Google chrome is redirecting any search result to a custom Search engine

This is likely an example of "Potentialy Unwanted Program" (PUP) malware, which often gets installed alongside a program you intended to install - usually because the installer includes a tiny checkbox which must be cleared to prevent the installation of the PUP.

Unfortunately, some programs designed to prevent or remove virus/spyware/adware/malware infections don't pickup PUPs by default.

If you tried to reset the search engine without success it strongly suggests something is running on your system to overwrite any changes you make.

There is a rather comprehensive (but fairly simple) guide on how to resolve this issue at the link below:

How to remove a Cse.google.com redirect

In summary:

  1. Look through your installed programs and uninstall suspected PUPs. If you are unsure whether or not to remove a program, please research the name of it first.

Examples of PUPs include:

Search Module, Search Module Plus or Google.Vc, OtherSearches, YeaDesktop, Wajam, 1.0.0.1, DNS Unlocker, Cinema Plus, Price Minus, SalesPlus, New Player, MediaVideosPlayers, Browsers_Apps_Pro, PriceLEess, Pic Enhance, Sm23mS, Salus, Network System Driver, SS8, Save Daily Deals, Word Proser, Desktop Temperature Monitor, CloudScout Parental Control, Savefier, Savepass, HostSecurePlugin, CheckMeUp or HD-V2.2.

  1. Reboot

  2. Reset your search engine/browser settings to the desired state.

If you are unable to identify the culprit PUP, Malwarebytes can be installed and used to scan for PUPs.


I finally fixed this problem. With Kaspersky Virus Removal Tool

After the scan the software found a couples of Trojans and one script resident in memory and the removable tool cure it (something different than deleting things). and before rebooting I have checked google chrome and Internet Explorer and I found that everything ran smoothly as expected.

I reboot and the Removable tool continue to check my system as a final step with no Viruses found.

The steps that @Sam3000 mentioned didn't really help maybe because the problem was a malscript resident in memory. and the script is not a really harmful virus.