Safari default stuck on searchword.news

Situation:

Got the request from the mother-in-law about "strange" things on her Early 2015 MacBook Pro. I remoted in to find MacKeeper and a bunch of other malware on there. Cleaned it up. In safari she had an extension for "SafeKeeper" which I disabled. Cleared her browsing history. Installed updates. Rebooted. Note: She's running 10.10.5 Yosemite.


My last challenge is that no matter what I do, searchword.news is the default website in Safari and when that page opens, it's a SafeKeeper website:

- I hit "Set to Current Page" while in Google and nothing happens. It stays on searchword.news.

- I highlight, delete it, type something new, hit enter, and it's still searchword.news

- For now I've left her default to "Favorites" but she likes her google homepage...plus it just irritates me to no end that no matter what I do I can't get rid of searchword.news


Seems like such a simple thing to change the default homepage, I've never had one hijacked like this. Help?


Thanks.

Posted on Jun 3, 2017 12:29 PM

Reply
3 replies

Jun 3, 2017 1:11 PM in response to Chris Brestle

Might be a corrupt .plist.


Do a backup, preferably 2 backups on 2 separate drives.


Quit the application.


Go to Finder and select your user/home folder. With that Finder window as the front window, either select Finder/View/Show View options or go command - J. When the View options opens, check ’Show Library Folder’. That should make your user library folder visible in your user/home folder. Select Library. Then go to Preferences/com.apple.Safari.plist. Move the .plist to your desktop.


Restart the computer, open the application, and test. If it works okay, delete the plist from the desktop.


If the application is the same, return the .plist to where you got it from, overwriting the newer one.


Thanks to leonie for some information contained in this.


If that doesn't work, try running this program in her normal account, then copy and paste the output in a reply. The program was created by etresoft, a frequent contributor. Please use copy and paste as screen shots can be hard to read. On the screen with Options, please open Options and check the bottom 2 boxes before running. Click “Share Report” button in the toolbar, select “Copy Report” and then paste into a reply. This will show what is running on your computer. No personal information is shown.

Etrecheck – System Information

Jun 4, 2017 4:15 AM in response to Chris Brestle

1. Use Malwarebytes Anti-Malware for Mac to remove adware/malware.


https://www.malwarebytes.org/antimalware/mac/


Download, install , open, and run it by clicking “Scan” button to remove adware.

Once done, quit Malwarebytes Anti-Malware.


2. Safari > Preferences > Extensions

If you find “Viewfinder” extension, select and uninstall it.


3. Safari > Preferences > Search > Search engine:

Select your preferred search engine.


4. Visit the site you want it to be the Home page

Safari > Preferences > General > Homepage

Click the button “Set to Current Page” button.


5. Restart your Mac.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Safari default stuck on searchword.news

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.