gadgetech.info

Chrome + Edge hijacked on my PC, fake Google page I can’t remove & extension Hello!!! I’ve been trying to fix an issue on my grandma Windows PC and I’m honestly stuck at this point where I need help 😭 I’m tht teenager grandkid tht usually helps with the tech stuff even when i have little to no little tech experience 😂 so this is getting pretty overwhelming & complicated for me. The problem started when she tried to search anything on **both Google Chrome and Microsoft Edge.** Instead of being able to search normally, a few things keep happening: 1. **When she opens chrome or adds a new tab a fake google search home page is shown.** She can only get to actual google by logging out of her account then back in, but when she adds a new tab it takes her right back to this fake google site. 2. **Any search I do redirects to a site called** [gadgetech.info](http://gadgetech.info/) that says “account suspended” but when i click on her bookmark tabs they open up perfectly and work. And again it’s not just one browser, it’s both. Which this has been really throwing me off. I also noticed something else that seems connected. In Chrome settings under **“management,” it says something like an administrator has installed extensions for additional functions,** *and there’s an organization name I don’t recognize (“Nexus Shadowor” or something like that)* tht i can’t delete. When I go to extensions normally, there’s nothing I can remove that looks suspicious (ss bellow ) But then I checked **Registry Editor** and found: HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Chromium **Inside there are:** \~ ExtensionInstallAllowlist \~ ExtensionInstallForcelist The Forcelist has a random ID and a URL that looks like it points to something like .../updates.php I tried deleting those registry keys but it keeps saying “Error deleting key” every time or access is denied (i’ve also tried this in safe mode). At this point I’ve tried a lot (resetting browsers, checking extensions, etc

weird browser admin hi! i have something called 'CipherShadowex' in my chrome extension. it's set as administrator and i did not do that. i've used the chrome policy remover, didn't work because it didn't have access over it. I also tried to open the registry editor to remove it from there and it was unable to be removed... i'm kind of lost on what to do since it made chrome unusable. everytime i look up something, instead of searching google it goes to a website called 'gadgetech.info' .... i cant search anything on my computer now. i'm really at a loss of words. (i believe this is malware? i have 0 clue im sorry)