Safari malware

Hello, I didn't find a way to get rid of this malware, my safari/chrome homepage is hacked and I can't change the search engine, I deleted all new apps, deleted all safari extensions emptied the trash, but still I can't change the search engine from the preference settings.

I installed Malwarebytes, scanned and deleted all quarantined files. The scan now shows no malware .....

the search engine is set to Google

the homepage is set to duckduckgo.com (which I can't change)

but the homepage is opening

http://search.anysearchmanager.com/?_pg=6D7B2360-AEBF-5C65-89E9-EC4866F11E9F&affid=A08WZ_set_bsf_T&type=t


what should I do ? Any help please.




MacBook Air 13", macOS 10.14

Posted on Feb 3, 2020 1:55 AM

Reply
Question marked as Top-ranking reply

Posted on Feb 3, 2020 2:12 AM

   1. Remove unknown profiles if present.

      System Preferences > Profiles

      Open System Preferences,  select “General and click  the “Profiles” icon ( a checkmark on a gear) .

      When Profiles pane opens, select the unknown profile and click the minus button at the bottom.


      Section: Remove a configuration profile from your Mac

      Profiles: https://support.apple.com/guide/mac-help/configuration-profiles-standardize-settings-mh35561/mac


2 If Safari's home page is stuck


In some cases, after being changed by adware or malware, Safari's home page can become stuck.

You will be able to edit the Homepage field in Safari's preferences, but the change will not stick.

This appears to be a bug, and there is an odd workaround. Try this:


  1. In Safari, choose Preferences from the Safari menu.
  2. In the window that opens, click the General icon (if necessary)
  3. Enter your desired home page in the "Homepage" field, but DO NOT press return!
  4. At the top of the window, click any of the other icons (eg, Tabs, AutoFill, etc).
  5. You may see a prompt asking for confirmation for changing the home page. If so, confirm.
  6. Switch back to the General page and check to make sure the home page has been changed.


Credit:https://forums.malwarebytes.com/topic/236261-how-to-remove-weknow-malware-and-others/

3 replies
Question marked as Top-ranking reply

Feb 3, 2020 2:12 AM in response to wafaa85

   1. Remove unknown profiles if present.

      System Preferences > Profiles

      Open System Preferences,  select “General and click  the “Profiles” icon ( a checkmark on a gear) .

      When Profiles pane opens, select the unknown profile and click the minus button at the bottom.


      Section: Remove a configuration profile from your Mac

      Profiles: https://support.apple.com/guide/mac-help/configuration-profiles-standardize-settings-mh35561/mac


2 If Safari's home page is stuck


In some cases, after being changed by adware or malware, Safari's home page can become stuck.

You will be able to edit the Homepage field in Safari's preferences, but the change will not stick.

This appears to be a bug, and there is an odd workaround. Try this:


  1. In Safari, choose Preferences from the Safari menu.
  2. In the window that opens, click the General icon (if necessary)
  3. Enter your desired home page in the "Homepage" field, but DO NOT press return!
  4. At the top of the window, click any of the other icons (eg, Tabs, AutoFill, etc).
  5. You may see a prompt asking for confirmation for changing the home page. If so, confirm.
  6. Switch back to the General page and check to make sure the home page has been changed.


Credit:https://forums.malwarebytes.com/topic/236261-how-to-remove-weknow-malware-and-others/

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Safari malware

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.