How do I remove fake "Norton Safe Search Enhanced"?

TSeu 75 Reputation points
2025-11-01T04:15:04.2233333+00:00

Looks like my Browser has malware. The "Norton Safe Search Enhanced" extension is locked and does not let me remove it. I have tried running and scanning the Microsoft Windows Security software but it could not remove it. Please help!!User's image

Microsoft Edge | Browser extensions | Windows 11

Answer accepted by question author
_AW_ 69,416 Reputation points Volunteer Moderator
2025-11-02T05:31:15.74+00:00

Both Edge and Chrome have this unwanted extension. Hopefully this resolves the issue.

  • Download Fixlist.txt and save it in the Downloads folder.
  • Close any apps with unsaved work.
  • Run FRST64.exe and click "Fix".
  • The computer will reboot to complete the process.

If there's still a problem, please upload the resulting Fixlog.txt.

Was this answer helpful?

6 people found this answer helpful.

9 additional answers

Sort by: Newest
  1. _AW_ 69,416 Reputation points Volunteer Moderator
    2025-11-02T03:18:37.4333333+00:00

    See if this removes the extension.

    Note: the commands run will force terminate any instance of Microsoft Edge.

    Type powershell into search, then right click Windows Powershell and run as administrator.

    Copy and paste in the following code then press enter.

    Stop-Process -Name 'msedge' -Force;reg delete HKCU\SOFTWARE\Policies\Microsoft\Edge /f;reg delete HKLM\SOFTWARE\Policies\Microsoft\Edge /f; reg delete HKLM\SOFTWARE\WOW6432Node\Policies\Microsoft\Edge /f;
    

    Open Edge and check for the extension.

    Was this answer helpful?


  2. _AW_ 69,416 Reputation points Volunteer Moderator
    2025-11-02T02:32:02.26+00:00

    It's up to you, if you click on threat quarantined there should be the option to restore it.

    If you don't want to do that, we can see if Autoruns shows anything. Unfortunately it's nowhere near as comprehensive as Farbar.

    https://learn.microsoft.com/en-us/sysinternals/downloads/autoruns

    • Unzip and run Autoruns64.exe.
    • Accept the license agreement.
    • Once the scan completes, press Ctrl + S and save the log file in the default *.arn format.
    • Upload the log to a cloud storage service like OneDrive, Google Drive or Gofile.
    • Post the share link.

    https://support.microsoft.com/en-us/office/share-onedrive-files-and-folders-9fcc2f7d-de0c-4cec-93b0-a82024800c07

    Was this answer helpful?


  3. _AW_ 69,416 Reputation points Volunteer Moderator
    2025-11-02T00:53:53.9766667+00:00

    It seems whatever that extension is, is blocking the download. Farbar is definitely not malware.

    If you have Microsoft Edge running, press ctrl + shift + N to open an inPrivate window.

    Try downloading from the inPrivate window as all extensions will be disabled and shouldn't disrupt the download.

    https://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/

    Was this answer helpful?


  4. _AW_ 69,416 Reputation points Volunteer Moderator
    2025-11-01T22:09:20.6666667+00:00

    Please provide Farbar Recovery Scan Tool (FRST) logs for analysis.

    https://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/

    Note: If you are using Edge or Chrome, SmartScreen may initially block the download. Click on the three dots next to the warning and select Keep => Click the Delete drop arrow => Keep anyway.

    • If your computer's language is not English, rename FRST64.exe to FRST64English.exe
    • Run the tool, leave the default settings, and press Scan.
    • Zip the logs, FRST.txt and Addition.txt, then upload to a cloud storage service like OneDrive, Google Drive or gofile.io
    • Post the share link.

    Share OneDrive files and folders - Microsoft Support

    ** Farbar is a safe app utilized in most online malware removal forums.

    Was this answer helpful?

    3 people found this answer helpful.

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.