How do I remove Delta search

Norton Security | Norton Internet Security
1

I somehow picked up Malware Delta search on my computer and Nortons hasn't detected it or erased it from my Machine. 

How do I get rid of this search that has taken over Google chrome.

2

Here are some pretty pictures but, I recommend you bring your troubled PC here or here for top-of-the-line help with Malware Analysis and Removal by trained professionals.   You will work one on one with a malware removal expert.   

3

bjm_ is right, even though Delta Searh isn't malicious, you probably do not know how it arrived, maybe in some sneaky way using malware. Better ask for assistance @Bleepingcomputer.

 

Technically, it isn't malware, so all you have to do is go to Control panel and uninstall the following apps:

 

  • Delta
  • Delta Toolbar
  • BrowserProtect
  • Yontoo

And then manually remove remnants (restore default search engine, homepage, etc).

 

More nice pictures: http://deletemalware.blogspot.com/2013/02/remove-delta-searchcom-redirect-delta.html

 

I hope this helps. Cheers! 

 

4

I just downloaded Delta with a free youtube downloader. And, I must say, it is one of the worst, most awful programs I have ever had to deal with. Avoid at all costs. It changes your search provider, your new tab page and your homepage without your consent, and I didn't even fully download the youtube downloader due to an internet connection fault. It took me a few attempts to remove it. I reset my homepage to http://google.co.uk and then reset my tab page and search provider, and Delta set everything back to Delta again!!!!!!!!!!! Then Internet Explorer popped up a message saying that a program had corrupted the search settings and told me to go to the search provider settings to remove it (which I had previously done). Even IE9 talks of this program as a virus. AVOID AT ALL COSTS, it is simply not worth the trouble.

 

In the end, I deleted the Delta program files which I found in c/:programs(x86)

 

After wiping that away, I reset all settings and it works fine as of now. I also have google chrome installed on my computer and I dread to think of the state that will be in when I check it in a few minutes. However, no matter what browser you have, follow the above steps, and you should be ok.

5

Delta Search is just a PUP with it's own hompage settings for IE, FF and Chrome

 

List of entries

 

C:\Documents and Settings\[username]\Application Data\Mozilla\Firefox\Profiles\81c4vvk0.default\searchplugins\delta.xml
C:\Documents and Settings\[username]\Application Data\Delta
C:\Program Files\Delta
HKCU\Software\Delta
HKCU\Software\delta LTD
HKLM\SOFTWARE\Classes\delta.deltaappCore
HKLM\SOFTWARE\Classes\delta.deltaappCore.1
HKLM\SOFTWARE\Classes\delta.deltadskBnd
HKLM\SOFTWARE\Classes\delta.deltadskBnd.1
HKLM\SOFTWARE\Classes\delta.deltaHlpr
HKLM\SOFTWARE\Classes\delta.deltaHlpr.1
HKLM\SOFTWARE\Classes\escort.escortIEPane
HKLM\SOFTWARE\Classes\escort.escortIEPane.1
HKLM\SOFTWARE\Classes\esrv.deltaESrvc
HKLM\SOFTWARE\Classes\esrv.deltaESrvc.1
HKLM\Software\Delta
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta
[HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://www.delta-search.com/?affID=119351&babsrc=NT_ss&mntrId=a4fa4b4c000000000000001aa09db85a --> hxxp://www.google.com
user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://www.delta-search.com/?affID=119351&babsrc[...]
user_pref("extensions.delta.admin", false);
user_pref("extensions.delta.aflt", "babsst");
user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
user_pref("extensions.delta.autoRvrt", "false");
user_pref("extensions.delta.dfltLng", "en");
user_pref("extensions.delta.excTlbr", false);
user_pref("extensions.delta.id", "a4fa4b4c000000000000001aa09db85a");
user_pref("extensions.delta.instlDay", "15766");
user_pref("extensions.delta.instlRef", "sst");
user_pref("extensions.delta.newTab", false);
user_pref("extensions.delta.prdct", "delta");
user_pref("extensions.delta.prtnrId", "delta");
user_pref("extensions.delta.rvrt", "false");
user_pref("extensions.delta.smplGrp", "none");
user_pref("extensions.delta.tlbrId", "base");
user_pref("extensions.delta.tlbrSrchUrl", "");
user_pref("extensions.delta.vrsn", "1.8.10.0");
user_pref("extensions.delta.vrsnTs", "1.8.10.019:55:19");
user_pref("extensions.delta.vrsni", "1.8.10.0");
[ "hxxp://www.delta-search.com/?affID=119529&babsrc=HP_ss&mntrId=6e7a96be000000000000e0ca9488c749" ]
[ "hxxp://www.delta-search.com/?affID=119529&babsrc=HP_ss&mntrId=6e7a96be000000000000e0ca9488c749" ]
icon_url = "hxxp://www.delta-search.com/favicon.ico",
keyword = "delta-search.com",
search_url = "hxxp://www.delta-search.com/?q={searchTerms}&affID=119351&babsrc=SP_ss&mntrId=3[...]

 

 

Quads