Hi, you may try to follow the following steps to manually remove malware on your MAC:
1. Remove suspicious Login Items
Most malware will try to enable itself automatically when you log in to your mac.
a. Go to the Apple menu → System Preferences
b. Choose the Users & Groups section.
c. Make sure your username is highlighted. Open Login Items tab.
d. Choose any recently-added suspicious applications and use the "-" or minus sign to disable all the suspicious apps.
e. Restart your Mac for the changes to take place.
2. Remove malicious profiles
Some malware will install a malicious configuration profile that forced the home page of your browser.
Note: Profiles won't be visible until you have at least one profile installed. If there is none you may skip this step.
a. Go to the Apple menu → System Preferences
b. Click Profiles
c. Check if there is a profile named AdminPrefs or other profile you know that you did not set up on your Mac and delete it.
3. Stop potentially unwanted process running on your Mac
a. Go to Utilities and open Activity Monitor
b. Look for suspicious processes you are not familiar with.
c. Double click the process. A new window will appear, then click Quit. Click Force Quit on the confirmation message to stop the process.
4. Remove potentially unwanted applications from your "Applications" folder:
a. Open your applications folder : Click Go> Applications
b. Look for any recently-added suspicious applications and drag them to the Trash.
5. Remove malicious extensions on your browser.
For Safari
1. Launch Safari.
2. On the top Menu, click Safari. Then select Preferences.
3. Click the Extensions icon, and then uninstall any recently-added suspicious extensions you want to remove.
For Chrome
1. Launch Chrome.
2. Click the menu on the top right corner. Then click More Tools → Extensions
3. A new Tab for Chrome’s Extension will open. Look for any recently-added suspicious extensions you want to remove and click the remove button.
Firefox
1. Launch Firefox
2. Click the Menu bar on the top right corner and then select Add-Ons.
3. A new tab for Firefox’s add-ons will appear. Select the Extensions Tab. Look for any recently-added suspicious add-ons you want to remove and click the remove button
6. Remove related files and folders.
To manually delete any recently-added suspicious files. Do the following:
a. Click Go > Go to Folder
b. Type the following locations below and click go. (One at a time)
Look for any recently-added suspicious files in these locations.
~/Library/ApplicationSupport
~/Library/Caches
~/Library/containers
~/Library/LaunchAgents
~/Library/Logs
~/Library/Preferences
~/Library/Webkit
/Library/ApplicationSupport
/Library/Caches
/Library/Frameworks
/Library/LaunchAgents
/Library/LaunchDaemons
/Library/Preferences
/Library/Logs
/Library/Webkit
Delete any recently-added suspicious files you want to delete by dragging and dropping it to Trash.
7. After you complete all the steps, please empty your trash and restart your Mac
Hope it helps!
