LAST UPDATED: OCT 17, 2022
Learn how to delete Yahoo Search fake search engine virus on your Mac completely to prevent hackers from stealing your private data or information.
What is Yahoo Search?
Yahoo Search is a legitimate search engine. However, it has been misused by browser hijackers in trying to reroute your search to a specific site and fill its search results with sponsored content. It redirects the home page of the browsers installed on your Mac to search.yahoo.com or guce.yahoo.com.
How did it get installed?
You may unwillingly run it from deceptive pop up ads, free software installers or other third-party file downloads.
How do I get rid of it?
Remove Yahoo Search Fake search engine manually:
Expand All
1. Remove Suspicious Login Items
Remove Suspicious Login Items
- Go to > System Preferences...> Users & Groups.
- Make sure your profile is highlighted and the lock icon is unlocked, then click the Login Items tab.
- Click on any recently-added suspicious applications, then click the - (minus) sign to disable the application.
2. Remove malicious profile configurations
Remove malicious profile configurations
Check if there are profile configurations recently added on your Mac that may affect how your mac and its installed apps works. It is not common to have a profile unless you create a personalized configuration for your mac computer. Malicious profiles are usually bundled from third party apps.
- Go to > System Preferences > Profiles.
You can skip this solution if there is NO Profiles in System Preferences. It means there is no installed or created Profile Configuration on your Mac.
- Check and choose any profile that you did not set up. Select the profile, then click the button to remove it.
4. Remove Malicious Apps
Remove Malicious Apps in Applications
Remove installed application on your Mac that may have been a bundled program installed from a third-party app that you are not familiar.
Note: Be careful when deleting files in these locations. If you are not sure on what you are doing, contact us at mac_support@trendmicro.com
- Go to Finder > Go > Applications.
- Drag all unfamiliar apps from the Applications folder to the Trash .
- Empty Trash.
5. Remove suspicious extensions on web browsers
Remove malicious extensions on web browsers
Remove installed browser extensions that might cause the redirection:
Expand All
Remove in Safari
- Open Safari.
- Go to Safari > Preferences > Extensions.
- Look for any unfamiliar extension, then click the Uninstall button.
Remove in Chrome
- Open Google Chrome.
- Go to Chrome > Preferences > Extensions.
- Look for any unfamiliar extension, then click the Uninstall button.
Remove in Firefox
- Open Firefox.
- Go to Firefox > Preferences > Extensions & Themes.
- Under Manage your Extensions, look for any unfamiliar extension.
- Click the icon beside the extension, then click the Remove button.
6. Remove malicious files and folders
Remove suspicious files and folders
- Open Finder.
- On your keyboard, press COMMAND + SHIFT + . at the same time to show hidden files.
- Click Go > Go to Folder....
- Type the following locations below one at time, then click Go:
- ~/Library/LaunchAgents
- /Library/LaunchAgents
- /Library/LaunchDaemons
- Drag and drop unfamiliar items to Trash.
8. Reset your browser
Reset your browser
Before resetting, back up your favorites/bookmarks first. This will uninstall add-ons, delete browser history, reset your homepage and remove all custom settings.
Remove Fake Yahoo Search with Trend Micro Antivirus One
It may take some time to go through every file, folder and browsers mentioned in all the steps listed above.
Trend Micro Antivirus One can protect your Mac from all potential risks and attacks, so you can enjoy browsing online.
It also provides real-time scanning and eliminates browser hijackers before they even leave a trace.
Download Antivirus One on the App Store
I have Trend Micro Antivirus One installed
Run the Adware Cleaner in Antivirus One:
- Open Antivirus One.
- Click Adware Cleaner, then click Clean Now.
How helpful was this article?
Thank you for your feedback!
Feedback entity isn't available at the moment. Try again later.
