Redirected to bing even though search engine is set to google

Please run EtreCheck and post the report here.

https://itunes.apple.com/app/etrecheck/id1423715984?mt=12

Click View in Mac App Store button and then “Get” button underneath EtreCheck logo.

Download, install, click “Open’ in the dialog and run it.

Click “Share Report” button in the toolbar, select “Copy to Clipboard” .

Paste it into the reply.

EtreCheck version: 5.0.1 (5014)

Report generated: 2018-10-30 14:23:10

Download EtreCheck from https://etrecheck.com

Runtime: 4:51

Performance: Good

Sandbox: Enabled

Full drive access: Disabled

Problem: Other problem

Description:

unwanted Bing

Major Issues:

Anything that appears on this list needs immediate attention.

Adware- Adware detected.

Unsigned files- There are unsigned software files installed that could be adware and should be reviewed.

Minor Issues:

These issues do not need immediate attention but they may indicate future problems.

Out of RAM- This machine is running short on RAM and has a mechanical hard drive, reducing the speed of the virtual memory system.

Clean up- There are orphan files that could be removed.

32-bit Apps- This machine has 32-bits apps that may have problems in the future.

Abnormal shutdown- Your machine shut down abnormally.

Hardware Information:

iMac (Retina 4K, 21.5-inch, Late 2015)

iMac Model: iMac16,2

1 3.1 GHz Intel Core i5 (i5-5675R) CPU: 4-core

8 GB RAM - Not upgradeable

BANK 0/DIMM0 - 4 GB DDR3 1867 ok

BANK 1/DIMM0 - 4 GB DDR3 1867 ok

Video Information:

Intel Iris Pro Graphics 6200 - VRAM: 1536 MB

iMac 2560 x 1440

Drives:

disk0 - APPLE HDD HTS541010A9E662 1.00 TB (Mechanical - 5400 RPM)

Internal SATA 3 Gigabit Serial ATA

disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk0s2 [APFS Container] 1000.00 GB

disk1 [APFS Virtual drive] 1000.00 GB (Shared by 4 volumes)

disk1s1 - Macintosh HD (APFS) (Shared - 390.37 GB used)

disk1s2 - Preboot (APFS) [APFS Preboot] (Shared)

disk1s3 - Recovery (APFS) [Recovery] (Shared)

disk1s4 - VM (APFS) [APFS VM] (Shared - 5.37 GB used)

disk2 - WD My Passport 259F 1.00 TB

External USB 5 Gbit/s USB

disk2s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk2s2 - M*****k (Journaled HFS+) 999.83 GB (723.84 GB used)

Mounted Volumes:

disk1s1 - Macintosh HD 1000.00 GB (603.49 GB free)

APFS

Mount point: /

disk1s4 - VM [APFS VM] (Shared - 5.37 GB used)

APFS

Mount point: /private/var/vm

disk2s2 - M*****k 999.83 GB (275.98 GB free)

Journaled HFS+

Mount point: /Volumes/M*****k

Network:

Interface en0: Ethernet

Interface en6: iPad

Interface en1: AirPort

802.11 a/b/g/n/ac

Interface en5: iPhone

Interface en4: Bluetooth PAN

Interface bridge0: Thunderbolt Bridge

Interface bridge0: Thunderbolt Bridge 2

System Software:

macOS Mojave 10.14 (18A391)

Time since boot: About a day

Security:

Adware:

Launchd: ~/Library/LaunchAgents/com.pcv.hlpramcn.plist

Reason: Adware name match

Executable: ~/Library/Application Support/amc/helperamc.app/Contents/MacOS/helperamc

Launchd: ~/Library/LaunchAgents/gUpdater.plist

Reason: Adware name match

Executable: /Applications/RaGiant.app/Contents/Resources/appUpdater rg 1001

Unsigned Files:

Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/com.company.InstallerAgent.plist

Executable: /***s/Shared/Library/Company/.newoffers/InstallAgent

Details: Restrictive app permissions - possibly adware

Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Helper-Tool .plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/com.spotify.webhelper.plist

Executable: ~/Library/Application Support/Spotify/SpotifyWebHelper

Details: Exact match found in the whitelist - probably OK

32-bit Applications:

17 32-bit apps

System Launch Agents:

System Launch Daemons:

Launch Agents:

Launch Daemons:

User Launch Agents:

User Login Items:

TomTomHOMERunner (? - installed 2016-11-24)

(~/Library/Application Support/TomTom HOME/TomTomHOMERunner.app/Contents/MacOS/TomTomHOMERunner)

BT Cloud (Synchronoss Technologies - installed 2018-05-29)

(/Applications/BT Cloud.app/Contents/MacOS/BT Cloud)

Dropbox (Dropbox, Inc. - installed 2018-10-27)

(/Applications/Dropbox.app/Contents/MacOS/Dropbox)

iTunesHelper (Apple - installed 2018-09-21)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesH elper)

Internet Plug-ins:

Flip4Mac WMV Plugin: 3.2.0.16 (installed 2013-07-21)

FlashPlayer-10.6: 31.0.0.122 (installed 2018-10-10)

QuickTime Plugin: 7.7.3 (installed 2018-09-21)

AdobePDFViewerNPAPI: 15.017.20050 (installed 2016-06-30)

AdobePDFViewer: 15.017.20050 (installed 2016-06-30)

Flash Player: 31.0.0.122 (installed 2018-10-10)

iPhotoPhotocast: 7.0 (installed 2013-04-30)

Myriad Music Plugin: 5.6.3i (installed 2015-09-08)

JavaAppletPlugin: Java 8 Update 111 build 14 (installed 2016-10-19)

3rd Party Preference Panes:

Flash Player (installed 2018-09-21)

Flip4Mac WMV (installed 2013-07-21)

Java (installed 2016-10-19)

Time Machine:

Time Machine information not available without Full Drive Access.

Performance:

System Load: 1.53 (1 min ago) 1.26 (5 min ago) 1.14 (15 min ago)

Nominal I/O speed: 0.20 MB/s

File system: 53.85 seconds

Write speed: 68 MB/s

Read speed: 73 MB/s

CPU Usage:

Top Processes by CPU:

Top Processes by Memory:

Top Processes by Network Use:

Virtual Memory Information:

Software Installs (past 30 days):

Clean up:

~/Library/LaunchAgents/com.adobe.ARM.***.plist

/Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper

Executable not found

Diagnostics Information (past 7 days):

2018-10-29 12:46:20 Last Shutdown Cause: 0 - Power loss

Directory /Library/Logs/DiagnosticReports is not accessible without Full Drive Access.

End of report

EtreCheck version: 5.0.1 (5014)

Report generated: 2018-10-30 14:23:10

Download EtreCheck from https://etrecheck.com

Runtime: 4:51

Performance: Good

Sandbox: Enabled

Full drive access: Disabled

Problem: Other problem

Description:

unwanted Bing

Major Issues:

Anything that appears on this list needs immediate attention.

Adware- Adware detected.

Unsigned files- There are unsigned software files installed that could be adware and should be reviewed.

Minor Issues:

These issues do not need immediate attention but they may indicate future problems.

Out of RAM- This machine is running short on RAM and has a mechanical hard drive, reducing the speed of the virtual memory system.

Clean up- There are orphan files that could be removed.

32-bit Apps- This machine has 32-bits apps that may have problems in the future.

Abnormal shutdown- Your machine shut down abnormally.

Hardware Information:

iMac (Retina 4K, 21.5-inch, Late 2015)

iMac Model: iMac16,2

1 3.1 GHz Intel Core i5 (i5-5675R) CPU: 4-core

8 GB RAM - Not upgradeable

BANK 0/DIMM0 - 4 GB DDR3 1867 ok

BANK 1/DIMM0 - 4 GB DDR3 1867 ok

Video Information:

Intel Iris Pro Graphics 6200 - VRAM: 1536 MB

iMac 2560 x 1440

Drives:

disk0 - APPLE HDD HTS541010A9E662 1.00 TB (Mechanical - 5400 RPM)

Internal SATA 3 Gigabit Serial ATA

disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk0s2 [APFS Container] 1000.00 GB

disk1 [APFS Virtual drive] 1000.00 GB (Shared by 4 volumes)

disk1s1 - Macintosh HD (APFS) (Shared - 390.37 GB used)

disk1s2 - Preboot (APFS) [APFS Preboot] (Shared)

disk1s3 - Recovery (APFS) [Recovery] (Shared)

disk1s4 - VM (APFS) [APFS VM] (Shared - 5.37 GB used)

disk2 - WD My Passport 259F 1.00 TB

External USB 5 Gbit/s USB

disk2s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk2s2 - M*****k (Journaled HFS+) 999.83 GB (723.84 GB used)

Mounted Volumes:

disk1s1 - Macintosh HD 1000.00 GB (603.49 GB free)

APFS

Mount point: /

disk1s4 - VM [APFS VM] (Shared - 5.37 GB used)

APFS

Mount point: /private/var/vm

disk2s2 - M*****k 999.83 GB (275.98 GB free)

Journaled HFS+

Mount point: /Volumes/M*****k

Network:

Interface en0: Ethernet

Interface en6: iPad

Interface en1: AirPort

802.11 a/b/g/n/ac

Interface en5: iPhone

Interface en4: Bluetooth PAN

Interface bridge0: Thunderbolt Bridge

Interface bridge0: Thunderbolt Bridge 2

System Software:

macOS Mojave 10.14 (18A391)

Time since boot: About a day

Security:

Adware:

Launchd: ~/Library/LaunchAgents/com.pcv.hlpramcn.plist

Reason: Adware name match

Executable: ~/Library/Application Support/amc/helperamc.app/Contents/MacOS/helperamc

Launchd: ~/Library/LaunchAgents/gUpdater.plist

Reason: Adware name match

Executable: /Applications/RaGiant.app/Contents/Resources/appUpdater rg 1001

Unsigned Files:

Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/com.company.InstallerAgent.plist

Executable: /***s/Shared/Library/Company/.newoffers/InstallAgent

Details: Restrictive app permissions - possibly adware

Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Helper-Tool .plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/com.spotify.webhelper.plist

Executable: ~/Library/Application Support/Spotify/SpotifyWebHelper

Details: Exact match found in the whitelist - probably OK

32-bit Applications:

17 32-bit apps

System Launch Agents:

System Launch Daemons:

Launch Agents:

Launch Daemons:

User Launch Agents:

User Login Items:

TomTomHOMERunner (? - installed 2016-11-24)

(~/Library/Application Support/TomTom HOME/TomTomHOMERunner.app/Contents/MacOS/TomTomHOMERunner)

BT Cloud (Synchronoss Technologies - installed 2018-05-29)

(/Applications/BT Cloud.app/Contents/MacOS/BT Cloud)

Dropbox (Dropbox, Inc. - installed 2018-10-27)

(/Applications/Dropbox.app/Contents/MacOS/Dropbox)

iTunesHelper (Apple - installed 2018-09-21)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app/Contents/MacOS/iTunesH elper)

Internet Plug-ins:

Flip4Mac WMV Plugin: 3.2.0.16 (installed 2013-07-21)

FlashPlayer-10.6: 31.0.0.122 (installed 2018-10-10)

QuickTime Plugin: 7.7.3 (installed 2018-09-21)

AdobePDFViewerNPAPI: 15.017.20050 (installed 2016-06-30)

AdobePDFViewer: 15.017.20050 (installed 2016-06-30)

Flash Player: 31.0.0.122 (installed 2018-10-10)

iPhotoPhotocast: 7.0 (installed 2013-04-30)

Myriad Music Plugin: 5.6.3i (installed 2015-09-08)

JavaAppletPlugin: Java 8 Update 111 build 14 (installed 2016-10-19)

3rd Party Preference Panes:

Flash Player (installed 2018-09-21)

Flip4Mac WMV (installed 2013-07-21)

Java (installed 2016-10-19)

Time Machine:

Time Machine information not available without Full Drive Access.

Performance:

System Load: 1.53 (1 min ago) 1.26 (5 min ago) 1.14 (15 min ago)

Nominal I/O speed: 0.20 MB/s

File system: 53.85 seconds

Write speed: 68 MB/s

Read speed: 73 MB/s

CPU Usage:

Top Processes by CPU:

Top Processes by Memory:

Top Processes by Network Use:

Virtual Memory Information:

Software Installs (past 30 days):

Clean up:

~/Library/LaunchAgents/com.adobe.ARM.***.plist

/Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper

Executable not found

Diagnostics Information (past 7 days):

2018-10-29 12:46:20 Last Shutdown Cause: 0 - Power loss

Directory /Library/Logs/DiagnosticReports is not accessible without Full Drive Access.

End of report

I had the same issue and have now solved it. I ran EtreCheck and it located one Adware problem but it did not pick up the real issue which was that a Malware "MacOSDefender" App was causing the issue. I found this out buy doing some research on the internet, not through EtreCheck which did not find this issue/App. I then used the activity Monitor under Tools to check that MacOSDefender was present and running (and its location). You can try to force it to Quit, but it will power-up again.

This Malware App is not located in the Applications folder. In my case it was located in directory;

Users/your user name/library/application support/.dir/

To delete the app, start your Mac in Safe Mode (press and hold Shift key when restarting). Go to the folder (which may be hidden) and move this app to Trash and then empty the Trash. Restart and all should be fine.

Hope this helps

Please use the manual uninstall only.

https://www.2-spyware.com/remove-bing-redirect-virus.html

How to get rid of Bing.com Redirect - Virus removal guide

I have this same issue and its very annoying! Any suggestions.

You have adware installed.

Run EtreCheck again.

In the Sidebar, click the Security button.

Locate and remove entries under Adware and Unsigned files.

Click the “Remove” button.