Apple Event: May 7th at 7 am PT
I downloaded malware last month and have run Malwarebytes removing infected files and extensions. My home page however is still set to www.chumsearch.com with grey highlight and cannot be changed. Does anyone know how to reset the homepage?
MacBook Air
I deleted the bad profile in System Preferences and it works! Removed the bad setting in homepage. I had already run Malwarebytes a few days ago which eliminated several files. And I have no parental control setup. I think I'm good to go. Thank you again!
I deleted the bad profile in System Preferences and it works! Removed the bad setting in homepage. I had already run Malwarebytes a few days ago which eliminated several files. And I have no parental control setup. I think I'm good to go. Thank you again!
1. Backup. Remove any Profile you have not installed knowingly.
Profiles
System Preferences > Profiles
Launch System Preferences. Do you see any profiles added to the pane at the bottom next to Accessibility?
How to remove a configuration profile? https://support.apple.com/kb/PH25680?locale=en_US
2. Run Malwarebytes for Mac to remove malware.
3. Set your Home Page. https://support.apple.com/guide/safari/set-your-homepage-ibrw1020/mac
4. Do you have Parental control setup?
Thanks, Eric, for the suggestions. I worked through all of them and still no luck in being able to change my homepage preferences. A few what you gave me I had already done yesterday in my trouble shooting, but did again. Any other ideas?
Please run EtreCheck and post the report here. This is a diagnostic test.
Click “Free Download” button, open Downloads folder, click on it to open, and then select ”Open”.
Click on the bouncing EtreCheck icon in the Dock.
“Choose a problem” from the popup menu box, and then “Start EtreCheck” in the dialog.
Click “Share Report” button in the toolbar, select “Copy to Clipboard” .
Paste it into the reply.
EtreCheck version: 4.3.1 (4D024)
Report generated: 2018-05-30 15:11:28
Download EtreCheck from https://etrecheck.com
Runtime: 4:27
Performance: Good
Problem: Other problem
Description:
Cannot set Homepage to desired site.
Major Issues:
Anything that appears on this list needs immediate attention.
Low disk space- This machine is running critically low on free hard drive space.
More than one antivirus app- This machine has multiple antivirus apps installed.
Minor Issues:
These issues do not need immediate attention but they may indicate future problems.
Configuration profiles present- This machine has configuration profiles. These are sometimes used by adware and malware.
Apps crashing- There have been numerous app crashes.
Unsigned files- There is unsigned software installed. They appear to be legitimate but should be reviewed.
32-bit Apps- This machine has 32-bits apps that may have problems in the future.
Hardware Information:
MacBook Air (13-inch, 2013 - 2014)
MacBook Air Model: MacBookAir6,2
1 1.4 GHz Intel Core i5 (i5-4260U) CPU: 2-core
8 GB RAM - Not upgradeable
BANK 0/DIMM0 - 4 GB DDR3 1600 ok
BANK 1/DIMM0 - 4 GB DDR3 1600 ok
Battery: Health = Normal - Cycle count = 327
Video Information:
Intel HD Graphics 5000 - VRAM: 1536 MB
Color LCD 1440 x 900
SyncMaster 1680 x 1050 @ 60 Hz
Drives:
disk0 - APPLE SSD SM0512F 500.28 GB (Solid State - TRIM: Yes)
Internal PCI 5.0 GT/s x2 Serial ATA
disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB
disk0s2 500.07 GB
disk1s1 - Macintosh HD (APFS) 500.07 GB (491.31 GB used)
disk1s2 - Preboot (APFS) [APFS Preboot] 500.07 GB (21 MB used)
disk1s3 - Recovery (APFS) [Recovery] 500.07 GB (518 MB used)
disk1s4 - VM (APFS) [APFS VM] 500.07 GB (3.22 GB used)
disk2 - LaCie Porsche Desktop 2.00 TB
External USB 5 Gbit/s
disk2s1 - L***e (Journaled HFS+) 1.76 TB
disk2s2 - L*********E (MS-DOS FAT32) 239.99 GB
Mounted Volumes:
disk1s1 - Macintosh HD 500.07 GB (4.84 GB free)
APFS
Mount point: /
disk1s4 - VM [APFS VM] 500.07 GB (4.84 GB free)
APFS
Mount point: /private/var/vm
disk2s1 - L***e 1.76 TB (66.32 GB free)
Journaled HFS+
Mount point: /Volumes/L***e
disk2s2 - L*********E 239.99 GB (239.69 GB free)
MS-DOS FAT32
Mount point: /Volumes/L*********E
Network:
Interface en3: Thunderbolt Ethernet
Interface fw0: Thunderbolt FireWire
Interface en0: AirPort
802.11 a/b/g/n/ac
One IPv4 address
iCloud Quota: 36.19 GB available
System Software:
macOS High Sierra 10.13.4 (17E202)
Time since boot: About 4 hours
System Load: 2.49 (1 min ago) 2.15 (5 min ago) 2.60 (15 min ago)
Configuration Profiles:
com.google.Chrome - NewTabPageLocation
com.google.Chrome - DefaultSearchProviderSearchURL
com.google.Chrome - HomepageIsNewTabPage
com.google.Chrome - HomepageLocation
com.google.Chrome - DefaultSearchProviderEnabled
Security:
| System | Status |
|---|---|
| Gatekeeper | Mac App Store and identified developers |
| System Integrity Protection | Enabled |
Unsigned Files:
Launchd: /Library/LaunchDaemons/com.bombich.ccc.plist
Executable: /Library/PrivilegedHelperTools/com.bombich.ccc
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchAgents/com.flipvideo.FlipShare.AutoRun.plist
Executable: /Library/Application Support/Flip Video/FlipShareAutoRun.app/Contents/MacOS/FlipShareAutoRun
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchAgents/com.teamviewer.teamviewer.plist
Executable: /Applications/TeamViewer 7/TeamViewer.app/Contents/MacOS/TeamViewer --agent
Details: Exact match found in the whitelist - probably OK
Launchd: ~/Library/LaunchAgents/com.charter.vgconnect.plist
Executable: /bin/sh -c $HOME/Library/NDSPCShowServer.Charter/NDSPCShowServer.Charter.bundle/Contents/R esources/launch.sh
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchDaemons/com.teamviewer.teamviewer_service.plist
Executable: /Applications/TeamViewer 7/TeamViewer.app/Contents/Resources/TeamViewer_Service
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchAgents/com.teamviewer.teamviewer_desktop.plist
Executable: /Applications/TeamViewer 7/TeamViewer.app/Contents/Resources/TeamViewer_Desktop --agent
Details: Exact match found in the whitelist - probably OK
Launchd: ~/Library/LaunchAgents/com.charter.vgconnect.uninstall.plist
Executable: /bin/sh -c /tmp/vgconnect.Charter/condUninstall.sh
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchAgents/com.divx.dms.agent.plist
Executable: /Library/Application Support/DivX/DMSLaunch.app/Contents/MacOS/DMSLaunch
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchDaemons/com.seagate.TBDecorator.plist
Executable: /Library/Application Support/Seagate/TBLoopDriveParams
Details: Exact match found in the whitelist - probably OK
Launchd: ~/Library/LaunchAgents/com.adobe.ARM.***.plist
Executable: /Applications/Adobe Reader 9/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper
Launchd: ~/Library/LaunchAgents/com.divx.agent.postinstall.plist
Executable: /Library/Internet Plug-Ins/DivXBrowserPlugin.plugin/Contents/Resources/extensions-installer install safari DivXHTML5 /Library/Internet Plug-Ins/DivXBrowserPlugin.plugin/Contents/Resources/DivXHTML5.safariextz
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist
Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchAgents/com.divx.update.agent.plist
Executable: /Library/Application Support/DivX/DivXUpdate.app/Contents/MacOS/DivXUpdate /silent
Details: Exact match found in the whitelist - probably OK
32-bit Applications:
73 32-bit apps
Kernel Extensions:
/Library/Extensions
[Loaded] MB_MBAM_Protection.kext (Malwarebytes Corporation, 3.3 - SDK 10.13)
[Not Loaded] Seagate Storage Driver.kext (Seagate Technologies LLC, 5.2.7 (26995) - SDK 10.4)
/Library/Extensions/Seagate Storage Driver.kext/Contents/PlugIns
[Not Loaded] SeagateLeafPowSecDriver_10_4.kext (Seagate Technologies LLC, 5.2.7 (26995) - SDK 10.4)
[Not Loaded] SeagateLeafPowSecDriver_10_5.kext (Seagate Technologies LLC, 5.2.7 (26995) - SDK 10.5)
[Not Loaded] SeagateDriveIcons.kext (Seagate Technologies LLC, 5.2.7 (26995) - SDK 10.4)
/System/Library/Extensions
[Not Loaded] LogitechHIDDevices.kext (3.6.0 - SDK 10.6)
[Not Loaded] LogitechUnifying.kext (1.2.0 - SDK 10.6)
[Not Loaded] TurboUSBHDD.kext (1.0.0)
[Not Loaded] osx-pl2303.kext (1.0.0d1)
System Launch Agents:
| [Not Loaded] | 8 Apple tasks |
| [Loaded] | 154 Apple tasks |
| [Running] | 65 Apple tasks |
| [Killed] | 65 Apple tasks |
| [Other] | One Apple task |
System Launch Daemons:
| [Not Loaded] | 36 Apple tasks |
| [Loaded] | 181 Apple tasks |
| [Running] | 73 Apple tasks |
| [Killed] | 45 Apple tasks |
Launch Agents:
| [Not Loaded] | com.teamviewer.teamviewer_desktop.plist (? 96c13d63 - installed 2012-03-23) |
| [Loaded] | com.divx.dms.agent.plist (? 90291e60 - installed 2012-12-06) |
| [Not Loaded] | com.teamviewer.teamviewer.plist (? 61cccd6f - installed 2012-03-23) |
| [Loaded] | com.divx.update.agent.plist (? 4a2d5ecc - installed 2012-12-06) |
| [Running] | com.Logitech.Control Center.Daemon.plist (? 5b5e4f6b - installed 2012-05-24) |
| [Running] | com.flipvideo.FlipShare.AutoRun.plist (? d8faaaae - installed 2009-11-19) |
| [Loaded] | com.intego.backupassistant.agent.plist (? f2f62dfd - installed 2013-10-14) |
| [Loaded] | com.google.keystone.agent.plist (Google, Inc. - installed 2018-02-03) |
| [Not Loaded] | com.oracle.java.Java-Updater.plist (? 0 - installed ) |
| [Running] | com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2018-05-22) |
Launch Daemons:
| [Running] | com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2018-05-22) |
| [Not Loaded] | com.teamviewer.teamviewer_service.plist (? cb48020f - installed 2012-03-23) |
| [Loaded] | com.bombich.ccc.plist (? 41245744 - installed 2013-01-21) |
| [Loaded] | com.malwarebytes.MBAMHelperTool.plist (Malwarebytes Corporation - installed 2016-04-04) |
| [Loaded] | com.malwarebytes.HelperTool.plist (Malwarebytes Corporation - installed 2018-02-22) |
| [Running] | com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2018-05-22) |
| [Loaded] | com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2018-04-29) |
| [Loaded] | com.microsoft.office.licensing.helper.plist (? 6d8cb30e - installed 2011-03-10) |
| [Not Loaded] | com.oracle.java.Helper-Tool.plist (? 0 - installed ) |
| [Loaded] | com.google.keystone.daemon.plist (Google, Inc. - installed 2018-03-06) |
| [Running] | com.seagate.TBDecorator.plist (? 595582c - installed 2015-11-02) |
| [Running] | com.intego.BackupAssistant.daemon.plist (? f4eb85c2 - installed 2013-10-14) |
User Launch Agents:
| [Loaded] | com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2018-04-12) |
| [Loaded] | com.logmein.GoToMeeting.G2MUpdate.plist (LogMeIn, Inc. - installed 2018-04-20) |
| [Loaded] | com.adobe.ARM.***.plist (? 0 - installed 2015-09-24) |
| [Loaded] | com.citrixonline.GoToMeeting.G2MUpdate.plist (Citrix Online LLC - installed 2018-01-29) |
| [Loaded] | com.charter.vgconnect.uninstall.plist (? 0 - installed 2018-01-19) |
| [Loaded] | com.adobe.ARM.***.plist (? 0 - installed 2013-06-16) |
| [Loaded] | com.skype.skype.shareagent.plist (Skype Communications S.a.r.l - installed 2018-03-20) |
| [Running] | com.charter.vgconnect.plist (? 0 - installed 2018-01-19) |
| [Loaded] | com.divx.agent.postinstall.plist (? 0 - installed 2013-01-06) |
| [Running] | ws.agile.1PasswordAgent.plist (? 0 - installed 2018-04-11) |
User Login Items:
Backup and Sync Application (Google, Inc. - installed 2018-04-12)
(/Applications/Backup and Sync.app)
Dropbox Application (Dropbox, Inc. - installed 2018-05-23)
(/Applications/Dropbox.app)
EvernoteHelper Application (? - installed 2015-02-27)
(/Applications/Evernote 2.app/Contents/Library/LoginItems/EvernoteHelper.app)
Garmin Express Service Application (Garmin International - installed 2018-02-22)
(/Applications/Garmin Express.app/Contents/Library/LoginItems/Garmin Express Service.app)
WunderlistHelper SMLoginItem (Mac App Store - installed 2018-04-06)
(/Applications/Wunderlist.app/Contents/Library/LoginItems/WunderlistHelper.app)
Internet Plug-ins:
o1dbrowserplugin: 5.41.3.0 (installed 2015-12-16)
OVSHelper: 1.1 (installed 2013-01-06)
OfficeLiveBrowserPlugin: 12.3.0 (installed 2011-08-18)
Flip4Mac WMV Plugin: 2.3.8.1 (installed 2011-01-13)
Silverlight: 5.1.30514.0 (installed 2014-11-25)
FlashPlayer-10.6: 29.0.0.171 (installed 2018-05-09)
DivXBrowserPlugin: 2.2 (installed 2012-12-10)
wkDimdimControl: 1.01 (installed 2009-06-05)
QuickTime Plugin: 7.7.3 (installed 2018-04-08)
Flash Player: 29.0.0.171 (installed 2018-05-09)
googletalkbrowserplugin: 5.41.3.0 (installed 2015-12-11)
SharePointBrowserPlugin: 14.1.2 (installed 2011-08-31)
AdobePDFViewer: 9.5.5 (installed 2013-06-16)
CANONiMAGEGATEWAYDL: 2.1.0.1 (installed 2006-04-20)
GarminGpsControl: 4.1.0.0 Release (installed 2013-10-09)
CANONiMAGEGATEWAYLI: 2.1.0.1 (installed 2006-04-20)
iPhotoPhotocast: 7.0 (installed 2008-11-21)
User Internet Plug-ins:
WebEx64: 1.0 (installed 2017-01-30)
ZoomUsPlugIn: 4.1.23108.0402 (installed 2018-04-05)
WebEx: 1.0 (installed 2010-01-19)
Safari Extensions:
| 1Password.safariextz - AgileBits - https://agilebits.com/onepassword(installed 2018-05-30) |
| 1Password-1.safariextz - AgileBits - http://agilebits.com/onepassword(installed 2012-09-06) |
| Evernote Web Clipper.safariextz - Evernote Corp. - http://evernote.com (installed 2018-05-30) |
| Add To Amazon Wish List.safariextz - Amazon.com - https://www.amazon.com/wishlist?ref=cm_wl_saf_ext (installed 2013-01-18) |
| DivXHTML5.safariextz - © 2000-2011 DivX, LLC. - http://divx.com(installed 2013-01-06) |
3rd Party Preference Panes:
3ivx MPEG-4 (installed 2012-11-20)
DivX (installed 2012-12-10)
Flash Player (installed 2018-04-29)
Flip4Mac WMV (installed 2011-01-13)
Logitech Control Center (installed 2012-07-07)
Seagate Dashboard for Mac OSX (installed 2017-07-10)
Time Machine:
Skip System Files: No
Mobile backups: Yes
Auto backup: Yes
Volumes being backed up:
Macintosh HD: Disk size: 500.07 GB - Disk used: 495.23 GB
Destinations:
L***e [Local] (Last used)
Total size: 1.76 TB
Total number of backups: 161
Oldest backup: 2014-12-14 22:00:17
Last backup: 2018-05-29 11:31:42
S***********************e [Local]
Total size: 999.86 GB
Total number of backups: 7
Oldest backup: 2017-10-06 11:05:29
Last backup: 2018-04-24 19:14:12
Top Processes by CPU:
| Process (count) | Source | % of CPU | Location |
| backupd | Apple | 28 | |
| WindowServer | Apple | 18 | |
| AdobeAcrobat | ? | 14 | /Applications/Adobe Acrobat X Pro/Adobe Acrobat Pro.app |
| kernel_task | Apple | 9 | |
| distnoted (3) | Apple | 2 |
Top Processes by Memory:
| Process (count) | Source | RAM usage | Location |
| kernel_task | Apple | 982 MB | |
| com.apple.WebKit.WebContent (5) | Apple | 653 MB | |
| Apple | 650 MB | ||
| mdworker (22) | Apple | 383 MB | |
| Finder | Apple | 139 MB |
Top Processes by Network Use:
| Process | Source | Input | Output | Location |
| Apple | 19 MB | 747 KB | ||
| Dropbox | Dropbox, Inc. | 912 KB | 1 MB | |
| mDNSResponder | Apple | 870 KB | 250 KB | |
| apsd | Apple | 14 KB | 43 KB | |
| netbiosd | Apple | 3 KB | 2 KB |
Top Processes by Energy Use:
| Process (count) | Source | Energy (0-100) | Location |
| WindowServer | Apple | 13 | |
| backupd | Apple | 13 | |
| Apple | 5 | ||
| com.apple.WebKit.WebContent (5) | Apple | 2 | |
| hidd | Apple | 1 |
Virtual Memory Information:
| Available RAM | 1.76 GB |
| Free RAM | 24 MB |
| Used RAM | 6.24 GB |
| Cached files | 1.74 GB |
| Swap Used | 566 MB |
Software Installs (past 30 days):
| Name | Version | Install Date |
| Security Update 2018-001 | 2018-05-05 | |
| Keynote | 8.0 | 2018-05-06 |
| Pages | 7.0 | 2018-05-06 |
| Numbers | 5.0 | 2018-05-06 |
| Adobe Flash Player | 29.0.0.171 | 2018-05-09 |
| Gatekeeper Configuration Data | 139 | 2018-05-29 |
| Malwarebytes for Mac | 1.0 | 2018-05-29 |
| iTunes | 12.7.5 | 2018-05-30 |
Diagnostics Information (past 7 days):
2018-05-30 10:37:16 Mail.app CPU
/Applications/Mail.app
2018-05-29 15:04:47 DivXUpdate.app Crash (20 times)
/Library/Application Support/DivX/DivXUpdate.app
dyld: launch, loading dependent libraries |
End of report
How do I reset my homepage when it is highlighted in grey?
