You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

How to get rid of search-alpha.com

I have a mac that has been compromised. Chrome or Safari open on search-alpha.com.

I have followed instructions provided in another thread, but the issue remains.

I have removed the files highlighted in the screenshots and also some folders in the Applications Support folder. Any further advice would be great!

Big TIA!

Posted on Sep 6, 2023 8:37 PM

Reply
Question marked as Top-ranking reply

Posted on Sep 7, 2023 3:27 PM

Hi HW114, thanks. I have one request, and a question:


  • Please capture and post three brand new screenshots showing the contents of those folders after you deleted the files you indicated.
  • Are you aware of having installed some "nursing exam prep" software, and are you certain you need it? I am suspicious of that file because similar problem affected this person recently: why is there a random plist file on my mac?? please help!!


I will await your answers, but for now be sure to reset the Google Chrome product to its default settings according to Reset Chrome settings to default - Google Chrome Help.


Also, close the Safari window that opens to "search alpha" in the usual manner. It should not reappear, but if it does then we have some more work to do.

Similar questions

4 replies
Question marked as Top-ranking reply

Sep 7, 2023 3:27 PM in response to HW114

Hi HW114, thanks. I have one request, and a question:


  • Please capture and post three brand new screenshots showing the contents of those folders after you deleted the files you indicated.
  • Are you aware of having installed some "nursing exam prep" software, and are you certain you need it? I am suspicious of that file because similar problem affected this person recently: why is there a random plist file on my mac?? please help!!


I will await your answers, but for now be sure to reset the Google Chrome product to its default settings according to Reset Chrome settings to default - Google Chrome Help.


Also, close the Safari window that opens to "search alpha" in the usual manner. It should not reappear, but if it does then we have some more work to do.

Sep 7, 2023 8:06 PM in response to John Galt

Hi John,

Here are the three updated screenshots. Apparently the nursing exam prep was recently installed but no longer needed so I deleted it. Both Chrome and Safari were both reset, with history and caches deleted.

The computer now functions and Safari seems to be fixed. Search-Alpha seems to have been eradicated, but in Chrome searches are sent to Bing in spite of the search / url field saying 'Search Google....'. In the Chrome settings Google is set as the default search engine.

Thanks again for helping me get this sorted!


Sep 8, 2023 6:18 AM in response to HW114

For Google Chrome, you also need to reset its default settings according to Reset Chrome settings to default - Google Chrome Help. In addition to whatever else it does, that ought to reset its default Search Engine (which I assume will be Google).


I am also suspicious of the "ea.origin.ESHelper.plist" file in /Library/LaunchDaemons, but I found conflicting information about it. You already removed the corresponding file in /Library/LaunchAgents, so if the problems persist, remove it from /Library/LaunchDaemons also.

How to get rid of search-alpha.com

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.