"Search Marquis" opening every time I open a new tab

Every time I open a new tab "Search Marquis" forcibly opens redirected from my chosen new tab page on both Safari and Chrome. I took the three screenshots of my folders that were mentioned in an article I read on here and have attached them to this post. If anyone can tell me which files I should delete to get rid of this it would be much appreciated.


Thanks.

Launch Agents:

Launch Daemons:

Library Launch Agents:

MacBook Pro 13″, macOS 13.5

Posted on Nov 21, 2023 3:20 PM

Reply
Question marked as Top-ranking reply

Posted on Nov 21, 2023 3:38 PM

First, start up you Mac in Safe Mode:

Start up your Mac in safe mode - Apple Support


Then, in the last screenshot, remove:

  • com.systemmond.plist
  • com.readerupdate.plist
  • com.fsefosian.eftsime.plist
  • com.DeskPM.plist - (Not positive on this one, but have not seen it before)


The first 3 are definite Malware. As always you should have a good backup before changing any system files. Make sure you empty the trash. To be safe, you can move the last file to your Desktop in case it provides a service to a program you had recently installed (The install date is showing 11/6/23) or you are aware of the program that uses it. After restart, verify functionality and that the files did not reappear.


In addition John Galt has some other steps to verify removal from the Safari Browser here:

Removing "Search Marquis" / "Search Baron… - Apple Community

1 reply
Question marked as Top-ranking reply

Nov 21, 2023 3:38 PM in response to Zoegro

First, start up you Mac in Safe Mode:

Start up your Mac in safe mode - Apple Support


Then, in the last screenshot, remove:

  • com.systemmond.plist
  • com.readerupdate.plist
  • com.fsefosian.eftsime.plist
  • com.DeskPM.plist - (Not positive on this one, but have not seen it before)


The first 3 are definite Malware. As always you should have a good backup before changing any system files. Make sure you empty the trash. To be safe, you can move the last file to your Desktop in case it provides a service to a program you had recently installed (The install date is showing 11/6/23) or you are aware of the program that uses it. After restart, verify functionality and that the files did not reappear.


In addition John Galt has some other steps to verify removal from the Safari Browser here:

Removing "Search Marquis" / "Search Baron… - Apple Community

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

"Search Marquis" opening every time I open a new tab

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.