fbpx

How to get rid of Search Marquis Mac

What is Search Marquis?

Search Marquis is perhaps the most prominent mac browser hijacker of 2020, redirecting users in masses to its search engine. What Search Marquis is starkly contrasts with its marketing and front as a privacy oriented search engine, since the settings redirecting to it are usually enforced without user consent.

The searchmarquis.com website itself is completely off-limits unless you are already infected with the malware that would allow you to access it. Usually, this is the clearest landmark sign of a browser hijacker on desktop operating systems. And in this case, this is exactly what you are facing. Search Marquis’s Privacy Policy clearly states that third party “privacy practices may differ from ours, and we do not control the privacy and security practices and policies of these third parties.” While this at first glance may read as a normal policy, you should be aware that at least some of the search results coming from this search engine are malicious in nature.

An additional line in the policy states “You may remove the Offer and reset your device settings at any time” and this is very telling indeed – because many times even if you reset your device Search Marquis will not be removed and will restore itself.

How to get rid of Search Marquis Mac

Many users ask “what is Search Marquis?”, once they are infected with it.

 

How to get rid of Search Marquis

To get rid of Search Marquis on Mac:

  1. Type chrome://settings/ in Chrome.
  2. Click on the Extensions tab, then find the Search Marquis extension (and other suspicious ones).
  3. You can spot suspicious extensions by disabling them one by one and seeing if that stops the redirects.
  4. Remove Search Marquis by clicking on Remove next to it.
  5. Confirm to get rid of Search Marquis and any other suspicious items.
  6. Write chrome://settings/ again and go down to Search Engine.
  7. Make sure that the proper Search engine is set for Google Chrome.
How to get rid of Search Marquis Mac

The Search Marquis Virus will redirect your searches and will display Pop-up ads.

Search Marquis Removal from Mac

For a quick way to remove Search Marquis from Mac, do this inside your browser:

  1. Open Safari, go to Preferences.
  2. Then navigate to Extensions.
  3. Search for any unfamiliar entries, including a name you can connect with Search Marquis.
  4. Remove Search Marquis and other suspicious item from your Safari or Chrome Mac browser by clicking on the trash icon next to them.

SUMMARY:

Name Search Marquis
Type Browser Hijacker
Danger Level Medium (nowhere near threats like Ransomware, but still a security risk)
Symptoms A change in the browser’s homepage or the main search engine is a typical symptom of a Browser Hijacker.
Distribution Method Software bundles, torrents, ads, freeware sites, shareware platforms, automatic installers.
Detection Tool

Above, there are two list-like sets of instructions, one each for Chrome and Safari. This is considered the fastest way to get rid of Search Marquis. Below it are the same instructions, but with more details for users who are less tech-savvy. There are also additional steps below if the quick fixes can’t properly seem to get rid of Search Marquis or it comes back repeatedly. We advise all users to read them very carefully to avoid having to wait before we answer their comments.

How to Remove Search Marquis from Mac

Follow the instructions in the order they are written. We advise you to not skip any steps even if they seem hard or the step doesn’t seem useful.

  1. Open the Go menu in Finder, then select Utilities.
  2. Find Activity Monitor icon and double-click it.
  3. Look for processes that seem out of place or otherwise suspicious. Look especially at entries that take up a lot of resources. Remember – the name of the process may be different from the threat, so Google anything you deem suspicious.
  4. If you’re not sure, locate the file of a process and upload it to our online malware scanner below. It will be scanned with over 60 AV programs, but you still need to exercise your own judgement. Use the scanner for all steps below which involve determining if a file is infected.
    Each file will be scanned with up to 64 antivirus programs to ensure maximum accuracy
    This scanner is free and will always remain free for our website's users.
    This file is not matched with any known malware in the database. You can either do a full real-time scan of the file or skip it to upload a new file. Doing a full scan with 64 antivirus programs can take up to 3-4 minutes per file.
    How to get rid of Search Marquis Mac
    Drag and Drop File Here To Scan
    How to get rid of Search Marquis Mac
    Analyzing 0 s
    Each file will be scanned with up to 64 antivirus programs to ensure maximum accuracy
      This scanner is based on VirusTotal's API. By submitting data to it, you agree to their Terms of Service and Privacy Policy, and to the sharing of your sample submission with the security community. Please do not submit files with personal information if you do not want them to be shared.
    • If you find something, select it and click on the Stop in the upper left. When a follow-up dialog appears, choose Force Quit.
    • Press Command-Shift-Gon your keyboard at the same time.
    • Type /Library/LaunchAgents and click Go.
    • Search the LaunchAgents folder for suspicious files. Again, use the online scanner above if you think it will be useful. The names of the malware’s files don’t always seem malicious, so look at the dates they were added and try to spot something in the files added around the time you first saw Search Marquis on your Mac.

    Example names of the most common malware files: com.msp.agent.plist, com.updater.mcy.plist com.pcv.hlpramc.plist, , com.avickUpd.plist. If you find infected file, send them to the Trash.

    1. Press Command-Shift-G Copy paste ~/Library/Application Supportwith the symbol in front and click Go.
    2. What you need to do here is similar to the previous step, but it involves folders. Look at the dates and names of recently created folders which involve names like: ValidGeneration, BoostCoordinator, OperativeState, InitialWindow, AdjustableProduct. Send such folders to the Trash.
    3. Enter ~/Library/LaunchAgents in the Go to Folder search.
    4. Here, do the same as the above points. Avoid deleting anything that you know for sure is an Apple program file.
    5. Enter /Library/LaunchDaemons in the Go to Folder search.
    6. Anything here helps Search Marquis restore itself on reboot if you delete a part of it, so be especially vigilant in finding the files. Widespread malware files include pplauncher.plistcom.startup.plist, and com.ExpertModuleSearchDaemon.plist. Send anything suspicious to the Trash.
    7. Click on Goin the Finder, then ApplicationsIf you find an App you can connect to Search Marquis or a name from the folders in the previous steps, delete it. Input your admin password if you need to.
    8. Click on the Apple menu next to Finder and choose System Preferences->Users & Groups->Login Items. The following is a list of things launched on system startup. If you see something that you don’t think should be there, click the minus button.
    9. Back in System Preferences choose Profiles. On the left, look for a profile that shouldn’t be there. Look for names you can’t recognize like Chrome Settings (yes, even this), Main Search Platform. Select the minus sign below to remove Search Marquis’s profiles.

     

    blank

    About the author

    blank

    Lidia Howler

    Lidia is a web content creator with years of experience in the cyber-security sector. She helps readers with articles on malware removal and online security. Her strive for simplicity and well-researched information provides users with easy-to-follow It-related tips and step-by-step tutorials.

    6 Comments

      • Hi Cal Benton,
        yes we recommend ComboCleaner and its a trusted program. You can download it and use its trial version to remove the malware from your Mac.

    • Hey Brandon, I followed this article (remove search marquis virus mac) up until the point when it told me to go to the action monitor and take a sample of any “suspicious processes.” I am able to take the samples, but I don’t know what to do with them. How do I analyze these samples to know whether or not I should delete them?

      The search marquis has gotten quite out of hand at this point. I am automatically redirected to it every time I open a new tab, or even if I click the back button to return to my google search results. I have removed it from all settings that I can find, yet still the problem persists. Thanks for your help.

      • Hi Dan, I believe you sample any of the suspicious processes so you can find the paths to the files related to these processes, you can use the online virus scanner on the page to confirm or deny your suspicions.

    • Hi Petkov, where is this online virus scanner , please? If it is combocleaner, this function is no longer free and I am unaware of it it’ll remove completely if I pay.
      Thanks

    Leave a Comment