to do that for some of the more popular browsers:

Getting rid of from Chrome

Open Chrome and open its main menu. Go to More Tools > Extensions. Look through the list of extensions and uninstall any that you think could be suspicious. To remove them – click on the trash can icon next to each extension.

You can also use a specialized Chrome CleanUp tool if you cannot manually remove a certain extension. Here is an article where you can learn more about the CleanUp tool.

Removing From Firefox

Open Firefox and go to its Menu. Select the Add-ons button.From the left panel, select Extensions and take a look at the different entries. Remove any of the that might be unwanted.

Removing From Windows Internet Explorer

Once you open your IE browser, click on the Tools button at the top-right corner of the program and from the drop-down menu select Manage Add-ons. Check each one of the four different groups of add-ons and search for anything that seems undesirable. If you find anything, click on it and them select Remove.

Removing From Windows Edge

Open the main menu of Microsoft Edge and go to Extensions. Find the extensions that you believe could be unwanted and right-click on them. Then, select Uninstall.

Step 6: Checking the Registry Editor

Open the Run search bar again and type regedit in it. Hit Enter and once the Registry Editor opens press Ctrl + F. In the search field type and click on Find Next. Tell us in the comments if any results came up when you searched for in your PC’s Registry.


Step 7: Deleting recent entries

For this step, you will have to open your Start Menu and copy-paste the following lines, one by one:

  • %AppData%
  • %LocalAppData%
  • %ProgramData%
  • %WinDir%
  • %Temp%

Hit Enter after each one to open a file directory. In the directories, delete the most recent entries that you find there. In the Temp folder, delete all files.

Step 8: System Restore

In order to be fully sure that the unwanted software has been removed from your machine, you can also try using a Restore Point to roll back your system its last stable configuration. However, in order to do that, you would have to previously had had a restore point created. On most systems, such points get created automatically but this isn’t always the case.

  • If you want to learn how to configure System Restore and how to manually create Restore Points, follow this link.

  1. Open your Start Menu and type System Restore.
  2. Click on the first result – a setup wizard should open.
  3. Read the brief description of the process and select Next.
  4. Now, choose a restore from the presented list. You can also check the Show more restore points option in order to reveal any other restore points that might be saved on your PC.
  5. Click on Scan for affected programs to see what programs will get deleted or restored after you use the Restore Point. (optional)
  6. Click on next and take and then select Finish.
  7. A warning window will appear telling you that once the process starts, it shouldn’t be interrupted. Select Yes and be patient as this might take some time. Do not do anything on your PC throughout the duration of the process.

Step 9: Windows Refresh/Reset

Use this method only if nothing else has worked so far as it is a last resort option. If you do not know how to do it, this separate guide will give you the information that you need.

Daniel Sadakov has a degree in Information Technology and specializes in web and mobile cyber security. He harbors a strong detestation for anything and everything malicious and has committed his resources and time to battling all manners of web and mobile threats. He has founded, a website dedicated to covering the top tech stories and providing useful tips for the everyday user, in an effort to reach and help more people.

Leave a Reply

Your email address will not be published. Required fields are marked *