Thanks for the reply I'll try to answer all your questions below..

Nothing seems to show up under task manager but there is like 10 opera gx ones that show up im not sure if that is notmal as I havent checked before.

I checked each folder for the manifest.json stuff, there were 5 folders 4 of them were opera and one was for honey (I installed that myself so I could see extensions up the top) doesnt seem to be in there.

The command in target is: "C:\Users*****\AppData\Local\Programs\Opera GX\launcher.exe"
I just covered up personal details with an asterisks

As for the link I followed what I could but im not seeing anything suspicious in task manager to work off of it sadly..

If there is anything else you want me to look up and post I'll do what I can, cheers.

I did forget to mention i did create a dummy profile on the pc yesterday and tested opera gx on a fresh install there and it didn't show up so i believe it's tied to just my profile and only opera as ive tested other browsers on my profile too.

As for the exe in the file I have the opera.exe and 2 orthers
launcher.exe.1671441701.old
launcher.exe.1671666764.old
So I dont think any of them are the issue

As for the exe in the file I have the opera.exe and 2 orthers
launcher.exe.1671441701.old
launcher.exe.1671666764.old
So I dont think any of them are the issue

I did forget to mention i did create a dummy profile on the pc yesterday and tested opera gx on a fresh install there and it didn't show up so i believe it's tied to just my profile and only opera as ive tested other browsers on my profile too.

Thanks for the reply I'll try to answer all your questions below..

Nothing seems to show up under task manager but there is like 10 opera gx ones that show up im not sure if that is notmal as I havent checked before.

I checked each folder for the manifest.json stuff, there were 5 folders 4 of them were opera and one was for honey (I installed that myself so I could see extensions up the top) doesnt seem to be in there.

The command in target is: "C:\Users*****\AppData\Local\Programs\Opera GX\launcher.exe"
I just covered up personal details with an asterisks

As for the link I followed what I could but im not seeing anything suspicious in task manager to work off of it sadly..

If there is anything else you want me to look up and post I'll do what I can, cheers.

It seems an extension was put on and hides itself as google docs. When thats active everytime I go to search something it autodirects me to privatesearches.org. I can remove the extension by clicking on the extenstion tab and clicking remove, but every time I reopen opera it appears again, i've treid scans on the pc with malwarebytes but it never seems to remove this issue.