Remove HpUI.exe (Search Protect) malware

HpUI.exe is a malicious process related to several browser hijackers. Istart123 is one of them. This file is a component of Sup Tab PUP (potentially unwanted program), which is installed together with Istart123 virus. HpUI.exe is the process responsible for maintenance of Search Protect – another malicious utility that is made by hackers to prevent users from removing Istart123 hijacker. In this guide we will explain to you how to get rid of HpUI.exe from your computer.

HpUI.exe virus

If you are a person who likes removing malware automatically, then you may select Plumbytes Anti-Malware as a tool that will help you identify all files, processes and registry entries related to HpUI.exe and Sup Tab junkware. Anti-Malware is powerful enough to terminate all active (running) processes of this malicious program, to detect all related components of it, and to remove them completely (with its full registered version).

If you prefer to remove HpUI.exe and all related components of Sup Tab and Search Protect malicious programs manually, then you will need to end the tasks of HpUI.exe, IePlugin Service, Loader32.exe, Loader64.exe and all running processes of your available browsers. Ending these tasks can be done through accessing the Task Manager by right-clicking the Task Bar with the PC mouse and choosing Task Manager application. Then go to your Program Files directory and look for Sup Tab folder. When you find it, make sure you remove it completely, even from the Recyble Bin. Afterwards you may follow this guide below to remove Istart123 virus from your system.

In some cases you might see Sup Tab in the list of installed programs of the Control Panel of your system, but in the latest version of Istart123 browser hijacker we didn’t see it in the list of installed software. So, definitely, you need to remove it either automatically or manually as explained in this guide. Otherwise, when trying to get rid of Istart123, you might have the problem of this hijacker to come up again and again when you open your browsers. In other words, you can’t get rid of Istart123 without complete removal of HpUI.exe (Search Protect) and Sup Tab potentially unwanted programs. If you need any help when trying to get rid of this malware, please let us know without hesitation.

Example of removing HpUI.exe (Search Protect) and Istart123 virus manually (for free) in this direct YouTube video:

Manual instructions to get rid of HpUI.exe, Search Protect and Sup Tab PUPs (potentially unwanted programs) from your PC

  1. Shut down all your open affected browsers.
  2. Right-click on Task Bar with the PC mouse and click on Task Manager.
  3. Find the active (running) processes like HpUI.exe, IePlugin Service, Loader32.exe, Loader64.exe and all running processes of your browsers (if active). Right-click on them and select “End task“.
  4. Go to the Program Files folder on your system drive.
  5. Find “Sup Tab” folder there, delete it.
  6. Remove Sup Tab folder from the Recycle Bin.
  7. Proceed with removal of Istart123 malware (as instructed below).

Automatic tool to delete iStart123:

Detailed instructions to disable iStart123 and reset your browser settings:

  • Uninstall any suspicious programs from the Control Panel of your computer and remove any suspicious add-ons or extensions from your infected browsers (related to iStart123).
  • Via your browser download Plumbytes Anti-Malware via or directly via the download button above.
  • Scan your system and delete all detected infected files and registry entries by clicking “Apply” at the end of scan.
  • Important! Shut down all your infected browsers.
  • In Plumbytes Anti-Malware click “Tools” tab and select “Reset browser settings“:
  • tk_tools_reset_browser_settings

  • Select which particular browsers you want to be reset and choose the reset options:
  • tk_tools_reset_browser_settings_specify_browsers

  • Click “Reset browser settings” button.
  • You will receive the confirmation windows about browser settings reset successfully. When you reset your browsers through restarting them you will see that browser hijacker has been successfully removed.
  • Finally, right-click the Desktop icons and Start menu items related to your hijacked browsers. Click “Properties” and check their destination path in the “Target” section of the shortcut tab. Make sure there’s nothing related to iStart123 browser hijacker in this destination path. If you see iStart123 set there by default, remove it completely and leave only the clear destination path that leads to the executable of your browser.

Example of fixing the Desktop shortcuts and Start menu items related to your browser infected by this hijacker:

Additional removal tips for Mozilla Firefox browser (if the above-said steps didn’t help).

  • Open your Mozilla Firefox browser.
  • Type “about:config” in the address bar and press “Enter” on your keyboard.
  • Click “I’ll be careful, I promise!” button.
  • about:config command in Mozilla Firefox

  • This will reveal the Settings page of Mozilla Firefox browser.
  • Type “Keyword.url” in the search box, then right-click and reset it.
  • Type “” in the search box, then right-click and reset it.

  • Type “” in the search box, then right-click and reset it.
  • Search for “browser.newtab.url“. Right-click and reset it. This is a very important step that will prevent the search page of this hijacker from opening in each new tab of your Firefox browser.
  • browser.newtab.url

58 Replies to “Remove HpUI.exe (Search Protect) malware”

  1. i’m trying to get rid of this thing and i cant. although yo were very helpfull i cant do it. i have windows 7. everytime i open the task manager and im trying to end the tasks, they just keep showing up again. and when im trying to delete the folder suptab, i cant. So i have to end every task seperately and really fast delete the same file from the folder, before the tasks show up again. Till now i’ve deleted everything, except this one file with the name “WindowsSupportDll.64.dll” that cant be deleted…. Please tell me what to do. Thank you

    1. Make sure you also shut down all your browsers and make sure that their tasks are also ended. Then try to end tasks of this HpUI.exe and related malware.

      1. Scan with Trojan Killer. You may start scanning PC with it (without buying the program). And then you will see all these processes to be terminated by the program (without the need to purchase it). You will then be able to remove SupTab manually as I explained.

      2. Its a great problem. I had the same. Restart your computer and open your Programfiles. Computer -> C -> Program Files. And before it is able to start, you delete the folder… There is no error any more! So be quick!!!!!

    1. Open SubTab And Delete it When its cant be delete, Leave the page there and go Taskmanager search HPui.exe Then Select Endtask and quickly go back Subtab Press “Try Again” then its should be Deleted

      Sorry for my poor english.

    2. Open SubTab And Delete it. When its cant be deleted, Leave the page there and go Taskmanager search HPui.exe Then Select Endtask and quickly go back Subtab Press “Try Again” then its should be Deleted

      Sorry for my poor english.

  2. OK I finally removed it! Done everything above mentioned plus off my connection, then restarted my laptop and weeeeee it works wonder!
    Thanks loads!!

  3. i have the HpUi exe search protect on my computer but i can’t find the subtab folder to delete it. I tried looking in the program files in local disk C but it is not there 🙁

    1. Right click on HpUI.exe in task manager and then click ‘Open file location’. It’ll take you straight to the folder.

  4. I have been able to do everything except end process of hpui.exe it starts running again and when I try to delete subtab it says file or folder is open in another program?

    1. Lisa,
      Kindly right click on hpui.exe in Task manager and try to end tree process and very quickly delete the suptab folder in program files.
      Do this twice or thrice until the folder is removed.
      Hope it will do.

  5. There is a quicker way than all of this. You must open the file location in C/Program Files (x86)/Suptab and have it ready.
    Open Task manager and right click end the task HpUI then you must quickly switch back to the Suptab folder and delete HpUI it before the program restarts.

  6. This was indeed very helpful, Thanks so much.
    One quick tip to the others who are having problem deleting the suptab folder, try doing everything with your windows in “safe mode” it is much easier. =)

    1. I didn’t tell that this program (Trojan Killer) is free. No, it isn’t free. I have furnished you with a free removal guide (manual solution) to remove HpUI.exe virus.

  7. Thanxxxxxxxxx a lottttt guyss!!!!! U made my day.. It was frustating me from ever since it installed but u did it!! So much blessings to u all..:)

  8. Yay, removed it, all I did was disconnect my connection and remove HpUI.exe , Loader32.exe , Loader64.exe in Task Manager, then quickly remove the SubTab folder and restart my computer, now it’s done, thank you so much, god bless you.

  9. good job… thankyou very much… end process loader32 and hpui in task manager, last, search suptab and deleted this folder… very welll

    1. Sorry, I don’t speak your language. Free removal of HpUI.exe virus is explained in the video. If you need help ask me in English.

  10. Hi,

    I have uninstalled everyhting I guess, pogram files folder, browser settings but still the task bar icon doesnt go from task bar menu. When i try to display, it doesnt even display in task bar so i cant even open the file. please helppppp !

  11. wow thanks so much really was stressed out… thanx for e info…. another method i found out is to 1st locate the folder via right clicking on task manager , then inside the folder scroll up or down to find the uninstaller n just click on it …the whole folder uninstalls….

  12. just install revo uninstaller and delete the whole file by goin through the option unrecoverable delete and selecting all of the files inside suptab… by the time u delete these files. ur search protect will be long gone.. hope this helps…

  13. Hi, thanks for this piece of info. This thing has been driving me crazy for the past few days. I managed to do most of the uninstall and got rid of the sup tab folder as well. However, the istart is still there as I can see it as a SEARCH bar and my browser is still doing the weird thing with all the crazy ads that it has since this thing got in. I tried to download your Trojan Killer but it won’t work on a 64 bit system. Is there any (more) help that you can offer me?


  14. HpUL.exe still taking me 30-80% of my precoser and if i end program it start alone in another 5 seconds and start taking procesor so thanks a lot you help me 🙂 now its out of my notebook

  15. 1)Open suptab folder in program files (x86)
    2)go to task manager then end task HPUI.exe, then immediately delete HPUI.exe in the suptab folder in the program files (x86)
    3) do the same thing for Loader32.exe and Loader64.exe

  16. Very simple method of above all. Just go to regedit. There we can see hkey-users, hkey-localmachine-users like folders. From those folders search for sup titled files and delete their values. Restart your system. Go to program files folder and delete suptab folder. Done.

Leave a Comment

Your email address will not be published. Required fields are marked *