SearchRange Mac Malware - How to remove

SearchRange is a malicious app that messes with the browser: it might inject ads into webpages and change home page and search engine settings. It is one of those malicious apps that cause Yahoo/Bing/Safe Search redirects. SearchRange starts up with the browser and it can’t be deleted normally; it has files and settings hidden in Library folders, as well as some settings in System Preferences that are helping it remain persistent. The good news is that SearchRange can be deleted, you just need a little bit of patience and dedication.

In short about SearchRange:

Classification Trojan,

adware.

Consequences of an infection Crashing apps,

browser redirects,

excessive ads,

slowed Mac.

How SearchRange was installed Downloaded with another app and installed in the background without a warning,

downloaded as a fake software update and installed with a trojan.

Removing SearchRange Find and delete malicious items with anti-malware apps (Combo Cleaner, Malwarebytes, etc.) and manually,

delete suspicious files,

remove apps, profiles, and settings that belong to SearchRange.

What is SearchRange

Mac malware

While the phrase “SearchRange” may refer to a parameter specifying a range to be searched. But we’re talking about something else – about a macOS application that causes some unwanted effects:

  • System pop-ups asking to allow SearchRange to accept incoming network connections.
  • Safari and other browsers changing which site they use to search the internet, changing the home page.
  • Pop-ups and other ads filling the browser, new tabs opening in the background, links changing their destinations, files getting downloaded randomly.
  • Slower Mac, hanging Safari, crashing online apps (such as Email).

SearchRange is an adware infection. Its name means nothing and was probably chosen to be easy to confuse and difficult to look up. Malicious apps that are related to SearchRange are DataSearchLauncher, SearchTopic, WebAgentSearch, etc. You can probably see a pattern in their names: cryptic but simple strings of nouns. These apps usually use an icon of a green circle with a white magnifying glass.

These malicious apps aren’t easily removed. If you try to delete one, it is likely to come back, possibly under a different name.

How SearchRange gets installed

When people talk about OdysseusLookup, DTTarget, ApplicationWork, SearchRange, and other infections, they sometimes mention that the adware showed up after a software update was installed. This must have been a fake software update. Malicious actors create them, such as these for Flash Player, advertise them on sites that don’t review their ads, and trick people into downloading malware.

Other times, apps like SearchRange may come bundled with free apps. Bundlers are installers for one program – that also install a few unwanted apps in the background. Be careful where you download apps from. When possible, stick to the App Store and avoid sites that offer various free software, as they sometimes repackage free apps to include adware.

When SearchRange or other adware gets installed, it may come with a trojan that is able to download more adware. Fake system pop-ups may be used to trick you into granting the malware administrator privileges. It’s possible that SearchRange is part of the AdLoad for Mac family of malware.

SearchRange uses an icon of a green circle and a white magnifying glass.

Remove SearchRange

To remove SearchRange for good, you need to find the files it left on your computer. Some files in the /Library and ~/Library folders need to be deleted. Some settings need to be changed.

Begin by starting your Mac in safe mode. Safe mode can be entered by holding the Shift button down when you start (or reboot) your Mac. Let go of “Shift” when you see “Safe boot” in the corner of your screen. Safe mode will prevent SearchRange and other unnecessary apps from starting. Otherwise, SearchRange might not allow its files to be deleted.

The best way to find malicious items is to scan your Mac with an anti-malware app, such as Combo Cleaner, Malwarebytes, or others. They should find malicious files, including the ones related to SearchRange.

SearchRange puts its settings and files in the same folders as legitimate files – in /Library and ~/Library, which are folders used by legitimate applications. You can delete them manually, it’s just finding them that’s the issue: it’s not always easy to find and recognize which files are bad and which are not. Date added is the most obvious giveaway, if you remember when exactly SearchRange showed up. But still, be careful about what you delete.

You can also find and remove SearchRange’s files by opening Finder > Go -> Computer. Then type “SearchRange” in the search box in the upper right. Delete the files that come up as search results, such as com.SearchRange.plist. Though this isn’t enough to remove all malware, it’s definitely something.

Finally, delete other files that belong to SearchRange:

  • Go to Finder -> Applications and drag SearchRange to Trash.
  • Go to System Preferences -> Profiles and select and remove every suspicious profile. If you were not aware of any profiles, then it might be that all of the ones on your Mac were created by SearchRange. It uses them to enforce settings on your browsers.
  • Open System Preferences -> Network -> Advanced -> Proxies. If “SOCKS” is selected and if you did not select it, then SearchRange is probably responsible. Deselect SOCKS and save.
  • Remove suspicious browser extensions (SearchRange and others) from your browsers (instructions below) and restore your default search engine settings, if needed.

Reboot your Mac to get out of Safe Mode. SearchRange should be gone. If it’s not, try downloading another reputable anti-malware app; maybe it can find something that the others missed.

Automatic Malware removal tools

Download Spyhunter for Malware detection
(Win)

Note: Spyhunter trial provides detection of parasites and assists in their removal for free. limited trial available, Terms of use, Privacy Policy, Uninstall Instructions,

Download Combo Cleaner for Malware detection
(Mac)

Note: Combo Cleaner trial provides detection of parasites and assists in their removal for free. limited trial available, Terms of use, Privacy Policy, Uninstall Instructions, Refund Policy ,

Restore browser settings

How to remove SearchRange Mac Malware from Safari:Top

Remove malicious extensions
  • Click on Safari menu on the top left corner of the screen. Select Preferences.
    Open preferences
  • Select Extensions and uninstall SearchRange Mac Malware and other suspicious extensions.
    Extensions
  • If your homepage was changed, click on Safari menu on the top left corner of the screen. Select Preferences and choose General tab. Enter preferable URL to the homepage field.
    Reset homepage
(Optional) Reset your browser’s settings(older versions) If you are still experiencing any issues related to SearchRange, reset the settings of your browser to its default settings.
  • Click on Safari menu on the top left corner of the screen. Select Reset Safari…
    Choose reset
  • Select which options you want to reset (usually all of them come preselected) and click on the Reset button.
    Reset
If you cannot reset your browser settings and the problem persists, scan your system with an anti-malware program.

TopHow to remove SearchRange Mac Malware from Google Chrome on Mac:

  • Open Chrome browser.
  • Enter in the url field “chrome://extensions” address and hit Enter.
  • Find SearchRange Mac Malware on the extensions list and click on the recycle bin icon next to it. Open extensions
  • Click on 'Chrome' button at the top left corner. Select 'Preferences' on a drop-down menu box.Open preferences
  • Find 'Search' options on Settings tab. If your search engine is changed, click 'Manage Search Engines' and set your preferred search engine. Set search engine preferences
  • On the same page find 'Show home button' checkbox and change your homepage. Show home button
(Optional) Reset your browser’s settings If you are still experiencing any issues related to SearchRange, reset the settings of your browser to its default settings.
  • On the 'Preferences' menu window, scroll down to the bottom and find 'Reset settings' button. Click it. Reset settings
  • Confirm your selection and click 'Reset' on the following window. Reset settings approve
If you cannot reset your browser settings and the problem persists, scan your system with an anti-malware program. Top

How To remove SearchRange Mac Malware from Firefox on Mac OS:

  • Click on the menu button on the top right corner of a Mozilla window and select the “Add-ons” icon (Or press cmd+Shift+A on your keyboard). Open addons
  • Go through Extensions list, remove everything SearchRange Mac Malware related and items you do not recognise. If you do not know the extension and it is not made by Mozilla, Google, Microsoft, Oracle or Adobe then you probably do not need it.Remove extension
  • Enter “about:preferences” in URL bar and hit enter. General settings
  • Open Search settings tab. Open search settings
  • If your search engine is changed, click 'Default Search Engines' and set your preferred search engine.Change search engine
  • If your homepage was changed, click on the Firefox menu in the top right corner, select Preferences-> General. Enter a preferable URL to the home page field. Restore home page
(Optional) Reset your browser’s settings If you are still experiencing any issues related to SearchRange Mac Malware, reset the settings of your browser to its default settings.
  • Click on the menu button on the top right corner of a Mozilla Firefox window. Click on the Help button. Open help
  • Choose Troubleshooting Information on the Help menu.Troubleshooting
  • Click on the Refresh Firefox button.Refresh firefox
  • Click on the Refresh Firefox button on the confirmation box. Mozilla Firefox will close and change the settings to default.Refresh firefox approve
If the problem persists, scan your system with an anti-malware program to identify malicious entries.
Leave a Reply

Your email address will not be published. Required fields are marked *