AdvancedWindowsManager Virus?

This is likely crapware that came with another program you installed without using a custom install option. It's obviously also hijacked your default web browser (and maybe other browsers installed).

Check browser add-ons/extensions.

You could try RevoUninstaller (freeware) making sure you
- don't reboot if/when prompted
- then use the Advanced cleanup option to remove leftover files/folders/registry entries

HOWEVER : if you've already removed some components, particularly the operating components (e.g. .exe files) with MWB, Revo may not be able to identify the installation.

You could also try Geek Uninstaller

(These are the only 2 I trust, others may differ)

If uninstall doesn't work, you could go to the extreme of re-installing the offending software to full capacity then re-running Revo.

skeetz said:

I did check chrome extension and search engines and any option to remove Better Search is greyed out.

Ouch! I haven't seen a browser hijack for some time, I thought they'd died out. But what you describe indicates a new level of suspiciously sinister behaviour.

Naturally you can research options for removal- (Google etc) using appropriate terms e.g.
remove Better Search

etc.

You will likely get more precise directions from people who've worked through this that way.


Whilst using an appropriate System Restore point could have helped, rather than digging thru the registry, there's no guarantee that will eradicate specially crafted malware,

Do you use disk imaging regularly and routinely as is endlessly advised here? (E.g. Macrium Reflect...)
If so you can restore an image of Windows created before this occurred.

dalchina said:

Do you use disk imaging regularly and routinely as is endlessly advised here? (E.g. Macrium Reflect...)
If so you can restore an image of Windows created before this occurred.

(Unfortunately for the OP) but I do like these sort of threads to pop up occassionally. Gives me a little prod and reminds me it's about time for a system cleanup and then a new updated image run ....

I guess you've tried this:
Better Search Browser Hijacker - Simple removal instructions, search engine fix (updated)

https://www.malwarebytes.com/adwcleaner

No I don't do imaging, I have tried before but never seemed to get it right
so gave up.

The simplest to use - simplest GUI - is Aomei Backupper. The free version include differential and incremental imaging.

Regarded typically as 'the best' but dated GUI - Macrium Reflect (free version does not include incremental imaging).
You need an external disk e.g. twice the size of the used space you intend to image.
Macrium also validates the integriy of the data being imaged (so warns of disk corruption) - others may not.

System restore complements disk imaging but in no way whatsoever is it comparable or a substitute.

Disk imaging lets you recover from e.g.
- a failed disk
- a failed or stolen PC (assuming your backup is securely stored)
- ransomware/malware
- provides a full backup
etc..