WebAgentSearch Mac Malware - How to remove

WebAgentSearch is Mac malware. It arrives disguised as a trusted program and tricks people to install it. Then, WebAgentSearch changes browser settings and sets itself to be reinstalled if you ever try to remove it. Luckily, WebAgentSearch can still be relatively easily removed – you just need to delete a few files and settings that it put on your Mac.

In short about WebAgentSearch:

Classification	Adware, trojan.
Infection symptoms	Unstable apps, changed browser search and new tab, increased number of advertisements.
How WebAgentSearch was installed	Disguised as a trusted program, bundled with free programs.
How to remove WebAgentSearch	Delete malicious files, remove profiles, apps, and browser extensions related to WebAgentSearch, check your Mac for malware (such as Combo Cleaner, Malwarebytes, others).

Problems caused by WebAgentSearch

WebAgentSearch is a lot like SearchToolHelper, PrimaryIndexer, HermesLookup, BufferKey, and other Mac adware infections. It gets installed without getting your permission and then changes a bunch of system settings:

• WebAgentSearch forces different search and new tab settings on the browser. It tries to hijack your web searches.
• It also shows pop-up ads to appear on the screen.
• WebAgentSearch has access to all the data on all the websites that are opened, which includes personal data like usernames and passwords.
• After being removed, WebAgentSearch returns with the next macOS login.

Some side-effects of WebAgentSearch include unstable internet connection, freezing and crashing apps, and new adware being installed. Overall, WebAgentSearch can result in a slower, unstable Mac and a diminished web browsing experience.

WebAgentSearch is only adware, but it is still harmful. It should be removed as soon as it’s discovered.

How adware gets installed

A malicious app like WebAgentSearch gets installed dishonestly, without your knowledge:

• It’s bundled with free apps that were downloaded from unreliable sites.
• It’s included in the adware bundles that are pushed by fake software update ads.
• Trojans can download and install WebAgentSearch in the background.

The most likely way that WebAgentSearch was installed has to be fake Adobe Flash updates. That’s why WebAgentSearch can be considered a trojan – because it is disguised as legitimate and trusted software. Malicious actors gain people’s trust by using the likeness of a widely known and trusted program or company. Then they push adware bundles.

Infected websites, sites that show aggressive low-quality ads, shady links under Youtube videos promising you a free movie, spam emails and social media messages – these are only some of the ways that adware trojans spread. Using an ad-blocker could help, but the most important thing is to be careful and recognize malicious advertisements.

How to remove WebAgentSearch

Make a backup of your Mac, just in case. If you choose to remove WebAgentSearch manually, you’ll be deleting a few important files. What if something goes wrong? You just can’t be too careful.

Next, reboot your Mac and hold the Shift button while it’s turning on. This tells it to start in safe mode – a troubleshooting mode that prevents certain unnecessary apps from starting (Support.apple.com).

Use an anti-malware app, like Combo Cleaner, Malwarebytes, or others, to scan your computer and detect and remove malware for you.

To remove WebAgentSearch manually, open Finder and open the Go menu at the top. Then, go down the list and click on “Go to Folder…”. Use it to open these folders: /Library/LaunchAgents, /Library/LaunchDaemons, ~/Library/LaunchAgents, and ~/Library/Application Support. Library folders are hidden by default, which is why you might need the Go to Folder dialog to reach them.

Now, check out the files and look for items with “WebAgentSearch” in their names. Delete them by dragging them to Trash.

Also, remove any Profiles that are unfamiliar to you and that you did not install. You can find Profiles in System Preferences. Profiles are used to enforce settings on your Mac and are often abused by Mac malware.

Delete the WebAgentSearch app from your Applications folder (if WebAgentSearch is there). Open your web browser and remove the WebAgentSearch extension.

To exit safe mode, reboot your Mac and don’t press the Shift button while the Mac is turning on. Scan your Mac with an anti-malware app to see if you removed all the malware.

Automatic Malware removal tools

Remove unwanted browser extensions

TopRemoving WebAgentSearch Mac Malware from Safari (Mac OS X)

• Click on the Safari menu.
• Choose Preferences.
  
• Click on the Extensions Tab.
• Click on the Uninstall button near the WebAgentSearch Mac Malware. Remove all other unknown or suspicious entries too. If you are not sure whether you need the extension or not, you can simply uncheck the Enable check-box to disable the extension temporarily.
  
• Restart Safari.

(Optional) Reset your browser’s settings

If you are still experiencing any issues related to WebAgentSearch Mac Malware, reset the settings of your browser to its default settings.

• Click on the Safari menu on the top left corner of the screen. Select Reset Safari.
  
• Select which options you want to reset (usually all of them come preselected) and click on the Reset button.
  

If you cannot reset your browser settings and the problem persists, scan your system with an anti-malware program.

TopRemoving WebAgentSearch Mac Malware from Chrome

• Click on the menu button on the top right corner of a Google Chrome window. Select “Settings”.
  
• Click “Extensions” on the left menu bar.
• Go through the extensions list and remove programs you do not need, especially similar to WebAgentSearch Mac Malware. Click on the trash bin icon next to WebAgentSearch Mac Malware or other add-ons you want to remove.
  
• Press on the “Remove” button on the Confirmation window.
  
• If unsure, you can disable them temporarily.
  
• Restart Chrome.

(Optional) Reset your browser’s settings

If you are still experiencing any issues related to WebAgentSearch Mac Malware, reset the settings of your browser to its default settings.

• Click on Chrome’s menu button (three horizontal lines) and select Settings.
  
• Scroll to the end of the page and click on the Reset settings button.
  
• Click on the Reset button on the confirmation box.
  

If you cannot reset your browser settings and the problem persists, scan your system with an anti-malware program.

TopRemoving WebAgentSearch Mac Malware from Firefox

• Click on the menu button on the top right corner of a Mozilla window and select the “Add-ons” icon (or press Ctrl+Shift+A on your keyboard).
  
• Go through Extensions and Addons list, remove everything WebAgentSearch Mac Malware related and items you do not recognise. If you do not know the extension and it is not made by Mozilla, Google, Microsoft, Oracle or Adobe then you probably do not need it.
  

(Optional) Reset your browser’s settings If you are still experiencing any issues related to WebAgentSearch Mac Malware, reset the settings of your browser to its default settings.

• Click on the menu button on the top right corner of a Mozilla Firefox window. Click on the Help button.
  
• Choose Troubleshooting Information on the Help menu.
  
• Click on the Reset Firefox button.
  
• Click on the Reset Firefox button on the confirmation box. Mozilla Firefox will close and change the settings to default.
  

If you cannot reset your browser settings and the problem persists, scan your system with an anti-malware program.