While troubleshooting my son’s wifi connection the other night, I discovered that he had been infected by the so-called “Delta Search” virus. The end result was that his searches were being redirected to
I checked to be sure his Avast antivirus definitions were updated. They were. I then downloaded the latest versions of Malware Bytes and SUPERAntiSpyware but both scans came up empty.
It was then that I remembered that Windows now has restore points that allow you to roll back to time points in the past. Great! Now all I had to do was figure out how far back to go.
My son said that he had been noticing (but not telling me about!) the
delta-search.net redirect for the past few weeks. Hmmm. A few weeks. Not very precise.
But then I had a brainstorm. When the virus* infects your system, it installs a toolbar and some other crap (Yontoo, BrowserProtect, etc.). Knowing that, you can simply open “Add or Remove Programs” and check the date that junk was installed.
*Note: It’s debatable whether this is actually a virus. Some refer to it as “adware” instead. But if it looks like a duck and quacks like a duck…
In our case, it was installed March 16th — surprisingly close to the beginning of that “few weeks” I was given. So I just restored the system to the closest restore point preceding that date and all was well.
Note, however, that I still had to go in and manually remove the search engine from the “Manage Search Engines” panel in the Google Chrome settings. Not sure why that didn’t get cleaned out during the restore, but it didn’t.
And that, my friends, is how you remove the annoying little headache known as the Delta Search virus (adware, spyware, malware, whatever) from your system.