How do I permanently get rid of TotalResultsSearch from Google Chrome

Every couple of days Google Chrome crashes and when I re-open it an extension has been added that hi-jacks the browser page and passes it to something call TotalResultsSearch. I go into settings and remove the extension, but a day or so later it comes back. There are no suspicious files in Applications. How can I get rid of this pest permanently?

iMac 27", macOS 10.12

Posted on Nov 18, 2019 2:48 AM

Reply
Question marked as Top-ranking reply

Posted on Nov 18, 2019 7:41 AM

The "TotalResults" file needs to be deleted, and you're certainly welcome to try that, but it might simply reappear on its own. To ensure its permanent eradication and eliminate other potential trouble, continue below.


---


In the same manner as the above, open the following folder:


/Library/LaunchDaemons


To open that folder, copy and paste it in the Finder's Go menu > Go to Folder... field. It should look like this:



Once again ensure all its files and their names are readable, take a screenshot, and post it.


Then, repeat that exercise with the following folder:


/Library/LaunchAgents


Notice its pathname is different than the other two.


In the end, you will have captured and posted the contents of the following three separate folders:


~/Library/LaunchAgents

/Library/LaunchDaemons

/Library/LaunchAgents


Please be sure to include or otherwise indicate the name of the folder that corresponds to each screenshot, so that you and I can keep track of which ones they are.

13 replies
Question marked as Top-ranking reply

Nov 18, 2019 7:41 AM in response to PegVox

The "TotalResults" file needs to be deleted, and you're certainly welcome to try that, but it might simply reappear on its own. To ensure its permanent eradication and eliminate other potential trouble, continue below.


---


In the same manner as the above, open the following folder:


/Library/LaunchDaemons


To open that folder, copy and paste it in the Finder's Go menu > Go to Folder... field. It should look like this:



Once again ensure all its files and their names are readable, take a screenshot, and post it.


Then, repeat that exercise with the following folder:


/Library/LaunchAgents


Notice its pathname is different than the other two.


In the end, you will have captured and posted the contents of the following three separate folders:


~/Library/LaunchAgents

/Library/LaunchDaemons

/Library/LaunchAgents


Please be sure to include or otherwise indicate the name of the folder that corresponds to each screenshot, so that you and I can keep track of which ones they are.

Nov 28, 2019 6:54 AM in response to PegVox

Here you go: Import bookmarks and history from other browsers in Safari on Mac


Scroll down to Manually import bookmarks and history from Firefox or Chrome.


I don't know where Google hides all its files, but I do know it infests a Mac with a lot of them, giving malware a lot of potential places to hide. It also raises the possibility that malware is exploiting one of its many "helpers" to cause that misdirection to occur. Those files automatically update themselves in the background with no overt action on your part, which could explain "TotalSearchResults" apparently spontaneous reappearance. Since Google's sole mission is to harvest and upload personal information, they are not nearly as obsessed with your Mac's security as Apple.


You could also consider completely uninstalling the Google products from your Mac according to their instructions, if you haven't tried that already.


Lacking any additional information all I can suggest is reviewing that one affected Mac's Applications folder for any mysterious apps. You should be thoroughly familiar with the purpose of every single one of them. Examine each one exhaustively, and if in doubt, ask.


Also, be sure to review System Preferences for the appearance of a Profiles pane. There shouldn't be one, unless of course that Mac is managed by a school, corporation or similar institution. Select System Preferences' View menu and look for Profiles in its list. It should not appear.

Nov 27, 2019 10:15 AM in response to John Galt

There are extensions in Google Chrome. When the hi-jack happens TotalResultsSearch appears as an extension. I never use Safari, but there is no evidence of the same extension showing up there.


Effect is still happening. However, as I said now there is no sign of TotalResultsSearch in the folders I checked on your suggestion.


For what it's worth I checked the details on the extension when it arrives (see screen shot). I note that under permissions it says it changes search settings to search.launchertasks.com. Don't know if that is of any relevance.



Will check out the other link you sent me.


Thanks for your continued assistance.

Nov 28, 2019 1:04 AM in response to John Galt

Your summary is correct. Tried re-setting Chrome a while ago; made no difference. Been on Chrome for a while, have lots of shortcuts, bookmarks etc so reluctant to have to leave. Plus it's only on one machine. All other devices are unaffected. Having said that it is getting to the point where I may have to make the break I guess.

Nov 18, 2019 6:35 AM in response to PegVox

Does the same problem occur with Safari?


I can't help with Google Chrome specifically, but the following procedure should be generally applicable to it in addition to Safari.


Navigate to the following folder, and post its contents in a screenshot:


~/Library/LaunchAgents


To open that folder, copy the entire line above and paste it in the Finder's Go menu > Go to Folder... field. Make it look like this:





... and click the Go button.


A Finder window will open. Take a screenshot showing all that folder's contents, and post it in a reply. To learn how to do that please read the Appendix in the following User Tip: Writing an effective Apple Support Communities question.


Usually, there is nothing in that folder so don't be surprised to find it empty. The reason for starting with that folder is to eliminate other potential causes before proceeding with steps that will identify and eradicate whatever is affecting that Mac.


There will be additional instructions to follow and this is just the first step.


For a description of how this may have occurred, how to avoid it in the future, and for Apple's recommended actions read How to install adware.


Review your Gatekeeper settings. To learn about Gatekeeper read Safely open apps on your Mac. Gatekeeper is designed to help prevent you from inadvertently installing garbage software.

Nov 18, 2019 8:01 AM in response to PegVox

Thanks. The following instructions should fix the problem. They are very conservative and don't require downloading or installing anything. Unlike those popular remedies, following these instructions cannot possibly introduce any potentially troublesome complications. Just bear in mind they are written primarily for Safari. Any Safari-specific recommendations can be adapted to Google Chrome, Firefox, or other browsers though.


---


First, ensure you have a reliable backup of your Mac, in case something should go wrong with continued troubleshooting. To learn how to do that, please read Back up your Mac with Time Machine.


  • A backup is a fundamental prerequisite regardless of whatever method you may choose uninstall adware, and would apply even if your Mac were running perfectly well. Do not overlook this fundamental requirement. It's important.


Next: This step is optional, but will preclude any related inability to use your Mac due to the effects of that recurring process. Restart in "Safe Mode", and log in: Use safe mode to isolate issues with your Mac. Starting in Safe Mode takes longer than usual so let it finish. The resource-demanding process will not appear while you are using your Mac in that mode.


The following files and / or folders need to be deleted while using your Mac in "Safe Mode":


~/Library/LaunchAgents:


Drag the file "com.TotalResults.plist" to the Trash. You may be asked to authenticate. Confirm it is no longer present in that folder. Leave all the others alone for now.


/Library/LaunchDaemons:


Drag the file "com.TotalResultsDaemon.plist" to the Trash.


Nothing needs to be deleted from the other folder.


Next: open Safari and select the Safari menu > Preferences... > Extensions. If you see any Extensions that you do not recognize or understand, simply click the Uninstall button and they will be gone. No Safari Extensions are required for normal operation. Then, select the General pane and review your Homepage selection. Repeat those equivalent actions for any other browser you may use (Google in your case).


There may also be an app associated with that process in your Mac's Applications folder. Open it and examine its contents. Any unwanted or mysterious app icons should be obvious to you, but again please don't remove anything if you are uncertain—ask first. Identify any suspicious apps by name, or post another screenshot.


Next: In an abundance of caution, examine System Preferences > Extensions. Determine if there are any Extensions that may have been installed without your knowledge. Ask if you're uncertain.


While you're there, check for the presence of any Profiles. Profiles are installed by organizations with a need to manage Macs deployed in institutional corporate or educational environments (for example), but have also been exploited by adware creators and similar malcontents. Unless your Mac is used in that sort of managerial setting, no Profiles pane should appear in System Preferences.


Remaining within System Preferences, open Users & Groups. Select your User Account's Login Items. You may or may not find those Applications in its list. If you do, select them then click the [—] (minus) button to remove them from Login Items.


  • Merely selecting the "hide" checkbox does nothing but launch the app without it being visible. To remove it from Login Items requires using the [—] (minus) button.


You can then restart your Mac and log in as usual.


At your option, you may also wish to inspect Activity Monitor for anything that may be related to it. For example, if you encountered a dialog such as "xxx will damage your computer" in the past, you might have found that "xxx" process in Activity Monitor. It should not longer be present.


Next: if you want to eradicate all remaining adware remnants post a screenshot of the following folder, in the same manner as you did earlier:


~/Library/Application Support


It is normal for that folder to contain many items, but anything associated with the above adware will bear identical names ("TotalResults" in this case). If you find a folder or folders bearing that name, drag them to the Trash. Without the files you already removed or the reintroduction of similar malware, they can do nothing but occupy space. These can be removed if you wish, but again don't remove anything if you are uncertain.


Finally: If any of the above actions result in abnormal operation or if something else stops working, the easiest way to recover would be to restore the Time Machine backup you created as a prerequisite, so the importance of that fundamental step cannot be overemphasized.

Nov 22, 2019 5:16 AM in response to PegVox

In Google Chrome, is there an equivalent to Safari's Extensions?


Next: open Safari and select the Safari menu > Preferences... > Extensions. If you see any Extensions that you do not recognize or understand, simply click the Uninstall button and they will be gone. No Safari Extensions are required for normal operation. Then, select the General pane and review your Homepage selection. Repeat those equivalent actions for any other browser you may use (Google in your case).


If it's gone in Safari, the only uncertainty is how it affects Google.


Edit: This old Discussion appears to be relevant: how to remove virus search.yahoo.com? - Apple Community

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

How do I permanently get rid of TotalResultsSearch from Google Chrome

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.