Skip to main content
How to remove InstallMac (search.installmac.com) adware

How to remove InstallMac (search.installmac.com) adware

Read a complete review of the InstallMac adware program and follow instructions to remove it from a compromised Mac machine.

For a relatively short time span of a few months, the InstallMac app has become one of the prevalent and most frequently encountered samples of Mac malware in the wild. The main reason for this is the verified fact that this entity is part of the huge-scale Genieo adware network which has been active for over a year and unfortunately keeps thriving. Similarly to the other Genieo products, InstallMac is focused primarily on web advertising through leveraging unethical tactics. This application was found to be added to some programs available at Softonic and other portals providing free-of-charge downloads for Mac OS. Users are not notified of the presence of this bundle when downloading software of interest, only finding out when the web browsers on the machine start acting up.

This adware affects the computer in the following way: the homepage and default search settings for Safari, Chrome and Firefox get modified and begin pointing to search.installmac.com. The latter is basically a safe web page offering online search opportunities, but when keywords are entered the user is either redirected to a different engine such as Bing or ends up on a results page stuffed with ads. Either way, InstallMac makers get their reward for bringing traffic to third-party resources or displaying sponsored links – so much for the fraudsters’ stimuli.

This activity is merely the tip of the iceberg, some other bad processes taking place in the background as well. The adware tracks and collects PID (personally identifiable data) about the user’s Internet activity, including websites visited, keywords entered, etc. This is obviously done in the advertising context so as to study people’s preferences and interests when online. The unauthorized reconfiguring of browser settings as well as potentially privacy-violating occurrences put InstallMac on the regular users’ blacklist of applications to run on their Macs.

The authors of this shady software provide an uninstaller for dissatisfied users on their website, but it’s known to call forth additional issues rather than being of help. First off, this uninstaller claims to simply reset the compromised browser to its defaults, which is basically a correct workaround; but instead of doing this and eliminating InstallMac’s components, it adds additional items to the system. Take a look at the screenshot reflecting one of the requests displayed in the process of executing the above-mentioned uninstaller:

Not only does this workflow try to install a new helper tool, it also asks the user to enter their administrative credentials on the Mac machine. Okay, what happens next? When the procedure is completed and the user gets the respective message, new processes emerge on the system, such as the GenieoExtra.framework file and a privileged helper tool:

Therefore, anticipating the removal of one bad object you get another one added.

The section below is dedicated to the procedure of resolving the noxious InstallMac and Genieo problem the right way; be sure to accurately follow the instructions and get rid of this pest along with all of its components

InstallMac manual removal for Mac

To begin with, settings for the web browser that got hit by the search.installmac.com adware should be restored to their default values. The overview of steps for this procedure is as follows:

1. Reset Safari

• Open the browser and go to Safari menu. Select Reset Safari in the drop-down list
• Make sure all the boxes are ticked on the interface and hit Reset

2. Reset Google Chrome (if affected by the InstallMac virus)

• Open Chrome and click the Customize and Control Google Chrome menu icon
• Select Options for a new window to appear
• Select Under the Hood tab, then click Reset to defaults button

3. Reset Mozilla Firefox (if affected)

• Open Firefox and select HelpTroubleshooting Information
• On the page that opened, click the Reset Firefox button

 

Get rid of InstallMac virus using Freshmac automatic removal tool

When confronted with malicious code like the InstallMac, you can neutralize its toxic impact by leveraging a specially crafted system utility. The Freshmac application (read review) is a perfect match for this purpose as it delivers essential security features along with must-have modules for Mac optimization.

This tool cleans unneeded applications and persistent malware in one click. It also protects your privacy by eliminating tracking cookies, frees up disk space, and manages startup apps to decrease boot time. On top of that, it boasts 24/7 tech support. The following steps will walk you through automatic removal of the InstallMac infection.

1. Download Freshmac installer onto your machine. Double-click the Freshmac.pkg file to trigger the installer window, select the destination disk and click Continue. The system will display a dialog asking for your password to authorize the setup. Type the password and click Install Software.

Download Now

2. Once the installation has been completed, Freshmac will automatically start a scan consisting of 5 steps. It scans cache, logs, unused languages, trash, and checks the Mac for privacy issues.

3. The scan report will then display your current system health status and the number of issues detected for each of the above categories. Click the Fix Safely button to remove junk files and address privacy issues spotted during the scan.

4. Check whether the search.installmac.com hijacker has been fixed. If the lock screen is still there, go to the Uninstaller option on Freshmac GUI. Locate an entry that appears suspicious, select it and click Fix Safely button to force-uninstall the unwanted application.


5. Go to Temp and Startup Apps panes on the interface and have all redundant or suspicious items eliminated as well. The InstallMac adware fraud shouldn’t be causing any further trouble.

11

Was this article helpful? Please, rate this.