Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've installed an application that hijacked Chrome's start up page.

I've tried this procedure, then I tried a Windows registry search. I can't get rid of of it.

share|improve this question
Thanks for the revisions Diogo! – villares Dec 21 '12 at 11:59
up vote 5 down vote accepted

I found that the hao123 URL was added as a parameter on the shortcut that launches the browser.

If you have the same problem, right-click the browser shortcut, choose Proprieties, on the shortcut tab look at the end of the target/destination field contents.

share|improve this answer
Well you got it now don't forget to mark it solve, IIRC now you can do that after 72 hrs. :) – avirk Dec 21 '12 at 12:46

Try AdwCleaner (I havent used it for Hao123 though)

AdwCleaner is a program that searches for and deletes Adware, Toolbars, Potentially Unwanted Programs (PUP), and browser Hijackers from your computer. By using AdwCleaner you can easily remove many of these types of programs for a better user experience on your computer and while browsing the web.

Download & Instructions:

share|improve this answer

I deleted the shortcut from the desktop and copied it from the windows button again.

After trying all possible configurations this is what fixed it for me.

share|improve this answer
very strange... i did the things you just mentioned. But the result is still there. – gumuruh May 5 '14 at 3:07

It might be more than just your browser's start page; the virus adds itself to the registry and other places. So, better use these steps for cleaning:

In short:

STEP 1: Remove redirect with AdwCleaner

STEP 2: Remove browse hijacker with Junkware Removal Tool

STEP 3: Clean up the various Windows shortcuts that have been hijacked by virus

STEP 4: Remove virus with Malwarebytes Anti-Malware Free

STEP 5: Double-check for the “” malware with HitmanPro

(Optional) STEP 6: Remove from Internet Explorer, Firefox and Google Chrome

share|improve this answer
While this link may answer the question, it is better to include the essential parts of the answer here and provide the link for reference. Link-only answers can become invalid if the linked page changes. - From Review – techraf May 8 at 14:13
Thanks for your explain , otherwise i do this to try to remove the malware, success to delete all the programs but my chrome still open on the chinese page. – Benius May 15 at 7:57

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .