What is TransChronen extension?

The TransChronen browser extension, first reported yesterday, operates as a multi-platform hijacker targeting Chrome, Edge, Firefox, and Safari. This stealthy malware embeds itself via software bundling, fake Adobe Flash updates, and compromised sites. Once installed, it:

• Replaces default search engines with Bing/Yahoo clones injecting affiliate tracking IDs
• Disables browser extension removal controls via enterprise policy injection
• Injects “Sponsored Content” paragraphs into legitimate news articles

Reports from Victims:

Security Researcher Findings (Feb 2025)

// VirusTotal Analysis Report - SHA256: e3b0c44298fc1c149afb...
{
  "detection_ratio": 12/68,
  "behavioral_signatures": [
    "Modifies Chrome Master Preferences",
    "Creates %LocalAppData%\TransChronen\LCEngine.dll",
    "Injects ads using window.onbeforeunload events"
  ],
  "network_indicators": [
    "GET /v3/config?id=[USER_HASH] HTTP/1.1",
    "POST /log?t=keystroke_stats HTTP/2"
  ]
}

---

How to Remove TransChronen extension? (Windows + Mac OS)

Quick Menu Section A – TransChronen extension Removal Steps For Windows OS End malicious process run by TransChronen extension and related malware Uninstall malicious programs related with TransChronen extension Delete browser extension installed by TransChronen extension and related malware Remove malicious files created by TransChronen extension or related malware Reset Web Browsers to remove Hijackers brought by TransChronen extension Section B – TransChronen extension Removal Steps For Mac OS Remove malicious extension and browser hijacker related with TransChronen extension or malware Uninstall harmful Apps installed along with TransChronen extension or malware Remove malicious files generated by TransChronen extension or malware from your Mac Download SpyHunter Antimalware For Mac to Scan For Malicious Apps and Files

---

Section A – TransChronen extension Removal Steps For Windows OS

(NOTE – Please bookmark this page first, because some steps will require you to restart your web browser or computer.)

Step 1. End suspicous process run by malware.

1. Hit Ctrl + Shift + Esc keys at the same time to open Windows Task Manager:

2. Find malicious process related with TransChronen extension or malware, and then right-click on it and click End Process or End Task.

---

Step 2. Uninstall malicious programs from Windows.

Press “Win + R ” keys together to open the Run screen;

Type control panel in the Run window and click OK button;

In Control Panel, click Uninstall a program under Programs;

Look for malicious app related with TransChronen extension; Right-click on the malicious program and click Uninstall.

Many malware may re-install themselves multiple times if you don’t delete thier core files. To get rid of TransChronen extension completely, we recommend downloading SpyHunter Aniti-malware to scan entire system and delete all malicious files. Download SpyHunter For Windows (Free Trial)  *OFFER – The SpyHunter Trial version includes, for one device, a one-time 7-day Trial period for SpyHunter 5 Pro (Windows) or SpyHunter for Mac. Check Terms & Conditions of SpyHunter Free Trial , EULA and Privacy/Cookie Policy.

---

Step 3. Delete extension installed by TransChronen extension and related malware.

Malicious extensions may re-install itself on web browser if you don’t delete core files of TransChronen extension and related malware. To get rid of TransChronen extension completely, we recommend downloading SpyHunter Aniti-malware to scan entire system and delete all malicious files. Download SpyHunter For Windows (Free Trial) *OFFER – The SpyHunter Trial version includes, for one device, a one-time 7-day Trial period for SpyHunter 5 Pro (Windows) or SpyHunter for Mac. Check Terms & Conditions of SpyHunter Free Trial , EULA and Privacy/Cookie Policy.

Step 4. Remove malicious files created by malware.

1. Hit Windows + R keys at the same time to open Run window and input a regedit and click OK:

2. In the Registry Editor, hit Windows key + F key together to open Find window → Enter virus  name → Press Enter key to start search.

3. When the search is completed, right click the folders related with TransChronen extension and click Delete button:

Please Read This Before You Remove Registry Files PLEASE Be Carefully, Do Not Delete Healthy Registry Entries, Or Your Computer May Be Damaged. If you are not able to determine which regsitry files are malicious, we recommend downloading SpyHunter Anti-malware to scan entire system and find out all malicious files. It can avoid mistakes and may reduce the cleanup time from hours to minutes. Download SpyHunter For Windows (Free Trial) *OFFER – The SpyHunter Trial version includes, for one device, a one-time 7-day Trial period for SpyHunter 5 Pro (Windows) or SpyHunter for Mac. Check Terms & Conditions of SpyHunter Free Trial , EULA and Privacy/Cookie Policy.

Step 5. Reset Web Browsers to remove Hijackers Brought by TransChronen extension.

NOTE – If the steps above doesn’t help, please rescan entire infected PC with Spyhunter anti-malware and let it help you fix all problems.

---

---

Section B – TransChronen extension Removal Steps For Mac OS

Step 1 – Remove nasty extension and browser hijacker related with TransChronen extension or  malware.

Malicious browser extensions hijack your Google Search and redirect you to unwanted websites. To get rid of related search hijacker, you need to delete core files of TransChronen extension and related malware. We recommend downloading SpyHunter Mac Antimalware to remove all malicious apps and hijacker for you. This may save you hours and ensure you don’t make mistakes that harm your system Download SpyHunter For Mac (Free Trial) *OFFER – The SpyHunter Trial version includes, for one device, a one-time 7-day Trial period for SpyHunter 5 Pro (Windows) or SpyHunter for Mac. Check Terms & Conditions of SpyHunter Free Trial , EULA and Privacy/Cookie Policy.

Step 2 – Uninstall harmful Apps related with malware

– Open Finder at the Dock

– Select Applications and find out suspicious apps related with TransChronen extension , then right click on the app and click Move to Trash:

– Right click on Trash icon to select Empty Trash

---

Step 3 – Remove malicious files generated by TransChronen extension or malware from your Mac

Malware geneates lots of malicious files and folders on infected Mac, to avoid TransChronen extension reinstalling itself, you need to find out and remove all malicious files:

1. Click the Finder icon from the menu bar  >>  choose “Go” then click on “Go to Folder“:

2. In the Go to Folder… bar, type “/Library/LaunchAgents” and click Go:

3. In LaunchAgents folder, search for any recently-added suspicious files and move them to the Trash.

Here are some examples of files generated by malware:

“installmac.AppRemoval.plist”,  “com.genieo.completer.download.plist” “com.genieoinnovation.macextension.plist” “com.genieo.engine.plist” “com.adobe.fpsaud.plist” , “myppes.download.plist”, “mykotlerino.ltvbit.plist”

4.Repeat the process on the following folders:

~/Library/LaunchAgents

/Library/Application Support

/Library/LaunchDaemons

Many malware may re-install themselves multiple times if you don’t delete thier core files. To find and remove all malicious files , We recommend downloading SpyHunter Mac Antimalware to scan your Mac. This may save you hours and ensure you don’t make mistakes that harm your system Download SpyHunter For Mac (Free Trial) *OFFER – The SpyHunter Trial version includes, for one device, a one-time 7-day Trial period for SpyHunter 5 Pro (Windows) or SpyHunter for Mac. Check Terms & Conditions of SpyHunter Free Trial , EULA and Privacy/Cookie Policy.

---

Step 4 – Download SpyHunter Antimalware For Mac to Scan For Malicious Apps and Files.

Lots of Malware keep generating malicious files on infected computer deeply, thus it’s quite difficult for common computer users to find out and remove all harmful items related with TransChronen extension. Meanwhile, there will be possibility that users remove core system files by mistake and then the entire computer will be harmed seriously.

To avoid the risks, We recommend all users downloading SpyHunter Antimalware For Mac, a professional automatic malware removal tool which keeps your Mac away from virus and malware attack and avoid online spam and phishing websites and protect your privacy and files well.

1. Click Download button here to download SpyHunter For Mac:

Download SpyHunter For Mac (Free Trial)

(*OFFER – The SpyHunter Trial version includes, for one device, a one-time 7-day Trial period for SpyHunter 5 Pro (Windows) or SpyHunter for Mac. Check Terms & Conditions of SpyHunter Free Trial , EULA and Privacy/Cookie Policy.)

2. Double-click SpyHunter-1.2-15-7043-Installer.dmg to install Spyhunter For Mac:

3. Once SpyHunter For Mac  is installed, run a scan and register its full version to remove all malicious objects on your Mac.

4. In case TransChronen extension is still infecting your Mac, Submit a Support Ticket and the support agent will conact to help you.

---

Common User Mistakes (Avoid These!)

1. “I just clicked Next during software installs”
   → Always choose Custom Installation and uncheck “Optional Offers”
2. “The extension looked legit with 4.5 stars!”
   → Fake reviews often use phrases like “Great for weather!” or “Works fine 👍”
3. “I dismissed the ‘Managed Browser’ warning”
   → Immediately check chrome://management if seen

Update Feb 25, 2025: Our security researcher confirms new TransChronen variants now spoof Windows Defender alerts. Never allow “Security Scan” popups from browser extensions.