Skip to main content
Answer

Soccer browser hijack

  • November 5, 2025
  • 8 replies
  • 177 views

I keep having the search engine “soccer” automatically install as my default browser.  I have reset my default browser many times to a different search engine, but it keeps coming back.  I have deleted it completely from the list of my browsers but it keeps coming back.  I scanned my computer for viruses etc and nothing was found.  I also got in contact with Webroot support and they scanned my computer but found nothing too.  Please help.  I am on Windows 11 and I usually use Google as my search engine.  This has been VERY annoying. 

Best answer by TripleHelix

Hello ​@dmanboone 

 

On what Browser are you seeing this? Also are you a Consumer user or a Business Endpoint user?

 

Thanks,

On Google Chrome, sorry I did not list that above. I am a consumer user not a business endpoint user.

Hello,

 

There’s not much info on this but lets try this.

 

To remove a browser hijacker from Chrome on Windows 11, you need to follow a combination of steps involving removing suspicious programs, cleaning Chrome's settings.
 
 
Step 1: Uninstall Suspicious Programs 
 
  1. Right-click the Start button (Windows logo) in the lower-left corner and select Apps and Features.
  2. In the list of installed applications, sort by "Install date" to see recent programs or anything with “soccer”.
  3. Look for any programs that seem unfamiliar or that you did not intentionally install.
  4. Select the suspicious program, click the three vertical dots, and select Uninstall.
  5. Follow any on-screen prompts to complete the uninstallation, then restart your computer
 
Step 2: Remove Malicious Chrome Extensions 
 
  1. Open Google Chrome.
  2. Click the three vertical dots (More menu) in the top-right corner, then select Extensions, and click Manage Extensions.
  3. Review the list for any extensions that are unnecessary, untrusted, or from sources outside the Chrome Web Store again anything with “soccer” .
  4. For any suspicious extension, click the Remove button. 
 
Step 3: Check and Reset Chrome Settings 
 
  1. Click the three vertical dots in the top-right corner and select Settings.
  2. In the left-hand menu, select Reset settings.
  3. Click on Restore settings to their original defaults and confirm the action by clicking Reset settings.
    • Optional: You can first run Chrome's built-in malware scanner before a full reset. Go to Settings > Reset and clean up > Clean up computer > Find harmful software.
  4. While in Settings, verify other critical options:
    • On startup: Go to this section and remove any unwanted URLs listed under "Open a specific set of pages".
    • Search engine: Go to this section and change the default search engine back to your preferred choice (e.g., Google).
    • Privacy and security: Run a Safety Checkup and adjust "Safe Browsing" to Enhanced protection for better security. 

If this doesn’t help please contact Webroot Support via the Support Ticket system again as it sounds like a PUA and others call it a PUP. https://cybersecurity.opentext.com/support/webroot/

 

More on PUA or PUP: https://en.wikipedia.org/wiki/Potentially_unwanted_program

 

HTH,

8 replies

TripleHelix
Moderator
Forum|alt.badge.img+63
  • Moderator
  • November 5, 2025

Hello ​@dmanboone 

 

On what Browser are you seeing this? Also are you a Consumer user or a Business Endpoint user?

 

Thanks,


  • Author
  • Fresh Face
  • November 6, 2025

Hello ​@dmanboone 

 

On what Browser are you seeing this? Also are you a Consumer user or a Business Endpoint user?

 

Thanks,

On Google Chrome, sorry I did not list that above. I am a consumer user not a business endpoint user.


TripleHelix
Moderator
Forum|alt.badge.img+63
  • Moderator
  • Answer
  • November 6, 2025

Hello ​@dmanboone 

 

On what Browser are you seeing this? Also are you a Consumer user or a Business Endpoint user?

 

Thanks,

On Google Chrome, sorry I did not list that above. I am a consumer user not a business endpoint user.

Hello,

 

There’s not much info on this but lets try this.

 

To remove a browser hijacker from Chrome on Windows 11, you need to follow a combination of steps involving removing suspicious programs, cleaning Chrome's settings.
 
 
Step 1: Uninstall Suspicious Programs 
 
  1. Right-click the Start button (Windows logo) in the lower-left corner and select Apps and Features.
  2. In the list of installed applications, sort by "Install date" to see recent programs or anything with “soccer”.
  3. Look for any programs that seem unfamiliar or that you did not intentionally install.
  4. Select the suspicious program, click the three vertical dots, and select Uninstall.
  5. Follow any on-screen prompts to complete the uninstallation, then restart your computer
 
Step 2: Remove Malicious Chrome Extensions 
 
  1. Open Google Chrome.
  2. Click the three vertical dots (More menu) in the top-right corner, then select Extensions, and click Manage Extensions.
  3. Review the list for any extensions that are unnecessary, untrusted, or from sources outside the Chrome Web Store again anything with “soccer” .
  4. For any suspicious extension, click the Remove button. 
 
Step 3: Check and Reset Chrome Settings 
 
  1. Click the three vertical dots in the top-right corner and select Settings.
  2. In the left-hand menu, select Reset settings.
  3. Click on Restore settings to their original defaults and confirm the action by clicking Reset settings.
    • Optional: You can first run Chrome's built-in malware scanner before a full reset. Go to Settings > Reset and clean up > Clean up computer > Find harmful software.
  4. While in Settings, verify other critical options:
    • On startup: Go to this section and remove any unwanted URLs listed under "Open a specific set of pages".
    • Search engine: Go to this section and change the default search engine back to your preferred choice (e.g., Google).
    • Privacy and security: Run a Safety Checkup and adjust "Safe Browsing" to Enhanced protection for better security. 

If this doesn’t help please contact Webroot Support via the Support Ticket system again as it sounds like a PUA and others call it a PUP. https://cybersecurity.opentext.com/support/webroot/

 

More on PUA or PUP: https://en.wikipedia.org/wiki/Potentially_unwanted_program

 

HTH,


TripleHelix
Moderator
Forum|alt.badge.img+63
  • Moderator
  • November 7, 2025

How is is going ​@dmanboone any progress? 


  • Author
  • Fresh Face
  • November 7, 2025

I did what you suggested  and I started looking through the cookies too for sites I don’t recognize. I have a lot of cookies, so this might take a while. It hasn’t happened again so far, but I will keep you in the loop if you want. 


TripleHelix
Moderator
Forum|alt.badge.img+63
  • Moderator
  • November 7, 2025

I did what you suggested  and I started looking through the cookies too for sites I don’t recognize. I have a lot of cookies, so this might take a while. It hasn’t happened again so far, but I will keep you in the loop if you want. 

Well at least there’s progress keep up the great work. If you install any new software be-careful as most still have PUA’s added within them and make sure to uncheck any unwanted add-ons that could cause these types of issues! 👍🏻


  • Author
  • Fresh Face
  • November 8, 2025

At least so far, my search engine has remained the same.  Just for information, in the past when it has changed my search engine a very long numbered digit appears automatically in the address bar at the top of my browser and then several pages open.  I saw this happen while I was sitting in front of my laptop.  It appeared to me to be a virus. I immediately scanned my computer with Webroot, but the Webroot scanner said my computer was clean.  I later contacted Webroot and provided that long number to Webroot, but they said there wasn’t any information they could find about it.  They said my computer was clean.  Here is the number that appeared in my address bar.   “8236b416-3bf5-48da-8757-b2f2f83ce96b“  I appreciate all your help!! 


TripleHelix
Moderator
Forum|alt.badge.img+63
  • Moderator
  • November 8, 2025

At least so far, my search engine has remained the same.  Just for information, in the past when it has changed my search engine a very long numbered digit appears automatically in the address bar at the top of my browser and then several pages open.  I saw this happen while I was sitting in front of my laptop.  It appeared to me to be a virus. I immediately scanned my computer with Webroot, but the Webroot scanner said my computer was clean.  I later contacted Webroot and provided that long number to Webroot, but they said there wasn’t any information they could find about it.  They said my computer was clean.  Here is the number that appeared in my address bar.   “8236b416-3bf5-48da-8757-b2f2f83ce96b“  I appreciate all your help!! 

That's the problem with PUA's they are not malicious but are unwanted and can be a PITA. So a Webroot scan and support say your safe I would be happy with that. 😀

Have a great weekend!