How to remove PureLand Stealer (Mac)

What is PureLand Stealer

PureLand Stealer is a type of malware that specifically targets Mac devices. It falls under the category of “stealer” malware, which are programs designed to extract sensitive information from infected systems. PureLand primarily targets cryptocurrency wallets and other sensitive data, posing a significant threat to the integrity of the infected device and the user’s privacy. Once PureLand successfully infiltrates a system, it may display a prompt requesting the victim to provide the password for “Chrome Safe Storage”. If access is gained, the stealer then attempts to extract information from the Google Chrome browser, including internet cookies and saved login credentials (usernames/passwords). While PureLand Stealer is primarily a malware designed to steal sensitive information, it also exhibits adware-like behavior. Adware is a type of software that displays unwanted advertisements, often in the form of pop-ups, on a user’s device. It’s not clear from the search results how PureLand Stealer functions as adware on Mac devices, but it’s possible that it could display unwanted ads or redirect users to certain websites to generate ad revenue.

How PureLand Stealer infects Mac computers

PureLand Stealer is typically spread under the guise of a Play-to-Earn video game. The malware’s promoters use images and screenshots from existing games to make the lure more convincing. They also offer game testing opportunities with compensation, which are sent via direct messages (DMs). In some instances, the lure was rebranded to the “Pearl Land Metaverse” blockchain game. The malware has also been observed being spread through spam emails sent from stolen accounts. It’s important to note that the creators of such malware are always improving their tactics, so future versions of PureLand could have more capabilities or use different methods to spread.

1. Download PureLand Stealer Removal Tool
2. Remove PureLand Stealer from Login Items
3. Remove/Uninstall PureLand Stealer from Applications
4. Remove PureLand Stealer from browsers
5. Reset browser settings
6. Remove PureLand Stealer files and folders
7. Block PureLand Stealer ads and pop-ups
8. How to protect from threats, like PureLand Stealer

Remove PureLand Stealer manually for free

Note: PureLand Stealer sets up to start on macOS startup. Therefore, before starting the removal, perform these steps:

1. Open System Preferences, choose Users & Groups.
2. Choose your account (set up as Current User).
3. Click Login Items tab.
4. Find “PureLand Stealer” entry. Select it, and click the “-“ (minus) button to remove it.

Note 2: PureLand Stealer won’t quit just by closing it, therefor use Force Quit to end the process.

1. Press 3 buttons at the same time: Option, Command, and Esc (Escape). This is similar to Control-Alt-Delete on a Windows PC.
2. Choose PureLand Stealer in the list.
3. Click Force Quit button.

Here is a manual step-by-step tutorial for full PureLand Stealer removal from your computer. This works 99% and was checked with the latest versions of PureLand Stealer installer on operating systems with the latest updates and browser versions.

Remove PureLand Stealer from Applications

Remove PureLand Stealer from Mac:

1. In the Finder sidebar, click Applications.
2. PureLand Stealer might have an Uninstaller. If you see Uninstall PureLand Stealer or PureLand Stealer Uninstaller, double-click it and follow the onscreen instructions.
3. Otherwise, drag PureLand Stealer from the Applications folder to the Trash (located at the end of the Dock).
4. Then choose Finder > Empty Trash.

Cannot uninstall PureLand Stealer

If you can’t uninstall PureLand Stealer using instructions above, or it keeps coming back, you can use free AppCleaner for Mac to remove all residual data and libraries of PureLand Stealer. Follow instructions below:

1. Download free AppCleaner.
2. Drag PureLand Stealer from Applications folder to AppCleaner window.
3. Choose files and folders you want to remove along with PureLand Stealer.
4. Click Delete button.

Remove PureLand Stealer add-on from your browsers

Removing PureLand Stealer from Applications often does not bring the desired effect. It is a browser extension, and it may still be active in Google Chrome and Mozilla Firefox. Here are instructions on how to remove the PureLand Stealer extension from your browsers manually.

Safari:

1. Start Safari on your Mac, click Safari to open drop-down menu and choose Preferences
2. Click Extensions tab.
3. Find PureLand Stealer extension.
4. Click Uninstall button to remove it.

Google Chrome:

1. Start Google Chrome browser
2. In address box type (or copy-paste) chrome://extensions.
3. Find PureLand Stealer extension.
4. Click the trash can icon to remove it.

Mozilla Firefox:

1. Start Mozilla Firefox browser.
2. In address box type (or copy-paste) about:addons.
3. Choose PureLand Stealer extension.
4. Click Disable or Remove button.

Reset browser settings

To finish PureLand Stealer removal, reset your browser settings to make sure, there are no leftover items in browser folders.

Reset Safari:

1. Start Safari on your Mac, click Safari to open drop-down menu and choose Preferences
2. Go to the Privacy section of Safari’s preferences.
3. Click Remove All Website Data button.
4. In the opened window, click Remove Now button to remove data stored by websites in Safari.
5. Go to the Advanced section of Safari’s preferences.
6. Click the Show Develop menu in menu bar option.
7. In the menu, click Develop and select Empty Caches from this menu.
8. Again, go to Safari menu and choose Clear History….
9. Choose to clear all history and click Clear History button.

Reset Google Chrome:

1. Start Google Chrome browser
2. In address box type (or copy-paste) chrome://settings.
3. Scroll down and find Show advanced settings link.
4. Click on it and scroll down to the bottom again.
5. Click Reset settings button and click Reset to confirm.

Reset Mozilla Firefox:

1. Start Mozilla Firefox browser.
2. In address box type (or copy-paste) about:support.
3. Click Refresh Firefox… button.
4. Click Refresh Firefox to confirm.

Remove following files and folders of PureLand Stealer


~/Library/Application Support/.[random_string]/Services/com.PureLand Stealer.service.app
~/Library/LaunchAgents/com.PureLand Stealer.service.plist
/Library/Application Support/.[random_string]/System/com.PureLand Stealer.system
/Library/LaunchDaemons/com.PureLand Stealer.system.plist


Download AdGuard for Mac to block malicious pop-ups, that promote PureLand Stealer

AdGuard is the best ad-blocker, internet filtering, and internet security application for macOS. It can cut out unwanted banners from site pages, block pop-ups, stop redirects, and prevent users from visiting potentially dangerous resources. Use it to stop ads promoting PureLand Stealer in browsers.

Download AdGuard for Mac

How to protect Mac OSX from adware, like PureLand Stealer

Mac OSX is known to be one of the safest operating systems, and for a long time, there was no need for antivirus products for Mac. But with the growing popularity of Mac computers and notebooks and evolving technology, viruses, trojans, adware, toolbars, hijackers, and other malware paved the way for Mac users. We recommend you to use one of the best anti-malware for Mac available — Malwarebytes for Mac.

Download Malwarebytes for Mac