Chill Tab virus: what it is and how to remove it
Chill Tab is a browser hijacker mainly targeting Mac users that displays fake browser update alerts and redirects searches. It replaced browser settings with a suspicious search engine and disrupts normal web browsing.
Facts checked October 5, 2026. Removal steps checked against Apple's current documentation and the security vendors' reports. We have not run the malware on a Mac. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.
Automatic
Get a free scan and check if your Mac is infected.
Fortect for Mac scans for malware and unwanted programs, and its free scan shows what it finds before you decide anything.
Not sure what changed your search to search.chill-tab.com? An automatic scan checks extensions, programs and browser settings in one pass.
Do it yourself · free Remove Chill Tab virus yourself 5 steps, about 15 minutes, no software needed.
Start the steps
Chill Tab virus: summary
| Name | Chill Tab virus |
|---|---|
| URLs | Tab.chill-tab.com; Search.chill-tab.com |
| Type | Browser hijacker |
| Related to | MacSearch, hkijingy.me, updates.ijnewhb.com, dn.macapproduct.com |
| Main issues caused | Redirects to sponsored websites, causes annoying pop-ups, slows down the web browser |
| main dangers | Victims can be tricked into visiting an infected website, install fake software |
| Removal | Scan the Mac with security software to find the malware and anything installed with it. Fortect for Mac scans for malware and unwanted programs. Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free. |
Show 9 more facts
| Detection names | No Microsoft detection name is known |
|---|---|
| Distribution | Not recorded in the old report |
| Damage | Not recorded in the old report |
| Symptoms | A changed search engine |
| Evidence | 5 write-ups by security sites; details still limited |
| Search page | search.chill-tab.com |
| Browsers | Chrome, Edge and Firefox |
| First seen | 2 January 2021 |
| Facts checked | 5 October 2026 |
Chill Tab virus in 2026: what we found
We opened search.chill-tab.com in a clean desktop Chrome browser on 4 October 2026 and clicked nothing. This is one visit from one location: ad pages often behave differently on a second visit, in another country, on a phone or after a click, and many hide from automated browsers, so a quiet result is not proof that the page is clean.
search.chill-tab.com · desktop Chrome · 4 October 2026
- Notification requestNone on this one visit.
- Pop-ups and new tabsNone on this one visit.
- Where it ledIt stayed on
search.chill-tab.com. - Ad networksNone found in the page.
- Page title"Search"
Quiet on one visit The page made no request and sent us nowhere on this visit. That does not clear it: adware often shows nothing at first and sits quietly for a long time. What it showed you earlier may still be in your browser, so check the permissions below.
Is Chill Tab virus dangerous? What it collects
Chill Tab virus: what changed since our report
January 2021
Our first report
We described Chill Tab virus on 2 January 2021 and updated the report on 18 June 2021.
October 2026
Our new check
We opened the address again in a clean browser; the results are above.
From our report of Jan 2021 · not reviewed since
Chill tab virus is a suspicious application that is mostly targeting Mac OS X users
Chill Tab virus is a potentially unwanted program which has become a serious pain to Mac users.
When infected, you can notice a fake pop-up saying "Scanning for Browser updates." According to victims, this ad is displayed every time you start your browsing on Safari, Chrome or any other web browser. The virus can also assign hxxp://Search.chill-tab.com/ to default start and search settings without your approval.
This extension was spotted in July 2017 for the first time. Since then, it has been spreading with the help of different components, including "MacSearch," "hkijingy.me," "updates.ijnewhb.com," "cdn.macapproduct.com," and others. Make sure you eliminate these from your system to prevent additional unacceptable behavior on your computer.
Browser hijackers are programs designed to make victim's web browsers open a specific website frequently. In this case, it is Search.chill-tab.com. It presents a typical-looking search engine, although it serves sponsored results whenever you attempt to find some information online.
Ads incorporated into search results contain links to external websites with Privacy Policies that may differ from the browser hijacker's. Some of these web pages can be extremely dangerous and urge you to install browser plug-ins, software updates or other suspicious pieces of software to access certain content. Other deceptive sites can ask you to provide your email address only to send you spam later.
Each successful redirect to external websites that collaborate with the developer of this vague browser hijacker generates pay-per-click revenue. Sadly, the only one who benefits from it is the author of this browser hijacker. To remove Chill tab virus from your browser, you must find and delete this questionable extension.
If you're not determined to fight with this potentially unwanted program manually, you might want to employ tools such as . It will precisely check the entire system and eliminate everything related to spyware/malware. You can also find an in-depth tutorial on how to uninstall this app from the system manually right below the article.


From our report of Jan 2021 · not reviewed since
Signs of infection
When infected with this hijacker, you can hardly start your browsing without this alert:
Then, once the scanning is over, the virus displays such notification:
At this moment, the hijacker tries to install Chill Tab extension, which should be blocked by Safari as it is not in the original Apple's Extension. Please, do not fall for these alerts and make sure you ignore them because you can end up with another virus on your computer!
From our report of Jan 2021 · not reviewed since
More from our earlier report on Chill Tab virus
- To get rid of the hijack, use
- Your browser is now up to date!
Check your browser and PC
- Address:
search.chill-tab.com
How to remove Chill Tab virus
How to remove Chill Tab virus and get your search engine back
Remove the extension first.
The search settings only stay fixed once nothing on the PC can change them again.
Step 1: Remove extensions you did not add
In Chrome open
chrome://extensions, in Edgeedge://extensions, and in Firefox the menu > Extensions and themes.Remove every extension you do not remember adding, especially search, new tab, coupon, PDF, weather or video downloader add-ons. Check every browser and every profile, because each keeps its own list.
If an extension has no Remove button or comes back, a browser policy holds it (see "Managed by your organization" in the procedure below). The pages are the same on Windows 11 and Windows 10.

Chrome on Windows 11: More > Extensions > Manage extensions. Full procedure with screenshots: Remove a browser extension
Step 2: Put the search engine back and delete search.chill-tab.com
In Chrome open Settings > Search engine > Manage search engines and site search, make an engine you trust the default, and delete
search.chill-tab.comfrom the list.In Edge type
search engineinto the search box at the top of Settings and open Manage search engines; in Firefox use Settings > Search. Then check the homepage and the new tab page in the same settings, because hijackers change all three.If search.chill-tab.com is back after a restart, an extension, a program or a policy still sets it, so finish the other steps and check again. The settings are the same on Windows 11 and Windows 10.

Chrome on Windows 11: check Search engine and On startup. Full procedure with screenshots: Reset a browser and fix a hijacked search engine
Step 3: Uninstall programs you did not mean to install
Chill Tab virus rarely comes alone: it is usually installed by, or together with, a free program. In Windows 11 open Settings > Apps > Installed apps, in Windows 10 Settings > Apps > Apps & features, and sort by install date.
Uninstall every entry from the day the trouble began that you did not install on purpose, for example a download manager, a converter or a browser you never chose.
Keep drivers and entries from Microsoft, Intel, AMD, NVIDIA or your PC's maker unless you are sure.
Full procedure with screenshots: Uninstall a program or app in Windows On uGetFix
Step 4: Reset the browser
A reset removes what the steps above could miss:
- changed start pages
- site permissions
- hidden settings
In Chrome open Settings > Reset settings > Restore settings to their original defaults; in Edge Settings > Reset settings; in Firefox Help > More troubleshooting information > Refresh Firefox.
Tip: Bookmarks and saved passwords stay, while extensions are turned off and the search engine and start page return to the defaults.
Reset every browser on the PC, including Edge, which Windows 11 and Windows 10 always have.

Chrome on Windows 11: Settings > Reset settings. Full procedure with screenshots: Reset a browser and fix a hijacked search engine
Step 5: Scan the PC, then run the offline scan
A scan finds the parts of Chill Tab virus that the manual steps cannot see. In Windows Security > Virus & threat protection > Scan options, start a Full scan and quarantine what it reports.
Follow it with Microsoft Defender Antivirus (offline scan) > Scan now, which restarts the PC and checks the disk while Windows and the malware are not running.
It takes about 15 minutes and works the same in Windows 11 and Windows 10. If either scan finds something, run the full scan again after removal until it comes back clean.

Windows 11: Windows Security > Virus & threat protection > Scan options. Full procedure with screenshots: Run a Microsoft Defender Offline scan
Instructions for each browser and system
The detailed steps for every browser and system this guide covers. Open the one you use.
Uninstall from Windows
In case this potentially unwanted program showed up on your Windows OS, look for its components via Control Panel. You need to find programs that look shady or those you cannot remember installing, select them and click Uninstall.
Uninstall from Windows 10/8:
- Type Control Panel into the Windows search box and open the result.
- Under Programs, select Uninstall a program.

Uninstall from Windows 7/XP:
- Click on Windows Start > Control Panel (Windows XP users should click on Add/Remove Programs).
- In Control Panel, select Programs > Uninstall a program.

Remove the unwanted program:
- In the Programs and Features window, look for any recently installed suspicious entries, select them, and click Uninstall.
- If User Account Control appears, click Yes to confirm, then complete the removal.

Remove from Google Chrome
To get rid of unwanted extensions from Chrome, go to chrome://extensions page. You can simply enter this line into the address bar and push Enter.
Delete malicious extensions from Google Chrome:
- Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
- In the newly opened window, you will see all the installed extensions. Uninstall all suspicious extensions related to the unwanted program by clicking Remove.

Clear cache and web data from Chrome:
- Click on Menu and pick Settings.
- Under Privacy and security, select Clear browsing data.
- Select Browsing history, Cookies and other site data, as well as Cached images and files.
- Click Clear data.

Change your homepage:
- Click menu and choose Settings.
- Look for a suspicious site in the On startup section.
- Click on Open a specific or set of pages and click on three dots to find the Remove option.
Reset Google Chrome:
If the previous methods did not help you, reset Google Chrome to eliminate all the unwanted components:
- Click on Menu and select Settings.
- In the Settings, scroll down and click Advanced.
- Scroll down and locate Reset and clean up section.
- Now click Restore settings to their original defaults.
- Confirm with Reset settings.

Remove from Microsoft Edge
Delete unwanted extensions from MS Edge:
- Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
- From the list, pick the extension and click on the Gear icon.
- Click Remove.

Clear cookies and other browser data:
- Click on the Menu (three horizontal dots at the top-right of the browser window) and select Settings > Privacy, search, and services..
- Under Clear browsing data, pick Choose what to clear.
- Select Cookies and other site data and Cached images and files. (apart from passwords, although you might want to include Media licenses as well, if applicable) and click on Clear.

Restore new tab and homepage settings:
- Click the menu icon and choose Settings.
- Then find On startup section.
- Click Remove next to any suspicious startup page.
Reset MS Edge if the above steps did not work:
- Press on Ctrl + Shift + Esc to open Task Manager.
- Click on More details arrow at the bottom of the window.
- Select Details tab.
- Now scroll down and locate every entry with Microsoft Edge name in it. Right-click on each of them and select End Task to stop MS Edge from running.

Delete extensions from MS Edge (Chromium):
- Open Edge and click select Settings > Extensions.
- Delete unwanted extensions by clicking Remove.

Clear cache and site data:
- Click on Menu and go to Settings.
- Select Privacy, search and services.
- Under Clear browsing data, pick Choose what to clear.
- Under Time range, pick All time.
- Select Clear now.

Reset Chromium-based MS Edge:
- Click on Menu and select Settings.
- On the left side, pick Reset settings.
- Select Restore settings to their default values.
- Confirm with Reset.
- This will disable extensions and reset startup pages but will not delete bookmarks, saved passwords, or browsing history.

Remove from Mozilla Firefox (FF)
Eliminate the unwanted extension from Firefox to stop these annoying redirects.
Remove dangerous extensions:
- Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
- Select Add-ons.
- In here, select the unwanted extension and click Remove.

Reset the homepage:
- Click three horizontal lines at the top right corner to open the menu.
- Choose Settings.
- Under Home, set your preferred homepage and new tab settings.
Clear cookies and site data:
- Click Menu and pick Settings.
- Go to Privacy & Security section.
- Scroll down to locate Cookies and Site Data.
- Click on Clear Data...
- Select Cookies and Site Data and Temporary cached files and pages, then click Clear.

Reset Mozilla Firefox
If clearing the browser as explained above did not help, reset Mozilla Firefox:
- Open Mozilla Firefox browser and click the Menu.
- Go to Help and then choose Troubleshooting Information.

- Under Give Firefox a tune up section, click on Refresh Firefox...
- Once the pop-up shows up, confirm the action by pressing on Refresh Firefox.

Delete from Safari
To remove the virus from Safari, you should reset this browser. This is the easiest way to get rid of this hijacker. However, you can also check your extension list and delete the ones that seem unknown to you. Be sure to remove MacSearch, hkijingy.me, updates.ijnewhb.com, cdn.macapproduct.com, and similar entries.
Remove dangerous extensions:
- Open Safari, click Safari in the menu at the top-left of the screen, and select Preferences.
- Go to the Extensions tab, look for any suspicious entries, and click Uninstall to remove them.

Clear history and website data:
- Click Safari in the menu and pick Clear History.
- Set Clear to all history and confirm with Clear History.

Reset Safari:
- Click Safari in the menu and select Preferences > Advanced.
- Enable Show Develop menu in menu bar.
- From the menu bar, click Develop and select Empty Caches.

Delete from macOS
To get rid of this virus on Mac, make sure you get rid of all components related to this hijacker. Please, look for MacSearch, hkijingy.me, updates.ijnewhb.com, cdn.macapproduct.com and similar entries that look unknown to you.
Remove the unwanted application:
- From the menu bar, select Go > Applications.
- In the Applications folder, look for any suspicious entries, then drag them to Trash (or right-click and pick Move to Trash).

Delete leftover files and folders:
- Select Go > Go to Folder.
- Enter /Library/Application Support and remove any suspicious folders related to the unwanted program.
- Repeat the same check in the /Library/LaunchAgents and /Library/LaunchDaemons folders, deleting any suspicious entries.

- Finally, empty the Trash to permanently remove the leftovers.
Stream videos without limitations, no matter where you are
There are multiple parties that could find out almost anything about you by checking your online activity.
While this is highly unlikely, advertisers and tech companies are constantly tracking you online. The first step to privacy should be a secure browser that focuses on tracker reduction to a minimum.
Even if you employ a secure browser, you will not be able to access websites that are restricted due to local government laws or other reasons. In other words, you may not be able to stream Disney+ or US-based Netflix in some countries. To bypass these restrictions, you can employ a powerful VPN, which provides dedicated servers for torrenting and streaming, not slowing you down in the process.
Data backups are important - recover your lost files
Ransomware is one of the biggest threats to personal data.
Once it is executed on a machine, it launches a sophisticated encryption algorithm that locks all your files, although it does not destroy them. The most common misconception is that anti-malware software can return files to their previous states. This is not true, however, and data remains locked after the malicious payload is deleted.
While regular data backups are the only secure method to recover your files after a ransomware attack, tools such as can also be effective and restore at least some of your lost data.
From our report of Jan 2021 · not reviewed since
Prevent installation of browser hijackers using this simple trick
There is only one way to keep browser hijackers and other potentially unwanted programs at bay.
You need to be careful when using the computer, especially when browsing the Internet. It, for sure, has a lot to offer, and that also includes dangerous content.
Stay alert when installing programs you downloaded from the Internet. It is very important not to install software using pre-selected installation settings because they are designed to place optional components on your system. In fact, this often earns them pay-per-install revenue. You can easily opt-out these extras via Custom or Advanced installation settings.
Offers to install browser hijackers can also come in the form of pop-up ads. If you notice these on your screen on a daily basis, you might need to check your system for adware-type software. It is yet another member of the potentially unwanted programs' group .
From our report of Jan 2021 · not reviewed since
Eliminate Search.chill-tab.com search virus
According to our experts, the extension has been spreading only between Mac operating systems.
If your system is infected, you should know that the removal procedure can be initiated either manually or automatically. Although automatic removal option is always a better choice to make, you can delete the browser redirect virus without special software, too. It simply takes more time and requires patience to finish the procedure.
For a successful PUP removal, you need to follow the instructions provided below the article. They explain how to delete all components associated with this browser hijacker. However, as we have already reported, to remove Chill Tab on Mac or Windows without leaving its components, you should opt for a full system scan. To carry it out, you will need a reliable anti-spyware or anti-malware software.
MacSearch, hkijingy.me, updates.ijnewhb.com, cdn.macapproduct.com and similar entries that look unknown to you.
chrome://extensions page. You can simply enter this line into the address bar and push Enter.
MacSearch, hkijingy.me, updates.ijnewhb.com, cdn.macapproduct.com, and similar entries.
Questions about Chill Tab virus
What is Chill Tab virus?
Chill Tab virus is a suspicious application and browser hijacker mostly targeting Mac OS X users, though it can affect Windows systems. When infected, users see a fake pop-up saying Scanning for Browser updates that displays every time browsing starts on Safari, Chrome, or other web browsers. The virus assigns hxxp://Search.chill-tab.com/ to default start and search settings without user approval.
The extension was first spotted in July 2017 and has since spread with the help of different components including MacSearch, hkijingy.me, updates.ijnewhb.com, and cdn.macapproduct.com. Once installed, it replaces browser settings and creates annoying pop-up notifications. Chill Tab represents a typical browser hijacker designed to make victims' browsers frequently open a specific website.
Is Chill Tab a virus?
Chill Tab is technically classified as a potentially unwanted program and browser hijacker rather than a traditional virus. However, its behavior is deceptive and dangerous enough to warrant treatment with the same urgency as malware. The hijacker fills web browsers with bothersome and sometimes malicious advertisements that interrupt browsing.
It interrupts normal web browsing sessions and prevents users from accessing their preferred search engines. The fake browser update alerts are designed specifically to trick users into installing the hijacker extension. While it doesn't replicate like a virus, its intrusive behavior and potential to redirect to dangerous websites make it a serious security threat requiring immediate removal.
How does Chill Tab get on my Mac or Windows computer?
Chill Tab spreads through bundled free software, particularly when users install applications using Quick or Standard settings. The hijacker arrived with related components like MacSearch and other suspicious tools bundled together.
Users typically find the extension installed without direct deliberate installation from official sources. It may also spread through browser pop-up ads offering fake browser updates or security checks.
Visiting suspicious websites can trigger automatic installation of the extension. Social engineering techniques trick users into accepting installation through misleading pop-up messages. Once installed, it modifies startup settings and registry entries to ensure persistence, making manual removal difficult.
What are the signs of Chill Tab infection?
A fake pop-up appears saying Scanning for Browser updates every time you start browsing, before any legitimate security update would occur. Your default search engine changes to Search.chill-tab.com without your permission.
Your browser homepage becomes altered to the Chill Tab search page. Redirects occur to sponsored websites when you attempt normal web browsing. Your browser becomes slower than normal due to background hijacker processes.
Annoying pop-ups interrupt browsing sessions on Safari, Chrome, Firefox, or other browsers. Unexpected browser behavior changes occur including altered new tab page settings. You notice Safari attempting to block installation of an extension that doesn't appear in official Apple extensions.
Are Chill Tab redirects dangerous?
Yes. Chill Tab redirects are dangerous because the hijacker can send you to infected websites containing malware or scam content. Search results include ads incorporated with links to external websites with Privacy Policies that differ from the hijacker's, making site evaluation impossible.
Some external websites urge you to install browser plug-ins, software updates, or other suspicious programs to access content. Other deceptive sites request your email address with intent to send spam later.
Some redirected pages may attempt to trick you into installing fake security software or calling fake tech support numbers. Each successful redirect to external websites generates pay-per-click revenue for the hijacker developers, not for your benefit.
How do I remove Chill Tab from my Mac or Windows?
Remove the Chill Tab extension manually by finding and deleting the questionable extension from your browser settings, though this requires care.
If you're not determined to fight the potentially unwanted program manually, employ anti-malware tools that precisely check the entire system and eliminate everything related to malware and spyware. Find in-depth tutorials on manual uninstallation following removal guides, but automatic removal remains more reliable.
Professional anti-malware programs detect and remove all components faster than manual methods. After removal, verify that your browser settings are reset to normal and that no extension remains installed. Run additional scans to confirm complete elimination of all Chill Tab components.
How can I prevent Chill Tab installation?
Stay alert when installing programs you download from the internet and avoid using pre-selected installation settings. It's very important not to install software using Quick or Standard installation settings because they're designed to include optional components automatically.
Custom or Advanced settings allow you to opt-out of extras that earn developers pay-per-install revenue. Offers to install browser hijackers often come in the form of pop-up ads; never click Allow on unexpected browser alerts.
If you notice pop-up ads daily, check your system for adware using security software. Avoid visiting suspicious websites that are known to distribute browser hijackers. Install and maintain reputable security software with real-time protection against malware installation.
What if Chill Tab keeps reappearing after removal?
Run multiple anti-malware scans to ensure all components were completely removed and no other related infections remain. Manually verify your browser settings haven't reverted to the Chill Tab search engine after removal and restart.
Check all installed programs and remove anything suspicious or related to the hijacker. If redirects persist, your system may have additional infections requiring professional assistance. Consider using your browser in Safe Mode with Networking to see if extensions are automatically disabled, helping identify the hijacker.
Reset your browser to factory defaults through your browser settings to clear any remaining configuration. Monitor your system for several weeks and run periodic security scans to ensure reinfection hasn't occurred.
Will Fortect remove Chill Tab virus?
Fortect scans Windows for malware and unwanted programs and repairs the system files and settings they change, and its free scan shows what it finds on your PC before you decide anything.
For Chill Tab virus, follow the plan above as well: the browser steps take back permissions and settings that no scanner treats as a threat, and uninstalling the program that brought it removes the source.
Run Microsoft Defender's full scan and, if anything was found, its offline scan as a second opinion. If the symptoms are gone after the plan and both scans are clean, there is nothing more to do.
Sources
- Apple Discussions: I need to get rid of this chill tab adware that keeps popping up (read October 5, 2026)
- FTC: How to recognize, remove and avoid malware (read October 5, 2026)
- Microsoft Learn: Microsoft Defender Offline (read October 5, 2026)
- Microsoft Learn: How Microsoft names malware (read October 5, 2026)