How to Remove a Browser Hijacker on Mac

What Causes This?

A browser hijacker on Mac is usually bundled with free apps, fake software updates, sketchy browser extensions, or files downloaded from unsafe websites. Once installed, it can change your homepage, default search engine, new tab page, or inject redirects and ads into your browser.

On macOS, these hijackers often stick around by adding login items, launch agents, profiles, or unwanted extensions so the changes come back after you reset the browser. In many cases, the problem is not the browser itself, but extra software running in the background.

Common Symptoms

• Your homepage or default search engine changes without your permission
• Searches get redirected through unfamiliar websites
• You see more pop-ups, ads, or fake virus warnings than usual
• A browser extension appears that you do not remember installing
• Browser settings keep changing back after you reset them

How to Fix It Manually

1. Remove suspicious apps from your Mac

   1. Open Finder and click Applications.
   2. Look for apps you do not recognize, especially anything installed around the time the problem started.
   3. Drag suspicious apps to the Trash.
   4. Right-click the Trash and choose Empty Trash.

2. Check Login Items and background apps

   1. Click the Apple menu > System Settings.
   2. Go to General > Login Items.
   3. Under Open at Login, remove anything unfamiliar by selecting it and clicking the minus (-) button.
   4. Also review Allow in the Background and turn off anything suspicious.

3. Remove unwanted browser extensions

   1. In Safari, go to Safari > Settings > Extensions and uninstall anything you do not trust.
   2. In Chrome, open Chrome, click the three-dot menu > Extensions > Manage Extensions, then remove suspicious extensions.
   3. In Firefox, click the menu button > Add-ons and themes > Extensions, then remove anything unwanted.

4. Reset your browser settings

   1. In Safari, open Safari > Settings and check the General and Search tabs. Set your preferred homepage and search engine back manually.
   2. In Chrome, open Settings > Reset settings > Restore settings to their original defaults.
   3. In Firefox, type about:support in the address bar and click Refresh Firefox.

5. Check for configuration profiles

   1. Open System Settings and look for Profiles.
   2. If you see a profile you did not install, select it and remove it.
   3. This matters because some hijackers use profiles to lock browser settings and force redirects.

6. Delete leftover support files

   1. In Finder, click Go > Go to Folder.
   2. Check these folders one at a time:
      • ~/Library/LaunchAgents
      • /Library/LaunchAgents
      • /Library/LaunchDaemons
      • ~/Library/Application Support
   3. Look for files or folders linked to the suspicious app or hijacker name and move them to the Trash.
   4. Restart your Mac after removing them.

7. Run a final check

   1. Open your browser and test search, homepage, and new tab behavior.
   2. If redirects continue, repeat the extension and profile checks, because something may still be reinstalling the hijacker.

Fix It Automatically with Kudu

If you do not want to hunt through apps, extensions, login items, and hidden support files yourself, Kudu can scan for browser hijacker traces and remove the junk that keeps changing your settings. It is a faster way to clean browser clutter, stop redirects, and get your normal homepage and search engine back.

Download Kudu Free →