Your browser should open exactly the way you left it. When your home page changes on its own, a new toolbar you never installed appears, or searches start landing on a page full of ads, a browser hijacker is usually behind it. Here is how they get in, how to remove them for good, and how to keep them away.
Signs a browser hijacker has taken over
Browser hijackers are programs that change browser settings without your permission. The signs are easy to spot once you know what to look for:
- Your home page or search engine changed to a site you did not pick.
- A new toolbar appears next to your address bar, usually named after a search site.
- Your new-tab page is filled with ads and shortcuts you never added.
- You get random redirects to unfamiliar pages while browsing.
- Pages load slower and show extra ads, even on sites you trust.
A fake toolbar often looks harmless, but most track what you type, read your browsing history, and sell that data to advertisers.
How hijackers and fake toolbars get in
Nobody installs a hijacker on purpose. They sneak in alongside something you actually wanted:
- Bundled installers. Free software often comes with offers pre-checked — miss one "recommended" box and you get a toolbar.
- Fake download buttons. Download sites pile misleading buttons on top of the real link.
- Pirated or "cracked" software. Common carriers for hijackers.
- Malicious extensions. Some look useful but quietly rewrite your settings. If you are unsure what is installed, learn how to remove browser extensions.
How to remove a browser hijacker
Removal works best in this order:
- Uninstall the source program — open your system's installed programs list and remove anything you do not recognize, especially recent installs.
- Remove the rogue extension — in your browser's extension manager, remove anything you did not install. Review twice, because hijackers hide behind plausible names.
- Reset the browser settings — restore your home page, search engine, and new-tab page. Use the browser's built-in reset option to handle persistent infections:
- Chrome: Settings → Reset and clean up → Restore settings to their original defaults.
- Firefox: Help → More troubleshooting → Refresh Firefox.
- Edge: Settings → Reset settings → Restore settings to their default values.
- Check your shortcuts — right-click the browser icon on your desktop and start menu, then check the target path. Hijackers sometimes add a web address to the end.
If your browser keeps going back to a page you just removed, the hijacker is still running and you need to go back to step one.
Why it comes back if you only remove the symptom
The mistake most people make is changing the home page and calling it done. That removes the symptom, not the cause. The hijacker rewrites the settings again the moment the browser refreshes.
Real removal means uninstalling the program, clearing the extension, resetting settings, then checking shortcuts. Skip one step and the infection returns.
How to keep it from happening again
- Read installers. Expand "custom" or "advanced" options and uncheck every extra offer.
- Decline extra offers. Decline toolbars, search engines, and "system optimizers" bundled with installs.
- Install from official sites only. Go straight to the developer's website instead of download portals.
- Keep extensions minimal. See how to choose safe extensions before installing.
When it is something worse
Most hijackers are annoying but low-risk. If your browser redirects to pages claiming your computer is infected and demanding you call a number or download a "security tool", do not click anything. That is a common scam, and the phone number leads to a fake support line.
In cases like these, close the browser and run a proper scan with your antivirus or a dedicated malware removal tool. Use a protection service like Scam Guard for ongoing help spotting these tricks.
Quick answers
Is a browser hijacker the same as a virus? No. It is usually adware or a potentially unwanted program (PUP), not a virus. It can often be removed by uninstalling the source program and resetting the browser.
How do I remove a toolbar I did not install? Check your installed programs list, remove the matching extension, then reset your home page, search engine, and new-tab page.
My home page keeps changing back. What now? The hijacker is still running. Uninstall the source program, remove extensions, and reset the browser again before changing anything.
Can a fake toolbar steal my passwords? Some hijackers capture what you type, which can include passwords. If you suspect one, change your important passwords from a clean device and run a full malware scan.
Sources and further reading
- Google Chrome Help: Reset Chrome settings
- Mozilla: Remove Firefox made by other company changes
- Microsoft: Reset Microsoft Edge
Written by Hassan Arshad, founder of UsefulOrbit. Last updated August 31, 2026.