Windows Security · Is My PC Hacked? · Lesson 3 of 5

Browser Hijacks and Bad Extensions

Fix a browser that changed by itself, stop notification spam and remove bad add-ons.

When your browser changes on its own

A browser hijack is when unwanted software changes your web browser without asking. Your web browser is the app you use to visit websites, such as Microsoft Edge or Google Chrome.

Common signs include:

• Your home page, the first page that opens, is now a site you never chose.
• Your searches go through a strange search engine, the site that finds things on the web, and show extra ads.
• On a home PC, the browser says it is managed by your organization. That message is normal on a work computer. At home, it can mean software changed your settings to lock them.

Hijacks usually come from free downloads that bundle extra software, or from a bad extension. Later in this module you'll learn to remove both.

Another common problem is notification spam. A notification is a small message that pops up in the corner of your screen. Some websites ask, "Show notifications?" If you click Allow, they can send fake virus alerts and ads, even when that site is closed.

This is annoying, but it is not a virus. It is a website you gave permission to. You can take that permission back.

• In Edge, open Settings, type notifications in the search box, then find the site and choose Block or Remove.
• In Chrome, open Settings, then Privacy and security, Site settings, and Notifications. Remove the site.

From now on, click Block when a site you don't know asks to send notifications. Real news or mail sites can wait until you decide you want them.

Reviewing extensions and resetting the browser

A browser extension is an add-on that gives your browser extra features, like a coupon finder or an ad blocker. Good ones are useful. Bad ones can read the pages you visit, change your searches, and show ads.

Check your extensions every so often.

• In Edge, click the three dots at the top right, then Extensions, then Manage extensions.
• In Chrome, click the three dots, then Extensions, then Manage Extensions.

For each one, ask: did I add this, and do I still use it? If not, click Remove. If you are unsure, turn it off first and see if anything you need stops working.

Watch for extensions with vague names, or ones that ask to read and change all your data on all websites. That permission is a lot of power. Only allow it for tools you trust.

If the browser still acts strange, reset it. Resetting puts the browser's settings back to how they were when new.

• In Edge or Chrome, open Settings and search for reset.
• Choose the option to restore settings to their defaults, then confirm.

A reset changes your home page and search engine back, turns off extensions, and clears cookies. Your bookmarks, history and saved passwords stay. You may need to sign in to websites again.

If the hijack comes back right after a reset, a program on the PC is probably causing it. Check your installed apps for anything new, as you learned in the last module, and run a scan.