How to remove a browser hijacker from your Mac

Browser hijackers have become one of the most common types of malware on the Mac. Whether you use Safari, Chrome, Firefox, or another browser entirely, you're at risk of browser hijacking. Here, we'll tell you how you can tell if your browser has been hijacked and how to remove the culprit.

What is browser hijacker?

A browser hijacker is a type of malware that is designed to take over your browser. Once downloaded and installed, it will change the homepage and default search engine. It is done in order to generate revenue for a hacker behind the cyber threat. 

Typically, browser hijackers will collect information to display adverts. However, some of them may download files on your Mac that will steal your data or monitor your activity. One such example is downloading keyloggers. Moreover, they can install toolbars claiming to offer you coupons or find discounts. In reality, though, these toolbars will do nothing more than lead you to a suspicious website designed specifically to increase the advertising revenue for the hacker.

How browser hijacking works

Upon taking control of your system, browser hijackers can direct you to whatever website they wish. Many of those pages would probably contain computer malware, viruses, and other dangerous cyber threats that can severely affect your device. Not to mention that you'll also experience a significant drop in your Mac's performance.

Some hijackers have become so widespread and easily recognizable that even non-tech-savvy users might have heard of them. They often bear names that make them sound like search or shopping extensions, such as GoSave, Booking app, Pitch of Case, Coupon Server, and RocketTab.

How browser hijackers get onto your Mac

Similar to other types of malware, browser hijackers sneak onto your Mac bundled with legitimate applications, browser toolbars, and add-ons or disguise themselves as updates, like Flash Player. Unaware users allow these additional downloads, sometimes when they simply agree to the site's terms and conditions. The next thing you know, these unwanted apps change your default search engine according to the hackers' preferences.

How to tell if your browser has been hijacked?

Based on what we've already told about browser hijackers, you should be able to tell if your browser has been hijacked. If you need more information, though, some tell-tale signs of being infected with a browser hijacker include the following:

• Being bombarded with unwanted and uncommon adverts
• Having the homepage and default search engine changed without your knowledge
• Being redirected to websites you weren't intended to visit in the first place
• Finding out that sensitive information is missing or has been misplaced
• Noticing that the browser runs more slowly than usually
• Finding toolbars and extensions installed in your browser without your knowledge
• Detecting the lack of storage on a Mac

How to get rid of browser hijacker on Mac

We have prepared two different ways for you to remove a browser hijacker from your Mac — automatically and manually. Let's start with the easy one, which is using a dedicated browser hijacker removal tool.

Browser hijacker removal: the no-brainer way

The easiest method we recommend to remove browser hijackers is CleanMyMac X. This app has a dedicated tool for detecting and deleting malware. Here's how to use it:

1. Download, install, and open CleanMyMac X.
2. Choose Malware Removal in the sidebar.
3. Click Scan.
4. If CleanMyMac X finds malware, click Remove.

What's more, CleanMyMac X has the Privacy tool that allows you to clear browser caches. We suggest you also run that one to check for potential malware in your browser. Besides, we recommend running the Extensions module to disable any suspicious extensions from the browsers you use.

How to remove browser hijackers manually

There is yet another way to remove browser hijackers — the manual one, which is a bit tiresome, in our humble opinion. But if you are in the mood for some malware hunting, just follow the steps below.

Step 1. Remove suspicious apps from Mac

1. Go to the Finder, then click Applications.
2. Click the icon of the application or program you do not remember installing and drag it into the Trash. A good rule of thumb is to also remove the app you downloaded before experiencing the symptoms of malware.
3. Don't forget to empty your Trash after that.
4. Now, hunt down leftover files by going to Finder > Go > Go to Folder, pasting each of the following paths one at a time, and pressing Return after it. Look for the files and folders associated with the app you just removed and send them to the Trash, emptying it afterward: 

/Library/Application Support
~/Library/Application Support
/Library/Caches/
~/Library/Caches/
~/Library/Internet Plug-Ins/
~/Library/Preferences/
~/Library/Saved Application State/

Step 2. Remove hijackers from browsers

Note that browser hijackers take over all of the browsers installed on your Mac, so you will have to check even those browsers that you do not use.

How to remove browser hijacker in Safari manually: 

1. In Safari, click on the Safari menu and choose Settings.
2. Select the Extensions tab and look for any extensions you don't recognize.
3. If you find one, click on it and hit Uninstall.
4. Now, select the General tab and set your homepage to your preferred start page.
5. Finally, select the Search tab and choose the search engine you want to use.

How to get rid of a browser hijacker in Chrome: 

1. Open  Chrome and type the following in the address bar: chrome://extensions
2. Look for any extensions you don't recognize.
3. If you see one, click Remove next to it.
4. Now, paste this into the address bar: chrome://settings
5. Scroll down to "On startup" and decide what page you want to see at your browser's start. 
6. In the "Search engine" section, choose a default search engine.

How to delete browser hijacker Firefox:

1. Open Firefox and enter this command in the address bar: about:addons
2. Choose "Extensions."
3. Look for any extensions that seem suspicious.
4. If you find one, click the ellipsis (3-dot) next to an extension and click Remove.
5. Then, go to about:preferences
6. In the Home section, set your homepage.
7. In the Search section, set your default search engine.

How to prevent browser hijacking

Hijackers find their way onto your Mac using many different techniques. However, they are downloaded only after the user-initiated action, like clicking a link in a phishing email or proceeding to a questionable website.

Let's review some rules you should follow before talking about removing a browser hijacker from your Mac:

1. Don't click on any email link unless you know where it leads.
2. Don't respond to pop-up adverts claiming a component, like Flash Player, is outdated or that your system needs to be updated.
3. Avoid downloading apps from free software download sites that use their proprietary download manager.
4. Keep your macOS and all your apps up to date — CleanMyMac X has an updater that scans apps installed on your Mac, checks for updates, and automatically installs new versions.

The browser hijacker is a common type of malware that typically comes bundled with apps, browser toolbars, add-ons, or updates downloaded from free unauthorized software websites. Once installed, they change your browser's homepage and default search engine to mislead you to pages that display ads. It's undeniably risky since your most private data become accessible and, as a result, vulnerable in the hands of a hacker. Fortunately, with the help of CleanMyMac X, these threats are reasonably easy to remove. Stay safe!