Remove Pirrit from OS X/Win

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.

This page aims to help you remove Pirrit. These Pirrit removal instructions work for Chrome, Firefox and Internet Explorer, as well as every version of OS X and Windows.

Is your browsing disturbed by a constant flow of ads, banners, pop-ups, and messages? You probably have no idea how and why these ads appear on your screen, but the constant disturbance they are causing has made you search for ways to remove them. If this is the case, then here we may be able to help you get rid of the ads successfully by removing the program that is generating them. In the guide below, you will find a detailed description that will lead you through all the steps you need to take. But before that, it is a good idea to read a bit more about the adware you are dealing with. The brief information below will help you better understand the way it operates and how to prevent getting these annoying ads in the future.

Pirrit is adware – what does that mean?

Adware is a term, used to describe programs that are developed to generate and display different types of ads on the users’ screens. This word comes in short from advertisement and software, and as you may guess from the name, it is closely related to the online advertising methods. You have probably noticed that the intrusive flow of ads on your screen is mostly generated through a program named Pirrit, which is a typical adware piece of software. Adware is known as a bit aggressive method of online advertising, thus, a source of irritation that many users prefer to get rid of.

How can Pirrit get on your PC unknowingly?

You may have heard that adware has a bad reputation and the major reason for that is the sneaky way such programs get installed on your PC. It is not really true that they get installed without your approval because they require your “OK” click during the installation process, but the chance is you may not notice them. This is because, usually, adware programs like Pirrit come bundled inside the installation package of another program you have willingly downloaded and installed. Especially if that software is distributed for free. Now, if you recall some of your recent installations, you have probably launched the wizard, quickly skipped the EULA, clicked OK on the “quick” or “normal” installation option and got that application installed. So far so good, and you were happy to try your new program. However, you probably didn’t notice that along with the program you wanted, you have installed some adware like Pirrit. At least until the annoying ads appeared on your screen and started to disturb you.

What actions may Pirrit perform on your PC?

Typically, adware-like programs may keep track of the websites you visit and possibly collect information about other activities you perform in your browser, when you surf the web. This data may be used to target your searches with specific ads. Then, this program may display some advertising messages on your screen based on the data it collected. These ads may come in different shapes, colors, and sizes and may appear like pop-up messages, banners, links, boxes, etc. Pirrit can integrate into any browser you may use – Chrome, Mozilla, Internet Explorer or others. Usually, the ads may become intrusive and annoying, especially when they come in a never ending circus and can’t be closed. Sometimes, even your browser settings may be modified and your searches may be redirected to promotional pages with numerous ads. This is usually done because the developers earn a profit from every click on these ads through a Pay-Per-Click method, therefore they are trying to display as many of them as possible. This activity is often considered as irritating by users.

Is Pirrit dangerous?

As annoying as it could be, Pirrit does not cause any serious security risks like viruses do. For example, serious malicious threats like Ransomware or Trojan horses can do a lot of nasty stuff on your machine like corrupting your data, stealing information or blackmailing you. Adware, in its worst, may only cause some unpleasant disturbance to your browsing. The possible reason for irritation may usually be that adware may expose you to some undesired advertising content, which you may not really want to see. However, many users mistakenly refer to such adware programs as a virus, which is not the case, and are looking for a way to remove it.

How can you protect your PC?

In order to keep your system away from the aggressive methods of the online advertising industry, it is a good idea to always check what programs you are installing on your computer and carefully read the EULA to have an idea of what you are getting. In case you don’t want to end up with unwanted applications on your PC, we advise you to always install software through the “Custom” or “Advanced” options. There you may find any other bundled applications and can quickly deselect them if you don’t want them to be installed. This simple step could save you a lot of disturbance later. Ones installed, it could be a bit tricky to uninstall adware from your system, and therefore we suggest you closely follow the steps in the removal guide below. Should you need any help, please leave a comment.


Name Pirrit
Type Adware
Danger Level Medium (nowhere near threats like Ransomware, but still a security risk)
Symptoms Constant flow of ads, banners, pop-ups, and messages appearing on the screen.
Distribution Method Adware is often bundled  inside the installation package of other software.
Detection Tool Pirrit may be difficult to track down. Use SpyHunter – a professional parasite scanner – to make sure you find all files related to the infection.

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you’ll need to purchase the full version.
More information about SpyHunter and steps to uninstall.


Remove Pirrit from OS X/Win

Readers are interested in:

NOTE! If you are a Mac user, you need to follow this guide instead:

How To Remove Ads on Mac


Reboot in Safe Mode (use this guide if you don’t know how to do it).

This was the first preparation.


To remove parasite, you may have to meddle with system files and registries. Making a mistake and deleting the wrong thing may damage your system.
Avoid this by using SpyHunter - a professional Parasite removal tool.

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.

Reveal All Hidden Files and Folders.

  • Do not skip this  – Pirrit may have hidden some of its files.

Hold together the Start Key and R. Type appwiz.cpl –> OK.


You are now in the Control Panel. Look for suspicious entries. Uninstall it/them.

Type msconfig in the search field and hit enter. A window will pop-up:


Startup —> Uncheck entries that have “Unknown” as Manufacturer or otherwise look suspicious.

  • Remember this step – if you have reason to believe a bigger threat (like ransomware) is on your PC, check everything here.


Open the start menu and search for Network Connections (On Windows 10 you just write it after clicking the Windows button), press enter.

  1. Right-click on the Network Adapter you are using —> Properties —> Internet Protocol Version 4 (ICP/IP), click  Properties.
  2. The DNS line should be set to Obtain DNS server automatically. If it is not, set it yourself.
  3. Click on Advanced —> the DNS tab. Remove everything here (if there is something) —> OK.



Right click on the browser’s shortcut —> Properties.

NOTE: We are showing Google Chrome, but you can do this for Firefox and IE (or Edge).


Properties —–> Shortcut. In Target, remove everything after .exe.

ie9-10_512x512  Remove Pirrit from Internet Explorer:

Open IE, click  IE GEAR —–> Manage Add-ons.

pic 3

Find the threat —> Disable. Go to IE GEAR —–> Internet Options —> change the URL to whatever you use (if hijacked) —> Apply.

firefox-512 Remove Pirrit from Firefox:

Open Firefoxclick  mozilla menu  ——-> Add-ons —-> Extensions.

pic 6

Find the adware/malware —> Remove.
chrome-logo-transparent-backgroundRemove Pirrit from Chrome:

Close Chrome. Navigate to:

 C:/Users/!!!!USER NAME!!!!/AppData/Local/Google/Chrome/User Data. There is a Folder called “Default” inside:

Rename the Folder to Backup Default

Rename it to Backup Default. Restart Chrome.

  • At this point the threat is gone from Chrome, but complete the entire guide or it may reappear on a system reboot.


Press CTRL + SHIFT + ESC simultaneously. Go to the Processes Tab. Try to determine which ones are dangerous. Google them or ask us in the comments.


This is the most important and difficult part. If you delete the wrong file, it may damage your system irreversibly. If you can not do this,
>> Download SpyHunter - a professional parasite scanner and remover.

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.

Right click on each of the problematic processes separately and select Open File LocationEnd the process after you open the folder, then delete the directories you were sent to.



Type Regedit in the windows search field and press Enter.

Inside, press CTRL and F together and type the threat’s Name. Right click and delete any entries you find with a similar name. If they don’t show this way, go manually to these directories and delete/uninstall them:

  • HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious.
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random

Remember to leave us a comment if you run into any trouble!