Web Companion Removal Tool

The tool identifies and removes web companion software that hijacks browsers by altering search results, injecting components, or modifying startup behavior. It targets IT admins, security professionals, and informed users who notice redirects, unexpected bookmarks, or new extensions. By documenting artifacts and proposing validated cleanup steps, it helps restore browser integrity and reduce system impact.
Core logic centers on cross-browser visibility and safe remediation. It inventories installed extensions, profiles, startup items, DNS settings, and proxy configurations. It uses signature lists for known families and heuristic checks to flag suspicious patterns. Outputs include a prioritized removal plan, artifact descriptions, and recommended validation steps. Optional automation can apply scripted removals when safe, subject to OS constraints.
Inputs include the list of targeted browsers, user consent to modify settings, observed symptoms, and optional paths to profiles. Outputs are a structured report with artifact IDs, risk levels, and status. It performs validation by re-scanning after cleanup and comparing against baseline states. The tool avoids aggressive actions that could disrupt legitimate software and provides rollback guidance.
Error handling covers missing data, insufficient permissions, offline signatures, and conflicting artifacts. It aligns with standard browser paths, privacy best practices, and locale considerations. Assumptions include user authorization and that the scope remains within remediation guidance; exclusions cover full antivirus sweeps or software distribution beyond what is described.
Industry/Region & Localization: Default is English with locale-aware naming of browser data locations; supports standard privacy practices and data minimization; currencies and payments are not involved.
Assumptions & Exclusions: Assumes user authorization to modify browser and system settings; excludes full antivirus scanning or software distribution; not responsible for unrelated malware.