How do I remove fake "Norton Safe Search Enhanced"?

Try scanning in safe mode.

Right click the start button, hold down the shift key and select "Restart"

At the next screen select:

Troubleshoot => Advanced options => Startup Settings => Restart => press option 4 "Enable Safe Mode" or 5 "Enable Safe Mode with Networking"

Perfect, I did it. I uploaded the FRST and Addiction files to these links.

https://drive.google.com/file/d/1EROuKa2A2ugi3J5bfJRMoSFjogvlb3eC/view?usp=drive_link

https://drive.google.com/file/d/1Rq1GO7myNv_v88XJH7PZKCWXUSebhxEr/view?usp=drive_link

The problem is on both Edge and Chrome

• Download Fixlist.txt and save it in the Downloads folder.
• Close any apps with unsaved work.
• Run FRST64English.exe and click "Fix" - only run it once.
• The computer will reboot to complete the procedure.

This should resolve the issue. Please upload Fixlog.txt as I'd like to see what malware was running.

Great, I solved it. Thanks so much!! Here's the link to the fixlog.

https://drive.google.com/file/d/1A_40O4fqlKt8B-RXyUe_N9pprrupgxxq/view?usp=drive_link

I'm glad it's solved :) Unfortunately the javascript file is far too obfuscated to reveal its intent anytime soon.
To remove the Farbar scanner and its folders, rename it to uninstall.exe and run it. A reboot will be required.

Hi, I have the same problem. I'm trying to follow your procedure but Farbar get stuck while scanning. I tried your directions to start scanning in "safe mode" but doesn't works. "Right click the start button, hold down the shift key and select "Restart"" I try right click on the start button (Scan?) but no windows open. Can you help?

Hold down shift + Right click the start button > Shut down or sign out > click Restart

or any of these methods which also apply to Windows 11.

https://www.digitalcitizen.life/4-ways-boot-safe-mode-windows-10/

Thank you! I did the Scan. That's the logs:

https://gofile.io/d/QgElQo

https://gofile.io/d/1kxmqj

• Download Fixlist.txt and save it in the Downloads folder.
• Close any apps with unsaved work.
• Run FRST64English.exe and click "Fix".
• The computer will reboot to complete the procedure.

If any related problems remain after running the Fixlist, upload Fixlist.txt

To remove the Farbar scanner and its folders, rename it to uninstall.exe and run it. A reboot will be required.

If you're still keeping up with this, here's a google docs with my .txt output. https://drive.google.com/drive/folders/1xAj20KY8FgwLLl-bsvOOv0wKbXDvnuGy?usp=drive_link

@CelestialLife

• Download Fixlist.txt and save it in the Downloads folder.
• Close any apps with unsaved work.
• Run FRST64.exe and click "Fix".

Hi everyone, i had the same issue, i already scan with FRST and generated the two files FRST.txt and Addition.txt, then i uploaded the files and these are the shared links, could you please tell me how i can get the Fixlist.txt now? Thank you so much in advance!

https://drive.google.com/file/d/1xXsVXdJCdHmNav-GIiWnvpoMppvvUuyC/view?usp=sharing

https://drive.google.com/file/d/1nmmGoNsC7hwP1vnnuKyyOV_JTtoROryO/view?usp=sharing

@Luigi

Do you know what these entries are?

AutoConfigURL: [{38101BE0-6A95-451E-A2A1-6C69B1417AD9}] => hxxp://127.0.0.1:62134/CPREBUILT.pac

AutoConfigURL: [{798F68F9-9688-484F-9E2B-66FBF3D58ED6}] => hxxp://127.0.0.1:62134/CPREBUILT.pac

• Download Fixlist.txt and save it in the folder where FRST64.exe is located.
• Close any apps with unsaved work.
• Run FRST64.exe and click "Fix".
• The computer will reboot to complete the process.

Hi, I ran the instructions and the problem was solved. Thank you so much. No, sorry I don't know the origin of these links

You're welcome. We'll remove those entries.

Copy all the code text below then run FRST64.exe and click Fix.

start::
AutoConfigURL: [{38101BE0-6A95-451E-A2A1-6C69B1417AD9}] => hxxp://127.0.0.1:62134/CPREBUILT.pac <==== ATTENTION
AutoConfigURL: [{798F68F9-9688-484F-9E2B-66FBF3D58ED6}] => hxxp://127.0.0.1:62134/CPREBUILT.pac <==== ATTENTION
end::

https://drive.google.com/file/d/1nv0pHYDo75k0-jm0Frr6LQk8F3kO9maI/view?usp=drive_link

Result, thanks again

I can't access the link. If the Fixlog indicates success, it's all good.

To remove the Farbar scanner and its folders, rename it to uninstall.exe and run it. A reboot will be required.

Can you help me? both Edge and Chrome has it.

here's my FRST and Addition: https://gofile.io/d/YlVd0z

please help me tooAddition.txt

FRST.txt

FRST.txt please

@_AW_

Please help me i have downloaded frst .txt and Addition. the norton thing is pissing me of pls help!! the link below

https://drive.google.com/file/d/19L2-etsC-IkUPRNRj35AcP5s7FcXw2LR/view?usp=sharing

https://drive.google.com/file/d/1qEflzrfJcc60iFK2yr_ZHzMzUk8cqN4x/view?usp=sharing

@Eyitayo Obadina Please change the file permissions as the logs are inaccessible.

@_AW_ the link should work now

Save Fixlist.txt to your Downloads folder then run FRST64.exe and click Fix.

it worked thank you so much

Hi I need help also cant get rid of this fake norton extension here are my frst and addition

https://drive.google.com/file/d/1_cHCcwR1x2FfGig20VcD6lvngW6DAnbt/view?usp=sharing

https://drive.google.com/file/d/1RqwFIHNshD5fbUHsQpP6hwjmbqNMr3iA/view?usp=sharing

@Paul-Kurtis Lehr

• Download Fixlist.txt and save it in the Downloads folder.
• Close any apps with unsaved work.
• Run FRST64.exe and click "Fix".
• The computer will reboot to complete the procedure.

it worked thanks alot

Hi!

I have the same problem as the others :((

'Norton Safe Search Enhanced' extension that I never installed and can't remove, causing my browser to use 'Safey Search Engine'...

I used FRST and my 2 scans are here:

• Addition : https://drive.google.com/file/d/1FSM-Oi3a8F1hzO1XzXKQrIAAVAuxVNt0/view?usp=sharing
• FRST : https://drive.google.com/file/d/1Tx3FktDJPVuiiyU-bt8lagTU12guv62E/view?usp=sharing

Could you help me with the Fixlist? :)

Do you know what could have put that in my browser? I have installed the same programs as on my other computer and the latter has no prob.

@garguebuzz

Save Fixlist.txt to your Downloads folder then run FRST64English.exe and click Fix.

The extension possibly came as a fake browser update popup.

It worked! thanks a lot, you helped very quickly :)

And okay, I don't remember exactly what happened but I wondered some days ago why Chrome was kind of 'reset', asking me again to sign in and none of my 2 profiles were connected. It may have been smth like that i thought legit.

@_AW_
FRST.txt
Addition.txt

@Myla Fedhi

• Save Fixlist.txt to the Downloads folder.
• Close any apps with unsaved work.
• Run FRST64.exe and click "Fix".
• The computer will reboot to complete the procedure.

Hi, i'm french and i have the same problem on Edge. Please help me.

Hey I am having the same issue, below is a link to my FRST txt files

https://1drv.ms/f/c/cee60e46ef5ba19a/IgCKbsG-6ICfTYDZBmQ9z5muAab-g2cGyJE0RsIaIhNcv7Y?e=UXBDJj

@Jayme-Lee Saxby

• Save Fixlist.txt to your Downloads folder.
• Close any apps with unsaved work.
• Run FRST64.exe and click "Fix".
• The computer will reboot to complete the procedure.

Thank you soo much <3

hello..i still have the problem

find attached the fixlog.. hope you can help me. thanks

@Stef

I don't recall writing a fixlist for you. Please scan with Farbar scanner and provide fresh logs.

hello @_AW_ ;D I tried to follow instructions but I maybe have missed something because I still have the problem... pls find attached the fixlog. thanks

Fixlog.txt

@Stef

You need to use a Fixlist written specifically for you, not just some random Fixlist you've found on the internet.

Please follow the instructions in the following post and provide logs for analysis. I will then write a Fixlist for you.

https://learn.microsoft.com/en-us/answers/a/12323045

Hi, I've done the scan and these are my addition and FRST logs.
https://drive.google.com/file/d/1iQhc3Rls5gDK6xYxNo6yDkMqpM0tb6bj/view?usp=sharing

https://drive.google.com/file/d/1NuNScRDhYOMGz92fxZI_56uOY0q3No4g/view?usp=sharing

@vtyii

• Save Fixlist.txt to your Downloads folder.
• Close any apps with unsaved work.
• Run FRST64.exe and click "Fix".
• The computer will reboot to complete the procedure.

It worked! Thank you so much :)

@_AW_

hi

I hope I did it right this time..my last try ..too difficult for me ;(

I attached in different ways hope there is one that works.....':D

I have scanned in safe mode

https://drive.google.com/file/d/1HFEGrP-eo9f8EvOHnUC8gIiqMDUcvT1j/view?usp=drive_link

https://drive.google.com/file/d/1HFEGrP-eo9f8EvOHnUC8gIiqMDUcvT1j/view?usp=sharing

https://drive.google.com/file/d/1KMhFmNAiYS2E54ZIcofStSeSclYZqXU9/view?usp=sharing, https://drive.google.com/file/d/1rK9JR3UnIV7kym46xOvnOhfiTl1SHqS9/view?usp=sharing

Addition.txt

FRST.txt

@Stef

• Save Fixlist.txt to your Downloads folder.
• Close any apps with unsaved work.
• Run FRST64.exe and click "Fix".
• The computer will reboot to complete the procedure.

@_AW_

thanks! you saved my life....

it worked...

it still existed in the web search list but I have managed to cancel it.

Is there anything else that I have to do? Do I have to change passwords on websites?

Stefi

Fixlog.txt

You can also delete the file -

C:\Program Files (x86)\Microsoft\Edge\Application\Extensions\dsue.crx

I don't think you need to change passwords, though if you feel so inclined, it certainly won't hurt.

To remove the Farbar scanner and its folders, rename it to uninstall.exe and run it. A reboot will be required.

:)

Hello, I'm having the same problem that Edge and Chrome are blocking and redirecting my browsers due to Safety Search Enhanced in the extensions. Could you please help me?

https://1drv.ms/f/c/8fb23ba4c2f60dfa/IgBSQMqR-ij8QrNdOU9_TpUVAcNGo1WQ4jnhVA1ld9iK6xE?e=1Hkr4X

Uninstall Cookie A.Q as it's a PUA/Adware that was likely installed with something else.

• Save Fixlist.txt to your Downloads folder.
• Close any apps with unsaved work.
• Run FRST64English.exe and click "Fix".
• The computer will reboot to complete the procedure.

Hi I have the same problem on both Edge and Chrome ,thanks in advance!

https://drive.google.com/file/d/1oe29ub1Ck4lKgiag9UTZoc2NLeP3NWJq/view?usp=drive_link, https://drive.google.com/file/d/1QUHI3FWKt81yZyin5x2WHcnayRIFSsNg/view?usp=drive_link

@Max Please change the share permissions to "Anyone with the link" as the logs are inaccessible.

@_AW_ Sorry ,It's the first time I shared Gdrive files ,it's fixed now.

• Save Fixlist.txt to your Desktop.
• Close any apps with unsaved work.
• Run FRST64.exe and click Fix.
• The computer will reboot to complete the procedure.

Thanks ,it worked ,I also reported it to google before I found this thread ,I hope it gets sorted soon.

hi, i also have this problem on edge and chrome, hopefully i got your instructions write and in this the right file i got from farbar.

https://drive.google.com/file/d/1OLR5GIseokxk8sW2QIeGSbR5yaQkfrSf/view?usp=sharing

• Save Fixlist.txt to your Downloads folder.
• Close any apps with unsaved work.
• Run FRST64English.exe and click Fix.
• The computer will reboot to complete the procedure.

The problem seems to be fixed, Thank You Very Much!

I also have this problem on Edge. i got you instructions and hope you can help me

FRST.txt.

Addition.txt

• Save Fixlist.txt to your Downloads folder.
• Close any apps with unsaved work.
• Run FRST64.exe and click "Fix".
• The computer will reboot to complete the procedure.

Worked! Thanks!

Hello, im having the same problem. This is the link for the frst and addition files.

https://drive.google.com/drive/folders/1UcI2JAe611R2kzSKsWrM92owRAIijug1?usp=drive_link

@Javon W The logs are inaccessible.

does it work like this?
https://drive.google.com/file/d/1JRPaE5Rz04HXludxN40tisWa6spjvRC3/view?usp=drive_link
https://drive.google.com/file/d/1DWlXyOPS5r_QE6LdJy2zQ7qjvfvgVVhX/view?usp=drive_link

No it says access denied.

ok try it now

There are multiple infections to remove. Go into your installed apps and uninstall these PUAs -

Quick Driver Updater - https://malwaretips.com/blogs/remove-quick-driver-updater/

Web Companion

OneBrowser

• Save Fixlist.txt to your Downloads folder.
• Close any apps with unsaved work.
• Run FRST64.exe and click "Fix".
• The computer will reboot to complete the procedure.

Please upload Fixlog.txt so I can check if any further action is needed.

HI! omg such a relief to find this thread! I´m having the same problem and it's been a nightmare, can you please help me fix it?

Here's the link with the ZIP files, I ran Farbar from safe mode. Let me know if you need anything else. Thanks again! Also, how do I prevent this from happening again?

@Giulia__

• Save Fixlist.txt to your Downloads folder.
• Close any apps with unsaved work.
• Run FRST64English.exe and click Fix.
• The computer will reboot to complete the procedure.

how do I prevent this from happening again?

Avoid warez sites, cracked software. Be wary with game mod sites as malware sometimes gets uploaded to them. Download software from the author of the software where possible or highly regarded download sites.

Hi!

I have the same problem on my kid's computer.Addition.txt

FRST.txt

Thanks in advance!

@Mo KL

-

• Save Fixlist.txt to the Downloads folder where FRST64English.exe is located.
• Close any apps with unsaved work.
• Run FRST64English.exe and click Fix.
• The computer will reboot to complete the procedure.