Browser opens with ads - how to fix it

One of the most common problems caused by malware today is that the browser opens by itself, usually displaying advertisements (or an error page). When starting a computer and logging into Windows or periodically while working on it, if the browser is already open, new browser windows will open even if the user does nothing (there is also the variant that a new browser window opens when clicking anywhere on the site, see here: Ads appearing in the browser - what do I do?)

This tutorial details where in Windows 10, 8 and Windows 7 that spontaneous launch of the browser with unwanted content is prescribed and how to fix the situation, as well as additional information that may be useful in the context considered.

Why the browser opens by itself

The reason why the browser opens spontaneously in the cases described above is due to the tasks of the Windows Task Scheduler, as well as registry entries in the autorun sections made by the malware.

That said, even if you have already removed the unwanted software causing the problem using special tools, the problem may persist as these tools can remove the cause but not always the consequence of AdWare (programs designed to show the user unwanted advertisements). ).

If you have not yet removed the malware (and it may be under the guise of, for example, necessary browser extensions) - this is also written later in this guide.

How to fix the situation

To fix the spontaneous opening of the browser, you will need to eliminate the system tasks that cause it to open. Right now, the most common way to open the browser is through the Windows Task Scheduler.

To fix the problem, follow these steps:

1. Press Win + R on your keyboard (where Win is the key with the Windows logo), type taskschd.msc. and press Enter.
2. In the Job Scheduler that opens, select "Job Scheduler Library" on the left.
3. Now our task is to find the tasks that make the browser open in the list.
4. Distinctive features of these tasks (they cannot be found by name, they try to "disguise themselves"): they are launched every few minutes (you can, having selected a task, open the "Triggers" tab below and see the frequency of repetition).
5. They run some site, not necessarily the one seen in the address bar of new browser windows (there may be redirects). They are started with the following commands cmd / c start http: // адрес_сайта o http://адрес_сайта_to_browser_path.
6. You can see exactly what each job triggers by selecting the job in the "Actions" tab below.
7. For each suspicious task, right-click on it and select "Disable" (it is best not to delete it unless you are 100% sure that it is a malicious task).

After all unwanted jobs have been disabled, check if the problem has been resolved and if the browser continues to run on its own. Additional Information: There is a program that can also search for questionable jobs in the job scheduler - RogueKiller Anti-Malware.

Another location, in case the browser launches itself when you log into Windows, is the autoloader. There you can also prescribe the launch of the browser with an unwanted site address, similar to that described in point 5 above.

Check the autoload list and disable (delete) suspicious items. The ways to do it and the different autoloading locations in Windows are described in detail in the articles: Windows 10 Autoloading (will also work for 8.1), Windows 7 Autoloading.

Learn more.

There is a possibility that after deleting items from Task Scheduler or Autoloader, they may reappear, indicating that the unwanted programs that are causing the problem have remained on your computer.

To find out how to get rid of them, read How to get rid of ads in the browser, but first check your system with special malware removal tools, such as AdwCleaner (these tools "see" many threats that antiviruses refuse to see).