Tampermonkey ads: what it is and how to remove it
Tampermonkey is a legitimate script manager used by millions, but malicious scripts can install malware. Automatic reinstallation usually indicates bundled PUP infections, not Tampermonkey itself.
Facts checked October 12, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.
Automatic
Get a free scan and check if your PC is infected.
Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.
If Tampermonkey keeps coming back after uninstalling, a scan can find what reinstalls it.
Do it yourself · free Remove Tampermonkey ads yourself 4 steps, about 12 minutes, no software needed.
Start the steps
Tampermonkey ads: summary
| Distribution | Official sources, third-party sites |
|---|---|
| Damage | Downloading and installing malicious scripts for the app that could result in malware infection and unwanted browser behavior |
| Name | Tampermonkey |
| Type | Browser extension |
| Developed by | Jan Biniok |
| Purpose | Allows users to load additional scripts that changes the functionality of various websites |
| Removal | Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged. Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free. |
Show 6 more facts
| Detection names | No Microsoft detection name is known |
|---|---|
| Symptoms | An unknown program in Installed apps |
| Evidence | 6 write-ups by security sites; details still limited |
| Program | Tampermonkey |
| First seen | 30 August 2019 |
| Facts checked | 5 October 2026 |
Is Tampermonkey ads dangerous?
Why Tampermonkey keeps popping up, and the names tempermonkey, temper monkey and tapermonkey
Tampermonkey keeps popping up mostly because of its own update notice.
Its Chrome Web Store listing says a check runs when the Show update notification or Userscript Blacklist Source setting is on. Open the Tampermonkey icon, go to its settings page and switch off Show update notification. If tabs still open, switch off Userscript Blacklist Source as well.
If a Tampermonkey tab or icon appears although you never added it, look in your browser's extensions page (chrome://extensions in Chrome, edge://extensions in Edge). Remove it there and check Installed apps for a program you do not know. A Google Help thread shows users who found it added without consent next to another unwanted extension, which points to bundled software rather than to Tampermonkey itself.
Tempermonkey, temper monkey, tapermonkey, tempormonkey, tampermoneky, tampermokey and tampermoney are all misspellings of Tampermonkey. We know of no separate program or threat with any of these names. Treat a site that offers a download under such a name with care. Get the extension only from the Chrome Web Store, Microsoft Edge Add-ons, Firefox Add-ons or tampermonkey.net, where the listing names the real extension with about 12 million Chrome users.
From our report of Aug 2019 · not reviewed since
Tampermonkey is a Google Chrome and other browser extension that helps users modify the functionality of the visited site
Tampermonkey is a userscript managing application that is usually downloaded intentionally for Chrome, MS Edge, Firefox, Safari, and Opera web browsers.
The extension is widely popular, residing in more than 10 million users computers due to its useful functionality - it allows modification of certain visited website function modifications which would otherwise be unavailable.
Tampermonkey allows users to choose from more than 400,000 different JavaScript scripts that each is used for different functions. For example, "Auto Close YouTube Ads" script allows the automatic closure of the ad as soon as the "Skip ad" option becomes available, while "Anti-Adblock Killer" prevents websites from blocking the feature.
This is how Tampermonkey add-on can make the online experience of many users much more efficient - it provides many customization options.
However, like many browser extensions, Tampermonkey is not without the problems. First of all, while the application is itself safe, it might, potentially, load unsafe scripts from unknown sources. Loading outside scripts might be just as dangerous as downloading an executable from Torrent sites. Besides, some users complained about Tampermonkey removal and self-reinstallation problems.
While Tampermonkey is a useful app with plenty of customization options, it might sometimes not be safe. However, it all depends on how users use it, as loading malicious scripts without realizing it is also a possibility. Malicious scripts can abuse the vulnerabilities of the web browsers, installed programs, or the operating system. For that reason, malware installation might be performed automatically, without user consent.
Most of such JavaScripts are embedded on hacked or malicious websites. Unfortunately, scripts for Tampermonkey might be hosted on malicious sites that users might download intentionally, thinking it is legitimate. Therefore, the reckless behavior can indeed lead to malware.
Please pay attention to the description of what Tampermonkey app can do:
If you combine these permissions with a malicious script that you might have downloaded, the consequences might be devastating.
Another problem that prompted users to call the extension "Tampermonkey virus" is its reinstallation problems. Several users claimed that even after getting rid of the application, it gets reinstalled as soon as the browser is restarted. Some also stated that after such installation, they were unable to remove Tampermonkey, as the option was missing entirely.
To get rid of Tampermonkey, you should check our guidelines below. In the worst-case scenario, the reinstallation of the browser might be required.
From our report of Aug 2019 · not reviewed since
Potentially unwanted software come without users' knowledge
Automatic (re)installation of browser extensions might not necessarily be related to the extensions themselves, but rather with installed potentially unwanted programs on the machine.
In most of the cases, such unwanted apps like adware come bundled with freeware or shareware.
These free programs are usually hosted on third-party sites. While there is nothing illegal about offering several applications via the installer, some of these optional components might be ad-sponsored and even malicious. Therefore, it is especially important to make sure the installation process of new applications is performed as carefully as possible. Here are some experts' tips on the matter:
- Before installing the app, check out its reviews online - they can often hint if the program is shady;
- Choose reliable sources for your downloads. While all third-party sites bundle software, they do perform security checks before offering them;
- During the installation process, decline all deals/offers;
- Check for fine print and pre-ticked boxes;
- When prompted, always opt for Advanced/Custom settings.
From our report of Aug 2019 · not reviewed since
More from our earlier report on Tampermonkey
- If you experience any suspicious behavior like reinstallation of the app, scan the system using or another security software
- It can: Read and change all your data on the websites you visit Display notifications Modify data you copy and paste Manage your apps, extensions, and themes
How to remove Tampermonkey ads
How to remove the Tampermonkey extension
Do the browser steps in every browser and profile on the PC, then check Windows for the program that installed the extension.
Step 1: Remove extensions you did not add
Tampermonkey often works through an extension, so go through the extension list of each browser:
chrome://extensionsedge://extensions- Extensions and themes in Firefox
Switch suspicious extensions off one at a time and reload the page where the problem shows, then remove the one that stops it, and any other you did not add.
Remember the other browsers and profiles on the PC. If Remove is missing or greyed out, a policy forces the extension, which the policy step deals with. Windows 11 and Windows 10 show the same pages.
Chrome on Windows 11: More > Extensions > Manage extensions. Full procedure with screenshots: Remove a browser extension
Step 2: Uninstall Tampermonkey
Open Settings > Apps > Installed apps in Windows 11, or Settings > Apps > Apps & features in Windows 10. Sort the list by install date and find Tampermonkey, then choose Uninstall from the three-dot menu next to it (in Windows 10, click the entry and then Uninstall).
Remove anything else installed on the same day that you do not recognise, because such programs usually arrive together in one installer. If the uninstaller opens a browser page with an offer or a survey, close it: the program is removed either way.
Full procedure with screenshots: Uninstall a program or app in Windows On uGetFix
Step 3: Reset the browser
Finish the browser part with a reset, which puts the search engine, start page, new tab page and site permissions back to their defaults and switches extensions off. Chrome: Settings > Reset settings > Restore settings to their original defaults.
Edge: Settings > Reset settings. Firefox: Help > More troubleshooting information > Refresh Firefox, which also removes its extensions. Your bookmarks and saved passwords are kept, and the menus are the same on Windows 11 and Windows 10.
Chrome on Windows 11: Settings > Reset settings. Full procedure with screenshots: Reset a browser and fix a hijacked search engine
Step 4: Scan the PC, then run the offline scan
Open Windows Security > Virus & threat protection > Scan options, run a Full scan and remove everything it finds. Then select Microsoft Defender Antivirus (offline scan) and click Scan now: the PC restarts and scans before Windows loads, which finds files that hide while Windows runs.
Save your work first, because the offline scan takes about 15 minutes. Both scans are built into Windows 11 and Windows 10, and a second scanner from another vendor is a useful extra opinion.
Windows 11: Windows Security > Virus & threat protection > Scan options. Full procedure with screenshots: Run a Microsoft Defender Offline scan
Instructions for each browser and system
The detailed steps for every browser and system this guide covers. Open the one you use.
Uninstall from Windows
You can eliminate Tampermonkey from the device with this guide:
Uninstall from Windows 10/8:
- Type Control Panel into the Windows search box and open the result.
- Under Programs, select Uninstall a program.
Uninstall from Windows 7/XP:
- Click on Windows Start > Control Panel (Windows XP users should click on Add/Remove Programs).
- In Control Panel, select Programs > Uninstall a program.
Remove the unwanted program:
- In the Programs and Features window, look for any recently installed suspicious entries, select them, and click Uninstall.
- If User Account Control appears, click Yes to confirm, then complete the removal.
Remove from Google Chrome
Change settings to default on your Chrome, to make sure it normally works:
Delete malicious extensions from Google Chrome:
- Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
- In the newly opened window, you will see all the installed extensions. Uninstall all suspicious extensions related to the unwanted program by clicking Remove.
Clear cache and web data from Chrome:
- Click on Menu and pick Settings.
- Under Privacy and security, select Clear browsing data.
- Select Browsing history, Cookies and other site data, as well as Cached images and files.
- Click Clear data.
Change your homepage:
- Click menu and choose Settings.
- Look for a suspicious site in the On startup section.
- Click on Open a specific or set of pages and click on three dots to find the Remove option.
Reset Google Chrome:
If the previous methods did not help you, reset Google Chrome to eliminate all the unwanted components:
- Click on Menu and select Settings.
- In the Settings, scroll down and click Advanced.
- Scroll down and locate Reset and clean up section.
- Now click Restore settings to their original defaults.
- Confirm with Reset settings.
Remove from Microsoft Edge
Delete unwanted extensions from MS Edge:
- Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
- From the list, pick the extension and click on the Gear icon.
- Click Remove.
Clear cookies and other browser data:
- Click on the Menu (three horizontal dots at the top-right of the browser window) and select Settings > Privacy, search, and services..
- Under Clear browsing data, pick Choose what to clear.
- Select Cookies and other site data and Cached images and files. (apart from passwords, although you might want to include Media licenses as well, if applicable) and click on Clear.
Restore new tab and homepage settings:
- Click the menu icon and choose Settings.
- Then find On startup section.
- Click Remove next to any suspicious startup page.
Reset MS Edge if the above steps did not work:
- Press on Ctrl + Shift + Esc to open Task Manager.
- Click on More details arrow at the bottom of the window.
- Select Details tab.
- Now scroll down and locate every entry with Microsoft Edge name in it. Right-click on each of them and select End Task to stop MS Edge from running.
Delete extensions from MS Edge (Chromium):
- Open Edge and click select Settings > Extensions.
- Delete unwanted extensions by clicking Remove.
Clear cache and site data:
- Click on Menu and go to Settings.
- Select Privacy, search and services.
- Under Clear browsing data, pick Choose what to clear.
- Under Time range, pick All time.
- Select Clear now.
Reset Chromium-based MS Edge:
- Click on Menu and select Settings.
- On the left side, pick Reset settings.
- Select Restore settings to their default values.
- Confirm with Reset.
- This will disable extensions and reset startup pages but will not delete bookmarks, saved passwords, or browsing history.
Remove from Mozilla Firefox (FF)
Don't forget to clean the browser after Tampermonkey uninstallation:
Remove dangerous extensions:
- Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
- Select Add-ons.
- In here, select the unwanted extension and click Remove.
Reset the homepage:
- Click three horizontal lines at the top right corner to open the menu.
- Choose Settings.
- Under Home, set your preferred homepage and new tab settings.
Clear cookies and site data:
- Click Menu and pick Settings.
- Go to Privacy & Security section.
- Scroll down to locate Cookies and Site Data.
- Click on Clear Data...
- Select Cookies and Site Data and Temporary cached files and pages, then click Clear.
Reset Mozilla Firefox
If clearing the browser as explained above did not help, reset Mozilla Firefox:
- Open Mozilla Firefox browser and click the Menu.
- Go to Help and then choose Troubleshooting Information.
- Under Give Firefox a tune up section, click on Refresh Firefox...
- Once the pop-up shows up, confirm the action by pressing on Refresh Firefox.
Delete from Safari
Remove dangerous extensions:
- Open Safari, click Safari in the menu at the top-left of the screen, and select Preferences.
- Go to the Extensions tab, look for any suspicious entries, and click Uninstall to remove them.
Clear history and website data:
- Click Safari in the menu and pick Clear History.
- Set Clear to all history and confirm with Clear History.
Reset Safari:
- Click Safari in the menu and select Preferences > Advanced.
- Enable Show Develop menu in menu bar.
- From the menu bar, click Develop and select Empty Caches.
Delete from macOS
Remove the unwanted application:
- From the menu bar, select Go > Applications.
- In the Applications folder, look for any suspicious entries, then drag them to Trash (or right-click and pick Move to Trash).
Delete leftover files and folders:
- Select Go > Go to Folder.
- Enter /Library/Application Support and remove any suspicious folders related to the unwanted program.
- Repeat the same check in the /Library/LaunchAgents and /Library/LaunchDaemons folders, deleting any suspicious entries.
- Finally, empty the Trash to permanently remove the leftovers.
Reset Internet Explorer
Remove dangerous add-ons:
- Open Internet Explorer, click on the Gear icon (IE menu) on the top-right corner of the browser
- Pick Manage Add-ons.
- You will see a Manage Add-ons window. Here, look for suspicious plugins. Click on these entries and select Disable.
Change your homepage if it was altered:
- Open IE and click on the Gear icon.
- Select Internet Options.
- In the General tab, delete the Home page address and replace it by your preferred one (for example, Google.com).
- Click Apply and then select OK.
Delete temporary files:
- Press on the Gear icon and select Internet Options.
- Under Browsing history, click Delete...
- Select relevant fields and press Delete.
Reset Internet Explorer:
- Click on Gear icon > Internet options and select Advanced tab.
- Select Reset.
- In the new window, check Delete personal settings and select Reset.
Choose a proper web browser and improve your safety with a VPN tool
Online spying has got momentum in recent years and people are getting more and more interested in how to protect their privacy online.
One of the basic means to add a layer of security - choose the most private and secure web browser. Although web browsers can't grant full privacy protection and security, some of them are much better at sandboxing, HTTPS upgrading, active content blocking, tracking blocking, phishing protection, and similar privacy-oriented features.
However, if you want true anonymity, we suggest you employ a powerful VPN - it can encrypt all the traffic that comes and goes out of your computer, preventing tracking completely.
Lost your files? Use data recovery software
While some files located on any computer are replaceable or useless, others can be extremely valuable.
Family photos, work documents, school projects - these are types of files that we don't want to lose. Unfortunately, there are many ways how unexpected data loss can occur:
- power cuts
- Blue Screen of Death errors
- hardware failures
- crypto-malware attack
- even accidental deletion
To ensure that all the files remain intact, you should prepare regular data backups. You can choose cloud-based or physical copies you could restore from later in case of a disaster. If your backups were lost as well or you never bothered to prepare any, can be your only hope to retrieve your invaluable files.
From our report of Aug 2019 · not reviewed since
Terminate suspicious processes and uninstall Tampermonkey
In some cases, Tampermonkey removal might be hindered by another malicious application that is installed on your machine - that is when the suspicious reinstallation cycle might be observed by users.
In such a case, it is vital to locate and terminate all the PUPs and malware that might be hiding on your machine.
You should first check the installed program list via the Programs and Features (Windows) or Applications (Mac) folders and uninstall everything suspicious. Then, make sure you reset each of the installed browsers - the action is mandatory to prevent altered settings from returning the unwanted activity of the PUP. Finally, you should scan your machine with anti-malware software to make sure your computer is secure.
In some cases, all these actions might be not enough to remove Tampermonkey. The underlying reason might be modified registry or other vital operating system parts. In such a case, experts recommend reinstalling the browser altogether and then performing a repeated security scan.
Questions about Tampermonkey ads
What is Tampermonkey?
Tampermonkey is a legitimate userscript manager extension for Chrome, Firefox, Safari, Edge, and Opera browsers with over 10 million users. According to the 2019 guide, it allows users to modify website functionality using JavaScript scripts—for example, automatically closing YouTube ads or preventing websites from blocking ad blockers.
Users can choose from over 400,000 different scripts for various functions. While the extension itself is safe and useful, it can load unsafe scripts from unknown sources, potentially enabling malware installation.
Is Tampermonkey a virus?
Tampermonkey itself is not a virus, but it can load malicious scripts that act like malware. The extension's broad permissions—reading and changing data on websites you visit, displaying notifications, modifying copied data, and managing apps—combined with malicious scripts downloaded from compromised sites can be devastating.
The 2019 guide noted that some users experienced Tampermonkey reinstalling itself automatically after removal, suggesting related PUP infections were reactivating it. Loading outside scripts from Tampermonkey is as risky as downloading executables from torrent sites.
Why does Tampermonkey keep reinstalling after I remove it?
Automatic Tampermonkey reinstallation usually isn't caused by Tampermonkey itself but by bundled potentially unwanted programs installed on your machine. Adware and other PUPs come with freeware packages and automatically reinstall browser extensions after each restart.
These bundled applications force the extension's reactivation in the background. You must uninstall the related PUP in your Programs and Features list to stop the reinstallation cycle, not just remove Tampermonkey from the browser.
Can I get malware from Tampermonkey scripts?
Yes. Malicious scripts can exploit browser vulnerabilities, installed programs, or operating system weaknesses to install malware without your knowledge. Scripts hosted on malicious websites may look legitimate but contain hidden code.
Users might intentionally download harmful scripts thinking they're legitimate customization tools. Scripts can read sensitive data, modify copy-paste content, and run commands. In worst-case scenarios, modified registry or system parts allow malware to persist even after Tampermonkey removal, potentially requiring browser reinstallation.
How do I safely use Tampermonkey?
Only download scripts from trusted sources and read reviews carefully before installing. Check what permissions scripts request and understand what they do.
Be extremely cautious with scripts from unknown developers or sites. Avoid downloading scripts claiming to modify financial websites, login pages, or sensitive services. Keep Tampermonkey and your browser updated.
Run regular malware scans with reputable security software. If you're unsure about a script's safety, don't install it—the safest approach is avoiding Tampermonkey entirely if you're not tech-savvy.
How do I remove Tampermonkey completely?
Open your browser's extension settings, find Tampermonkey, and click remove or uninstall. Check your Programs and Features list and uninstall any suspicious applications you don't recognize—these likely contain the bundled software causing reinstallation. Reset each installed browser to eliminate altered settings from any PUPs.
Scan your system with reputable anti-malware software to remove remaining threats. Verify that Tampermonkey doesn't reappear after restarting your browser and computer. In severe cases requiring complete removal, reinstall your browser.
What should I look for if Tampermonkey keeps coming back?
Check your installed programs for adware, browser hijackers, or other PUPs that might be reinstalling Tampermonkey automatically. Look for recently installed programs you don't remember installing.
Run anti-malware scans to identify hidden threats. Check Task Manager for unusual processes running at startup. Verify browser startup extensions in browser settings—legitimate ones appear there.
If auto-reinstallation persists despite uninstalling related PUPs and running security scans, the malware may have modified your registry. In this case, browser or system reinstallation may be necessary.
Is there a safe alternative to Tampermonkey?
If you want browser customization without script risks, use reputable browser extensions from official stores like Chrome Web Store or Firefox Add-ons. Research extensions thoroughly before installing and only use those with many positive reviews and active maintenance.
For ad blocking, use well-known adblockers like uBlock Origin or Adblock Plus from official sources. These alternatives avoid the risks of loading untrusted JavaScript from third-party sources. Always install extensions directly from official browser stores, never from third-party websites.
Will Fortect remove Tampermonkey?
Fortect scans Windows for malware and unwanted programs and repairs the system files and settings they change, and its free scan shows what it finds on your PC before you decide anything.
For Tampermonkey, follow the plan above as well: the browser steps take back permissions and settings that no scanner treats as a threat, and uninstalling the program that brought it removes the source.
Run Microsoft Defender's full scan and, if anything was found, its offline scan as a second opinion. If the symptoms are gone after the plan and both scans are clean, there is nothing more to do.
Sources
- MakeUseOf: What Is JavaScript and How Does It Work? (read October 5, 2026)
- Wikipedia: Malware (read October 5, 2026)
- Google: My google crome have added to extensions "tampermonkey" and "totakrecipesearch" without my consent (no longer online) (read October 5, 2026)
- Emsisoft: Potentially Unwanted Programs slow down your system and can be harmful: Here's what can you do about it (read October 5, 2026)
- Virukset: Virukset (read October 5, 2026)
- Chrome Web Store: Tampermonkey listing (Show update notification and Userscript Blacklist Source settings; 12,000,000 us (read October 12, 2026)