Remove Kromtech MacKeeper Virus (Mac Removal Guide)
THREAT REMOVAL

Remove Kromtech MacKeeper Virus (Mac Removal Guide)

remove-kromtech-mackeeper-virus-sensorstechforum
Update August 2019. What is Kromtech ? How to remove it from the affected system ? How to restore browser settings ?

Kromtech.net is the domain of a questionable website that is currently used for the spread of the ad-supported application MacKeeper. That’s why it is called Kromtech MacKeeper virus. It affects popular web browsers like Chrome and Safari for Mac. The reason why many users considered it to be a virus is its unwanted appearance in their preferred web browser. If your web browser is constantly loading Kromtech virus then it is possible that you have an undesired program installed on your Mac.

Threat Summary

NameKromtech virus
TypeBrowser Redirect, Potenitally unwanted program (PUP)
Short DescriptionQuestionable website that gains access to popular web browsers installed on Mac devices without users’ permission. Offers ad-supported Mac optimizer.
SymptomsWeb traffic is redirected to landings hosted on Kromtech.net
The redirect attempts to convince you to download ad-supported Mac optimizer
Main browser settings may be altered by an associated undesired program
Distribution MethodFreeware installations, Bundled packages, Infected web pages
Detection Tool See If Your System Has Been Affected by Kromtech virus

Combo Cleaner

Malware Removal Tool

User ExperienceJoin Our Forum to Discuss Kromtech virus.

Kromtech MacKeeper Virus – Ways of Distribution and Impact

Once affected by Kromtech virus your Safari/Chrome/Firefox/Opera browser will automatically open a new browser tab that is showing landing pages with deceptive offers. The landings were reported to be hosted on different subdomains like app4.kromtech.net, app7.kromtech.net and app6.kromtech.net

As soon as one of those web pages load in the browser it could attempt to open another webpage that offers a bogus system optimizer called

MacKeeper.

MacKeeper is an ad-supported program that has been detected to display various types of pop-ups, which are not malicious, but could lead to suspicious sites and may definitely be irritating. The program itself claims to optimize and improve the performance of your Mac, but the bad news is that the very opposite is happens when this program is running on a Mac device.

Here is how an affected user describes the problem with Kromtech MacKeeper virus:

Every single time when I open Safari and as soon as I open another webpage, automatically another browser tab opens with a landing page of Kromtech: https://app4.kromtech.net/landings. if I paste the entire link here – it will appear as a link to MacKeeper.

The purpose of all those redirects to Kromtech.net is to convince you to follow deceptive instructions and eventually install a bogus app like MacKeeper. Since every next subdomain could be configured to display different offer, you may also be asked to enter sensitive credentials; subscribe to push notifications or visit another suspicious link.

For the sake of your security, we recommend that you close the web page with this annoying Kromtech virus.

Furthermore, the unexpected appearance of this redirect may also be a sign of an undesired program installed on your Mac. The spread of potentially unwanted programs is often realized via software bundles and freeware packages.

So you may have installed the program during the installation of a desired program. This nasty side effect usually occurs as a result of improperly disclosed information about extras added in freeware installers. The good news is that the details presented in the Advanced/Custom configuration step may enable you to learn about the presence of added PUPs and eventually prevent them from accessing your device.

Remove Kromtech MacKeeper Virus from Mac

In order to remove Kromtech MacKeeper virus along with all associated files that enable its appearance in the browser, you should complete several removal steps. In the guide below you will find all removal steps in their precise order. You could choose between manual and automatic removal approaches. In order to fully get rid of all present undesired programs and improve MacOS security, we recommend that you should combine the steps. Have in mind that the names of all present infection files associated with this browser redirect may differ the name of the redirect.

In case you have further questions or need additional help, don’t hesitate to leave a comment or contact us via email.

Gergana Ivanova

Gergana Ivanova

Gergana has a bachelor's degree in Marketing. She has been with the STF team for five years, researching malware, reporting on the latest computer infections, and following digital marketing trends.

More Posts

Follow Me:
Google Plus


Mac OS X Google Chrome Mozilla Firefox Microsoft Edge Safari Internet Explorer

Get rid of Kromtech virus from Mac OS X.


Step 1: Uninstall Kromtech virus and remove related files and objects

OFFER
Manual Removal Usually Takes Time and You Risk Damaging Your Files If Not Careful!
We Recommend To Scan Your Mac with SpyHunter for Mac
Keep in mind, that SpyHunter for Mac needs to purchased to remove the malware threats. Click on the corresponding links to check SpyHunter’s EULA and Privacy Policy


1. Hit the ⇧+⌘+U keys to open Utilities. Another way is to click on “Go” and then click “Utilities”, like the image below shows:


2. Find Activity Monitor and double-click it:


3. In the Activity Monitor look for any suspicious processes, belonging or related to Kromtech virus:

Tip: To quit a process completely, choose the “Force Quit” option.


4. Click on the "Go" button again, but this time select Applications. Another way is with the ⇧+⌘+A buttons.


5. In the Applications menu, look for any suspicious app or an app with a name, similar or identical to Kromtech virus. If you find it, right-click on the app and select “Move to Trash”.


6: Select Accounts, after which click on the Login Items preference. Your Mac will then show you a list of items that start automatically when you log in. Look for any suspicious apps identical or similar to Kromtech virus. Check the app you want to stop from running automatically and then select on the Minus (“-“) icon to hide it.


7: Remove any left-over files that might be related to this threat manually by following the sub-steps below:

  • Go to Finder.
  • In the search bar type the name of the app that you want to remove.
  • Above the search bar change the two drop down menus to “System Files” and “Are Included” so that you can see all of the files associated with the application you want to remove. Bear in mind that some of the files may not be related to the app so be very careful which files you delete.
  • If all of the files are related, hold the ⌘+A buttons to select them and then drive them to “Trash”.

In case you cannot remove Kromtech virus via Step 1 above:

In case you cannot find the virus files and objects in your Applications or other places we have shown above, you can manually look for them in the Libraries of your Mac. But before doing this, please read the disclaimer below:

Disclaimer! If you are about to tamper with Library files on Mac, be sure to know the name of the virus file, because if you delete the wrong file, it may cause irreversible damage to your MacOS. Continue on your own responsibility!

1: Click on "Go" and Then "Go to Folder" as shown underneath:

2: Type in "/Library/LauchAgents/" and click Ok:

3: Delete all of the virus files that have similar or the same name as Kromtech virus. If you believe there is no such file, do not delete anything.

You can repeat the same procedure with the following other Library directories:

→ ~/Library/LaunchAgents
/Library/LaunchDaemons

Tip: ~ is there on purpose, because it leads to more LaunchAgents.


Step 2: Scan for and remove Kromtech virus files from your Mac

When you are facing problems on your Mac as a result of unwanted scripts and programs such as Kromtech virus, the recommended way of eliminating the threat is by using an anti-malware program. Combo Cleaner offers advanced security features along with other modules that will improve your Mac’s security and protect it in the future.



Mac OS X Google Chrome Mozilla Firefox Microsoft Edge Safari Internet Explorer


Remove Kromtech virus from Google Chrome.


Step 1: Start Google Chrome and open the drop menu


Step 2: Move the cursor over "Tools" and then from the extended menu choose "Extensions"


Step 3: From the opened "Extensions" menu locate the unwanted extension and click on its "Remove" button.


Step 4: After the extension is removed, restart Google Chrome by closing it from the red "X" button at the top right corner and start it again.


Mac OS X Google Chrome Mozilla Firefox Microsoft Edge Safari Internet Explorer


Erase Kromtech virus from Mozilla Firefox.

Step 1: Start Mozilla Firefox. Open the menu window


Step 2: Select the "Add-ons" icon from the menu.


Step 3: Select the unwanted extension and click "Remove"


Step 4: After the extension is removed, restart Mozilla Firefox by closing it from the red "X" button at the top right corner and start it again.



Mac OS X Google Chrome Mozilla Firefox Microsoft Edge Safari Internet Explorer


Uninstall Kromtech virus from Microsoft Edge.


Step 1: Start Edge browser.


Step 2: Open the drop menu by clicking on the icon at the top right corner.


Step 3: From the drop menu select "Extensions".


Step 4: Choose the suspected malicious extension you want to remove and then click on the gear icon.


Step 5: Remove the malicious extension by scrolling down and then clicking on Uninstall.



Mac OS X Google Chrome Mozilla Firefox Microsoft Edge Safari Internet Explorer


Delete Kromtech virus from Safari.


Step 1: Start the Safari app.


Step 2: After hovering your mouse cursor to the top of the screen, click on the Safari text to open its drop down menu.


Step 3: From the menu, click on "Preferences".

stf-safari preferences


Step 4: After that, select the 'Extensions' Tab.

stf-safari-extensions


Step 5: Click once on the extension you want to remove.


Step 6: Click 'Uninstall'.

stf-safari uninstall

A pop-up window will appear asking for confirmation to uninstall the extension. Select 'Uninstall' again, and the Kromtech virus will be removed.


How to Reset Safari
IMPORTANT: Before resetting Safari make sure you back up all your saved passwords within the browser in case you forget them.

Start Safari and then click on the gear leaver icon.

Click the Reset Safari button and you will reset the browser.


Mac OS X Google Chrome Mozilla Firefox Microsoft Edge Safari Internet Explorer


Eliminate Kromtech virus from Internet Explorer.


Step 1: Start Internet Explorer.


Step 2: Click on the gear icon labeled 'Tools' to open the drop menu and select 'Manage Add-ons'


Step 3: In the 'Manage Add-ons' window.


Step 4: Select the extension you want to remove and then click 'Disable'. A pop-up window will appear to inform you that you are about to disable the selected extension, and some more add-ons might be disabled as well. Leave all the boxes checked, and click 'Disable'.


Step 5: After the unwanted extension has been removed, restart Internet Explorer by closing it from the red 'X' button located at the top right corner and start it again.


Leave a Comment

Your email address will not be published. Required fields are marked *

Time limit is exhausted. Please reload CAPTCHA.

Share on Facebook Share
Loading...
Share on Twitter Tweet
Loading...
Share on Google Plus Share
Loading...
Share on Linkedin Share
Loading...
Share on Digg Share
Share on Reddit Share
Loading...
Share on Stumbleupon Share
Loading...