Izito and similar sites keeps appearing in my google search results

Izito and similar sites keep appearing on my search engine results. It started a few weeks ago. It has been happening on both - my Ubuntu and Windows computer, and even on a new Windows computer. It has been happening on Chrome and Microsoft Edge and on Google and Bing. I have since installed Bitdefender AV and done factory resets and it still keeps coming back after a while. I was wondering if someone could please advise on what might be causing it, what damage / impact it might (have) caused, and how I could get rid of it.

2 Answers

Apparently Izito is a browser hijacker and also a spyware. It probably got installed from some shady executable you have launched.

• The first thing you should probably do is uninstall whatever shady software you have. If you remember when the weird events happened you could sort the installed programs by their installation date to make your search easier.
• Check your browser shortcut properties, since they might run the unwanted page by default.
• Perform a Full antivirus scan (you could try using another AV like MalwareBytes which has a free trial)
• If the browsers are still showing the unwanted pages (which is probable), you will need to change the default landing page and extensions/add-ons in the settings. Remove all extensions you do not recall installing yourself.

There's more information about this topic in:

In terms of damage/impact caused, it could have monitored your web traffic and browsing history, stolen passwords and cookies from browsers, modified security parameters in your browsers and installed more unwanted add-ons.

I had the exact same problem. I checked the network-connections in google devtools and discovered a json object, containing all the Izito-Ads in my search results. Here is the exact code:

[{"title":"Such Enum - Top Ergebnisse aus dem Web","desc":"Finden Sie Enum. Besuchen Sie ZapMeta & Bekomm Relevante Info.","url":"","click":"https:\/\/g.httpsweb.com\/?id=19973832&hash=2df186454adf7fb48cbdd0856b522b22&url="},{"title":"Dart - Such Dart","desc":"Dart Erhalten. Millionen Ergebnisse hier Entdecken!","url":"","click":"https:\/\/g.httpsweb.com\/?id=19973832&hash=0ab3db0695aa777c657374553107809b&url="},{"title":"Enum Domains - Such Enum Domains","desc":"Finden Sie Enum Domains. Suche Schneller, Besser & Schlauer bei ZapMeta!","url":"","click":"https:\/\/g.httpsweb.com\/?id=19973832&hash=470a944e9a24d38ffcae00f520be92a9&url="},{"title":"Enum Domain - Such Enum Domain","desc":"Bekomm Enum Domain. Erhalte Qualit\u00e4tsergebnisse bei iZito!","url":"","click":"https:\/\/g.httpsweb.com\/?id=19973832&hash=547cdea46d148bc1515b606002e1fb5b&url="}] 

This json was loaded from . So I solved this problem, by adding a new outbound rule to my windows defender, which blocks all communication with the IP, that belongs to this url.