NewsTimes2017 “Virus” Removal


If your Chrome, Firefox or Explorer has recently greeted you with a new homepage or a strange search engine or toolbar, you should know that there is a specific type of software, called NewsTimes2017 “Virus”, which can be responsible for that. This software, known also as browser hijacker, usually integrates with your default browser by imposing certain changes to its settings and makes it start to redirect your searches to different pop-ups, banners, advertisements and nagging new tabs. Such activity could be very aggressive and turn into a serious disturbance for the users’ normal web surfing. That’s why it is not surprising why a lot of people often decide to uninstall the browser hijacker from their system in an attempt to remove its nagging ads and imposed browser modifications. In the next lines, we are going to show exactly how to do that, so take a look at the information that follows and the removal instructions below.

Why would a program like NewsTimes2017 “Virus” invade your browser?

Many users often ask us what is the real purpose of the browser hijackers and could they be as harmful as a virus or some other malicious threat such as Trojans, Ransomware, etc. To their relief, we have to say that, in general, programs like NewsTimes2017 “Virus” have no harmful effects on the computers. However, they surely have some specifics, which may cause a certain disturbance, mostly related to the users’ browsing habits. To begin with, the browser hijackers usually invade your browser with the idea to redirect you to specifics sites, offers or advertisements. This is done for advertising purposes, or as a part of some aggressive Pay-Per-Click campaigns.  The developers of such software usually use it to generate income from sponsored clicks or to bring traffic to certain sites and make them popular. This, according to the law, is a legal method of online advertising and revenue gaining, that’s why many online based businesses commonly take advantage of it to place their products and services directly on the users’ screen and aggressively promote them. For the users, however, a problem may occur when the hijacker beings to overdo it with the amount of nagging pop-ups, redirects, and tabs that it displays. Not only a program like NewsTimes2017 “Virus” may not really be able to provide some actual functionality, but it may frequently interrupt the users’ normal browsing and expose them to unfamiliar web content they may not want to interact with.

Where on the web can NewsTimes2017 “Virus” be found?

Due to their ability to bring money from Pay-Per-Click or sponsored ads positioning, browser hijackers like NewsTimes2017 “Virus” are often used by different software developers as tools that can “sponsor” their free software and cover some development costs. That’s why, you may often see such programs being bundled in different software installers, which usually contain some new application or a program, that is distributed for free. Open source platforms, freeware or shareware sites, emails and spam messages with attachments or some free download links or automatic online installers are the usual places where such bundles are distributed. When the users download a given setup pack and run it, they should always check for additionally bundled applications through the “Advanced/Custom” installation option. If they skip this and proceed with the “Recommended/Standard/Automatic” installation, they will install the whole bundle as it is, and if some programs like NewsTimes2017 “Virus” are inside of it, they will start to operate on the system when the setup process completes.

Browser hijackers – are they malicious?

As we already said above, programs like NewsTimes2017 “Virus” are believed to be mostly harmless and have no intention to harm the users’ computers. They do not share the typical virus-like traits and, in fact, have no malicious scripts that can initiate criminal deeds on your system. Unlike the tricky Trojans and Ransomware, they don’t even try to hide, but immediately start to flood your screen with dozens of nagging ads that appear again and again and again… But, don’t freak out – except this ad-generating activity, nothing fatal could happen to your computer. It is only that you may have to endure an almost unstoppable flow of advertisements every time you open your browser. The developers may also keep a track on your browsing habits with the idea to match your interests with the displayed ads, and of course, expose you to even more of them with the hope that you click on some. However, clicking on all the randomly generated pop-ups is not much advisable. You never know when you may get redirected to some insecure web content and the risk of catching a virus from there is really not worth it. For best protection against such scenario, we recommend you to uninstall every application that exposes you to content you don’t want to interact with. If NewsTimes2017 “Virus” falls in this category, you can use the instructions below and remove all of its ads and browser changes in a few easy clicks.

NewsTimes2017 “Virus” Removal

Before you begin completing the steps from the following guide, we advise you to place a bookmark on this page or have it opened on a separate device since some of the following steps will require you to close your browser.

Enter Safe Mode. If you don’t know how to do it, use this guide.


Open the Task Manger by pressing Ctrl+Shift+Esc. Go to the processes/details Tab and take a look at the resulting list. If you see a process with the name of the unwanted program or looks shady, right-click on it and select Open File Location. If you believe it is part of the infection, delete the files.


Use the Winkey+R key combination to open the Run window and in the search field type appwiz.cpl. Hit Enter and in the resulting list, look for recently installed programs that look potentially unwanted. If you find anything – uninstall it.


Re-open Run and this tie type msconfig. Hit Enter again and in the resulting window, go to the Startup tab. See if there are any shady programs there and if anything looks suspicious uncheck it and then select OK.

In the Start Menu search field, copy-paste the following line: notepad %windir%/system32/Drivers/etc/hosts . Open the first result and look at the bottom of the file where it says “Localhost”. If there are any IP addresses below that, tell us what they are in the comments since they might be coming from the unwanted software.


Type Network Connections in the Windows search field and click on the first result. Right-click on the adapter that you are using at the moment and go to Properties > Internet Protocol Version 4 (TCP/IP) > Properties.

If the DNS line is not set to Obtain DNS server automatically, make sure to check that option.

Now go to Advanced > DNS tab and remove everything in DNS server addresses, in order of use.


Right-click on your browser’s icon and select Properties. Delete everything in Target that is after .exe”.

For Chrome users

Close Chrome and go to this folder: C:/Users/*Your username*/AppData/Local/Google/Chrome/User Data. Change the name of the Default folder to Backup Default. Re-open Chrome.

For Firefox users

Open Firefox and click on the Main Menu > Add-ons > Extensions. If you see anything suspicious there, remove it.

For IE users

When you open the browser, go to Tools > Manage Ad-ons and remove the unwanted software if you see it there. Next, go to Tools > Internet options and change the homepage URL to whatever you are normally using.


Open Run (Winkey+R), type Regedit and click on OK. Next, press Ctrl+F and type the malware name. Hit Enter and delete everything that gets found.

If there are no results from the search, manually visit those folders in the Registry Editor.

  • HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Run
  • HKEY_CURRENT_USER/Software/Microsoft/Internet Explorer/Main

If you find there any suspicious keys that have names with a lot of random letters and numbers, delete them or if you are not sure, tell us in the comments what you saw.


Please enter your comment!
Please enter your name here