KNCTR Unwanted Application

What is KNCTR?

Developed by Itibiti Ventures Inc, KNCTR is a rogue application claiming to allow users to make calls free of charge, connect to popular social networks (Facebook, Twitter, etc.), and enable other functions.

While this functionality may seem legitimate and useful, be aware that KNCTR is categorized as a potentially unwanted program (PUP), since it employs a deceptive software marketing method called 'bundling' (stealth installation of additional programs with the chosen software) to install on computers without users' consent.

Following successful infiltration, KNCTR monitors browsing activity by collecting various software and hardware information such as IP addresses (to determine users' geographic locations), browser information (cookies, web beacons, URLs visited, pages viewed, etc.), and other similar details.

At time of testing, this application was mostly distributed via small download programs (called 'installers', 'download clients', download managers', etc.) employed by freeware download websites such as download.com, softonic.com, and soft32.com.

These programs are used to monetize website free services and traffic by offering installation of promoted (according to the developers, '100% legitimate') applications with the chosen free software. Thus, download and installation of freeware often results in adware or malware infections including Genesis, Offer Boulevard, Hahomedia, or in this case, KNCTR.

Threat Summary:

Name	KNCTR potentially unwanted application
Threat Type	Adware, Unwanted ads, Pop-up Virus
Developer	Itibiti Ventures Inc
Supposed Functionality	Free calls, easy social network access.
Detection Names (knctr.exe)	Avira (ADWARE/Eorezo.ugkcn), ESET-NOD32 (Win32/TrojanDownloader.Adload.NUD), F-Secure (Adware.ADWARE/Eorezo.ugkcn), Qihoo-360 (Win32/Virus.Adware.0ea), Full List Of Detections (VirusTotal)
Symptoms	Seeing advertisements not originating from the sites you are browsing. Intrusive pop-up ads. Decreased Internet browsing speed.
Distribution Methods	Deceptive pop-up ads, free software installers (bundling), fake flash player installers.
Damage	Decreased computer performance, browser tracking - privacy issues, possible additional malware infections.
Malware Removal (Windows)	To eliminate possible malware infections, scan your computer with legitimate antivirus software. Our security researchers recommend using Malwarebytes. ▼ Download Malwarebytes To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by Rcs Lt, the parent company of PCRisk.com read more.

Although these applications claim to enable various useful functions, they actually diminish computer performance and may cause high-risk system infections. The real purpose of these PUPs is to generate revenue by the display of intrusive online advertisements or by enforcing unwanted browser redirects.

Installation of KNCTR (or other similar potentially unwanted programs) can be avoided by closely studying each step of the free software download procedure and clicking 'Decline' if installation of any additional applications is offered.

Furthermore, all software downloaded from the Internet should be installed using the 'Advanced' or 'Custom' installation options, rather than 'Quick' or 'Regular' - this will reveal any bundled applications listed for installation and allow you to opt-out.

If you have unwillingly installed KNCTR, follow the removal instructions provided to uninstall this potentially unwanted program from your computer.

Deceptive free software installers used in KNCTR PUP distribution:

Instant automatic malware removal: Manual threat removal might be a lengthy and complicated process that requires advanced IT skills. Malwarebytes is a professional automatic malware removal tool that is recommended to get rid of malware. Download it by clicking the button below:
▼ DOWNLOAD Malwarebytes By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by Rcs Lt, the parent company of PCRisk.com read more.

Quick menu:

• What is KNCTR?
• STEP 1. Uninstall KNCTR application using Control Panel.
• STEP 2. Remove KNCTR adware from Internet Explorer.
• STEP 3. Remove KNCTR ads from Google Chrome.
• STEP 4. Remove 'Ads by KNCTR' from Mozilla Firefox.
• STEP 5. Remove KNCTR extension from Safari.
• STEP 6. Remove rogue plug-ins from Microsoft Edge.

KNCTR adware removal:

Windows 11 users:

Right-click on the Start icon, select Apps and Features. In the opened window search for the application you want to uninstall, after locating it, click on the three vertical dots and select Uninstall.

Windows 10 users:

Right-click in the lower left corner of the screen, in the Quick Access Menu select Control Panel. In the opened window choose Programs and Features.

Windows 7 users:

Click Start (Windows Logo at the bottom left corner of your desktop), choose Control Panel. Locate Programs and click Uninstall a program.

macOS (OSX) users:

Click Finder, in the opened screen select Applications. Drag the app from the Applications folder to the Trash (located in your Dock), then right click the Trash icon and select Empty Trash.

In the uninstall programs window, look for "KNCTR", select this entry and click "Uninstall" or "Remove".

After uninstalling the potentially unwanted application (which causes KNCTR ads), scan your computer for any remaining unwanted components or possible malware infections. To scan your computer, use recommended malware removal software.

Remove KNCTR adware from Internet browsers:

At time of research, KNCTR did not install its browser plug-ins on Internet Explorer, Google Chrome, or Mozilla Firefox, however, it was bundled with other adware. Therefore, you are advised to remove all potentially unwanted browser add-ons from your Internet browsers.

Video showing how to remove potentially unwanted browser add-ons:

Remove malicious add-ons from Internet Explorer:

Click the "gear" icon (at the top right corner of Internet Explorer), select "Manage Add-ons". Look for any recently-installed suspicious browser extensions, select these entries and click "Remove".

Optional method:

If you continue to have problems with removal of the knctr potentially unwanted application, reset your Internet Explorer settings to default.

Windows XP users: Click Start, click Run, in the opened window type inetcpl.cpl In the opened window click the Advanced tab, then click Reset.

Windows Vista and Windows 7 users: Click the Windows logo, in the start search box type inetcpl.cpl and click enter. In the opened window click the Advanced tab, then click Reset.

Windows 8 users: Open Internet Explorer and click the gear icon. Select Internet Options.

In the opened window, select the Advanced tab.

Click the Reset button.

Confirm that you wish to reset Internet Explorer settings to default by clicking the Reset button.

Remove malicious extensions from Google Chrome:

Click the Chrome menu icon  (at the top right corner of Google Chrome), select "More tools" and click "Extensions". Locate all recently-installed suspicious browser add-ons and remove them.

Optional method:

If you continue to have problems with removal of the knctr potentially unwanted application, reset your Google Chrome browser settings. Click the Chrome menu icon  (at the top right corner of Google Chrome) and select Settings. Scroll down to the bottom of the screen. Click the Advanced… link.

After scrolling to the bottom of the screen, click the Reset (Restore settings to their original defaults) button.

In the opened window, confirm that you wish to reset Google Chrome settings to default by clicking the Reset button.

Remove malicious plugins from Mozilla Firefox:

Click the Firefox menu (at the top right corner of the main window), select "Add-ons". Click on "Extensions", in the opened window remove all recently-installed suspicious browser plug-ins.

Optional method:

Computer users who have problems with knctr potentially unwanted application removal can reset their Mozilla Firefox settings.

Open Mozilla Firefox, at the top right corner of the main window, click the Firefox menu, in the opened menu, click Help.

Select Troubleshooting Information.

In the opened window, click the Refresh Firefox button.

In the opened window, confirm that you wish to reset Mozilla Firefox settings to default by clicking the Refresh Firefox button.

Remove malicious extensions from Safari:

Make sure your Safari browser is active, click Safari menu, and select Preferences....

In the opened window click Extensions, locate any recently installed suspicious extension, select it and click Uninstall.

Optional method:

Make sure your Safari browser is active and click on Safari menu. From the drop down menu select Clear History and Website Data...

In the opened window select all history and click the Clear History button.

Remove malicious extensions from Microsoft Edge:

Click the Edge menu icon  (at the upper-right corner of Microsoft Edge), select "Extensions". Locate all recently-installed suspicious browser add-ons and click "Remove" below their names.

Optional method:

If you continue to have problems with removal of the knctr potentially unwanted application, reset your Microsoft Edge browser settings. Click the Edge menu icon  (at the top right corner of Microsoft Edge) and select Settings.

In the opened settings menu select Reset settings.

Select Restore settings to their default values. In the opened window, confirm that you wish to reset Microsoft Edge settings to default by clicking the Reset button.

• If this did not help, follow these alternative instructions explaining how to reset the Microsoft Edge browser.

▼ Show Discussion