You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Removing Search Marquis

My MacBook Air has recently been infected with Search Marquis malware. I've read other discussion posts in this forum and would like guidance on which files should be removed from the Launch folders. Please see the screenshots below.


Thanks,

JL





Posted on Sep 26, 2024 1:00 PM

Reply
5 replies

Sep 26, 2024 2:47 PM in response to JL0451

First, start your Mac in "Safe Mode": How to use safe mode on your Mac - Apple Support. Starting in Safe Mode takes longer than usual so let it finish.


While in that mode, drag all the files in those three folders to the Trash except those with the following in their names:


Adobe

Canon

Epicgames

ExpressVPN (but read later)

Google

Microsoft

Razer

Skype

Valvesoftware

Xquartz

Zoom


Everything other than those files with the above in their names should be deleted.


Then, restart your Mac normally.


  • Regarding ExpressVPN be sure to review Don't use VPN services. This isn't the cause of the problem, but it doesn't help.


Launch Safari but press and hold a Shift key while launching it as you usually do. That's optional but will ensure it will not start with that same problematic web page, which might make you believe you didn't fix anything. Release the Shift key when the Safari window opens. If you still experience the problem please write back for some additional steps that might be necessary.

Sep 27, 2024 1:30 PM in response to JL0451

For Firefox, you can restart it in "Troubleshoot Mode" Diagnose Firefox issues using Troubleshoot Mode and confirm the problems don't manifest while in that mode. If they do then you will know to look elsewhere since "Troubleshoot Mode" disables its extensions and any custom settings it may be using. I realize you did not deliberately install any but you might as well confirm.


Follow up with Reset Firefox.


For Chrome, you might also consider resetting it to defaults according to their equivalent instructions: https://support.google.com/chrome/answer/3296214?hl=en/


Try that and let us know if Firefox is still misbehaving. You might as well also post three brand new screenshots of those three folders, just in case I overlooked something or if the same adware re-created any of those files (possible).

Sep 27, 2024 8:46 AM in response to John Galt

Thank you kindly, John.


This resolved the issue for Safari, however, Firefox is still showing Search Marquis. I recently downloaded Firefox because my OS version is no longer supported by Chrome (which is where the issue first arose). So there aren't any extensions on that browser.


What should be my next step?

Removing Search Marquis

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.