Remove Greenet(.)xyz Browser Hijacker Effectively - How to, Technology and PC Security Forum |

Remove Greenet(.)xyz Browser Hijacker Effectively


Greenet(.)xyz is the main web page for the browser hijacker Uportal. Copyrighted by ESOffers Network Co., Limited, that is the company which is believed to be behind it. The hijacker can redirect you and also shows you a Yahoo page for its supposed search results. Before showing the Yahoo page, all of your search queries will go through the SafeFinder hijacker. Greenet(.)xyz changes the homepage, new tab and search engine of ll your browsers.

To remove the hijacker and its files, you should read the whole article.

Threat Summary

TypeBrowser Hijacker, PUP
Short DescriptionAll browsers on your computer can be affected. The hijacker can redirect you and filter your search queries.
SymptomsThe browser settings which can be modified are the homepage, search engine and the new tab, as well as browser add-ons. You might see third party content and advertisements.
Distribution MethodFreeware Installations, Bundled Packages
Detection Tool See If Your System Has Been Affected by Greenet(.)xyz


Malware Removal Tool

User ExperienceJoin Our Forum to Discuss Greenet(.)xyz.

Greenet(.)xyz – Delivery Ways

Greenet(.)xyz is primarily delivered through third-party installations. Bundle packages and freeware can put the hijacker on your computer machine. Freeware install setups can have additional components compiled as a default installation. Various settings can get changed until you begin to notice them affecting your browsing. Avoiding undesirable installations like that can be done if you find a Custom or an Advanced options for deselecting in the setup.

Greenet(.)xyz can use different ways for delivery as well. It might push its search engine through advertising on websites, by putting banners, pop-ups or other sponsored content. The hijacker could also be delivered using the helping hand of suspicious websites which host redirect links. All those websites could be partnered or in affiliation with Greenet(.)xyz. These are the mostly affected browsers: Google Chrome, Internet Explorer, Safari and Mozilla Firefox.

Greenet(.)xyz – Technical Information

Greenet(.)xyz is the main domain of the browser hijacker Uportal. The hijacker is believed to be developed by the company ESOffers Network Co., Limited. The company’s copyright is listed at the bottom of that main web page. You can see how the website looks like in the picture below:


As you can see the Greenet(.)xyz page consists of a search bar, and lots of on-page adverts, which redirect you to websites with low popularity and related to targeted marketing. That same page will be put in the place of your browsers’ search engine, new tab setting, and the starting home page as well. Do not click on any of the advertisements as they are typical redirect links.

When any Greenet(.)xyz related program is inside your computer, then you will see how your browsers will get modified settings. Applications which do that sort of changes can install on your computer system via bundled software. All types of extensions and apps could generate advertisements, and show more targeted content and redirect you while you browse. The redirects will probably send you to sites filled with ads. These pages could be affiliates or even partners of Greenet(.)xyz.


In the picture above, you can clearly see where the searches via Greenet(.)xyz lead. You are being redirected to the search results page of Yahoo each time you search. It is not excluded for you to get redirected to different reputable search engines. The browser hijacker uses this as a tactic to get you to trust it. If you look closely, you will see how just before that every search query you make will go through the following redirect:


That way, Greenet(.)xyz can acquire additional information about you and your browsing habits, while the search queries go through Safe Finder servers.

The two search engines are probable affiliates. Every bit of information acquired from your search queries can be shared between them. You should be very careful of what information you enter in search bars. Continue to read and see how much data can be obtained from you and by which sites.

Greenet(.)xyz – Privacy Policy

The Privacy Policy of the Greenet(.)xyz is short and transparent. It says what kind of information the site collects and what third parties can also obtain information from you through its services. The redirects from the new tab, home page and the searches of Greenet(.)xyz always go through Safe Finder. The website collects personally and non-personally identifying information. Reading it will prove to you that all of that information, which is collected, may be disclosed to third-parties.

You can see the Privacy Policy right here:


Information which is gathered by Greenet(.)xyz is the following:
  • Your name
  • Your E-mail address
  • Your IP address
  • Click-through data
  • Type of browser you are using (e.g., Chrome, Internet Explorer)
  • Type of operating system you are using (e.g., Windows or Mac OS)
  • Domain name of your Internet service provider (e.g., America Online, Earthlink)

As we already mentioned above – all of your searches go through the SafeFinder domain, so its Privacy Policy should apply here as well.

Information which is gathered by SafeFinder(.)com is the following:
  • Browser (its type and language)
  • Operating System (its type and language)
  • Your name and address
  • Geo location and IP address
  • Date and time of access
  • Your time zone
  • Advertisements viewed
  • Offers and services that interest you
  • Default search
  • VPN and Proxy services
  • Internet Service Provider (ISP)
  • Interaction with social networks
  • Screen Resolution
  • Search quires and browsing history
  • Pages browsed and content viewed

An important quote from the Greenet(.)xyz policy is this:

Some of the web search services provided herein are provided by Trovi Search and powered by Trovi search partners. For information on the web search services data collection, please visit, and the search provider’s privacy policy, as applicable.

So Trovi services are involved, and that is not a good sign, head over to the web address given in the above quote if you want to read their policy as well. Surely, all Trovi partners might be involved, so basically a lot of different information can be gathered from you. So be extremely careful about what you search and what information you provide to these services.

Using any services of Greenet(.)xyz or those of its partners and affiliates, including toolbars, extensions, add-ons, or applications tied to them will automatically grant your consent for your information to be acquired. In the policy, it is written that cookies or other tracking technologies are used in the data collection process.

Remove Greenet(.)xyz Completely from Your PC

To remove Greenet(.)xyz manually from your computer, follow the step-by-step removal instructions provided below. In case the manual removal does not get rid of the hijacker and all of its files completely, you should search for and remove any leftovers with an advanced anti-malware tool. Such software can keep your computer secure in the future.


Berta Bilbao

Berta is a dedicated malware researcher, dreaming for a more secure cyber space. Her fascination with IT security began a few years ago when a malware locked her out of her own computer.

More Posts

Leave a Comment

Your email address will not be published. Required fields are marked *

Time limit is exhausted. Please reload CAPTCHA.

Share on Facebook Share
Share on Twitter Tweet
Share on Google Plus Share
Share on Linkedin Share
Share on Digg Share
Share on Reddit Share
Share on Stumbleupon Share