How do I remove SafariExtInstall pop-up?

I have a solution that worked for me on this same exact issue.

I called AppleCare and they were able to give me these instructions:

Verify that your FireWall is on:

System Preferences -> Security & Privacy -> Firewall -> Turn On

Next they had me look at my login items, and remove any that I did not know. (Mine were CleanMyMac 3)

System Preferences -> Users & Groups -> Login Items -> Remove any that you do not need or know.

Next go to your Shared folder and remove the SafariExtInstall files:

Finder -> Go (Tab) -> Computer -> HD -> Users -> Shared -> Remove all unknown files/folders.

Hopefully this solves the issue like it did for me.

Getting exactly the same issue. It is clearly Apple Script malicious code. I think it was temporarily listed as an unidentified login item.

OSX fully security patched (which included a Safari update) but still got the glitch.

Apple+Tab application switch and you can kill it. However I haven't yet worked out how to find it and remove it.

It shows up in Console trying to call for window size changes but does get blocked.

Running Sophos on this Mac and it has not flagged it. Concerned to know how it has got on there in the first place!!

OK< SORTED>

Navigate your way to /Users/your-username/Library/LaunchAgents and then delete the SafariExtInstall.plist file you should find within. Job's a Goodun!

If you're not comfortable with getting dirty under the bonnet then you may need to ask a Geek to help you 🙂

I looked in that folder and it wasn't in there. But Apple told me to go to Finder -> Applications -> Search "SafariExtInstall" and when I did, there were 20 files in there and I deleted them all. But it still pops up...

I've been having the same problem for about two weeks. Here's what worked for me:

I stumbled upon this article http://applehelpwriter.com/2017/07/23/terminal-tricks-for-defeating-adware/ and while it was informative, I'm not super tech-savvy so I didn't understand half of it. However, at the very end, he offers a program called DetectX Swift Beta (https://sqwarq.com/detectx/detectx-swift-beta/). Sure enough, after downloading and running the program, there were multiple files in various locations under the Macintosh HD/Library system files. After I got those deleted/quarantined, I rebooted and all was well.

I also suggest checking under Macintosh HD/Users/Shared folder -- I found that each restart spawned 3 new install files from the malaware.

Hope this helps you!

tried all of the above, only detectX found and solved this issue, all the other ones including malware bytes dont even register TapuFind, ugly piece of hijack, annoying most of the time , Detect is genuine and free, it worx!!

I figured it out! I had the exact same problem! ok so follow daytime87's steps, which are,

Verify that your FireWall is on:

System Preferences -> Security & Privacy -> Firewall -> Turn On

Next they had me look at my login items, and remove any that I did not know. (Mine were CleanMyMac 3)

System Preferences -> Users & Groups -> Login Items -> Remove any that you do not need or know.

Next go to your Shared folder and remove the SafariExtInstall files:

Finder -> Go (Tab) -> Computer -> HD -> Users -> Shared -> Remove all unknown files/folders.

BUT then, this is VERY important, once you get to the shared folder there should be something labeled this: SafariSetter.safariextz. This is the virus! Throw it in the trash and your problems will be solved my friend! 🙂

Good luck!

I figured it out! I had the exact same problem! ok so follow daytime87's steps, which are,

Verify that your FireWall is on:

System Preferences -> Security & Privacy -> Firewall -> Turn On

Next they had me look at my login items, and remove any that I did not know. (Mine were CleanMyMac 3)

System Preferences -> Users & Groups -> Login Items -> Remove any that you do not need or know.

Next go to your Shared folder and remove the SafariExtInstall files:

Finder -> Go (Tab) -> Computer -> HD -> Users -> Shared -> Remove all unknown files/folders.

BUT then, this is VERY important, once you get to the shared folder there should be something labeled this: SafariSetter.safariextz. This is the virus! Throw it in the trash and your problems will be solved my friend! 🙂

Good luck!

Hii

I just want to say that every time my Mac gets pop ups in every 10-30 seconds. Whenever I open the safari window it suddenly start the pop ups. Which is so irritating.

Can u help me out with this?

I followed all the suggested steps but it keeps on coming back. 😟

Stop pop-up ads in Safari - Apple Support

Install and manage Safari extensions on your Mac - Apple Support

Hi. I'm getting the same pop-up coming from SafeFind external extension. It's a new Mac OS Sierra vulnerability, probabily.

/

This worked for a moment but it came back. I did end up clearing all my cookies [Preferences > Privacy > Allow from websites I visit] and that seemed to work for me.

I've tried all the steps in this thread and nothing is working for me... I don't know how this has got onto my computer as I haven't downloaded anything today and it's suddenly shown up?