Technology in terms you understand. Sign up for the Confident Computing newsletter for weekly solutions to make your life easier. Click here and get The Ask Leo! Guide to Staying Safe on the Internet — FREE Edition as my thank you for subscribing!

I keep getting warnings that something is trying to change my browser. How do I stop that?


I run XP 3 with Firefox 16 installed. There appears to be constant efforts
to change my browser without any authority from me. So far,, Ask, and
Babylon are all the main culprits, but there are others. I often see a balloon
on my screen, which says something like an attempt to change your browser has
been stopped. I know how to change browsers by going into Tools, Options, etc.
I should not have to do this to keep my default browser, Google, in place. I
have run malware programs with no result.

In this excerpt from
Answercast #68
, I look at a mysterious pop-up that is trying to change a
browser window.

Become a Patron of Ask Leo! and go ad-free!

Malware changing browsers

Well, regardless of what malware programs you’re running (and you haven’t
told me so I can’t really comment on specific programs), but you’ve got malware
of some sort – or you have malware that is continually trying to get itself
installed on your machine.

Now, there are a couple of things that come to mind. One is definitely run
multiple anti-malware tools. They don’t have to be installed or run real-time,
but I would perform additional scans and I would actually start you with
It will probably detect and clean up a few things that some
of the other anti-malware tools, perhaps the ones you’re running aren’t
catching and aren’t cleaning up.

Download installs

With that out of the way, what I would caution you: the culprits that you
mention here (Snap and Ask and Babylon), these are all common, what I call
“drive-by download installs.”

When you download software from a download site or a file-sharing site or
whatever, very often either the download or the installation process for that
software will ask you, “Would you also like to install this toolbar or this
feature or this whatever?”

If you’re not paying attention or if you accept the default settings for
whatever it is you’re installing, they will often simply install that kind of
stuff without asking. And without asking… well, it sounds like it would end up
doing exactly what it’s doing here. It’s going to try and change your browser
or it’s going to try and change your browser’s home page.

From your wording here, it’s a little unclear if they’re trying to change
your browser from Chrome or Firefox to IE or if they’re trying to change the
home page for your browser from Google to whatever else. The latter is the most

Many of these drive-by downloads actually end up trying to change your
home page to a page that benefits them rather than you.

Pay attention when installing

So, definitely pay careful attention when you’re downloading things, when
you’re installing things. Always choose the Custom or
Advanced option when you’re installing.

  • Make sure to take very careful note of all of the options that you’re

  • Make sure that anything that sounds like you’re installing something that
    you didn’t ask for gets turned off.

My guess is that is the single biggest culprit in scenarios that sound like
what you’re having. I’d start with Malwarebytes, but then I’d be very careful
moving forward to pay attention to what’s being downloaded and what’ being
installed on your machine.

Do this

Subscribe to Confident Computing! Less frustration and more confidence, solutions, answers, and tips in your inbox every week.

I'll see you there!

1 thought on “I keep getting warnings that something is trying to change my browser. How do I stop that?”

  1. I allowed someone representing themselves as “fix it” people pc; after they said they would remove all the “junk” they showed me I had in my computer; anyway I lost the use of my Windows XP ; I replaced it with Ubuntu; which has been fine for surfing the web and emai; can I restore my cd/dvd player? I lost that too along with the movie player.


Leave a reply:

Before commenting please:

  • Read the article.
  • Comment on the article.
  • No personal information.
  • No spam.

Comments violating those rules will be removed. Comments that don't add value will be removed, including off-topic or content-free comments, or comments that look even a little bit like spam. All comments containing links and certain keywords will be moderated before publication.

I want comments to be valuable for everyone, including those who come later and take the time to read.