Saint2.su is a pop-up ad network that redirects your browser to unwanted sites

Saint2.su is an ad network that forces pop-ups and redirects into your browser, usually through compromised websites or malicious browser extensions. You will see it as sudden new tabs opening, banners appearing over content you are reading, or your search results being hijacked. It is not a virus, but it behaves like one — it loads ads by exploiting how your browser works.

The network spreads through three main routes: websites with weak security that have been hacked, browser extensions you installed that turned out to be malicious, or your browser settings being changed without your knowledge. Once it is in, it generates revenue by forcing you to see ads and click through to other sites, whether you want to or not.

Blocking it requires you to find where it got in, remove it, and then prevent it from coming back. The steps differ depending on whether it came through an extension, a browser setting change, or a website you visit regularly.

Key Takeaways

  • Saint2.su ads usually come from a malicious browser extension, a hijacked browser setting, or a website with weak security — you need to identify which one before you can stop it.
  • Check your installed extensions first, because a fake or compromised extension is the most common source and the easiest to remove.
  • Reset your browser settings to their defaults if you find your homepage, search engine, or new tab page has been changed without your action.
  • Use an ad blocker like uBlock Origin or Adblock Plus to catch ads that slip through, but understand that ad blockers alone will not stop redirects from a malicious extension.
  • If the ads continue after removing extensions and resetting settings, the website itself may be compromised — switch to a different site or use a content blocker.

Check and remove malicious browser extensions

A fake or hijacked extension is the most common source of Saint2.su ads. Extensions run inside your browser with permission to change what you see on every page, so a malicious one can inject ads and redirects directly into your view.

Open your browser's extension menu. In Chrome, click the puzzle piece icon in the top right, then click the gear icon and select "Manage extensions." In Firefox, click the three horizontal lines, select "Add-ons and themes," then click "Extensions." In Safari, go to Safari menu > Settings > Extensions. Look through the list for extensions you do not remember installing, extensions from publishers you do not recognize, or extensions with very few reviews and a recent install date.

Remove anything suspicious by clicking the trash or remove button next to it. Pay special attention to extensions that promise to enhance your shopping, change your search results, or modify how ads appear — these are common disguises for ad injection networks. After removing extensions, restart your browser completely and check whether the ads have stopped.

Reset your browser settings to defaults

Saint2.su can also spread by changing your homepage, search engine, or new tab page without your permission. These changes are harder to notice because they happen in the background, but they force you to see ads every time you open a new tab or search.

In Chrome, go to Settings > On startup and check what page is set to load. Go to Settings > Search engine and verify that Google (or your preferred engine) is selected. Go to Settings > Home and confirm your homepage is what you chose. If any of these have been changed to unfamiliar URLs or search engines, click the three dots next to the unwanted option and delete it, then set your preferred option as default.

In Firefox, go to Settings > Home and check what appears on your new tab page and homepage. Go to Settings > Search and verify your search engine. In Safari, go to Settings > General and check your homepage and search engine settings. After resetting, close and reopen your browser to confirm the changes took effect.

Install an ad blocker to catch remaining ads

An ad blocker will not stop a malicious extension or a hijacked browser setting, but it will catch ads that slip through after you have cleaned up those problems. uBlock Origin and Adblock Plus are the most widely used blockers and are available for Chrome, Firefox, Safari, and Edge.

Install uBlock Origin by going to your browser's extension store, searching for "uBlock Origin," and clicking Add or Install. Once installed, click the uBlock icon in your toolbar and leave the default settings as they are — they block most ads without breaking websites. If a website stops working after you install an ad blocker, click the uBlock icon and toggle the blocker off for that site only.

Ad blockers work by comparing every ad your browser tries to load against a list of known ad networks. Saint2.su ads may not be on that list when ready, but major blockers update their lists daily, so new ad networks are usually caught within days of being reported.

Check for compromised websites you visit regularly

If you see Saint2.su ads only on one or two specific websites, the problem may not be your browser — it may be that those websites have been hacked or are deliberately hosting the ad network. Hackers inject ads into websites to generate revenue, and the website owner may not know it is happening.

Try visiting those websites in a private or incognito window, where extensions are usually disabled. If the ads disappear in private mode, an extension is the culprit. If the ads still appear, the website itself is the source. In that case, you have two choices: stop visiting that website, or use a content blocker like uBlock Origin set to block all scripts from that domain.

You can also report the compromised website to its owner by looking for a Contact or Report a Problem link, usually at the bottom of the page. Website owners often do not know they have been hacked and will fix it once they are told.

Prevent Saint2.su from coming back

After you have removed the source, take steps to keep it out. Do not install browser extensions from unknown publishers or extensions that ask for permission to "modify all websites" unless you have a specific reason to trust them. Stick to extensions from the official Chrome Web Store, Firefox Add-ons, or Safari Extensions — these have some review process, though malicious extensions do occasionally slip through.

Keep your browser updated. Browser makers release security patches regularly, and running an old version leaves you vulnerable to exploits that inject ads or change your settings. In Chrome, click the three dots > Help > About Google Chrome and it will update automatically. In Firefox, go to Settings > General > Firefox Updates. In Safari, go to System Settings > General > Software Update.

Use a password manager like Bitwarden or 1Password to generate strong, unique passwords for each website. If a website is hacked and your password is stolen, the attacker cannot use it to access your other accounts. This does not stop ads directly, but it limits the damage if a site you visit is compromised.

What to do if ads continue after these steps

If Saint2.su ads persist after you have removed extensions, reset your browser, and installed an ad blocker, the problem may be deeper. Run a full system scan with Windows Defender (built into Windows) or the antivirus software you use. Some malware installs itself at the system level, where it can inject ads into every browser, not just one.

Open Windows Defender by typing "Windows Defender" into your search bar and clicking "Virus & threat protection." Click "Scan options," select "Full scan," and click "Scan now." This will take 30 minutes to an hour. If malware is found, Windows Defender will remove it automatically. After the scan completes, restart your computer and check whether the ads have stopped.

If you use a Mac, open System Preferences > General > Security & Privacy and check whether any unknown apps have been installed recently. You can also read and run a free scan with Malwarebytes for Mac, which is designed to catch ad injection malware that Apple's built-in tools sometimes miss.

Frequently Asked Questions

Is Saint2.su a virus?

Saint2.su is not a virus in the traditional sense — it does not replicate itself or damage your files. It is an ad network that uses browser exploits or malicious extensions to force ads into your view. It is treated like malware because it behaves without your consent, but the removal process is different from removing a true virus.

Why do I see Saint2.su ads only in certain browsers?

If the ads appear in one browser but not another, a malicious extension in that specific browser is the cause. Extensions do not sync between browsers, so removing it from Chrome will not affect Firefox. Check the extension list in each browser separately and remove anything suspicious from each one.

Can I block Saint2.su by changing my DNS settings?

Changing your DNS to a privacy-focused provider like Cloudflare (1.1.1.1) or Quad9 (9.9.9.9) may block some ad networks, but it will not stop Saint2.su if it is coming from a malicious extension or a hijacked browser setting. DNS blocking works best as a second layer of defense after you have removed the source.

What if a website I need keeps showing Saint2.su ads even in private mode?

If the website itself is compromised and you need to use it, open uBlock Origin, click the icon, and toggle it on for that site. You can also click the settings icon in uBlock and add a custom filter to block specific ad networks, though this requires some technical knowledge. Contact the website owner and ask them to fix the security issue.

Do I need to reinstall my browser to get rid of these ads?

Reinstalling your browser will remove all extensions and reset all settings, which will stop the ads, but it is not necessary if you follow the steps above. Removing extensions and resetting settings accomplishes the same thing without losing your bookmarks and browsing history. Only reinstall if ads continue after you have tried everything else.