OpenSearchSystems please help to remove

Whew! Lots of Malware!

Delete these files & restart...

Launchd: /Library/LaunchAgents/com.MyMacUpdater.agent.plist

Launchd: /Library/LaunchDaemons/com.42DE79C9.37CC.48BF.9678.B1698EC4D15A.plist

Launchd: ~/Library/LaunchAgents/com.BFF90B99.5B06.4858.BB3C.F3C889CDABA4.plist

~ tilde indicates your home folder

Apple hid the Users' Library folders...

Method 1:

1 From the Finder, select the Go menu at top of the screen, and choose Go to Folder.

2 In the window that opens, enter ~/Library, and click Go.

Get rid of your VPN...

Make a New Location, Using network locations in Mac OS X ...

System Preferences>Network, top of window>Locations>Edit Locations, little plus icon, give it a name.

System Preferences>Network, click on the little gear at the bottom next to the + & - icons, (unlock lock first if locked), choose Set Service Order.

The interface that connects to the Internet should be dragged to the top of the list.

Sys Prefs>Network>highlight the Interface you're using>Advanced>TCP/IP>Configure IPv4: Using DHCP.

If using Wifi, instead of joining your Network from the list, click the WiFi icon at the top, and click join other network. Fill in everything as needed.

System Preferences>Network>choose interface>Advanced>Proxies Tab, make sure none are set, like for HTTP & HTTPS.

System Preferences>Network, unlock the lock if need be, highlight the Interface you use to connect to Internet, click on the advanced button, click on the DNS tab, click on the little plus icon, then add these numbers...

8.8.8.8

8.8.4.4

1.1.1.1

9.9.9.9

Apply.

Rub Etrecheck again.

Wow... Your Browser is managed by your Organization. you'll have to contact them I think.

Delete these files & restart...

/Library/LaunchDaemons/com.apple.installer.cleanupinstaller.plist

/Library/LaunchAgents/com.MyShopcoupon.agent.plist

Does this show any proxies?

System Preferences>Network>choose interface>Advanced>Proxies Tab, make sure none are set, like for HTTP & HTTPS.

Looks like no Proxies, but not sure what these things are asbot, I've never seen anything like it...

Support/com.469564026620679090/18281134923066352521 '/Library/Application Support/com.469564026620679090/10414356830827617463' mcleniapekkgmbapjhbkpbpbgkodnnml 'Profile 1,Default' '/Library/Application Support/com.469564026620679090/3786521038206924412' 90B3B8F3-8FC1-5599-A548-F9C542473E13

See if you have unknown Profiles.

To remove a configuration profile in macOS:

1. From the Apple menu, select System Preferences....
2. From the View menu in System Preferences, select Profiles.Note:
3. Profiles won't be visible until you have at least one profile installed.
4. Select the profile you want to remove, and then press the - (minus) button. Click Remove to remove the profile.

Yes, restart...

Hmmmm, I wonder why it says that?

Long shot...

To find out if it's system wide or user specific, try this...

Open System Preferences>Users & Groups, unlock the lock, click on the little plus icon, make a new admin account, log out & into the new account.

Does it work in the new account?

We need to see what all is running, a report from this will not display any personal info...

EtreCheck is a FREE simple little diagnostic tool to display the important details of your system configuration and allow you to copy that information to the Clipboard. It is meant to be used with Apple Support Communities to help people help you with your Mac. It will not display any personal info.

https://www.etrecheck.com/

Pastebin is a good place to paste the whole report if you capture the URL while there…

https://pastebin.com/

Workable but harder for me to work with...the Note tool on the bottom of this editor's toolbar, as shown in the image, to copy and paste the output from EtreCheck. In a Reply before you click post, look for this to add longer texts...

OpenSearchSystems Malware on Macbook - Apple Community

Let's see what we have after a restart.

I'd disconnect from the Internet asa test, I doubt will cause any damage that way.

So, that waswhen you tried posting results to Note tool on the bottom of this editor's toolbar, as shown in the image, to copy and paste the output from EtreCheck. In a Reply before you click post, look for this to add longer texts...

Or what?