OpticalCommand - How to remove

OpticalCommand messes with internet browsers on Macs – it forces them to show ads, to open promoted websites, and to change the home page and search settings. OpticalCommand is a malicious adware app that uses tricks to persist even after being deleted. It can be removed (you can stop OpticalCommand from reinstalling itself by finding and deleting certain files) and there are tools and strategies that help avoid adware and other infections.

Description of OpticalCommand:

Type of threat	Adware, browser hijacker.
How to remove OpticalCommand	Find and remove malware (Combo Cleaner, Malwarebytes, etc.), delete the files and settings that OpticalCommand uses, remove unwanted apps and browser extensions, restore Mac and browser settings.
Issues caused by OpticalCommand	Pop-up ads, new tabs, new windows, and search redirects in the browser, logged private browsing data, crashing and freezing online apps, more malware being downloaded and installed.
Avoiding adware infections	Use anti-malware apps and ad-blockers, don’t use websites that show dangerous ads, recognize scams and malicious ads.

Removing OpticalCommand

Delete OpticalCommand

It would be the fastest to use an anti-malware app, such as Combo Cleaner or Malwarebytes. You might be hesitant to install a new program for this, and indeed, security apps don’t always work right (especially if the infection is new). But when they do, it’s faster, safer, and more reliable than hunting down and deleting OpticalCommand manually.

To delete OpticalCommand manually, you need to find its files in your Mac’s Library folders. There, OpticalCommand keeps files that include scripts and settings that ensure that, if you delete the OpticalCommand app, it can be reinstalled. That’s why these files need to be deleted before removing the OpticalCommand app and extension. (How malware persists on macOS)

Navigate to the ~/Library and /Library folders:

• /Library/LaunchAgents,
• /Library/LaunchDaemons,
• ~/Library/LaunchAgents
• ~/Library/Application Support

They’re usually hidden (because they hold sensitive data – you need to be careful when deleting files in these folders). One way to open them is by using the Go to Folder dialog of Finder. Right-click Finder in the Dock to find that option.

When you go to those folders, you’ll see a bunch of files that were created by your various apps. Look for OpticalCommand and any other name that can be associated with malware, from Mac Cleanup Pro to SearchTopic. Look up the file names online when you aren’t sure. Look at the modification dates of the files – are they close to when OpticalCommand showed up? Delete the suspicious files (just don’t empty the Trash in case you need to bring any of them back). You may need to boot your Mac in safe mode.

Now, you should be able to delete the OpticalCommand app (in the Applications folder) and browser extension (instructions below) for good. Scan your Mac again with your anti-malware app to see if it still finds anything.

Fix Mac settings

Whether you remove OpticalCommand manually or with an anti-malware tool, there’s still some work you need to do.

In System Preferences, find an item called Profiles and open it. Delete suspicious profiles. Now that OpticalCommand’s profiles are gone, they won’t be able to mess with your settings.

Also in System Preferences, go to Network, Advanced, Proxies, and if the SOCKS is ticked – and if you didn’t tick it yourself – you might want to deselect it and save the settings.

Check your browser settings: the new tab, the default search engine, and notification permissions. Check all the extensions, too. Below this post are the instructions for the different browsers.

OpticalCommand infection symptoms

OpticalCommand is adware. It changes browser settings to hijack them:

• changes the home and new tab page in the browser,
• redirects searches,
• triggers pop-up ads, opens random new tabs and new windows with promoted and affiliated sites,
• reads and logs browsing activity.

The ads that OpticalCommand shows range from safe (though annoying) ads for online stores, to dubious gambling and gaming ads, to tech support scams, subscription scams, and other malicious sites. Whenever your browser starts showing obnoxious, excessive ads all of a sudden, then adware is likely the cause.

At some points, your browser might freeze and show a window asking you to click OK. The window might say that it has updated your browser, that your browser doesn’t need to be updated, that an installation has finished, or other inane messages. OpticalCommand creates these windows to overlay actually important system messages and trick you into allowing it deeper access.

OpticalCommand is a serious infection. It is a threat to privacy and it turns the browser into adware.

How adware infects Macs

Nobody installs OpticalCommand because they think it’ll be useful. OpticalCommand is designed to look unremarkable, with an unattractive green and white magnifying glass icon and a boring name that sounds like it might be some boring but essential macOS component. OpticalCommand attempts to stay unnoticed and remain installed for as long as possible.

OpticalCommand and other adware can be downloaded from malicious websites that host fake software updates. These sites copy the design of a reputable and trusted company, put up an image of some kind of serious warning telling you to download an update, and then buy some ads on pirating sites, “free” movie sites, and other sites that don’t have security standards.

OpticalCommand could also have come in an adware wrapper with a free program. Some freeware is monetized by allowing additional software to hitch a ride with the freeware installer. This basically lets people buy installations and enables malware developers to easily infect computers.

Here are a few things that can help: ad-blockers, web filters by anti-malware apps, completely avoiding sites that show excessive ads, only downloading files and software from moderated, reputable websites, and never ever taking falling for fake software update and virus scares.

Automatic Malware removal tools

Fix browser settings

How to remove OpticalCommand from Safari:Top

Remove malicious extensions

• Click on Safari menu on the top left corner of the screen. Select Preferences.
  
• Select Extensions and uninstall OpticalCommand and other suspicious extensions.
  
• If your homepage was changed, click on Safari menu on the top left corner of the screen. Select Preferences and choose General tab. Enter preferable URL to the homepage field.
  

(Optional) Reset your browser’s settings(older versions) If you are still experiencing any issues related to OpticalCommand, reset the settings of your browser to its default settings.

• Click on Safari menu on the top left corner of the screen. Select Reset Safari…
  
• Select which options you want to reset (usually all of them come preselected) and click on the Reset button.
  

If you cannot reset your browser settings and the problem persists, scan your system with an anti-malware program.

TopHow to remove OpticalCommand from Google Chrome on Mac:

• Open Chrome browser.
• Enter in the url field “chrome://extensions” address and hit Enter.
• Find OpticalCommand on the extensions list and click on the recycle bin icon next to it.
• Click on 'Chrome' button at the top left corner. Select 'Preferences' on a drop-down menu box.
• Find 'Search' options on Settings tab. If your search engine is changed, click 'Manage Search Engines' and set your preferred search engine.
• On the same page find 'Show home button' checkbox and change your homepage.

(Optional) Reset your browser’s settings If you are still experiencing any issues related to OpticalCommand, reset the settings of your browser to its default settings.

• On the 'Preferences' menu window, scroll down to the bottom and find 'Reset settings' button. Click it.
• Confirm your selection and click 'Reset' on the following window.

If you cannot reset your browser settings and the problem persists, scan your system with an anti-malware program. Top

How To remove OpticalCommand from Firefox on Mac OS:

• Click on the menu button on the top right corner of a Mozilla window and select the “Add-ons” icon (Or press cmd+Shift+A on your keyboard).
• Go through Extensions list, remove everything OpticalCommand related and items you do not recognise. If you do not know the extension and it is not made by Mozilla, Google, Microsoft, Oracle or Adobe then you probably do not need it.
• Enter “about:preferences” in URL bar and hit enter.
• Open Search settings tab.
• If your search engine is changed, click 'Default Search Engines' and set your preferred search engine.
• If your homepage was changed, click on the Firefox menu in the top right corner, select Preferences-> General. Enter a preferable URL to the home page field.

(Optional) Reset your browser’s settings If you are still experiencing any issues related to OpticalCommand, reset the settings of your browser to its default settings.

• Click on the menu button on the top right corner of a Mozilla Firefox window. Click on the Help button.
• Choose Troubleshooting Information on the Help menu.
• Click on the Refresh Firefox button.
• Click on the Refresh Firefox button on the confirmation box. Mozilla Firefox will close and change the settings to default.

If the problem persists, scan your system with an anti-malware program to identify malicious entries.