Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Remove "Any Search Manager" from Mac

Hello,


I updated my Flash Player from a website three days ago and have what I believe is malware on my Mac now. When I open Safari, Chrome, or Firefox, the search that comes up is now anysearchmanager.com. For a couple of seconds while it is loading, I can see something else which is akamaihd.net. How can I remove this? I have downloaded Kaspersky security, Malwarebytes, and Etrecheck but nothing is working. Thank you for any help!

[Re-Titled by Host]

iMac, OS X Yosemite (10.10.4)

Posted on Nov 21, 2017 10:37 AM

Reply
48 replies

Jul 14, 2018 8:55 PM in response to alyssabeach

same happened to me. I clicked on an adobe update but it wasnt from the adobe website I found out later. It installed a bunch of apps on my computer and I was able to get rid of them all but the **** any search manager extension keeps coming back! ugh. It installed on chrome AND safari. and set the homepage to anysearch manager. it is a malware I believe.

Nov 22, 2017 4:16 PM in response to Eric Root

I am getting closer to fixing the problem. I have been all over the files of my Mac deleting things. Whatever I downloaded did attach extensions to all of the search engines I use. I think I have resolved that. I uninstalled Kapersky and tried to uninstall the Mac Cleaner. It said it was successful but I still see something on the Etrecheck so I'm not sure what to do now. Also, can someone tell me if the user internet plug ins listed are okay? I don't know what they are. Thank you so much for helping! Total rookie here.


EtreCheck version: 3.4.6 (460)

Report generated 2017-11-22 15:52:14

Download EtreCheck from https://etrecheck.com

Runtime: 3:15

Performance: Good


Click the [Lookup] links for more information from Apple Support Communities.

Click the [Details] links for more information about that line.


Problem: Other problem


Hardware Information:

iMac (27-inch, Mid 2011)

[Technical Specifications] - [User Guide] - [Warranty & Service]

iMac - model: iMac12,2

1 2.7 GHz Intel Core i5 (i5-2500S) CPU: 4-core

16 GB RAM Upgradeable - [Instructions]

BANK 0/DIMM0

8 GB DDR3 1333 MHz ok

BANK 1/DIMM0

8 GB DDR3 1333 MHz ok

BANK 0/DIMM1

Empty

BANK 1/DIMM1

Empty

Handoff/Airdrop2: not supported

Wireless: en1: 802.11 a/b/g/n

iCloud Quota: 72.42 GB available


Video Information:

AMD Radeon HD 6770M - VRAM: 512 MB

iMac 2560 x 1440


Disk Information:

WDC WD1001FALS-403AA0 disk0: (1 TB) (Rotational)

[Show SMART report]

EFI (disk0s1 - MS-DOS FAT32) <not mounted> [EFI]: 210 MB

Macintosh HD (disk0s2 - Journaled HFS+) / [Startup]: 999.35 GB (559.29 GB free)

(disk0s3) <not mounted> [Recovery]: 650 MB


OPTIARC DVD RW AD-5680H ()


USB Information:

USB20Bus

hub_device

The Neat Company Neat ADF Scanner

Apple Computer, Inc. IR Receiver

Apple Internal Memory Card Reader

SD Card Reader disk1: (15.93 GB)

CAMERA SD (disk1s1 - MS-DOS FAT32) /Volumes/CAMERA SD : 15.93 GB (1.94 GB free)

USB20Bus

Apple Inc. FaceTime HD Camera (Built-in)

hub_device

Apple, Inc. Keyboard Hub

Apple Inc. Apple Keyboard

Apple Inc. BRCM2046 Hub

Apple Inc. Bluetooth USB Host Controller


Thunderbolt Information:

Apple Inc. thunderbolt_bus


System Software:

macOS High Sierra 10.13.1 (17B48) - Time since boot: about 2 hours


Gatekeeper:

Mac App Store and identified developers


Kernel Extensions:

/Applications/Elmedia Player.app

[not loaded] com.eltima.ElmediaPlayer.kext (1.58 - SDK 10.4) [Lookup]


/Library/Extensions

[loaded] com.malwarebytes.mbam.rtprotection (3.1 - SDK 10.12) [Lookup]


/System/Library/Extensions

[not loaded] com.FTDI.driver.FTDIUSBSerialDriver (2.2.14) [Lookup]

[not loaded] com.bodymedia.codelessAB185.kext (1.0) [Lookup]


System Launch Agents:

[not loaded] 9 Apple tasks

[loaded] 182 Apple tasks

[running] 97 Apple tasks


System Launch Daemons:

[not loaded] 36 Apple tasks

[loaded] 188 Apple tasks

[running] 106 Apple tasks


Launch Agents:

[loaded] com.carbonite.launchd.carbonitealerts.plist (? 21f61fa7 82d4604d - installed 2017-11-22) [Lookup]

[running] com.carbonite.launchd.carbonitestatus.plist (? bb5f817b d13283dd - installed 2017-10-05) [Lookup]

[loaded] com.coupons.coupond.plist (? d6de63d4 3d692c4b - installed 2015-09-14) [Lookup]

[loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2017-09-27) [Lookup]

[running] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2017-11-20) [Lookup]

[loaded] com.oracle.java.Java-Updater.plist (? 1dead8be be93c7fb - installed 2017-05-08) [Lookup]


Launch Daemons:

[not loaded] com.apple.installer.cleanupinstaller.plist (? 1963bf56 0 - installed 2017-11-19)

[running] com.carbonite.launchd.carbonitedaemon.plist (? e953575f 61b5c707 - installed 2017-10-05) [Lookup]

[running] com.eltima.ElmediaPlayer.daemon.plist (? 5fc87722 817bdf - installed 2013-01-02) [Lookup]

[loaded] com.google.keystone.daemon.plist (Google, Inc. - installed 2017-10-12) [Lookup]

[running] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2017-11-20) [Lookup]

[running] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2017-11-20) [Lookup]

[loaded] com.oracle.java.Helper-Tool.plist (Shell Script e3fefdd2 - installed 2017-03-15) [Lookup]


User Launch Agents:

[loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2017-08-10) [Lookup]

[running] com.spotify.webhelper.plist (Spotify - installed 2017-11-14) [Lookup]


User Login Items:

Dropbox Application

(/Applications/Dropbox.app)

Advanced Mac Cleaner Application

(~/.Trash/Advanced Mac Cleaner.app)

iTunesHelper Application (Apple, Inc. - installed 2017-11-01)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

Photo Stream URL SMLoginItem - Hidden (Apple, Inc. - installed 2015-03-20)

(/Applications/iPhoto.app/Contents/Library/LoginItems/PhotoStreamAgent.app)

J8RPQ294UB.com.skitch.SkitchHelper.url SMLoginItem - Hidden (Apple, Inc. - installed 2017-01-08)

(/Applications/Skitch.app/Contents/Library/LoginItems/J8RPQ294UB.com.skitch.Ski tchHelper.app)


Internet Plug-ins:

Silverlight: 5.1.10411.0 (installed 2012-06-28) [Lookup]

CouponPrinter-FireFox_v2: 5.4.0 (installed 2015-09-14) [Lookup]

QuickTime Plugin: 7.7.3 (installed 2017-10-25)

JavaAppletPlugin: Java 8 Update 131 build 11 (installed 2017-05-08) Check version


User internet Plug-ins:

CitrixOnlineWebDeploymentPlugin: 1.0.105 (installed 2013-04-25) [Lookup]

npBcsMcTcIO: Unknown (installed 2013-09-11) [Lookup]

WebEx64: 1.0 (installed 2017-03-04) [Lookup]


3rd Party Preference Panes:

Carbonite (installed 2017-10-05) [Lookup]

Flash Player (installed 2017-10-25) [Lookup]

Java (installed 2017-05-08) [Lookup]


Time Machine:

Time Machine not configured!


Top Processes by CPU:

87% CarboniteDaemon

3% WindowServer

1% mdworker

1% mdworker

1% kernel_task


Top Processes by Memory:

1.09 GB kernel_task

281 MB CarboniteDaemon

236 MB mds_stores

155 MB EPSON_WF_3640_Series

145 MB Dropbox


Top Processes by Network Use:

Input Output Process name

698 KB 137 KB mDNSResponder

175 KB 113 KB Dropbox

7 KB 19 KB apsd

10 KB 4 KB netbiosd

4 KB 6 KB usbmuxd


Top Processes by Energy Use:

66.34 CarboniteDaemon

35.18 Finder

27.18 WindowServer

7.52 sandboxd

6.72 QuickLookSatellite


Virtual Memory Information:

12.16 GB Available RAM

9.43 GB Free RAM

3.84 GB Used RAM

2.73 GB Cached files

0 B Swap Used


Software installs (last 30 days):

Adobe Flash Player: (installed 2017-10-25)

Adobe Flash Player: (installed 2017-11-14)

Adobe Acrobat Reader DC (18.009.20044): (installed 2017-11-16)

Adobe Reader XI (11.0.23): (installed 2017-11-18)

Kaspersky Internet Security: (installed 2017-11-19)

Malwarebytes for Mac: (installed 2017-11-20)

Octagon: 3.2 (installed 2017-11-22)


Install information may not be complete.


Diagnostics Events (last 3 days for minor events):

2017-11-22 13:36:43 CarboniteDaemon.app High CPU use [Open] [Details]

2017-11-21 13:11:50 Adobe Acrobat Reader DC.app Hang [Open]


Files deleted by EtreCheck:

2017-11-21 09:24:01 - com.adobe.ARM.[...].plist - Unknown

2017-11-21 09:31:16 - ~/Library/Safari/Extensions/EBFB99CAB9D2405F9D2ECD8E00C3568E.safariextz - Unknown

2017-11-21 12:31:03 - /Library/LaunchAgents/com.rim.BBAlbumArtCacher.plist - Unknown

2017-11-21 12:31:03 - /Library/LaunchAgents/com.rim.BBLaunchAgent.plist - Unknown

2017-11-21 12:31:03 - /Library/LaunchDaemons/com.rim.BBDaemon.plist - Unknown

2017-11-22 11:14:45 - /Library/LaunchDaemons/com.adobe.fpsaud.plist - Unknown

Nov 21, 2017 10:48 AM in response to alyssabeach

There are many bogus Flash player installs out there, most will install malware. Malwarebytes should remove it.

How to remove Search Manager redirect (Removal Guide)

If not contact Malwarebytes support, they're very good.

If you like, post the Etrecheck report and we can see if there are any questionable files.

Also, I'd suggest uninstalling Kaspersky, as per the developer's instructions. No anti-virus or "so-called "cleaning apps are necessary or recommended on Mac OS. They can interfere with Mac's own built-in security. At best they will use unnecessary resources, at worst bork your Mac.

Nov 21, 2017 10:55 AM in response to macjack

EtreCheck version: 3.4.6 (460)

Report generated 2017-11-21 10:21:08

Download EtreCheck from https://etrecheck.com

Runtime: 8:18

Performance: Below Average


Click the [Lookup] links for more information from Apple Support Communities.

Click the [Details] links for more information about that line.


Problem: Other problem

Description:

malware on computer after flash player upgrade


Hardware Information: ⓘ

iMac (27-inch, Mid 2011)

[Technical Specifications] - [User Guide] - [Warranty & Service]

iMac - model: iMac12,2

1 2.7 GHz Intel Core i5 (i5-2500S) CPU: 4-core

16 GB RAM Upgradeable - [Instructions]

BANK 0/DIMM0

8 GB DDR3 1333 MHz ok

BANK 1/DIMM0

8 GB DDR3 1333 MHz ok

BANK 0/DIMM1

Empty

BANK 1/DIMM1

Empty

Handoff/Airdrop2: not supported

Wireless: en1: 802.11 a/b/g/n

iCloud Quota: 72.43 GB available


Video Information: ⓘ

AMD Radeon HD 6770M - VRAM: 512 MB

iMac 2560 x 1440


Disk Information: ⓘ

WDC WD1001FALS-403AA0 disk0: (1 TB) (Rotational)

[Show SMART report]

EFI (disk0s1 - MS-DOS FAT32) <not mounted> [EFI]: 210 MB

Macintosh HD (disk0s2 - Journaled HFS+) / [Startup]: 999.35 GB (556.79 GB free)

(disk0s3) <not mounted> [Recovery]: 650 MB


OPTIARC DVD RW AD-5680H ()


USB Information: ⓘ

USB20Bus

Apple Inc. FaceTime HD Camera (Built-in)

hub_device

Apple, Inc. Keyboard Hub

Apple Inc. Apple Keyboard

Apple Inc. BRCM2046 Hub

Apple Inc. Bluetooth USB Host Controller

USB20Bus

hub_device

The Neat Company Neat ADF Scanner

Apple Computer, Inc. IR Receiver

Apple Internal Memory Card Reader


Thunderbolt Information: ⓘ

Apple Inc. thunderbolt_bus


Virtual disks: ⓘ

CAMERA SD (disk1s1 - MS-DOS FAT32) /Volumes/CAMERA SD : 15.92 GB (1.94 GB free)

Physical disk: SD Card Reader 15.92 GB (1.94 GB free)


System Software: ⓘ

macOS High Sierra 10.13.1 (17B48) - Time since boot: less than an hour


Gatekeeper: ⓘ

Mac App Store and identified developers


Kernel Extensions: ⓘ

/Library/Application Support/Kaspersky Lab/KAV/Bases/Cache

[loaded] com.kaspersky.kext.kimul (46) [Lookup]

[loaded] com.kaspersky.kext.mark.1.0.6 (1.0.6 - SDK 10.9) [Lookup]


/Library/Extensions

[loaded] com.kaspersky.kext.klif (3.5.2a8) [Lookup]

[loaded] com.kaspersky.nke (2.1.0) [Lookup]

[loaded] com.malwarebytes.mbam.rtprotection (3.1 - SDK 10.12) [Lookup]


/System/Library/Extensions

[not loaded] com.FTDI.driver.FTDIUSBSerialDriver (2.2.14) [Lookup]

[not loaded] com.bodymedia.codelessAB185.kext (1.0) [Lookup]

[not loaded] com.eltima.ElmediaPlayer.kext (1.58 - SDK 10.4) [Lookup]

[loaded] com.rim.driver.BlackBerryUSBDriverInt (0.0.74) [Lookup]

[not loaded] com.rim.driver.BlackBerryUSBDriverVSP (0.0.74) [Lookup]


System Launch Agents: ⓘ

[not loaded] 9 Apple tasks

[loaded] 182 Apple tasks

[running] 97 Apple tasks


System Launch Daemons: ⓘ

[not loaded] 36 Apple tasks

[loaded] 187 Apple tasks

[running] 107 Apple tasks


Launch Agents: ⓘ

[failed] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a 23d420d.plist (Adobe Systems, Inc. - installed 2017-01-11) [Lookup]

[loaded] com.carbonite.launchd.carbonitealerts.plist (? 21f61fa7 82d4604d - installed 2017-11-21) [Lookup]

[running] com.carbonite.launchd.carbonitestatus.plist (? bb5f817b d13283dd - installed 2017-10-05) [Lookup]

[loaded] com.coupons.coupond.plist (? d6de63d4 3d692c4b - installed 2015-09-14) [Lookup]

[loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2017-09-27) [Lookup]

[running] com.kaspersky.kav.gui.plist (? 4d5079c8 d227aa - installed 2017-11-20) [Lookup]

[running] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2017-11-20) [Lookup]

[loaded] com.oracle.java.Java-Updater.plist (? 1dead8be be93c7fb - installed 2017-05-08) [Lookup]

[running] com.rim.BBAlbumArtCacher.plist (Research in Motion Limited - installed 2012-07-17) [Lookup]

[running] com.rim.BBLaunchAgent.plist (? dcf2726d 325bafa3 - installed 2012-10-28) [Lookup]


Launch Daemons: ⓘ

[loaded] com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2017-01-11) [Lookup]

[loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2017-01-11) [Lookup]

[loaded] com.adobe.fpsaud.plist (? 2afb3af7 defea098 - installed 2017-10-25) [Lookup]

[not loaded] com.apple.installer.cleanupinstaller.plist (? 1963bf56 0 - installed 2017-11-19)

[running] com.carbonite.launchd.carbonitedaemon.plist (? e953575f 61b5c707 - installed 2017-10-05) [Lookup]

[running] com.eltima.ElmediaPlayer.daemon.plist (? 5fc87722 817bdf - installed 2013-01-02) [Lookup]

[loaded] com.google.keystone.daemon.plist (Google, Inc. - installed 2017-10-12) [Lookup]

[running] com.kaspersky.kav.plist (Kaspersky Lab UK Limited - installed 2017-06-28) [Lookup]

[running] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2017-11-20) [Lookup]

[running] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2017-11-20) [Lookup]

[loaded] com.oracle.java.Helper-Tool.plist (Shell Script e3fefdd2 - installed 2017-03-15) [Lookup]

[running] com.rim.BBDaemon.plist (? 9f895e8a b21e1422 - installed 2012-07-17) [Lookup]


User Launch Agents: ⓘ

[loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2017-08-10) [Lookup]

[running] com.spotify.webhelper.plist (Spotify - installed 2017-11-14) [Lookup]


User Login Items: ⓘ

Dropbox Application

(/Applications/Dropbox.app)

iTunesHelper Application (Apple, Inc. - installed 2017-11-01)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

Advanced Mac Cleaner Application

(~/.Trash/Advanced Mac Cleaner.app)

Photo Stream URL SMLoginItem - Hidden (Apple, Inc. - installed 2015-03-20)

(/Applications/iPhoto.app/Contents/Library/LoginItems/PhotoStreamAgent.app)

J8RPQ294UB.com.skitch.SkitchHelper.url SMLoginItem - Hidden (Apple, Inc. - installed 2017-01-08)

(/Applications/Skitch.app/Contents/Library/LoginItems/J8RPQ294UB.com.skitch.Ski tchHelper.app)


Internet Plug-ins: ⓘ

FlashPlayer-10.6: 27.0.0.187 (installed 2017-11-14) [Lookup]

QuickTime Plugin: 7.7.3 (installed 2017-10-25)

AdobePDFViewerNPAPI: 17.012.20098 (installed 2017-11-16) [Lookup]

CouponPrinter-FireFox_v2: 5.4.0 (installed 2015-09-14) [Lookup]

AdobePDFViewer: 18.009.20044 (installed 2017-11-16) [Lookup]

Flash Player: 27.0.0.187 (installed 2017-11-14) [Lookup]

Silverlight: 5.1.10411.0 (installed 2012-06-28) [Lookup]

JavaAppletPlugin: Java 8 Update 131 build 11 (installed 2017-05-08) Check version


User internet Plug-ins: ⓘ

CitrixOnlineWebDeploymentPlugin: 1.0.105 (installed 2013-04-25) [Lookup]

npBcsMcTcIO: Unknown (installed 2013-09-11) [Lookup]

WebEx64: 1.0 (installed 2017-03-04) [Lookup]


3rd Party Preference Panes: ⓘ

Carbonite (installed 2017-10-05) [Lookup]

Flash Player (installed 2017-10-25) [Lookup]

Java (installed 2017-05-08) [Lookup]


Time Machine: ⓘ

Time Machine not configured!


Top Processes by CPU: ⓘ

90% CarboniteDaemon

5% mdworker

2% kav

1% firefox

1% kernel_task


Top Processes by Memory: ⓘ

1.10 GB kernel_task

455 MB firefox

294 MB kav

281 MB CarboniteDaemon

233 MB mds_stores


Top Processes by Network Use: ⓘ

Input Output Process name

4 MB 416 KB kav

364 KB 78 KB mDNSResponder

65 KB 28 KB Dropbox

5 KB 16 KB apsd

1 KB 422 B netbiosd


Top Processes by Energy Use: ⓘ

85.48 CarboniteDaemon

8.14 sandboxd

4.52 firefox

4.14 WindowServer

3.02 kav


Virtual Memory Information: ⓘ

11.29 GB Available RAM

6.86 GB Free RAM

4.71 GB Used RAM

4.43 GB Cached files

0 B Swap Used


Software installs (last 30 days): ⓘ

Adobe Flash Player: (installed 2017-10-25)

Adobe Flash Player: (installed 2017-11-14)

Adobe Acrobat Reader DC (18.009.20044): (installed 2017-11-16)

Adobe Reader XI (11.0.23): (installed 2017-11-18)

Kaspersky Internet Security: (installed 2017-11-19)

Malwarebytes for Mac: (installed 2017-11-20)


Install information may not be complete.


Diagnostics Events (last 3 days for minor events): ⓘ

2017-11-21 09:47:23 CarboniteDaemon.app High CPU use [Open] [Details]

2017-11-21 09:43:49 Last shutdown cause: -128 - Unknown

2017-11-19 14:26:46 NeatScannersICDriver.app Crash [Open]


Files deleted by EtreCheck: ⓘ

2017-11-21 09:24:01 - com.adobe.ARM.[...].plist - Unknown

2017-11-21 09:31:16 - ~/Library/Safari/Extensions/EBFB99CAB9D2405F9D2ECD8E00C3568E.safariextz - Unknown

Feb 16, 2018 2:00 PM in response to alyssabeach

I had this same problem recently today and went on a mad hunt for an answer.

I found out how to get rid of it and it worked for me!

- Go into Safari

- At the top left, go up to Safari

- Click "Preferences" and go to "Extensions"

- There should be something along the lines of 1.0 software or something like that

- Click "Uninstall"

You may have to do this same process for each of your separate search engines, I don't know. I only use Safari.

I also suggest emptying/clearing your history on the engines and the trashcan on your device.

I hope this works as well for you as it did for me, and I hope it wasn't too late to help!

Mar 2, 2018 1:13 AM in response to brentLeigh

And did Malwarebytes remove it completely?


Unfortunately, people often don't come back, perhaps not realising that the answer they found that solved their problem needed their endorsement in order to round off the thread.


It can be very frustrating, and often leads to very long threads when people keep asking the same question in the same thread.

Mar 16, 2018 8:49 AM in response to Eric Root

The simplest way, as with previous replies to other users, is to install Malwarebytes free version. Run Malwarebytes, it should find 3 or more problem files that it will quarantine. Choose to remediate the files, problem goes away! If you don't feel happy remove Malwarebytes when you've completed the process, or keep it and it will run in background every hour and quarantine all dodgy/iffy files it finds. All you need to do is look at the quarantine, every so often and remediate all the found files you wish too. Good luck!

May 25, 2018 3:11 PM in response to alyssabeach

This worked very well you might need to click other categories to find it. It was installed on my Grandfather's computer under a different name. In one of the categories it said this app was installed the day it started having the issue. I removed permission on any search then uninstalled the app restarted safari and no more any search would highly recommend doing this.

May 27, 2018 4:18 PM in response to alyssabeach

Every couple weeks my Chrome browser shuts down. When I relaunch AnySearch virus or malware is back.


So far all I've been able to do is Reset Chrome. That fixes it temporarily until the shutdown happens again. But it's a huge pain because I have to re log in to every site.


I deleted one unrecognizable Chrome extension just now.


Anything else I can do?


I guess I'll be back here if Chrome shuts down again.


There are no extensions in Safari. Plus the big all button is set to off. I rarely use Safari if ever.

Remove "Any Search Manager" from Mac

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.