Mac Virus

Tarmac Mac

Parasite may reinstall itself multiple times if you don't delete its core files. We recommend downloading ComboCleaner to scan for malicious programs installed with it. This may save you hours and cut down your time to about 15 minutes. 

Download ComboCleaner Anti-Malware

More information about ComboCleaner and steps to uninstall. Please review ComboCleaner's EULA and Privacy Policy. Keep in mind, only ComboCleaner’s scanner is free. If it detects a malware, you'll need to purchase its full version to remove it.



Tarmac is believed to be a malware of the notorious Trojan Horse variety. A Trojan virus such as Tarmac could be a source of numerous security issues.


The Tarmac Malware on Mac


The Tarmac malware program is a representative of the infamous Trojan Horse family of malicious computer software. It is one of the latest additions to its respective category, and due to being a newly released threat, a lot of antivirus solutions may not yet have it added to their databases. This significantly decreases the chances of detecting such an infection if it enters your computer and your antivirus’s database hasn’t been updated to include Tarmac. This is what’s called a zero-day attack, and those types of malware attacks are some of the most problematic. It is possible that the virus may remain in your computer for an extended period of time without you having any idea about its presence there. This would, in turn, allow the infection to complete its nefarious task without getting interrupted, resulting in all kinds of potential harm to your system and to your virtual privacy.

Our job here is to tell you about the specifics of threats like Tarmac, and to help you remove this particular Trojan from your computer in a safe and reliable manner. The removal instructions can be found right below this article, but we advise you to first read the information leading up to the guide before you begin the process of removing the malware.

The Tarmac Malware

Tarmac is considered a malicious program commonly known as a Trojan Horse. Malware like Tarmac is tied to a myriad of security problems, the most dangerous one being a potential ransomware infection.

There are all kinds of malware distribution techniques out there, but when it comes to getting more computers infected with Trojan threats, there is one element of their distribution that is present in almost all cases. We are talking about the disguise used by most Trojan Horse infections – in most instances, a Trojan would be hidden under the guise of something that doesn’t raise the user’s suspicion. Furthermore, the file that carries the Trojan may actually be presented in a way that would make the user willing to open it.

 For instance, the malware could be disguised as a software installer – it may be purported to install some popular computer game or a useful program such as Photoshop. The gimmick here is that the installer usually comes from a site that spreads pirated content, meaning that the user would believe that they are getting an expensive piece of software for free. Digital piracy is illegal, and this should be enough of a reason for people not to visit and download stuff from pirate sites, but there’s also the possibility of landing a malware program such as Tarmac, which should further make one avoid such web locations.

Tarmac targets Mac

Tarmac has been labeled a Trojan Horse virus by security experts and should be removed as soon as possible. Tarmac could be a harbinger of different security threats like keyloggers, fishing attempts and even ransomware.

Tarmac may have the ability to cause its harm in different ways, since Trojan Horse infections like it tend to be quite versatile in their abilities. Espionage, collection of personal data, covert cryptocurrency mining using the computer’s resources, distribution of additional computer threats (Ransomware, Worms, Spyware, etc.), are all things Trojans are known for being able to do. In the current case, we can’t tell you the exact goal of the virus you are facing, as there’s not enough research on that yet. However, you don’t really need to learn about the consequences of the attack from Tarmac to know that it is a dangerous malware threat, which should be removed in the quickest way possible.


Name Tarmac
Type Trojan
Danger Level  High (Trojans are often used as a backdoor for Ransomware)
Symptoms Trojans usually don’t show visible symptoms, which is why detecting them without an antivirus tool is really difficult.
Distribution Method Pirate sites may sometimes spread Trojan infections disguised as software installers.
Detection Tool

Remove Tarmac Malware from Mac


We get asked this a lot, so we are putting it here: Removing parasite manually may take hours and damage your system in the process. We recommend downloading ComboCleaner to see if it can detect parasite files for you.

The first thing you need to do is to Quit Safari (if it is opened). If you have trouble closing it normally, you may need to Force Quit Safari:

You can choose the Apple menu and click on Force Quit.

Alternatively you can simultaneously press (the Command key situated next to the space bar), Option (the key right next to it) and Escape (the key located at the upper left corner of your keyboard).

If you have done it right a dialog box titled Force Quit Applications will open up.

In this new dialog window select Safari, then press the Force Quit button, then confirm with Force Quit again.

Close the dialog box/window.



To remove parasite on your own, you may have to meddle with system files and registries. If you were to do this, you need to be extremely careful, because you may damage your system.

If you want to avoid the risk, we recommend downloading ComboCleaner
a professional malware removal tool.

More information on ComboCleaner, steps to uninstallEULA, and Privacy Policy.

Start Activity Monitor by opening up Finder, then proceed to activity-monitor

Once there, look at all the processes: if you believe any of them are hijacking your results, or are part of the problem, highlight the process with your mouse, then click the “i” button at the top. This will open up the following box:


Now click on Sample at the bottom:


Do this for all processes you believe are part of the threat, and run any suspicious files in our online virus scanner, then delete the malicious files:

Drag and Drop Files Here to Scan
Maximum file size: 128MB.

This scanner is free and will always remain free for our website's users. You can find its full-page version at:

Scan Results

Virus Scanner Result


The next step is to safely launch Safari again. Press and hold the Shift key while relaunching Safari. This will prevent Safari’s previously opened pages from loading again. Once Safari is opened up, you can release the Shift key.

On the off chance that you are still having trouble with scripts interrupting the closing of unwanted pages in Safari, you may need to take some additional measures.

First, Force Quit Safari again.

Now if you are using a Wi-Fi connection turn it off by selecting Wi-Fi off in you Mac’s Menu. If you are using a cable internet (Ethernet connection), disconnect the Ethernet cable.


Re-Launch Safari but don’t forget to press and hold the Shift button while doing it, so no previous pages can be opened up. Now, Click on Preferences in the Safari menu,

Preferences in Safari

and then again on the Extensions tab,

extensions in safari

Select and Uninstall any extensions that you don’t recognize by clicking on the Uninstall button. If you are not sure and don’t want to take any risks you can safely uninstall all extensions, none are required for normal system operation.

The threat has likely infected all of your browsers. The instructions below need to be applied for all browsers you are using.

Again select Preferences in the Safari Menu, but this time click on the Privacy tab,
Privacy in Safari

Now click on Remove All Website Data, confirm with Remove Now. Keep in mind that after you do this all stored website data will be deleted. You will need to sign-in again for all websites that require any form of authentication.

Still in the Preferences menu, hit the General tab

General Tab in Safari

Check if your Homepage is the one you have selected, if not change it to whatever you prefer.
Default Home Page

Select the History menu this time, and click on Clear History. This way you will prevent accidentally opening a problematic web page again.

firefox-512 How to Remove Tarmac From Firefox in OSX:

Open Firefoxclick on mozilla menu (top right) ——-> Add-onsHit Extensions next.

pic 6

The problem should be lurking somewhere around here –  Remove it. Then Refresh Your Firefox Settings.

chrome-logo-transparent-backgroundHow to Remove Tarmac From Chrome in OSX:

 Start Chrome, click chrome menu icon —–>More Tools —–> Extensions. There,  find the malware and  select  chrome-trash-icon.

pic 8

 Click chrome menu icon again, and proceed to Settings —> Search, the fourth tab, select Manage Search Engines.  Delete everything but the search engines you normally use. After that Reset Your Chrome Settings.

If the guide doesn’t help, download the anti-virus program we recommended or try our free online virus scanner. Also, you can always ask us in the comments for help!

Leave a Comment