Search Baron / Search Marquis
How do you rid your MacBook Pro of Search baron and Search Marquis virus ?
MacBook Pro 13″, OS X 10.11
How do you rid your MacBook Pro of Search baron and Search Marquis virus ?
MacBook Pro 13″, OS X 10.11
Late last year you installed adware. Whether or not you were aware of it, your Mac has not been operating properly since then. macOS's improved malware detection algorithms are only now making you aware of its presence.
Getting rid of adware is easy and doesn't require installing anything else. To fix it follow the instructions below. To learn how not to make that mistake again, please read How to install adware.

First, ensure you have a reliable backup of your Mac, in case something should go wrong with continued troubleshooting. To learn how to do that, please read Back up your Mac with Time Machine.
Next: This step will prevent the scam products from loading so that they can be removed while they are inactive. Restart in "Safe Mode", and log in: Use safe mode to isolate issues with your Mac. Starting in Safe Mode takes longer than usual so let it finish. The rogue processes affecting that Mac are inoperative in "Safe Mode".
The following files and / or folders need to be deleted while using your Mac in "Safe Mode":
Nothing needs to be deleted from the folders in the second and third screenshots.
Drag those selections of files to the Trash. You may be asked to authenticate. Confirm they are no longer present in that folder. Leave all the others alone for now.
Next: open Safari and select the Safari menu > Preferences... > Extensions. If you see any Safari Extensions that you do not recognize or understand, simply click the Uninstall button and they will be gone. No Safari Extensions are required for normal operation. Then, select the General pane and review your Homepage selection. Repeat those equivalent actions for any other browser you may use (Brave, Firefox, or Opera for example).
There may also be adware-associated app icons in your Mac's Applications folder. Open it and examine its contents. Any unwanted or mysterious app icons should be obvious to you, but again please don't remove anything if you are uncertain—ask first. Identify any suspicious apps by name, or post another screenshot.
Next: In an abundance of caution, examine System Preferences > Extensions. Determine if there are any System Extensions that may have been installed without your knowledge. Ask if you're uncertain.
Remaining in System Preferences, check for the presence of any Profiles. Profiles are installed by organizations with a need to manage Macs deployed in institutional corporate or educational environments (for example), but have also been exploited by adware creators and similar malcontents. If any Profiles are installed on your Mac an icon like this will appear in System Preferences:
If you see that icon in System Preferences, select it. To remove a Profile, select it, then click the [—] (minus) button and authenticate.
Remaining in System Preferences, open Users & Groups. Select your User Account's Login Items. You may or may not find those Applications in its list. If you do, select them then click the [—] (minus) button to remove them from Login Items.
You can then restart your Mac and log in as usual. Evaluate its operation and ensure everything is working as you expect it should.
Next: if you want to eradicate all remaining adware remnants post a screenshot of the following folder, in the same manner as you did earlier:
~/Library/Application Support
It is normal for that folder to contain many items, but anything associated with the above adware may contain identical names. If you find a folder or folders bearing those names, drag those folders to the Trash. Without the files you already removed or the reintroduction of similar malware, they can do nothing but occupy space. These can be removed if you wish, but again don't remove anything if you are uncertain.
Finally: If any of the above actions result in abnormal operation or if something else stops working, the easiest way to recover would be to restore the Time Machine backup you created as a prerequisite, so the importance of that fundamental step cannot be overemphasized.
steffikoga wrote:
I have got the same problem with Search Baron/Marquis and don't know which files do remove...
Post the screenshots I requested.
This is from my dad's macbook and I haven't been able to remove it. I have added the 3 screenshots below. Thank you!
Thank you. That seems to have worked. Appreciate the help!
This is from my MacBook. I need help getting rid of Search Baron and Search Marquis from GoogleChrome.
Will you please let me know how to remove what is causing this on my MacBook when I use GoogleChrome?
Hi,My MAC was also infected with the Search Baron virus. I am running Mac OS Catalina 10.15.6. Any assistance on clean up would be much appreciated. Here are my 3 screenshots
trying to get rid of marquis
trying to get rid of marquis
did it work??
John,
Thank you very much for your help! This appears to have worked! I will attach my applicationsupport folder as well for your review. Also, do you have any recommendations as to which antivirus/adware applications I should add to his computer to hopefully minimize the chances of this occurring again? He's not technologically savvy by any means. Thank you!
Search Baron / Search Marquis