ConnectedPlatform Mac virus (Free Guide)

What is ConnectedPlatform Mac virus?

ConnectedPlatform adware might compromise your Mac and result in data loss

Adload is amongst the most prominent malware strains that plague Macs

ConnectedPlatform is a malicious application that comes from the Adload malware family, which exclusively targets only macOS systems. It has been extremely active for the past few years, as the developers keep releasing new versions regularly under different names. At the same time, all of the variants differ little from one another in terms of their function – they even have the same icon with a teal or blue background.

Everything about the ConnectedPlatform virus is suspicious, starting from its distribution. Users commonly get infected while installing various pirated applications from third-party sources such as torrents or crack sites. Alternatively, Adload versions are also spread via fake Flash Player installers found on scam websites.

As soon as the virus infiltrates the computer, it receives elevated privileges, which allows it to insert various components in different locations on the system. One of the first signs of infection is the changed homepage and new tab settings of Safari or another browser, which are commonly set to Safe Finder, with search results being redirected to Yahoo or another provider. Browser redirects are also common, and they might lead users to dangerous places, prompting people to install more malware or disclose their personal information.

Due to its persistence mechanisms, the removal process of the app can be particularly difficult, although we repaired a detailed guide on how to perform this process. Below you will find all the information on how the app operates and how to remove it effectively.

Boobytrapped Flash Player installers carry Adload versions

Most of the non-malicious applications are spread in legitimate ways, such as advertising or offered as an optional component in a bundle (although this method can also be deceptive, depending on how it is implemented). As we already mentioned, the app is not installed on purpose by users – it is spread in typical malicious ways.

There are two main ways you could have installed the virus on your system:

• You were tricked by a fake update or another malicious advertisement
• You tried to install a pirated application from high-risk, illegal websites.

Fake updates, especially Flash Player updates, are commonly used to propagate adware and malware on macOS systems. For example, it is the main method of how the dangerous Shlayer Trojan spreads (in fact, it can be spread along with Adload versions) – it installs various insecure applications without permission and takes over the computer.

If you see a pop-up message that asks you to update or install Flash Player, ignore it and close the tab immediately, as it is completely fake. The plugin has been long discontinued, as there are plenty of safer and better technologies that replace its functions. All modern browsers have it built-in anyways.

ConnectedPlatform is commonly spread via fake Flash Player update prompts

When it comes to illegal websites that distribute cracked versions of applications, you should simply not visit them. These places are commonly littered with malware as they are poorly regulated. Additionally, many users infect their computers after they believe the crack to be a false-positive^[1] and disregard the warnings that come from security applications. You should always trust anti-malware and only exclude the file if you are completely sure it's safe.

All in all, you should be more careful when dealing with online content. Install powerful security applications (for example, SpyHunter 5Combo Cleaner or Malwarebytes) and never ignore their warnings. Most importantly, remember that Macs can also get infected, and there are plenty of malicious actors who specialize in just that.

Adware with browser-hijacking capabilities

Macs are getting increasingly popular every year due to various reasons. While, in comparison to Windows, macOS is still behind in user numbers by a lot, it is enough for malicious actors to pay close attention to the platform. This explains why malware developed for the operating system became much more prevalent over the past few years – it even outpaced malicious software created for Windows systems for the very first time in 2019.^[2]

Most of the threats that attack this operating system are usually categorized as adware, and ConnectedPlatform is no exception. Nonetheless, if you look at the detection names by security vendors, it is commonly labeled as a Trojan or malware. This is not surprising, considering what it actually does on the infected system.

As soon as malware manages to break into the device, system changes start immediately. It uses the built-in AppleScript to include its files into the exception list of X-Protect and Gatekeeper (the built-in security systems from Apple), avoiding detection and automatic removal.

From there, it installs a browser extension on Safari, Chrome, or Firefox browser, which completely takes over it. You might notice that your search provider has changed and that the delivered search results are entirely different from usual. The most significant change is the ads that are populating the top of the search results.

To make matters worse, you are more likely to encounter phishing and other malicious websites due to browser redirects. Ads that cover contents of various pages also might become much more prevalent. This app does nothing to benefit users and seriously compromises one's browsing experience and personal safety.

Remove ConnectedPlatform

Due to various persistence mechanisms, it is not easy to eliminate Adload versions from a Mac system. The infection is widespread due to it affecting multiple components of the system, including browsers, Login items, etc. This is why strongly recommend relying on reputable security software instead of trying to delete it by yourself.

By keeping the malicious software installed on the device for as long as possible, cybercriminals can profit from ad revenue and secret data-gathering operations. It goes without saying that you should take action as soon as possible and not enter any sensitive information while still infected.

• Launch the Activity Monitor and shut down all the suspicious processes.
• From the menu bar, select Go > Applications.
• In the Applications folder, look for all related entries.
• Click on the app and drag it to Trash (or right-click and pick Move to Trash)

However, this step might fail due to other active components in the background. Namely, you should go to the Preferences > Accounts > Login items folder and remove all the related items. Additionally, you should check for malicious profiles in the System Preferences > Users & Groups > Profiles section.

Once that is complete, you should delete the remaining files that belong to the ConnectedPlatform virus.

• Select Go > Go to Folder.
• Enter /Library/Application Support and click Go or press Enter.
• In the Application Support folder, look for any dubious entries and then delete them.
• Now enter /Library/LaunchAgents and /Library/LaunchDaemons folders the same way and terminate all the related .plist files.

Additional security measures

You should keep in mind that manual removal can leave malicious files running in the background, which can result in re-infection. Even if you tried to eliminate the virus manually, we strongly recommend you scan your Mac with a reliable anti-malware tool, such as SpyHunter 5Combo Cleaner or Malwarebytes.

After ConnectedPlatform removal, you should also take care of your web browsers – they are commonly quite affected. They store various data, such as cookies or caches, which can be used to continue tracking activities. The easiest way to clean your browsers is by employ FortectIntego maintenance utility, although you can also do it manually. Remember, cleaning your browsers regularly is something that most security experts^[3] recommend for better privacy and security.

Uninstall the unwanted extensions:

1. Click Safari > Preferences…
2. In the new window, pick Extensions.
3. Select the unwanted extension and select Uninstall.

Clear cookies and website data:

1. Click Safari > Clear History…
2. From the drop-down menu under Clear, pick all history.
3. Confirm with Clear History.

In some cases, resetting the browser is the best practice once all adware is deleted from the device:

• Click Safari > Preferences…
• Go to the Advanced tab.
• Tick the Show Develop menu in the menu bar.
• From the menu bar, click Develop, and then select Empty Caches.

You can find the instructions for Mozilla Firefox and Google Chrome below.