How to remove malware from Mac

If you launch your favourite web browser, perform a search and notice that instead of landing on the results page of Google, DuckDuckGo, or whichever search engine you used, you land on, you’ve been hit by malware.

That’s the bad news. The good news is that you can get rid of it by following the steps we outline here. Before we get to that, however, let’s have a closer look at and find out what it is.

What is Pitchofcase Mac malware?

It’s a form of malware known as a browser hijacker. Once it’s on your Mac, it redirects searches in any browser you launch, no matter which search engine you normally use, and sends them to It then displays adverts so that the creators can make money, and very likely steals data like your IP address, search queries and browsing habits. 

How did it get onto my Mac?

Pitchofcase uses a technique called bundling. That means when you download what looks like a perfectly legitimate app, you also download the malware. And when you agree to install the other app, Pitchofcase installs too.

To avoid downloading this, or any other malware, it’s best to stay clear of download sites that use their own download managers, because that’s how the malware is bundled. It’s also best to avoid known sources of malware, such as MPlayer X and Nice Player. There are plenty of other excellent media players available for macOS, like VLC. And never click on a link from a website when it tells you that software on your Mac, like Flash Player, is out of date — that’s almost guaranteed to lead to you downloading malware.

How to remove malware

  1. Go to your Applications folder and look for the last app you downloaded before you noticed the browser hijacker. It will probably be Nice Player or MPlayer X.
  2. When you find it, drag it to the Trash and empty it.
  3. Go to the Go menu in the Finder and choose Go to Folder then go to each of the locations listed below and look for files related to Nice Player or MPlayer X

~/Library/Application Support
~/Library/Application Support

Tip: Some apps like, CleanMyMac X recognize the Pitchofcase malware. If you want to quickly eliminate this nasty virus, download CleanMyMac X for free here.

After you run CleanMyMac X, click the Malware Removal tab

Erasing Pitchofcase from Launch Agents

Pitchofcase is known to infiltrate the so-called Launch Agents that manage items working in the background. To be doubly sure you’ve cleaned it, check the Launch Agents tool in the same app, CleanMyMac X.

By the way, I use it regularly to scan my Mac and make sure there is no nasty adware, spyware or any other malware on it.  And I’m not the only one, here’s what Cult of Mac said about CleanMyMac recently: ‘CleanMyMac X offers all the tools you need to ensure your machine is always speedy and safe.’

CleanMyMac X - Login items

Once you’ve removed all traces of the apps you downloaded, you need to reset the browser settings that changed

How to remove pitchofcase from Safari

  1. Launch Safari, and choose Preferences from the Safari menu
  2. Click on the Extensions tab
  3. Locate any recently installed extensions, or any you didn’t deliberately install
  4. Select them and press Uninstall
  5. Click on the General tab and type or paste your preferred Homepage into the box
  6. Select the search tab and set the search engine to your preference

To remove malware from Chrome, do the following

  1. Paste  chrome://extensions into the address bar
  2. Look for any extensions you didn’t deliberately install, if you find one, select it and press Remove
  3. Go to chrome://settings/startup and change the homepage to your preference
  4. Paste chrome://settings/searchengines and click the ‘More Actions’ button next to your preferred search engine, then choose ‘Make Default’
  5. Click the ‘More Actions’ button next to and choose ‘Remove from List’

Here’s how to remove from Firefox

  1. Launch Firefox and click on the three lines icon on the right of the address bar
  2. Choose Add-ons and then Extensions
  3. Look for any extensions that you didn’t deliberately install
  4. Click on “Remove” next to them
  5. Press on the three lines again and choose Options
  6. Set the homepage and default search engine to your preference

As you can see, while removing manually isn’t difficult, it does involve quite a few steps. That’s why I prefer to use CleanMyMac X to help with getting rid of malware and junk files. I also use it to remove Chrome Extensions.

Laptop with CleanMyMac
CleanMyMac X

Your Mac. As good as new.