Givenews24.com is a browser hijacker and potentially unwanted program (PUP) that forcibly redirects web traffic through a deceptive news aggregation site. Once installed, it modifies browser settings without permission, replacing your homepage and default search engine with its own portal that generates revenue through misleading advertisements and affiliate links. While not classified as a traditional virus, this intrusive software significantly degrades your browsing experience and can expose you to further security risks by redirecting searches through suspicious third-party networks.
Users typically encounter Givenews24.com after installing freeware bundles or clicking on deceptive pop-up advertisements that promise system optimizations or content access. The hijacker affects all major browsers—Chrome, Firefox, Edge, and Safari—and employs persistence mechanisms that make it resistant to simple uninstallation attempts. Beyond the annoyance of constant redirects, the real danger lies in its data collection practices and the potentially malicious sites it may funnel you toward during your browsing sessions.
Threat Profile
| Attribute | Details |
|---|---|
| Threat Type | Browser Hijacker, Potentially Unwanted Program (PUP), Redirect |
| Family | Browser redirect malware, adware-supported hijacker |
| Aliases | Givenews24, GiveNews24 redirect, Givenews24.com hijacker |
| Affected Platforms | Windows (7, 8, 10, 11), macOS (browser extension variants) |
| Targeted Browsers | Google Chrome, Mozilla Firefox, Microsoft Edge, Safari |
| Distribution Method | Software bundling, fake updates, malicious advertisements, deceptive installers |
| Persistence Mechanisms | Browser extension/add-on, registry modifications (Windows), scheduled tasks, homepage/search engine hijacking |
| Primary Behavior | Redirects searches and new tabs to Givenews24.com portal; displays intrusive ads; collects browsing data |
| Data Collection | Search queries, browsing history, clicked links, IP address, geographic location, device identifiers |
| Network Activity | Connections to ad networks, tracking domains, affiliate marketing platforms; DNS queries for redirect infrastructure |
| Financial Risk | Moderate—primarily generates revenue through forced advertising and affiliate schemes; may redirect to phishing sites |
| Removal Difficulty | Moderate—requires browser reset, extension removal, and registry cleaning; multiple persistence points |
How It Spreads
Givenews24.com primarily infiltrates systems through software bundling tactics that prey on users who rush through installation processes. Freeware and shareware applications—particularly media players, PDF converters, download managers, and system utilities—often include optional components during installation. The hijacker is presented as a "recommended" browser enhancement or search tool, with acceptance checkboxes pre-selected or buried in "Custom" installation options that most users skip. By clicking "Next" repeatedly through a standard installation, users inadvertently consent to installing the unwanted browser modifier along with their intended software.
Deceptive advertising networks also serve as a major distribution channel. Users encounter fake system warnings claiming their browser is outdated or infected, prompting them to download what appears to be a legitimate update or security tool. These misleading advertisements frequently appear on file-sharing sites, streaming platforms, and compromised legitimate websites. The downloaded installer contains not the promised update but rather the browser hijacker bundled with potentially other unwanted programs.
Common distribution vectors include:
- Bundled freeware installers from download portals like Softonic, Download.com, or torrent sites that wrap legitimate software with additional "offers"
- Fake browser update notifications displayed on questionable websites, often mimicking Chrome or Firefox update prompts
- Malicious browser extensions promoted through social media ads or appearing in unofficial extension repositories
- Email attachments disguised as documents containing macro scripts that download and install the hijacker payload
- Compromised legitimate software distributed through unofficial mirrors or cracked application repositories
- Social engineering tactics on tech support scam sites offering "free PC optimization" that installs the hijacker instead
- Pirated content sites that require "browser verification" or "content unlocker" installations that actually deploy the redirect malware
What It Does On Your Machine
Once installed, Givenews24.com immediately modifies your browser configuration to establish persistent control over your web traffic. The hijacker changes your default homepage to the Givenews24.com domain or a related landing page, forcing this site to load every time you open your browser or a new tab. Your default search engine is replaced with a custom search provider that routes all queries through the hijacker's infrastructure before displaying results—often mixed with sponsored links and advertisements designed to generate revenue for the operators. These modifications are locked in place through registry entries or browser policy settings that prevent you from manually changing them back through standard browser preferences.
The most disruptive behavior involves constant redirects during normal browsing. When you attempt to visit legitimate websites or conduct searches, the hijacker intercepts your requests and routes them through a series of redirect domains. This redirection chain serves multiple purposes: it obscures the true destination, evades blacklists, and allows the operators to inject advertisements or track your activity. You may find yourself landing on unfamiliar shopping sites, suspicious download portals, or pages filled with aggressive pop-up advertisements—even when you intended to visit well-known, trustworthy websites. Each redirect generates affiliate revenue or advertising impressions for the hijacker's controllers.
Behind the scenes, Givenews24.com engages in extensive data collection. The hijacker monitors your browsing habits, recording search queries, visited URLs, time spent on pages, and clicked links. This information builds a detailed profile of your interests and online behavior, which is then monetized by selling to advertising networks or data brokers. While the hijacker typically doesn't capture passwords or credit card numbers directly, the tracking represents a significant privacy violation and the collected data could be used for targeted phishing campaigns or identity theft schemes.
System performance typically degrades under the hijacker's influence. The constant background connections to advertising servers consume bandwidth and processing resources. Your browser may become sluggish, pages may load slowly due to the redirect processing, and you'll likely see increased CPU usage even during idle browsing. The hijacker may also install browser extensions or helper objects that further slow performance while maintaining its grip on your system.
Manual Removal — Step by Step
Disconnect and Document
Disconnect your computer from the internet by unplugging the Ethernet cable or disabling Wi-Fi. This prevents the hijacker from communicating with its command servers or downloading additional components during removal. Take a quick screenshot of your browser's homepage and any suspicious extensions so you know what to look for. Make a note of any unfamiliar programs in your installed software list before proceeding.
Boot Into Safe Mode with Networking
Restart your computer in Safe Mode with Networking to prevent the hijacker's startup components from loading. On Windows 10/11, hold Shift while clicking Restart, then navigate to Troubleshoot > Advanced Options > Startup Settings > Restart, and select option 5 (Safe Mode with Networking). On Mac, restart while holding the Shift key until you see the login screen. This environment makes removal much easier since persistence mechanisms won't be active.
Uninstall Suspicious Programs
Open Control Panel (Windows) or Applications folder (Mac) and carefully review your installed programs sorted by installation date. Look for unfamiliar entries installed around the time the hijacking began—common names include variations of "Browser Helper," "PC Optimizer," "Search Manager," or random-looking names. Uninstall anything suspicious, paying special attention to programs you didn't intentionally install. Be thorough; hijackers often install multiple components with different names.
Remove Browser Extensions and Reset Settings
Open each browser you use and access the extensions/add-ons manager. Remove any unfamiliar extensions, especially those you don't remember installing or that lack a recognizable publisher. In Chrome, go to Settings > Extensions; in Firefox, go to Add-ons > Extensions. After removing suspicious extensions, reset each browser to default settings—this removes hijacked homepage and search engine settings. In Chrome: Settings > Reset settings > Restore settings to their original defaults. In Firefox: Help > More Troubleshooting Information > Refresh Firefox.
Clean Registry and Startup Entries (Windows)
Press Windows+R, type "regedit," and navigate to HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run and HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. Look for suspicious entries that reference random folder names in AppData or ProgramData. Delete any entries you don't recognize. Also check HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main for modified Start Page values. Be cautious—only delete entries you're confident are malicious, as removing legitimate startup items can cause system issues.
Check Scheduled Tasks
Open Task Scheduler (search for it in the Start menu) and review the Task Scheduler Library. Look for tasks with suspicious names or those that run executables from AppData folders or other unusual locations. The hijacker often creates tasks that periodically check for and reinstall itself. Right-click and delete any tasks associated with Givenews24 or unknown random-named entries. Check the Actions tab of each suspicious task to see what command it runs before deleting.
Delete Hijacker Files and Folders
Navigate to %LOCALAPPDATA% (type this in the File Explorer address bar) and look for folders with random names or names similar to "Givenews24," "BrowserHelper," or GUID-like names containing numbers and letters. Delete these entire folders. Also check %APPDATA% and C:\ProgramData for similar suspicious folders. Empty your Recycle Bin afterward to ensure the files are permanently removed.
Run Anti-Malware Scanners
Reconnect to the internet and download Malwarebytes (free version is sufficient) if you don't already have it. Run a full system scan to catch any remnants or related PUPs the manual removal may have missed. Also run Windows Defender's full scan (or your installed antivirus) as a second opinion. Hijackers often come bundled with other unwanted software, so multiple scanners increase the chance of catching everything.
Check Browser Shortcut Properties
Right-click your browser shortcuts (on desktop, taskbar, and in the Start menu) and select Properties. Look at the Target field—it should only contain the path to the browser executable without any additional URLs or parameters after it. If you see something like "chrome.exe http://givenews24.com" or extra command-line switches, delete everything after the .exe and click Apply. This removes a common persistence trick hijackers use.
Verify and Change Passwords
After removal is complete and your system is clean, change passwords for important accounts—especially if the hijacker was present for more than a few days. While Givenews24.com doesn't typically steal passwords directly, the data collection and potential exposure to phishing sites creates risk. Use a different device or wait until you're absolutely certain your system is clean before entering sensitive credentials.
Reboot and Monitor
Restart your computer normally (not in Safe Mode) and monitor browser behavior closely for the next few days. Open each browser and verify that your chosen homepage loads, searches go through your preferred search engine, and no redirects occur. If the hijacker reappears, it means a persistence mechanism was missed—bring it to our shop for professional cleaning to ensure complete removal.
Prevention
- Always choose Custom/Advanced installation when installing free software and carefully uncheck any pre-selected optional offers, browser toolbars, or "recommended" components. Read each installation screen rather than clicking through automatically.
- Download software only from official sources—the developer's website or verified app stores. Avoid third-party download portals like Softonic, Download.com, or CNET Downloads that often bundle PUPs with legitimate software.
- Keep your browser and operating system updated with automatic updates enabled. Legitimate updates arrive through the software's built-in updater, never through pop-up advertisements or emails with download links.
- Install a reputable ad-blocker like uBlock Origin to reduce exposure to malicious advertisements and deceptive prompts on questionable websites. Ad-blockers prevent many of the fake update notices and system warning scams that distribute hijackers.
- Be skeptical of browser extensions and only install those from official stores with good ratings and many users. Review the permissions each extension requests—if a simple calculator wants to "read and change all data on websites you visit," that's a red flag.
- Maintain real-time protection with Windows Defender (which is quite good now) or another reputable antivirus that includes PUP detection. Enable all protection features and don't disable them even temporarily for installations.
- Create a standard user account for daily use rather than always operating with administrator privileges. Hijackers and malware have a harder time making system-wide changes when you're not logged in as an admin.
- Educate everyone who uses your computer about these threats, especially if children or less tech-savvy family members have access. Many infections occur because someone rushed through an installation or clicked on a convincing fake warning.
Bring It In
Browser hijackers like Givenews24.com might seem like minor annoyances, but the privacy violations, potential exposure to more serious threats, and sheer frustration they cause make professional removal worthwhile. While the manual steps above work for many users, hijackers often install multiple persistence mechanisms that can be tricky to find and eliminate completely. If you're still seeing redirects after attempting removal, or if you're simply not comfortable diving into the registry and system folders yourself, we're here to help.
At Computer Repair Roswell, we remove browser hijackers and PUPs daily—it's one of our most common services. We can typically clean your system in under an hour, verify that all traces are gone, and get you back to normal browsing. More importantly, we'll check for any additional infections that may have arrived with the hijacker and make sure your system is properly protected going forward. Call us at (770) 679-9784 or stop by our shop at 1760 Woodstock Rd, Suite 205, Roswell, GA 30062. We're open Monday through Friday, and same-day service is usually available for malware removal. No need to struggle with this alone—let's get your browser back under your control where it belongs.