Mac Virus

Remove MacKeeper Kromtech Virus Pop-up from Mac/Safari

Parasite may reinstall itself multiple times if you don't delete its core files. We recommend downloading ComboCleaner to scan for malicious programs installed with it. This may save you hours and cut down your time to about 15 minutes. 

Download ComboCleaner Anti-Malware

More information about ComboCleaner and steps to uninstall. Please review ComboCleaner's EULA and Privacy Policy. Keep in mind, only ComboCleaner’s scanner is free. If it detects a malware, you'll need to purchase its full version to remove it.

 The Kromtech MacKeeper relation.

Kromtech MacKeeper

A screenshot of a user complaint for the Kromtech MacKeeper pop-up.

MacKeeper is a legitimate security program that is compliant with all regulations and laws. It is not in any way a virus. It is however promoted in questionable ways by shady means –  including malware like the Kromtech Virus. The rest of the article below covers the removal of the malware known as the Kromtech Pop-up.

E-commerce adverts can quickly become trouble for almost any web user who is having them on their screen. And this can get even worse when a Browser Hijacker such as the Kromtech Virus, has attached itself to the system. In this case, it is quite likely that your browser’s front page may be changed, along with other browser configuration settings such as the search engine or the toolbar section. Kromtech is just one of the many Browser Hijacker applications, notorious for disturbing your Internet browsing experience. Such type of programs are generally harmless but a lot of web users consider them as potentially unwanted and seek methods to uninstall them from their system. That’s why, on this page, we will help you to get rid of this kind of intrusive software by using our step-by-step guide and the professional Kromtech removal tool attached to it.

The majority of web users, when faced with the Ads created by a program like the Kromtech Virus, come to believe they’re fighting some sort of dangerous software. And this is pretty understandable – after all, the Browser HIjackers tend to take over their main browser and spam their screen with sponsored ads without asking for approval for that. Moreover, the word “virus” is commonly being used for every problem with a computer that isn’t a technical one. However, we need to clarify here that people hit by a real computer virus might have to face much more serious consequences than being spammed with aggressive ads and redirects. For instance, they may have their files stolen, corrupted or destroyed, while the computers contaminated with Browser Hijackers such as Kromtech, at their worst, are just going to be flooded with annoying pop-ups, banners, and sponsored links. In some instances, the system’s speed and performance may be affected because the hijacker may use a fair share of RAM and CPU resources for its never-ending ad-generating activity. All this, compared to the attack of a Ransomware or a Trojan Horse, however, is basically just a simple annoyance. Your PC is unlikely to be damaged by the presence of a program like Kromtech and once you remove it, it will probably be like new.

Is the Kromtech virus dangerous?

Kromtech virus

A message displayed by the Kromtech virus.

Nevertheless, keep in mind that even though the Browser Hijackers are normally considered non-threatening, they could still indirectly expose you to a number of online security threats. One of the main risks for your safety comes from the obstructive adverts that these programs constantly generate. Not all of them should be trusted because, sometimes, fake or misleading messages may sneak inside the regular ads streaming and redirect you to unsafe web locations where Ransomware and other nasty viruses may lurk. That’s why our advice for you here would be to stay away from them when possible. Remember that the advertisements displayed on your screen by apps such as KromtechSearch Baron or “Top Results” may be personalized in such a way to ensure that they appear more attractive to you. This is a function of most of the advanced Browser Hijacker applications that have a tendency to monitor your browsing history as a way to find out what web sites and items you are interested in. Customers with less powerful PC’s may face another difficulty – the hijacker may consistently require system resources, consequently slowing the work of the programs that you actually use.


Name Kromtech
Type Browser Hijacker
Danger Level Medium (nowhere near threats like Ransomware, but still a security risk)
Symptoms Ads, sponsored links, banners and pop-ups may constantly disturb your web surfing.
Distribution Method Software bundles are a common source of browser hijackers, as well as, ads, spam, torrents, and freeware.
Detection Tool

Remove MacKeeper Kromtech Virus Pop-up


We get asked this a lot, so we are putting it here: Removing parasite manually may take hours and damage your system in the process. We recommend downloading ComboCleaner to see if it can detect parasite files for you.

The first thing you need to do is to Quit Safari (if it is opened). If you have trouble closing it normally, you may need to Force Quit Safari:

You can choose the Apple menu and click on Force Quit.

Alternatively you can simultaneously press (the Command key situated next to the space bar), Option (the key right next to it) and Escape (the key located at the upper left corner of your keyboard).

If you have done it right a dialog box titled Force Quit Applications will open up.

In this new dialog window select Safari, then press the Force Quit button, then confirm with Force Quit again.

Close the dialog box/window.



To remove parasite on your own, you may have to meddle with system files and registries. If you were to do this, you need to be extremely careful, because you may damage your system.

If you want to avoid the risk, we recommend downloading ComboCleaner
a professional malware removal tool.

More information on ComboCleaner, steps to uninstallEULA, and Privacy Policy.

Start Activity Monitor by opening up Finder, then proceed to activity-monitor

Once there, look at all the processes: if you believe any of them are hijacking your results, or are part of the problem, highlight the process with your mouse, then click the “i” button at the top. This will open up the following box:


Now click on Sample at the bottom:


Do this for all processes you believe are part of the threat, and run any suspicious files in our online virus scanner, then delete the malicious files:

Drag and Drop Files Here to Scan
Maximum file size: 128MB.

This scanner is free and will always remain free for our website's users. You can find its full-page version at:

Scan Results

Virus Scanner Result


The next step is to safely launch Safari again. Press and hold the Shift key while relaunching Safari. This will prevent Safari’s previously opened pages from loading again. Once Safari is opened up, you can release the Shift key.

On the off chance that you are still having trouble with scripts interrupting the closing of unwanted pages in Safari, you may need to take some additional measures.

First, Force Quit Safari again.

Now if you are using a Wi-Fi connection turn it off by selecting Wi-Fi off in you Mac’s Menu. If you are using a cable internet (Ethernet connection), disconnect the Ethernet cable.


Re-Launch Safari but don’t forget to press and hold the Shift button while doing it, so no previous pages can be opened up. Now, Click on Preferences in the Safari menu,

Preferences in Safari

and then again on the Extensions tab,

extensions in safari

Select and Uninstall any extensions that you don’t recognize by clicking on the Uninstall button. If you are not sure and don’t want to take any risks you can safely uninstall all extensions, none are required for normal system operation.

The threat has likely infected all of your browsers. The instructions below need to be applied for all browsers you are using.

Again select Preferences in the Safari Menu, but this time click on the Privacy tab,
Privacy in Safari

Now click on Remove All Website Data, confirm with Remove Now. Keep in mind that after you do this all stored website data will be deleted. You will need to sign-in again for all websites that require any form of authentication.

Still in the Preferences menu, hit the General tab

General Tab in Safari

Check if your Homepage is the one you have selected, if not change it to whatever you prefer.
Default Home Page

Select the History menu this time, and click on Clear History. This way you will prevent accidentally opening a problematic web page again.

firefox-512 How to Remove Kromtech From Firefox in OSX:

Open Firefoxclick on mozilla menu (top right) ——-> Add-onsHit Extensions next.

pic 6

The problem should be lurking somewhere around here –  Remove it. Then Refresh Your Firefox Settings.

chrome-logo-transparent-backgroundHow to Remove Kromtech From Chrome in OSX:

 Start Chrome, click chrome menu icon —–>More Tools —–> Extensions. There,  find the malware and  select  chrome-trash-icon.

pic 8

 Click chrome menu icon again, and proceed to Settings —> Search, the fourth tab, select Manage Search Engines.  Delete everything but the search engines you normally use. After that Reset Your Chrome Settings.

If the guide doesn’t help, download the anti-virus program we recommended or try our free online virus scanner. Also, you can always ask us in the comments for help!

Leave a Comment