Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

how to remove isearch from macbook

how to remove isearch from macbook?


MacBook Air 13", macOS 10.12

Posted on Jan 5, 2020 10:09 AM

Reply
Question marked as Best reply

Posted on Jan 5, 2020 1:00 PM

HI Robert,


EtreCheck is a simple little app to display the important details of your system configuration and allow you to copy that information to the Clipboard. It is meant to be used with Apple Support Communities to help people help you with your Mac.

http://www.etresoft.com/etrecheck


Pastebin is a good place to paste the whole report...

https://pastebin.com/


Or use the paperclip at the bottom of a Reply to attach the full report here. :)


There is also free Malwarebytes which may take care of it...

https://www.malwarebytes.com/mac/


12 replies
Question marked as Best reply

Jan 5, 2020 1:00 PM in response to Robert Skillman

HI Robert,


EtreCheck is a simple little app to display the important details of your system configuration and allow you to copy that information to the Clipboard. It is meant to be used with Apple Support Communities to help people help you with your Mac.

http://www.etresoft.com/etrecheck


Pastebin is a good place to paste the whole report...

https://pastebin.com/


Or use the paperclip at the bottom of a Reply to attach the full report here. :)


There is also free Malwarebytes which may take care of it...

https://www.malwarebytes.com/mac/


Jan 6, 2020 8:43 AM in response to Robert Skillman

Thank you for your time good sir.


here is the report

EtreCheck version: 5.4.8 (5091)

Report generated: 2020-01-06 08:25:27

Download EtreCheck from https://etrecheck.com

Runtime: 2:29

Performance: Excellent

Sandbox: Enabled

Full drive access: Disabled


Problem: Other problem

Description: 

I somehow got search malware on my Mac book Air

i wish to get rid of it


Major Issues:

    Anything that appears on this list needs immediate attention. 


    Adware - Adware detected.

    Unsigned files - There are unsigned software files installed that could be adware and should be reviewed.

    More than one antivirus app - This machine has multiple antivirus apps installed.


Minor Issues:

    These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. 


    Configuration profiles present - This machine has configuration profiles. These are sometimes used by adware and malware.

    High battery cycle count - Your battery may be losing capacity.

    Clean up - There are orphan files that could be removed.

    32-bit Apps - This machine has 32-bits apps will not work on macOS 10.15 “Catalina”.

    Limited drive access - More information may be available with Full Drive Access.


Hardware Information:

    MacBook Air (13-inch, 2013 - 2014)

    MacBook Air Model: MacBookAir6,2

    1 1.4 GHz Intel Core i5 (i5-4260U) CPU: 2-core

    4 GB RAM - Not upgradeable

        BANK 0/DIMM0 - 2 GB DDR3 1600 

        BANK 1/DIMM0 - 2 GB DDR3 1600 

    Battery: Health = Replace Soon - Cycle count = 1455


Video Information:

    Intel HD Graphics 5000 - VRAM: 1536 MB

        Color LCD 1152 x 720


Drives:

    disk0 - APPLE SSD SD0256F 251.00 GB (Solid State - TRIM: Yes)

    Internal PCI 5.0 GT/s x2 Serial ATA

        disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

        disk0s2 [Core Storage Container] 250.14 GB

            disk1 - Macintosh HD (Journaled HFS+) 249.78 GB (171.02 GB used)

        disk0s3 - Recovery HD (Journaled HFS+) [Recovery] 650 MB


Mounted Volumes:

    disk1 - Macintosh HD

        249.78 GB (171.02 GB used, 78.49 GB free)

        Journaled HFS+

        Mount point: /

        Encrypted


Network:

    Interface usbmodem1411: USB Modem

        Proxies: SOCKS

    Interface en3: Thunderbolt Ethernet

        Proxies: SOCKS

    Interface en0: Wi-Fi

        802.11 a/b/g/n/ac

        Proxies: SOCKS

    Interface en4: iPhone

        Proxies: SOCKS

    Interface en2: Bluetooth PAN

        Proxies: SOCKS

    Interface bridge0: Thunderbolt Bridge

        Proxies: SOCKS



Jan 6, 2020 8:50 AM in response to Robert Skillman


Network:

    Interface usbmodem1411: USB Modem

        Proxies: SOCKS

    Interface en3: Thunderbolt Ethernet

        Proxies: SOCKS

    Interface en0: Wi-Fi

        802.11 a/b/g/n/ac

        Proxies: SOCKS

    Interface en4: iPhone

        Proxies: SOCKS

    Interface en2: Bluetooth PAN

        Proxies: SOCKS

    Interface bridge0: Thunderbolt Bridge

        Proxies: SOCKS


System Software:

    macOS Sierra 10.12.6 (16G2136) 

    Time since boot: Less than an hour


Configuration Profiles:

    This computer has configuration profiles installed.


Notifications:

    Notifications not available without Full Drive Access.


Security:

    Gatekeeper: Enabled

    System Integrity Protection: Enabled


    Antivirus software: Apple, TotalAV, and Malwarebytes


Adware:

    Launchd: /Library/LaunchDaemons/com.SimpleSignSearchDaemon.plist

        Reason: Adware pattern match

        Executable: /Library/Application Support/com.SimpleSignSearchDaemon/SimpleSignSearch r


Unsigned Files:

    Launchd: /Library/LaunchDaemons/com.SimpleSignSearchP.plist

        Executable: /var/root/.SimpleSignSearch/SimpleSignSearchDaemon

        Details: Domain name invalid - possibly adware


    Safari Extension: FocusProvide


32-bit Applications:

    4 32-bit apps


Kernel Extensions:

    /Library/Extensions

        IOKitBDAv.kext (Bitdefender SRL, 2.51.0 - SDK 10.8)

        SSIODriver.kext (SS Protect Limited, 1.0 - SDK 10.6)


System Launch Agents:

    [Not Loaded] 13 Apple tasks

    [Loaded] 173 Apple tasks

    [Running] 100 Apple tasks


System Launch Daemons:

    [Not Loaded] 43 Apple tasks

    [Loaded] 175 Apple tasks

    [Running] 100 Apple tasks

    [Other] 2 Apple tasks


Launch Agents:

    [Loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2019-12-03)

    [Loaded] com.google.keystone.xpcservice.plist (Google, Inc. - installed 2019-12-03)

    [Not Loaded] com.teamviewer.teamviewer.plist (? bb938493 - installed 2019-10-10)

    [Not Loaded] com.teamviewer.teamviewer_desktop.plist (? 5e992d23 - installed 2019-10-10)


Launch Daemons:

    [Loaded] com.SimpleSignSearchDaemon.plist (Adware - installed 2020-01-06)

    [Running] com.SimpleSignSearchP.plist (? 75082c9d - installed 2019-12-20)

    [Loaded] com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2019-11-22)

    [Not Loaded] com.apple.installer.cleanupinstaller.plist (Apple - installed 2018-11-14)

    [Loaded] com.google.keystone.daemon.plist (Google, Inc. - installed 2019-12-03)

    [Loaded] com.malwarebytes.MBAMHelperTool.plist (Malwarebytes Corporation - installed 2020-01-05)

    [Not Loaded] com.oracle.java.Helper-Tool.plist (? 0 - installed )

    [Loaded] com.teamviewer.Helper.plist (TeamViewer GmbH - installed 2019-10-10)

    [Not Loaded] com.teamviewer.teamviewer_service.plist (? e6c7921e - installed 2019-10-10)


User Launch Agents:

    [Loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2019-08-21)

    [Other] com.mtpuhlpr.mtpuhlpr.plist (PY4XW57S8W - installed 2019-10-16)

    [Loaded] com.skype.skype.shareagent.plist (Skype Communications S.a.r.l - installed 2018-01-24)


User Login Items:

    [Not Loaded] loginItem (App Store - installed 2018-07-18)

        Modern Login Item

        /Applications/Flick for Netflix.app/Contents/Library/LoginItems/loginItem.app


    [Loaded] HourLoginHelper (App Store - installed 2019-10-07)

        Modern Login Item

        /Applications/Hour.app/Contents/Library/LoginItems/HourLoginHelper.app


    [Not Loaded] SpeedTestHelper (App Store - installed 2019-12-14)

        Modern Login Item

        /Applications/Speedtest.app/Contents/Library/LoginItems/SpeedTestHelper.app


    [Not Loaded] WeatherHelper (App Store - installed 2016-04-04)

        Modern Login Item

        /Applications/Weather Live Free.app/Contents/Library/LoginItems/WeatherHelper.app


    [Not Loaded] WhatsApp Login Helper (App Store - installed 2019-09-02)

    



Jan 6, 2020 8:54 AM in response to Robert Skillman


Security:

    Gatekeeper: Enabled

    System Integrity Protection: Enabled


    Antivirus software: Apple, TotalAV, and Malwarebytes


Adware:

    Launchd: /Library/LaunchDaemons/com.SimpleSignSearchDaemon.plist

        Reason: Adware pattern match

        Executable: /Library/Application Support/com.SimpleSignSearchDaemon/SimpleSignSearch r


Unsigned Files:

    Launchd: /Library/LaunchDaemons/com.SimpleSignSearchP.plist

        Executable: /var/root/.SimpleSignSearch/SimpleSignSearchDaemon

        Details: Domain name invalid - possibly adware


    Safari Extension: FocusProvide


32-bit Applications:

    4 32-bit apps


Kernel Extensions:

    /Library/Extensions

        IOKitBDAv.kext (Bitdefender SRL, 2.51.0 - SDK 10.8)

        SSIODriver.kext (SS Protect Limited, 1.0 - SDK 10.6)


System Launch Agents:

    [Not Loaded] 13 Apple tasks

    [Loaded] 173 Apple tasks

    [Running] 100 Apple tasks


System Launch Daemons:

    [Not Loaded] 43 Apple tasks

    [Loaded] 175 Apple tasks

    [Running] 100 Apple tasks

    [Other] 2 Apple tasks


Launch Agents:

    [Loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2019-12-03)

    [Loaded] com.google.keystone.xpcservice.plist (Google, Inc. - installed 2019-12-03)

    [Not Loaded] com.teamviewer.teamviewer.plist (? bb938493 - installed 2019-10-10)

    [Not Loaded] com.teamviewer.teamviewer_desktop.plist (? 5e992d23 - installed 2019-10-10)


Launch Daemons:

    [Loaded] com.SimpleSignSearchDaemon.plist (Adware - installed 2020-01-06)

    [Running] com.SimpleSignSearchP.plist (? 75082c9d - installed 2019-12-20)

    [Loaded] com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2019-11-22)

    [Not Loaded] com.apple.installer.cleanupinstaller.plist (Apple - installed 2018-11-14)

    [Loaded] com.google.keystone.daemon.plist (Google, Inc. - installed 2019-12-03)

    [Loaded] com.malwarebytes.MBAMHelperTool.plist (Malwarebytes Corporation - installed 2020-01-05)

    [Not Loaded] com.oracle.java.Helper-Tool.plist (? 0 - installed )

    [Loaded] com.teamviewer.Helper.plist (TeamViewer GmbH - installed 2019-10-10)

    [Not Loaded] com.teamviewer.teamviewer_service.plist (? e6c7921e - installed 2019-10-10)


User Launch Agents:

    [Loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2019-08-21)

    [Other] com.mtpuhlpr.mtpuhlpr.plist (PY4XW57S8W - installed 2019-10-16)

    [Loaded] com.skype.skype.shareagent.plist (Skype Communications S.a.r.l - installed 2018-01-24)


User Login Items:

    [Not Loaded] loginItem (App Store - installed 2018-07-18)

        Modern Login Item

        /Applications/Flick for Netflix.app/Contents/Library/LoginItems/loginItem.app


    [Loaded] HourLoginHelper (App Store - installed 2019-10-07)

        Modern Login Item

        /Applications/Hour.app/Contents/Library/LoginItems/HourLoginHelper.app


    [Not Loaded] SpeedTestHelper (App Store - installed 2019-12-14)

        Modern Login Item

        /Applications/Speedtest.app/Contents/Library/LoginItems/SpeedTestHelper.app


    [Not Loaded] WeatherHelper (App Store - installed 2016-04-04)

        Modern Login Item

        /Applications/Weather Live Free.app/Contents/Library/LoginItems/WeatherHelper.app


    [Not Loaded] WhatsApp Login Helper (App Store - installed 2019-09-02)

        Modern Login Item

        /Applications/WhatsApp.app/Contents/Library/LoginItems/WhatsApp Login Helper.app


    [Running] PhotoStreamAgent (App Store - installed 2038-01-18)

        Modern Login Item

        /Applications/iPhoto.app/Contents/Library/LoginItems/PhotoStreamAgent.app


Internet Plug-ins:

    FlashPlayer-10.6: 32.0.0.303 (Adobe Systems, Inc. - installed 2019-12-11)

    SlingPlayer: (? - installed 2015-07-17)

    Flash Player: 32.0.0.303 (Adobe Systems, Inc. - installed 2019-12-11)


Audio Plug-ins:

    BluetoothAudioPlugIn: 5.0.5 (Apple - installed 2019-10-09)

    iSightAudio: 7.7.3 (Apple - installed 2019-10-09)

    AirPlay: 2.0 (Apple - installed 2019-10-09)

    AppleAVBAudio: 506.1 (Apple - installed 2019-10-09)

    AppleTimeSyncAudioClock: 1.0 (Apple - installed 2019-10-09)


Safari Extensions:

    FocusProvide - Unknown (installed )


3rd Party Preference Panes:

    Flash Player (installed 2019-11-22)



Jan 6, 2020 9:27 AM in response to Robert Skillman

Thank you for your time good sir.


here is the report

EtreCheck version: 5.4.8 (5091)

Report generated: 2020-01-06 08:25:27

Download EtreCheck from https://etrecheck.com

Runtime: 2:29

Performance: Excellent

Sandbox: Enabled

Full drive access: Disabled


Problem: Other problem

Description: 

I somehow got search malware on my Mac book Air

i wish to get rid of it


Major Issues:

    Anything that appears on this list needs immediate attention. 


    Adware - Adware detected.

    Unsigned files - There are unsigned software files installed that could be adware and should be reviewed.

    More than one antivirus app - This machine has multiple antivirus apps installed.


Minor Issues:

    These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. 


    Configuration profiles present - This machine has configuration profiles. These are sometimes used by adware and malware.

    High battery cycle count - Your battery may be losing capacity.

    Clean up - There are orphan files that could be removed.

    32-bit Apps - This machine has 32-bits apps will not work on macOS 10.15 “Catalina”.

    Limited drive access - More information may be available with Full Drive Access.


Hardware Information:

    MacBook Air (13-inch, 2013 - 2014)

    MacBook Air Model: MacBookAir6,2

    1 1.4 GHz Intel Core i5 (i5-4260U) CPU: 2-core

    4 GB RAM - Not upgradeable

        BANK 0/DIMM0 - 2 GB DDR3 1600 

        BANK 1/DIMM0 - 2 GB DDR3 1600 

    Battery: Health = Replace Soon - Cycle count = 1455


Video Information:

Jan 6, 2020 4:07 PM in response to Robert Skillman

Ok...


    Adware - Adware detected.

    Unsigned files - There are unsigned software files installed that could be adware and should be reviewed.

 

Minor Issues:

    These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. 


    Configuration profiles present - This machine has configuration profiles. These are sometimes used by adware and


Did you click on the remove in Etrecheck on the Adware & delete unknown Configuration profiles?


The important Cleanup section is missing, the paperclip icon allows you to attach the whole report. but in the Cleanup: section delete all the .[lists there & restart.

how to remove isearch from macbook

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.