Remove “Network layer wants to make changes” Mac Virus (Dec. 2019 Update)

Parasite may reinstall itself multiple times if you don't delete its core files. We recommend downloading SpyHunter to scan for malicious programs installed with it. This may save you hours and cut down your time to about 15 minutes. 

Download SpyHunter Anti-Malware

More information on SpyHunter, steps to uninstallEULAThreat Assessment Criteria, and Privacy Policy.


“Network layer wants to make changes”

“Network layer wants to make changes” is a free application which is not among the most wanted pieces of software that you can have on your computer. In fact, many web users have recently requested our “How to remove” team to provide a removal guide which can help them uninstall it from their systems. The main reason “Network layer wants to make changes” is regarded as a rather unwanted application is because a lot of people find its behavior to be quite irritating and disturbing. This application is reported as a source of hundreds of nagging ads, hard-to-remove pop-ups, sponsored links, blinking banners, redirects to promotional pages and sites and other types of aggressive commercials which tend to constantly appear on the screen of the main browser during every browsing session. This type of applications are also related to changes in the default homepage and/or search engine to browsers like Chrome, Firefox and maybe even Safari as well as to the installation of some new toolbars, buttons and page-redirect features, which tend to modify the browsing results in favor of some third-party promotional content. Many users, especially those who face this kind of software for the first time, think that there is something wrong with their computer or that they have been attacked by some strange virus or a nasty malware such as Trojan or a Ransomware. What is more, lots of people who contact our team face difficulties with uninstalling the imposed changes and removing the unwanted application. This is because apps like “Network layer wants to make changes” typically have the ability to reinstall themselves if they haven’t been fully removed from the computer. If you’ve landed on this page because you are concerned about the safety of your system, you will definitely find it relieving to learn that the application you are dealing with is not a virus but a browser hijacker. In the removal guide below, you will find detailed instructions on how to uninstall this browser hijacker from your PC as well as some basic information that you need to keep in mind about the nature of this software.

How you may end up with a browser hijacker on your computer?

The browser hijackers are special pieces of software which are not created to cause harm to the users and their computers. They do not contain malicious features typical for viruses and malware and they are quite different from, say, a Ransomware cryptovirus infection or a Trojan Horse. Instead, the hijackers are specialized in online advertising and are aimed at promoting certain third-party ads, links, offers and pay-per-click messages on the users’ screen during web surfing. Despite being relatively harmless, however, such applications tend to spam the screen with potentially unwanted and sometime potentially unsafe commercials. Oftentimes, they may interrupt the regular web surfing with irrelevant sponsored messages or redirect the users to various unfamiliar websites. For this reason, it is best if you keep away from them and avoid their most common sources. The representatives of the browser hijacker category usually become part of the system in the form of “bonus” or “free recommended applications” during the installation of other legitimate applications, free add-ons and updates. That’s why the key to protecting your computer from them is to only install new software using the the advanced or the custom setup menus and settings.


Name “Network layer wants to make changes”
Type Browser Hijacker
Danger Level Medium (nowhere near threats like Ransomware, but still a security risk)
Symptoms  You can easily detect a browser hijacker thanks to the changes that it may place inside your main browser. 
Distribution Method Some of the most common sources are the program bundles and different free installers, ads, torrents and spam.
Detection Tool

“Network layer wants to make changes” Removal


We get asked this a lot, so we are putting it here: Removing parasite manually may take hours and damage your system in the process. We recommend downloading SpyHunter to see if it can detect parasite files for you.

The first thing you need to do is to Quit Safari (if it is opened). If you have trouble closing it normally, you may need to Force Quit Safari:

You can choose the Apple menu and click on Force Quit.

Alternatively you can simultaneously press (the Command key situated next to the space bar), Option (the key right next to it) and Escape (the key located at the upper left corner of your keyboard).

If you have done it right a dialog box titled Force Quit Applications will open up.

In this new dialog window select Safari, then press the Force Quit button, then confirm with Force Quit again.

Close the dialog box/window.



To remove parasite on your own, you may have to meddle with system files and registries. If you were to do this, you need to be extremely careful, because you may damage your system.

If you want to avoid the risk, we recommend downloading SpyHunter
a professional malware removal tool.

More information on SpyHunter, steps to uninstallEULAThreat Assessment Criteria, and Privacy Policy.

Start Activity Monitor by opening up Finder, then proceed to activity-monitor

Once there, look at all the processes: if you believe any of them are hijacking your results, or are part of the problem, highlight the process with your mouse, then click the “i” button at the top. This will open up the following box:


Now click on Sample at the bottom:


Do this for all processes you believe are part of the threat, and run any suspicious files in our online virus scanner, then delete the malicious files:

Drag and Drop Files Here to Scan
Maximum file size: 128MB.

This scanner is free and will always remain free for our website's users. You can find its full-page version at:

Scan Results

Virus Scanner Result


The next step is to safely launch Safari again. Press and hold the Shift key while relaunching Safari. This will prevent Safari’s previously opened pages from loading again. Once Safari is opened up, you can release the Shift key.

On the off chance that you are still having trouble with scripts interrupting the closing of unwanted pages in Safari, you may need to take some additional measures.

First, Force Quit Safari again.

Now if you are using a Wi-Fi connection turn it off by selecting Wi-Fi off in you Mac’s Menu. If you are using a cable internet (Ethernet connection), disconnect the Ethernet cable.


Re-Launch Safari but don’t forget to press and hold the Shift button while doing it, so no previous pages can be opened up. Now, Click on Preferences in the Safari menu,

Preferences in Safari

and then again on the Extensions tab,

extensions in safari

Select and Uninstall any extensions that you don’t recognize by clicking on the Uninstall button. If you are not sure and don’t want to take any risks you can safely uninstall all extensions, none are required for normal system operation.

The threat has likely infected all of your browsers. The instructions below need to be applied for all browsers you are using.

Again select Preferences in the Safari Menu, but this time click on the Privacy tab,
Privacy in Safari

Now click on Remove All Website Data, confirm with Remove Now. Keep in mind that after you do this all stored website data will be deleted. You will need to sign-in again for all websites that require any form of authentication.

Still in the Preferences menu, hit the General tab

General Tab in Safari

Check if your Homepage is the one you have selected, if not change it to whatever you prefer.
Default Home Page

Select the History menu this time, and click on Clear History. This way you will prevent accidentally opening a problematic web page again.

firefox-512 How to Remove “Network layer wants to make changes” From Firefox in OSX:

Open Firefoxclick on mozilla menu (top right) ——-> Add-onsHit Extensions next.

pic 6

The problem should be lurking somewhere around here –  Remove it. Then Refresh Your Firefox Settings.

chrome-logo-transparent-backgroundHow to Remove “Network layer wants to make changes” From Chrome in OSX:

 Start Chrome, click chrome menu icon —–>More Tools —–> Extensions. There,  find the malware and  select  chrome-trash-icon.

pic 8

 Click chrome menu icon again, and proceed to Settings —> Search, the fourth tab, select Manage Search Engines.  Delete everything but the search engines you normally use. After that Reset Your Chrome Settings.

If the guide doesn’t help, download the anti-virus program we recommended or try our free online virus scanner. Also, you can always ask us in the comments for help!

Leave a Comment