You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

How to remove Malware

What's the best way to remove Search Baron malware on my iMac Safari browser? I have Monterey OS.


Posted on Jun 2, 2022 6:06 PM

Reply
Question marked as Top-ranking reply

Posted on Jun 4, 2022 7:27 PM

Getting rid of "Search Baron" and things like it is easy and you don't need to install anything.


To ascertain the cause so that you can eliminate it, start by inspecting the contents of the following folder:


~/Library/LaunchAgents


To open that folder, copy the entire line above and paste it in the Finder's Go menu > Go to Folder... field. Make it look like this:



... and click the Go button.


A Finder window will open. Make sure all its file names are readable by selecting View > as List or other selection that shows that folder's complete contents. Then, take a screenshot of that Finder window.



Often, there is nothing in that Launch Agents folder so don't be surprised to find it empty.


In the same manner as the above, navigate to this next folder:


/Library/LaunchDaemons


The Finder's Go menu > Go to Folder... field should look like this:



... and click the Go button once again.


Once again ensure all its files and their names are readable and capture a screenshot.


Then, repeat that exercise with the following folder:


/Library/LaunchAgents


Notice its pathname is different than the other two. The Finder's Go menu > Go to Folder... field should look like this:



In the end, you will have captured the contents of the following three separate folders:


~/Library/LaunchAgents

/Library/LaunchDaemons

/Library/LaunchAgents


All three will be saved to your Mac's Desktop with names "Screen Shot... " followed by the date and time they were captured. Please be sure to include or otherwise indicate the name of the folder that corresponds to each screenshot, so that you and I can keep track of which ones they are.


Post the entire contents of all three windows, one at a time, using the "picture" icon that appears below your reply text:


3 replies
Question marked as Top-ranking reply

Jun 4, 2022 7:27 PM in response to maxwell19

Getting rid of "Search Baron" and things like it is easy and you don't need to install anything.


To ascertain the cause so that you can eliminate it, start by inspecting the contents of the following folder:


~/Library/LaunchAgents


To open that folder, copy the entire line above and paste it in the Finder's Go menu > Go to Folder... field. Make it look like this:



... and click the Go button.


A Finder window will open. Make sure all its file names are readable by selecting View > as List or other selection that shows that folder's complete contents. Then, take a screenshot of that Finder window.



Often, there is nothing in that Launch Agents folder so don't be surprised to find it empty.


In the same manner as the above, navigate to this next folder:


/Library/LaunchDaemons


The Finder's Go menu > Go to Folder... field should look like this:



... and click the Go button once again.


Once again ensure all its files and their names are readable and capture a screenshot.


Then, repeat that exercise with the following folder:


/Library/LaunchAgents


Notice its pathname is different than the other two. The Finder's Go menu > Go to Folder... field should look like this:



In the end, you will have captured the contents of the following three separate folders:


~/Library/LaunchAgents

/Library/LaunchDaemons

/Library/LaunchAgents


All three will be saved to your Mac's Desktop with names "Screen Shot... " followed by the date and time they were captured. Please be sure to include or otherwise indicate the name of the folder that corresponds to each screenshot, so that you and I can keep track of which ones they are.


Post the entire contents of all three windows, one at a time, using the "picture" icon that appears below your reply text:


Jun 3, 2022 4:11 AM in response to maxwell19

1. Check for adware.


     Run the latest release of Malwarebytes for Mac to remove malware/adware, if installed on your Mac.

     For instructions: Install Malwarebytes for Mac v4    

     Click the “FREE DOWNLOAD” button.

     Click the “Scan ” button. Once done, quit Malwarebytes for Mac.

     Restart the computer and relaunch Safari holding the shift key down.

     Scan for Malware again.


2.  If this doesn’t help:

     Download EtreCheck: https://etrecheck.com/,run it and post the report here.

     Click  “Free Download” button,    

     Open Downloads folder, click on it to open, and then select ”Open”.

     “Choose a problem” from the popup menu box, and then “Start EtreCheck” in the dialog.

     Click “Share Report” button in the toolbar, select “Copy report” .

     Paste the report when you reply. This is a diagnostic test.


Additional steps to take if necessary (1) 

  1. Remove unknown extensions:  Safari > Preferences > Extensions

      Get extensions to customize Safari on Mac - Apple Support

  2. Reset search engine:    Customize searching in Safari on Mac - Apple Support

  3. Reset  Homepage.   Change your homepage in Safari on Mac - Apple Support 

  4. Restart your Mac. Relaunch Safari holding the Shift key down.      


Additional steps to take if necessary (2)

   1. Remove unknown profiles.

      System Preferences > General > Profiles

      Open System Preferences, click the “Profiles” icon ( a checkmark on a gear) .

      When Profiles pane opens, select the unknown profile and click the minus button at the bottom.

       Profiles: Use configuration profiles to standardize settings on Mac computers - Apple Support


How to remove Malware

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.