What is SearchMarquis?
SearchMarquis is a type of adware that causes redirecting within the web browser on your Mac. Often times the redirecting displays or downloads advertising material (often unwanted) when a user is online. It's typically found within your web browser and it might be unknowingly bundled with other free software you download off the Internet. It may also mask itself as other, more well know software, like Adobe Flash Player. Once installed, it can modify the default homepage and search engine, and display ads or pop-ups on pages where they may have never appeared before.
Users should be very cautious about the applications they agree to install and should never download files or software from untrusted sources.
Removing SearchMarquis From Your Mac
It can be difficult to get rid of adware, so we've created this article to assist you. It's important to follow all of the instructions outlined below. If you have any questions or concerns about completing these steps as listed, we recommend Contacting Intego Support for further assistance.
To completely remove SearchMarquis from your Mac, follow these steps in order:
Scan Your Mac with VirusBarrier
Remove Malicious Applications
Remove LaunchAgents and LaunchDaemons
Uninstall Adware Extensions
Remove Unwanted Device Profiles
Scan Your Mac With VirusBarrier to Remove Adware and Pop-Ups
The best course of action if your Mac is infected with adware is to scan it with an antivirus solution to delete all malicious files from your device. Intego's award-winning VirusBarrier software is the best solution available to protect your Mac from malware, viruses, ransomware and adware. You can download and install VirusBarrier X9 as part of our Internet Security bundle from the link below:
Download Mac Internet Security X9, Including VirusBarrier
After the download is complete, double-click the installer file which should appear in your Downloads folder by default.
(Note: It may be in another location if you have modified your browser settings)
Follow the on-screen instructions to properly install the software:
Once installation is complete, open VirusBarrier from the top-right corner of the menu bar using the Intego castle icon:
Now, run a Full Scan:
VirusBarrier will automatically detect any adware or potentially unwanted programs (PUP) on your Mac. Once the scan is complete, use the options provided in the window to Quarantine, Repair, or Delete the infected files.
Remove Malicious Software
After scanning your Mac with VirusBarrier, you'll want to check for any remnants of the malicious applications which may be left behind.
Open a Finder window and navigate to Applications:
Find and Remove Adware or Malicious Software
Look through the list of Applications to locate the software to delete. Once you have found the adware, right-click and select 'Move To Trash'.
A few examples of adware you might find include Mac Cleanup Pro, Dock2Master, WeKnow, Shlayer, Spigot, SurfBuyer, MacSaver, ShopperHelper and CrossRider. (Note: This is not a complete list of all known adware, and the names of these malicious programs change constantly. The name of the application you need to remove on your Mac may differ from this list.)
Empty the Trash from your Dock to completely remove the application from your Mac, then restart your computer to complete the process.
Remove Unwanted LaunchAgents and LaunchDaemons
What Are LaunchAgents & LaunchDaemons?
A daemon is a program running in the background without requiring user input. A typical daemon might perform daily maintenance tasks or scan a device for malware. The main difference between the two is that an agent is run on behalf of the logged-in user, while a daemon runs on behalf of the root user or any user specified.
You will find LaunchAgents and LaunchDaemons installed on your Mac in the following locations:
- /Library/LaunchAgents
- /Library/LaunchDaemons
- /System/Library/LaunchAgents
- /System/Library/LaunchDaemons
- ~/Library/LaunchAgents (inside the home folder)
- ~/Library/Application Support (inside the home folder)
You should remove any unwanted files you may find in these locations. Open a Finder window and select: Go > Go to Folder.. :
Now, enter one of the file paths listed above. It will look like this:
Next, delete any files you see here for adware or unwanted applications.
If you do not immediately see files listed within these locations, it is possible that they may be hidden. macOS hides certain files and locations by default so that they are intentionally more difficult to be found and modified. You can show hidden files by clicking within the Finder window and pressing Command + Shift + . (period). The files will appear differently from the files that are not hidden. Hidden files appear translucent in color. You can see an example of how hidden files appear below:
With great power comes great responsibility! Always be mindful of the files you are removing, since deleting anything by mistake may prevent software from working as expected.
Uninstall Adware Extensions From Your Web Browsers
In addition to scanning your Mac with VirusBarrier, you'll also want to check all of the web browsers you use to see if there are any extensions installed for adware. There are plenty of browsers available for macOS, but we're going to cover the three most popular choices in this article: Safari, Chrome and Firefox.
Delete Unwanted Extensions
Some adware will also install extensions in your web browser which allow them to display ads and pop-ups for potentially unwanted programs and services. You'll want to remove these from your web browser if they exist by using the Uninstall or Remove command.
Safari
Location: Safari > Preferences > Extensions
Chrome
Location: Chrome > Settings > Extensions
Firefox
Location: Firefox > Settings > Extensions & Themes
Update the Homepage
Check the homepage in all of your web browsers and make sure it is set correctly. If you do not recognize the homepage listed, change it to something else.
Safari
Chrome
Firefox
Remove Unwanted Device Profiles
It's very rare that software should ever need to install a profile on your device for it to work properly. This is used mostly by business software to manage a large number of Macs. In fact, most users should not even see the 'Profiles' option listed in System Preferences (by default, it is hidden if no Profiles are installed).
Open System Preferences and select Profiles in the final row. (Note: If you do not see 'Profiles' listed on your Mac, it means you do not have any installed and you do not need to take action)
Check the Device Profiles carefully, and remove any suspicious or unwanted profiles you see in the list. Simply highlight them in the left column and click the minus '-' key in the bottom left corner.
Following all of these steps should help keep your Mac adware-free!
Contact Intego Support
If you still have questions about adware or malware on your Mac and cannot find the answer in this article or our Knowledge Base, please contact our Support Team directly for assistance by completing a support ticket online here:
Comments