Safari preferences default search engine instantly switches back to Yahoo.

Question

On my Mac it is impossible to set the default search engine in Safari preferences from Yahoo back to Google. It instantly switches back to Yahoo. This means that all searches in the URL bar default to Yahoo. How can I get my Safari back to default Google search?The reason for this behaviour: I have caught adware for Safari by downloading the Vuze torrent client about a week ago. I noted my mistake and deleted all Safari extension that had been installed. This did not solve the problem. Then I installed a virus scanner and performed a full scan. It actually found adware and I deleted it. Still no cure. Then I resetted the Safari browser by deleting preferences according to section 11 in this guide: http://www.hawkdive.com/2016/03/how-to-reinstall-safari-on-my-mac.htmlStill no cure. I also set the NSPreferredWebServices setting back to Goole using "defaults write" command by Terminal. Other users on my Mac do not experience this problem. So I suppose it must be something in my user context.I cannot find the setting or the piece of adware that is still instantly reversing my Safari browser search engine back to Yahoo. Any help would be very much appreciated.I am running Safari Version 10.1 (12603.1.30.0.34) on Sierra 10.12.4

Gornet · Accepted Answer

Finally I found the solution. On my mac os x (sierra) and Safari version the default search engine obviously is no longer set in the preferences Instead it is set by clicking on the search icon directly in the url bar of Safari: Here the setting stays at what I selected.Thanks for all replies. They helped me get better control of adware anyway.

Gornet · Answer

Thank you dominic23 for your reply. Nothing helped. I did the EtreCheck an here is the report:EtreCheck version: 3.2.2 (362)Report generated 2017-05-01 19:36:43Download EtreCheck from https://etrecheck.comRuntime: 1:42Performance: ExcellentClick the [Lookup] links for more information from Apple Support Communities.Click the [Details] links for more information about that line.Problem: Other problemDescription:Safari default search engine keeps switching back to Yahoo.Hardware Information: ⓘ    iMac (27-inch, Late 2012)     [Technical Specifications] - [User Guide] - [Warranty &amp; Service]    iMac - model: iMac13,2    1 3,4 GHz Intel Core i7 (i7-3770) CPU: 4-core    32 GB RAM Upgradeable - [Instructions]        BANK 0/DIMM0            8 GB DDR3 1600 MHz ok        BANK 1/DIMM0            8 GB DDR3 1600 MHz ok        BANK 0/DIMM1            8 GB DDR3 1600 MHz ok        BANK 1/DIMM1            8 GB DDR3 1600 MHz ok    Bluetooth: Good - Handoff/Airdrop2 supported    Wireless: UnknownVideo Information: ⓘ    NVIDIA GeForce GTX 680MX - VRAM: 2048 MB        iMac 2560 x 1440System Software: ⓘ    macOS Sierra  10.12.4 (16E195) - Time since boot: about 10 hoursDisk Information: ⓘ    APPLE HDD ST3000DM001 disk1 : (3 TB) (Rotational)    [Show SMART report]        EFI (disk1s1) &lt;not mounted&gt; : 210 MB         Recovery HD (disk1s3) &lt;not mounted&gt;  [Recovery]: 650 MB         BOOTCAMP (disk1s4) /Volumes/BOOTCAMP : 205.00 GB (96.10 GB free)        Boot OS X (disk1s6) &lt;not mounted&gt; : 134 MB         Macintosh HD (disk2) /  [Startup]: 2.90 TB (2.10 TB free)            Core Storage: disk0s2 120.99 GB Online            Core Storage: disk1s2 1.99 TB Online            Core Storage: disk1s5 801.44 GB Online        Macintosh HD (disk2) /  [Startup]: 2.90 TB (2.10 TB free)            Core Storage: disk0s2 120.99 GB Online            Core Storage: disk1s2 1.99 TB Online            Core Storage: disk1s5 801.44 GB Online    APPLE SSD SM128E disk0 : (121,33 GB) (Solid State - TRIM: Yes)    [Show SMART report]        EFI (disk0s1) &lt;not mounted&gt; : 210 MB         Boot OS X (disk0s3) &lt;not mounted&gt; : 134 MB         Macintosh HD (disk2) /  [Startup]: 2.90 TB (2.10 TB free)            Core Storage: disk0s2 120.99 GB Online            Core Storage: disk1s2 1.99 TB Online            Core Storage: disk1s5 801.44 GB OnlineUSB Information: ⓘ    Apple Inc. FaceTime HD Camera (Built-in)     Apple Inc. BRCM20702 Hub         Apple Inc. Bluetooth USB Host Controller     Apple, Inc. Keyboard Hub         Logitech USB Optical Mouse         Apple Inc. Apple Keyboard     LaCie d2 quadra (button)     HP Deskjet 3070 B611 series Thunderbolt Information: ⓘ    Apple Inc. thunderbolt_busConfiguration files: ⓘ    /etc/hosts - Count: 1Gatekeeper: ⓘ    Mac App Store and identified developersKernel Extensions: ⓘ        /Library/Application Support/VirtualBox    [not loaded]    org.virtualbox.kext.VBoxDrv (4.3.6 - 2014-12-12) [Lookup]    [not loaded]    org.virtualbox.kext.VBoxNetAdp (4.3.6 - 2014-12-12) [Lookup]    [not loaded]    org.virtualbox.kext.VBoxNetFlt (4.3.6 - 2014-12-12) [Lookup]    [not loaded]    org.virtualbox.kext.VBoxUSB (4.3.6 - 2014-12-12) [Lookup]        /Library/Extensions    [loaded]    com.kaspersky.kext.klif (3.4.4a33 - 2017-05-01) [Lookup]    [loaded]    com.kaspersky.nke (2.1.0 - 2017-05-01) [Lookup]        /System/Library/Extensions    [not loaded]    com.Cycling74.driver.Soundflower (1.2.1 - 2017-04-24) [Lookup]    [not loaded]    com.ZTE.driver.ZTEUSBCDCACMData (ZTEDriver_MacV1.3.8 - 2017-04-24) [Lookup]    [not loaded]    com.ZTE.driver.ZTEUSBMassStorageFilter (ZTEDriver_MacV1.3.8 - 2017-04-24) [Lookup]    [not loaded]    com.tomtom.driver.UsbEthernetGadget (1.0.0d1 - 2017-04-24) [Lookup]System Launch Agents: ⓘ    [not loaded]    7 Apple tasks    [loaded]    176 Apple tasks    [running]    99 Apple tasksSystem Launch Daemons: ⓘ    [not loaded]    42 Apple tasks    [loaded]    174 Apple tasks    [running]    103 Apple tasksLaunch Agents: ⓘ    [running]    com.citrix.AuthManager_Mac.plist (2014-12-12) [Lookup]    [running]    com.citrix.ReceiverHelper.plist (2014-12-12) [Lookup]    [running]    com.citrix.ServiceRecords.plist (2014-12-12) [Lookup]    [loaded]    com.google.keystone.agent.plist ✔︎  (2017-03-29) [Lookup]    [loaded]    com.oracle.java.Java-Updater.plist (2016-09-10) [Lookup]    [not loaded]    com.teamviewer.teamviewer.plist ✔︎  (2016-10-29) [Lookup]    [not loaded]    com.teamviewer.teamviewer_desktop.plist ✔︎  (2016-09-19) [Lookup]    [loaded]    de.devolo.networkservice.notify.plist ✔︎  (2016-12-28) [Lookup]Launch Daemons: ⓘ    [not loaded]    at.mquadr.M2DashboardHelper.plist (2010-09-15) [Lookup]    [loaded]    com.adobe.fpsaud.plist (2017-04-17) [Lookup]    [loaded]    com.google.keystone.daemon.plist ✔︎  (2017-04-18) [Lookup]    [loaded]    com.malwarebytes.HelperTool.plist ✔︎  (2017-04-23) [Lookup]    [running]    com.microsoft.autoupdate.helper.plist ✔︎  (2016-12-17) [Lookup]    [loaded]    com.microsoft.office.licensingV2.helper.plist ✔︎  (2015-12-06) [Lookup]    [loaded]    com.oracle.java.Helper-Tool.plist §  (2016-06-22) [Lookup]    [loaded]    com.teamviewer.Helper.plist ✔︎  (2016-09-19) [Lookup]    [not loaded]    com.teamviewer.teamviewer_service.plist ✔︎  (2016-10-29) [Lookup]    [running]    de.devolo.networkservice.plist ✔︎  (2016-12-28) [Lookup]    [not loaded]    org.virtualbox.startup.plist §  (2014-01-19) [Lookup]User Launch Agents: ⓘ    [loaded]    com.adobe.ARM.[...].plist (2017-01-28) [Lookup]    [loaded]    com.valvesoftware.steamclean.plist (2017-05-01) [Lookup]    [not loaded]    org.virtualbox.vboxwebsrv.plist (2017-05-01) [Lookup]User Login Items: ⓘ    xGestures    Programm         (~/Library/PreferencePanes/xGestures.prefPane/Contents/Resources/xGestures.app)    AirPort-Basisstation-Agent    Programm         (/System/Library/CoreServices/AirPort Base Station Agent.app)    Google Drive    Programm         (/Applications/Google Drive.app)    TomTomHOMERunner    Programm - Hidden         (~/Library/Application Support/TomTom HOME/TomTomHOMERunner.app)    Xmarks for Safari    Programm         (/Applications/Xmarks for Safari.app)Internet Plug-ins: ⓘ    JavaAppletPlugin: Java 8 Update 101 build 13 (2017-03-20) Check version    FlashPlayer-10.6: 25.0.0.163 - SDK 10.9 (2017-04-22) [Lookup]    QuickTime Plugin: 7.7.3 (2017-04-24)    AdobePDFViewerNPAPI: 11.0.19 - SDK 10.6 (2017-01-28) [Lookup]    AdobePDFViewer: 11.0.19 - SDK 10.6 (2017-01-28) [Lookup]    Flash Player: 25.0.0.163 - SDK 10.9 (2017-04-22) [Lookup]    CitrixICAClientPlugIn: 11.8.2 - SDK 10.7 (2013-10-23) [Lookup]    Silverlight: 4.0.60531.0 (2011-10-17) [Lookup]    DirectorShockwave: 12.1.5r155 - SDK 10.6 (2014-12-11) [Lookup]    iPhotoPhotocast: 7.0 - SDK 10.7 (2012-04-01)User internet Plug-ins: ⓘ    WebEx64: 1.0 - SDK 10.6 (2014-04-25) [Lookup]3rd Party Preference Panes: ⓘ    Flash Player (2017-04-17) [Lookup]    Java (2016-09-10) [Lookup]    MacFUSE (2010-10-10) [Lookup]    xGestures (2009-11-04) [Lookup]    Xmarks for Safari (2015-05-01) [Lookup]Time Machine: ⓘ    Skip System Files: NO    Mobile backups: OFF    Auto backup: YES    Volumes being backed up:        Macintosh HD: Disk size: 2.90 TB Disk used: 800.91 GB    Destinations:        backup [Local]         Total size: 999.86 GB         Total number of backups: 36         Oldest backup: 31.08.16, 20:16         Last backup: 01.05.17, 18:45         Size of backup disk: Too small            Backup size 999.86 GB &lt; (Disk used 800.91 GB X 3)Top Processes by CPU: ⓘ       101%   com.apple.WebKit.WebContent(5)         3%   Safari         2%   WindowServer         2%   fontd         1%   kernel_taskTop Processes by Memory: ⓘ    1.47 GB   kernel_task    754 MB    com.apple.WebKit.WebContent(5)    393 MB    mds_stores    197 MB    Google Drive    197 MB    softwareupdatedVirtual Memory Information: ⓘ    26.55 GB  Available RAM    20.76 GB  Free RAM    5.45 GB   Used RAM    5.80 GB   Cached files    0 B       Swap UsedDiagnostics Information: ⓘ    2017-05-01 09:30:37    /Library/Logs/DiagnosticReports/at.mquadr.M2DashboardHelper_2017-05-01-093037_[ redacted].crash        /Library/Application Support/mquadr.at/*/at.mquadr.M2DashboardHelper        Application Specific Information:        dyld: launch, running initializers        /usr/lib/libSystem.B.dylib    2017-05-01 09:30:30    Self test - passed    2017-04-30 20:53:17    ~/Library/Logs/DiagnosticReports/Sailaway_2017-04-30-205317_[redacted].crash        unity.Orbcreation BV.Sailaway - /Users/[redacted]/Library/Application Support/Steam/*/Sailaway.app/Contents/MacOS/Sailaway        Application Specific Information:        abort() called    2017-04-30 20:50:18    ~/Library/Logs/DiagnosticReports/Sailaway_2017-04-30-205018_[redacted].crash        Application Specific Information:        abort() called    2017-04-30 20:37:50    /Library/Logs/DiagnosticReports/at.mquadr.M2DashboardHelper_2017-04-30-203750_[ redacted].crash        Application Specific Information:        dyld: launch, running initializers        /usr/lib/libSystem.B.dylib    2017-04-30 10:47:16    /Library/Logs/DiagnosticReports/at.mquadr.M2DashboardHelper_2017-04-30-104716_[ redacted].crash        Application Specific Information:        dyld: launch, running initializers        /usr/lib/libSystem.B.dylib    2017-04-30 09:31:11    /Library/Logs/DiagnosticReports/at.mquadr.M2DashboardHelper_2017-04-30-093111_[ redacted].crash        Application Specific Information:        dyld: launch, running initializers        /usr/lib/libSystem.B.dylib    2017-04-28 21:25:07    ~/Library/Logs/DiagnosticReports/Sailaway_2017-04-28-212507_[redacted].crash        Application Specific Information:        abort() called    2017-04-28 20:50:55    /Library/Logs/DiagnosticReports/at.mquadr.M2DashboardHelper_2017-04-28-205055_[ redacted].crash        Application Specific Information:        dyld: launch, running initializers        /usr/lib/libSystem.B.dylib

tygb · Answer

You wrote : Then I installed a virus scanner and performed a full scan.The anti virus could have deleted some important files , click on finder &gt; Go &gt; Computer &gt; Macintosh HD &gt; Library &gt; Caches &gt; select all contents of it and move to trash .In the user library : macOS Sierra: Library folder find folders &gt; Caches , Cookies , Saved application state , Safari select all contents and move to trash , restart and empty the trash .Manual method to search for malware is difficult you can use : http://www.etrecheck.com/As you already did and , the finest solution is take up back of all data , erase the hard drive and install the operating system .

dominic23 · Answer

1. Use  Malwarebytes Anti-Malware for Mac to remove adware/malware.     https://www.malwarebytes.org/antimalware/mac/   Download, install , open,  and run it by clicking “Scan” button   to remove adware.   Once done, quit Malwarebytes Anti-Malware.2. Disable Extensions if any and test.   Safari &gt; Preferences &gt; Extensions   Select and disable all extensions and test.      Enable Extensions one by one and test.   To uninstall any extension, select it and click the “Uninstall” button.3. Safari &gt; Preferences &gt; Search &gt; Search engine:     Select your preferred search engine.4. Reset the home page.    Visit the site you want it to be the Home page    Safari &gt; Preferences &gt; General &gt;  Homepage    Click the button “Set to Current Page” button.5.  Restart your Mac.6.  If this doesn’t help, please run EtreCheck and post the report here.      https://etrecheck.com      Click”Download EtreCheck” button, open Downloads folder, click on it to open, and then select ”Open”.       Click on the bouncing  EtreCheck icon in the Dock.      “Choose a problem” from the popup menu box, and then “Start EtreCheck” in the dialog.      Click “Share Report” button in the toolbar, select “Copy to Clipboard” .      Paste it when you reply.

Eric Root · Answer

Uninstall Kapersky. Its tends to interfere with the computer&#x27;s operation while providing minimal to no benefit.Kapersky UninstallMight be a corrupt .plist.Do a backup, preferably 2 backups on 2 separate drives.Quit the application.Go to Finder and select your user/home folder. With that Finder window as the front window, either select Finder/View/Show View options or go command - J.  When the View options opens, check ’Show Library Folder’. That should make your user library folder visible in your user/home folder.  Select Library. Then go to Preferences/com.apple.systempreferences.plist.  Move the .plist to your desktop.Restart the computer, open the application, and test. If it works okay, delete the plist from the desktop.If the application is the same, return the .plist to where you got it from, overwriting the newer one.Thanks to leonie for some information con

Gornet · Answer

Hi Eric,Thank you for your suggestion. I already had unistalled Kaspersky prior to creating the EtreCheck log. I did this using the uninstall tool. There is still this kernel extension left. I wonder how I could remove the kernel extension manually.Anyhow I will follow up with what happens after removing com.apple.systempreferences.plist.brgdsGornet

thomas_r. · Answer

Unfortunately, I see no adware or other threats installed on your system. I say unfortunately because that would be an easy fix.Many adware installers change the home page setting. On the system you&#x27;re running, though, the home page setting is stored in some magical, inaccessible keychain-related storage, rather than in the Safari preferences as used to be the case. (Ironically, this was probably done to prevent malicious software from manipulating the home page setting, but such software has found ways to continue doing it.)This means that, if your home page setting has been changed and is now stuck, I don&#x27;t know what to do to force the home page setting to reset to defaults. You should contact Apple for help with this, and will likely need to escalate your case, as I seriously doubt that any entry-level techs will have any idea how to fix this.

jhsonderb · Answer

This worked for me!  Thank you, thank you, thank you!!!  My search engine was stuck on DuckDuckGo and would not change using the Safari Search Preference Pane.  It is now back to Google.Mac OS X Sierra 10.12.6Safari 11.0.1

Eric Root · Answer

You are welcome. Go to your hard drive level Library/Extensions to manually remove the Kaspersky files.

Gornet · Answer

Dear Eric,I have moved com.apple.systempreferences.plist away but the problem persists.Thanks for your helpGornet