Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Question:

Question: Safari and Firefox don't allow google anymore

Hi, I've got a problem with my search engine in Safari (same with firefox). Even though the search engine preference is set to Google, I can't access it anymore (only by force and via 4 or 5 steps).
Instead I end up on a page that begins with http://search.anysearchmac.com/

Any advice on how to get back to google would be appreciated.

cheers Julica

MacBook Pro, Mac OS X (10.5.8)

Posted on

Reply
Question marked as Solved
Answer:
Answer:

Your machine is in pretty good condition. With the red ink, click on each line. There should be a message that tells you what to do or where to go to remove it. The switchtool line has been removed according to the note on the bottom of the report, so ignore that.


You should remove Teamviewer app. It is a known source of problems.


Otherwise, you are probably quite slow because you have too little memory but you cant do much about that as your machine cannot be upgraded.


When you are satisfied, do another etrecheck to confirm but don't publish it in full unless there are further problems. It crams up the thread.

Posted on

Question marked as Helpful

Nov 12, 2017 12:59 AM in response to seventy one In response to seventy one

EtreCheck version: 3.4.6 (460)

Report generated 2017-11-12 19:08:51

Download EtreCheck from https://etrecheck.com

Runtime: 1:53

Performance: Excellent


Click the [Lookup] links for more information from Apple Support Communities.

Click the [Details] links for more information about that line.

Click the [Remove/Report] links to remove adware or update the whitelist of legitimate software.

Click the [Clean up] link to delete unused files.


Problem: Other problem

Description:

unwanted any search malware


Hardware Information:

MacBook Air (13-inch, Mid 2013)

[Technical Specifications] - [User Guide] - [Warranty & Service]

MacBook Air - model: MacBookAir6,2

1 1.3 GHz Intel Core i5 (i5-4250U) CPU: 2-core

4 GB RAM Not upgradeable

BANK 0/DIMM0

2 GB DDR3 1600 MHz ok

BANK 1/DIMM0

2 GB DDR3 1600 MHz ok

Handoff/Airdrop2: supported

Wireless: en0: 802.11 a/b/g/n/ac

Battery: Health = Normal - Cycle count = 500


Video Information:

Intel HD Graphics 5000 - VRAM: 1536 MB

Color LCD 1440 x 900


Disk Information:

APPLE SSD SD0256F disk0: (251 GB) (Solid State - TRIM: Yes)

[Show SMART report]

(disk0s1) <not mounted> [EFI]: 210 MB

Macintosh HD (disk0s2 - Journaled HFS+) / [Startup]: 250.14 GB (2.74 GB free) (Low!)

(disk0s3) <not mounted> [Recovery]: 650 MB


USB Information:

XHCI Root Hub SS Simulation

Apple Internal Memory Card Reader

XHCI Root Hub USB 2.0 Simulation

Apple Inc. BRCM20702 Hub

Apple Inc. Bluetooth USB Host Controller


Thunderbolt Information:

Apple Inc. thunderbolt_bus


System Software:

OS X Mavericks 10.9.5 (13F1911) - Time since boot: less than an hour


Configuration files:

/etc/hosts - Count: 2


Gatekeeper:

Mac App Store and identified developers


Possible adware:

Unknown file: ~/Library/LaunchAgents/com.QuickLookSearches.plist

~/Library/Application Support/com.QuickLookSearches/QuickLookSearches r

One possible adware file found. [Remove/Report]


Clean up:

/Library/LaunchAgents/com.sierrawireless.SwitchTool.plist

/Library/Sierra/SierraDevSupport

Executable not found!

One orphan file found. [Clean up]


Kernel Extensions:

/Library/Application Support/Citrix Receiver

[not loaded] com.citrix.kext.gusb (12.3.0 - SDK 10.9) [Lookup]


/System/Library/Extensions

[not loaded] com.zte.LTEdriver.cdc_ecm_qmi (1.0.2) [Lookup]

[not loaded] com.zte.LTEdriver.cdc_usb_bus (1.0.2) [Lookup]


Startup Items:

HW_CreateNetwork: Path: /Library/StartupItems/HW_CreateNetwork

HWPortDetect_driver: Path: /Library/StartupItems/HWPortDetect_driver

MobileBrServ: Path: /Library/StartupItems/MobileBrServ

Startup items no longer function in OS X Yosemite or later


System Launch Agents:

[not loaded] 6 Apple tasks

[loaded] 145 Apple tasks

[running] 33 Apple tasks


System Launch Daemons:

[not loaded] 48 Apple tasks

[loaded] 139 Apple tasks

[running] 62 Apple tasks


Launch Agents:

[running] com.brother.LOGINserver.plist (? a1772de2 41ad4933 - installed 2016-01-05) [Lookup]

[loaded] com.citrix.AuthManager_Mac.plist (? 1ce99fae d10bd3ad - installed 2016-09-22) [Lookup]

[running] com.citrix.ReceiverHelper.plist (? bbfad3f1 2bd77827 - installed 2016-09-22) [Lookup]

[running] com.citrix.ServiceRecords.plist (? 8e6543d 27768e09 - installed 2016-09-22) [Lookup]

[loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2017-09-28) [Lookup]

[failed] com.sierrawireless.SwitchTool.plist (? f4fe8c02 0 - installed 2010-09-08) [Lookup] - /Library/Sierra/SierraDevSupport: Executable not found!

[running] com.teamviewer.teamviewer.plist (TeamViewer GmbH - installed 2017-11-12) [Lookup]

[running] com.teamviewer.teamviewer_desktop.plist (TeamViewer GmbH - installed 2017-11-12) [Lookup]


Launch Daemons:

[loaded] com.adobe.fpsaud.plist (? 2afb3af7 564efddb - installed 2017-10-21) [Lookup]

[loaded] com.citrix.ctxusbd.plist (? 44dc9c9f f0a679bb - installed 2016-09-16) [Lookup]

[loaded] com.google.keystone.daemon.plist (Google, Inc. - installed 2017-10-13) [Lookup]

[loaded] com.skype.skypeinstaller.plist (Skype - installed 2014-06-06) [Lookup]

[loaded] com.teamviewer.Helper.plist (TeamViewer GmbH - installed 2017-02-03) [Lookup]

[running] com.teamviewer.teamviewer_service.plist (TeamViewer GmbH - installed 2017-11-12) [Lookup]

[running] net.openvpn.client.plist (? b47026bc 9810b24 - installed 2016-12-09) [Lookup]


User Launch Agents:

[loaded] com.QuickLookSearches.plist (? b7fe674b 2b2636ba - installed 2017-11-04) [Lookup]

[running] com.spotify.webhelper.plist (? ebbbb7f0 7d8bb87b - installed 2017-09-10) [Lookup]


User Login Items:

iTunesHelper Application (Apple, Inc. - installed 2017-08-06)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

OpenVPN Connect Application

(/Applications/OpenVPN/OpenVPN Connect.app)


Internet Plug-ins:

FlashPlayer-10.6: 27.0.0.183 (installed 2017-10-26) [Lookup]

QuickTime Plugin: 7.7.3 (installed 2016-08-01)

Flash Player: 27.0.0.183 (installed 2017-10-26) [Lookup]

Default Browser: 537 (installed 2014-10-01)

NP_2020Player_IKEA: 5.0.94.1 (installed 2012-09-28) [Lookup]

o1dbrowserplugin: 5.41.3.0 (installed 2015-12-15) [Lookup]

CitrixICAClientPlugIn: 12.3.0 (installed 2016-09-22) [Lookup]

Google Earth Web Plug-in: 7.1 (installed 2015-08-24) [Lookup]

googletalkbrowserplugin: 5.41.3.0 (installed 2015-12-12) [Lookup]


3rd Party Preference Panes:

Flash Player (installed 2017-10-21) [Lookup]

Paragon NTFS for Mac ® OS X (installed 2015-06-10) [Lookup]


Time Machine:

Mobile backups: ON

Auto backup: YES

Volumes being backed up:

Macintosh HD: Disk size: 250.14 GB Disk used: 247.40 GB

Destinations:

My Passport [Local]

Total size: 999.83 GB

Total number of backups: 102

Oldest backup: 3/10/2014 1:14 am

Last backup: 3/11/2017 9:59 am

Size of backup disk: Excellent

Backup size 999.83 GB > (Disk size 250.14 GB X 3)


Top Processes by CPU:

3% WindowServer

1% fontd

1% kernel_task

0% mbbservice

0% TeamViewer_Desktop


Top Processes by Memory:

449 MB kernel_task

250 MB com.apple.WebKit.WebContent

241 MB com.apple.WebKit.WebContent

222 MB firefox

139 MB com.apple.WebKit.WebContent


Top Processes by Energy Use:

4.36 WindowServer

0.62 TeamViewer_Desktop

0.28 mbbservice

0.20 configd


Virtual Memory Information:

1.40 GB Available RAM

29 MB Free RAM

2.60 GB Used RAM

1.37 GB Cached files

0 B Swap Used


Software installs (last 30 days):

Adobe Flash Player: (installed 2017-10-19)

Adobe Flash Player: (installed 2017-10-26)


Install information may not be complete.



Files deleted by EtreCheck:

2017-11-12 19:01:05 - ~/Library/LaunchAgents/com.pcv.hlpramcn.plist - Unknown

2017-11-12 19:01:05 - ~/Library/Safari/Extensions/A3F0A9A4B5804982BC0F9683F7B73A2C.safariextz - Unknown

2017-11-12 19:02:09 - /Library/LaunchAgents/com.sierrawireless.SwitchTool.plist - Unknown

2017-11-12 19:03:00 - ~/Library/Safari/Extensions/A3F0A9A4B5804982BC0F9683F7B73A2C.safariextz - Unknown

There’s more to the conversation

Read all replies

Page content loaded

Nov 11, 2017 11:18 PM in response to seventy one In response to seventy one

thanks for your quick reply,
but malware doesn't work on my system (10.9.5)

(it says: This installation requires macOS Yosemite (10.10), El Capitan (10.11), Sierra (10.12) or High Sierra (10.13).)

Have you got another idea?

julica

Nov 11, 2017 11:18 PM

Reply Helpful

Nov 11, 2017 11:25 PM in response to julica In response to julica

I anticipated you may have a higher OS because your profile says 10.5.8. Please update your profile.


I'm not sure if etrecheck will help. https://etrecheck.com/


One thing you must not try is Advanced mac cleaner. You will load yourself with considerable unwanted material from that app.

Nov 11, 2017 11:25 PM

Reply Helpful

Nov 11, 2017 11:50 PM in response to seventy one In response to seventy one

this mac cleaner popped up (unwanted!) the other day when I logged in at a friends place. I tried to stop it immediately but probably too late...
I did the etrecheck and it found several adwares. would it be best if I just remove them all?

ps:

(I updated my profile, thanks for the hint)

Nov 11, 2017 11:50 PM

Reply Helpful

Nov 11, 2017 11:56 PM in response to julica In response to julica

Yes. You may have picked up the anysearch malware from Mac cleaner. Follow the instructions from Etre check. Remove all red ink entries. If you get stuck, publish the etrecheck report and I will have a look at it. It reveals nothing private.

Nov 11, 2017 11:56 PM

Reply Helpful

Nov 12, 2017 12:14 AM in response to julica In response to julica

i've deleted most - only when I get to this one it wants my admin password

/Library/LaunchAgents/com.sierrawireless.SwithTool.plist
I enter my password and it doesn't accept it....

phhh

Nov 12, 2017 12:14 AM

Reply Helpful
Question marked as Helpful

Nov 12, 2017 12:59 AM in response to seventy one In response to seventy one

EtreCheck version: 3.4.6 (460)

Report generated 2017-11-12 19:08:51

Download EtreCheck from https://etrecheck.com

Runtime: 1:53

Performance: Excellent


Click the [Lookup] links for more information from Apple Support Communities.

Click the [Details] links for more information about that line.

Click the [Remove/Report] links to remove adware or update the whitelist of legitimate software.

Click the [Clean up] link to delete unused files.


Problem: Other problem

Description:

unwanted any search malware


Hardware Information:

MacBook Air (13-inch, Mid 2013)

[Technical Specifications] - [User Guide] - [Warranty & Service]

MacBook Air - model: MacBookAir6,2

1 1.3 GHz Intel Core i5 (i5-4250U) CPU: 2-core

4 GB RAM Not upgradeable

BANK 0/DIMM0

2 GB DDR3 1600 MHz ok

BANK 1/DIMM0

2 GB DDR3 1600 MHz ok

Handoff/Airdrop2: supported

Wireless: en0: 802.11 a/b/g/n/ac

Battery: Health = Normal - Cycle count = 500


Video Information:

Intel HD Graphics 5000 - VRAM: 1536 MB

Color LCD 1440 x 900


Disk Information:

APPLE SSD SD0256F disk0: (251 GB) (Solid State - TRIM: Yes)

[Show SMART report]

(disk0s1) <not mounted> [EFI]: 210 MB

Macintosh HD (disk0s2 - Journaled HFS+) / [Startup]: 250.14 GB (2.74 GB free) (Low!)

(disk0s3) <not mounted> [Recovery]: 650 MB


USB Information:

XHCI Root Hub SS Simulation

Apple Internal Memory Card Reader

XHCI Root Hub USB 2.0 Simulation

Apple Inc. BRCM20702 Hub

Apple Inc. Bluetooth USB Host Controller


Thunderbolt Information:

Apple Inc. thunderbolt_bus


System Software:

OS X Mavericks 10.9.5 (13F1911) - Time since boot: less than an hour


Configuration files:

/etc/hosts - Count: 2


Gatekeeper:

Mac App Store and identified developers


Possible adware:

Unknown file: ~/Library/LaunchAgents/com.QuickLookSearches.plist

~/Library/Application Support/com.QuickLookSearches/QuickLookSearches r

One possible adware file found. [Remove/Report]


Clean up:

/Library/LaunchAgents/com.sierrawireless.SwitchTool.plist

/Library/Sierra/SierraDevSupport

Executable not found!

One orphan file found. [Clean up]


Kernel Extensions:

/Library/Application Support/Citrix Receiver

[not loaded] com.citrix.kext.gusb (12.3.0 - SDK 10.9) [Lookup]


/System/Library/Extensions

[not loaded] com.zte.LTEdriver.cdc_ecm_qmi (1.0.2) [Lookup]

[not loaded] com.zte.LTEdriver.cdc_usb_bus (1.0.2) [Lookup]


Startup Items:

HW_CreateNetwork: Path: /Library/StartupItems/HW_CreateNetwork

HWPortDetect_driver: Path: /Library/StartupItems/HWPortDetect_driver

MobileBrServ: Path: /Library/StartupItems/MobileBrServ

Startup items no longer function in OS X Yosemite or later


System Launch Agents:

[not loaded] 6 Apple tasks

[loaded] 145 Apple tasks

[running] 33 Apple tasks


System Launch Daemons:

[not loaded] 48 Apple tasks

[loaded] 139 Apple tasks

[running] 62 Apple tasks


Launch Agents:

[running] com.brother.LOGINserver.plist (? a1772de2 41ad4933 - installed 2016-01-05) [Lookup]

[loaded] com.citrix.AuthManager_Mac.plist (? 1ce99fae d10bd3ad - installed 2016-09-22) [Lookup]

[running] com.citrix.ReceiverHelper.plist (? bbfad3f1 2bd77827 - installed 2016-09-22) [Lookup]

[running] com.citrix.ServiceRecords.plist (? 8e6543d 27768e09 - installed 2016-09-22) [Lookup]

[loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2017-09-28) [Lookup]

[failed] com.sierrawireless.SwitchTool.plist (? f4fe8c02 0 - installed 2010-09-08) [Lookup] - /Library/Sierra/SierraDevSupport: Executable not found!

[running] com.teamviewer.teamviewer.plist (TeamViewer GmbH - installed 2017-11-12) [Lookup]

[running] com.teamviewer.teamviewer_desktop.plist (TeamViewer GmbH - installed 2017-11-12) [Lookup]


Launch Daemons:

[loaded] com.adobe.fpsaud.plist (? 2afb3af7 564efddb - installed 2017-10-21) [Lookup]

[loaded] com.citrix.ctxusbd.plist (? 44dc9c9f f0a679bb - installed 2016-09-16) [Lookup]

[loaded] com.google.keystone.daemon.plist (Google, Inc. - installed 2017-10-13) [Lookup]

[loaded] com.skype.skypeinstaller.plist (Skype - installed 2014-06-06) [Lookup]

[loaded] com.teamviewer.Helper.plist (TeamViewer GmbH - installed 2017-02-03) [Lookup]

[running] com.teamviewer.teamviewer_service.plist (TeamViewer GmbH - installed 2017-11-12) [Lookup]

[running] net.openvpn.client.plist (? b47026bc 9810b24 - installed 2016-12-09) [Lookup]


User Launch Agents:

[loaded] com.QuickLookSearches.plist (? b7fe674b 2b2636ba - installed 2017-11-04) [Lookup]

[running] com.spotify.webhelper.plist (? ebbbb7f0 7d8bb87b - installed 2017-09-10) [Lookup]


User Login Items:

iTunesHelper Application (Apple, Inc. - installed 2017-08-06)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

OpenVPN Connect Application

(/Applications/OpenVPN/OpenVPN Connect.app)


Internet Plug-ins:

FlashPlayer-10.6: 27.0.0.183 (installed 2017-10-26) [Lookup]

QuickTime Plugin: 7.7.3 (installed 2016-08-01)

Flash Player: 27.0.0.183 (installed 2017-10-26) [Lookup]

Default Browser: 537 (installed 2014-10-01)

NP_2020Player_IKEA: 5.0.94.1 (installed 2012-09-28) [Lookup]

o1dbrowserplugin: 5.41.3.0 (installed 2015-12-15) [Lookup]

CitrixICAClientPlugIn: 12.3.0 (installed 2016-09-22) [Lookup]

Google Earth Web Plug-in: 7.1 (installed 2015-08-24) [Lookup]

googletalkbrowserplugin: 5.41.3.0 (installed 2015-12-12) [Lookup]


3rd Party Preference Panes:

Flash Player (installed 2017-10-21) [Lookup]

Paragon NTFS for Mac ® OS X (installed 2015-06-10) [Lookup]


Time Machine:

Mobile backups: ON

Auto backup: YES

Volumes being backed up:

Macintosh HD: Disk size: 250.14 GB Disk used: 247.40 GB

Destinations:

My Passport [Local]

Total size: 999.83 GB

Total number of backups: 102

Oldest backup: 3/10/2014 1:14 am

Last backup: 3/11/2017 9:59 am

Size of backup disk: Excellent

Backup size 999.83 GB > (Disk size 250.14 GB X 3)


Top Processes by CPU:

3% WindowServer

1% fontd

1% kernel_task

0% mbbservice

0% TeamViewer_Desktop


Top Processes by Memory:

449 MB kernel_task

250 MB com.apple.WebKit.WebContent

241 MB com.apple.WebKit.WebContent

222 MB firefox

139 MB com.apple.WebKit.WebContent


Top Processes by Energy Use:

4.36 WindowServer

0.62 TeamViewer_Desktop

0.28 mbbservice

0.20 configd


Virtual Memory Information:

1.40 GB Available RAM

29 MB Free RAM

2.60 GB Used RAM

1.37 GB Cached files

0 B Swap Used


Software installs (last 30 days):

Adobe Flash Player: (installed 2017-10-19)

Adobe Flash Player: (installed 2017-10-26)


Install information may not be complete.



Files deleted by EtreCheck:

2017-11-12 19:01:05 - ~/Library/LaunchAgents/com.pcv.hlpramcn.plist - Unknown

2017-11-12 19:01:05 - ~/Library/Safari/Extensions/A3F0A9A4B5804982BC0F9683F7B73A2C.safariextz - Unknown

2017-11-12 19:02:09 - /Library/LaunchAgents/com.sierrawireless.SwitchTool.plist - Unknown

2017-11-12 19:03:00 - ~/Library/Safari/Extensions/A3F0A9A4B5804982BC0F9683F7B73A2C.safariextz - Unknown

Nov 12, 2017 12:59 AM

Reply Helpful (1)
Question marked as Solved

Nov 12, 2017 12:59 AM in response to julica In response to julica

Your machine is in pretty good condition. With the red ink, click on each line. There should be a message that tells you what to do or where to go to remove it. The switchtool line has been removed according to the note on the bottom of the report, so ignore that.


You should remove Teamviewer app. It is a known source of problems.


Otherwise, you are probably quite slow because you have too little memory but you cant do much about that as your machine cannot be upgraded.


When you are satisfied, do another etrecheck to confirm but don't publish it in full unless there are further problems. It crams up the thread.

Nov 12, 2017 12:59 AM

Reply Helpful (1)
User profile for user: julica

Question: Safari and Firefox don't allow google anymore