My safari browser was taken over this eve by a rogue malware which gives me a fixed search page. WTF?

Safari went down after a flash payer updtae then switched over to MacKeeper, which I do not trust. Then it went into a fixed mode with a bew search page from "weknow" which i definitely do not trust. What to do??

Thx

iMac 27", 10.14

Posted on Jan 27, 2019 9:04 PM

Reply
Question marked as Top-ranking reply

Posted on Jan 27, 2019 9:31 PM

 1. Use  the latest release of MalwareBytes for Mac to remove malware/adware.


     Install guide:       https://support.malwarebytes.com/docs/DOC-1817

     Uninstall Guide:  https://support.malwarebytes.com/docs/DOC-1190


     The installer may ask you to allow it in Security & Privacy  /System Preference. Allow it.


     Click the “Scan Now” button. Once done quit Malwarebytes for Mac.

     Restart the computer, relaunch Safari holding the shift key down.


2. Additional steps to take if necessary.


  1. Remove unknown profiles.


      System Preferences > Profiles

      Open System Preferences, click the “Profiles” icon ( a checkmark on a gear) .

      When Profiles pane opens, select the unknown profile and click the minus button at the bottom.


  2. Reset search engine:    https://support.apple.com/guide/safari/customize-your-search-ibrwe75c2a3c/mac

  3. Reset  Homepage.   https://support.apple.com/guide/safari/set-your-homepage-ibrw1020/mac

   4. Remove unknown extensions: https://support.apple.com/guide/safari/use-safari-extensions-sfri32508/mac

   5. Ref: https://forums.malwarebytes.com/topic/236261-how-to-remove-weknow-malware-and-others/


3. Restart your Mac. Launch Safari holding the shift key down.

1 reply
Question marked as Top-ranking reply

Jan 27, 2019 9:31 PM in response to Ingenius

 1. Use  the latest release of MalwareBytes for Mac to remove malware/adware.


     Install guide:       https://support.malwarebytes.com/docs/DOC-1817

     Uninstall Guide:  https://support.malwarebytes.com/docs/DOC-1190


     The installer may ask you to allow it in Security & Privacy  /System Preference. Allow it.


     Click the “Scan Now” button. Once done quit Malwarebytes for Mac.

     Restart the computer, relaunch Safari holding the shift key down.


2. Additional steps to take if necessary.


  1. Remove unknown profiles.


      System Preferences > Profiles

      Open System Preferences, click the “Profiles” icon ( a checkmark on a gear) .

      When Profiles pane opens, select the unknown profile and click the minus button at the bottom.


  2. Reset search engine:    https://support.apple.com/guide/safari/customize-your-search-ibrwe75c2a3c/mac

  3. Reset  Homepage.   https://support.apple.com/guide/safari/set-your-homepage-ibrw1020/mac

   4. Remove unknown extensions: https://support.apple.com/guide/safari/use-safari-extensions-sfri32508/mac

   5. Ref: https://forums.malwarebytes.com/topic/236261-how-to-remove-weknow-malware-and-others/


3. Restart your Mac. Launch Safari holding the shift key down.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

My safari browser was taken over this eve by a rogue malware which gives me a fixed search page. WTF?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.