How to uninstall ExploreSync app/extension from Mac (Virus removal guide)

What is ExploreSync

ExploreSync is an adware app that targets Mac users. Adware is considered by many to be synonymous with ‘malware’. It’s a form of malicious software that displays unwanted advertisements to computer users. Some examples include pop-up ads, push notifications or unclosable windows. Adware software can be installed onto your MAC via infected web-pages, when you open email attachments, anytime you download and install free software.

The worst is, the ExploreSync adware can gather confidential info, including:

• IP addresses;
• URLs visited;
• search queries/terms;
• clicks on links and ads;
• browser version information.

So, if you happen to encounter the adware, then be quick and take effort to remove it as soon as possible. Follow the steps below to get rid of ExploreSync. Let us know how you managed by sending us your comments please.

How does ExploreSync get on your MAC system

The majority of adware gets onto Apple Mac by being attached to free software or even paid programs that Web users can easily download online. The setup packages of such programs, in many cases, clearly show that they will install third-party applications. The option is given to users to block the installation of any third-party applications. So, in order to avoid the installation of any adware: read all disclaimers and install screens very carefully, select only Custom or Advanced installation type and disable all bundled programs in which you are unsure.

Threat Summary

Name	ExploreSync
Type	adware, potentially unwanted program (PUP), Mac virus, Mac malware
Detection Names	Trojan-Downloader.OSX.Adload, Adware/Adload!OSX, Program:MacOS/Vigram.A, OSX.Trojan.Gen, Osx.Adware.Cimpli, MacOS.Agent-MT, ApplicUnwnt and Adware.MAC.Generic
Distribution	Free software installers, shady popup ads, fake software updaters and torrent downloads
Symptoms	Every time you perform an Internet search, your web-browser is redirected to another webpage, advertising pop ups won’t go away, new entries appear in your Applications folder, unwanted web-browser toolbars, your browser startpage has replaced and you are unable to change it back, slow Internet or slow browsing.
Removal	ExploreSync removal guide

How to Remove ExploreSync adware (removal guide)

If you have consistent pop-ups or unwanted ads, slow MAC OS, crashing MAC OS issues, you are in need of adware removal assistance. The guide below will guide you forward to get ExploreSync removed and will help you get your MAC OS operating at peak capacity again.

To remove ExploreSync, use the steps below:

1. Remove unwanted profiles on Mac device
2. Check the list of installed programs
3. Remove ExploreSync related files and folders
4. Scan your Mac with MalwareBytes
5. Remove ExploreSync from Safari, Chrome, Firefox
6. How to stay safe online
7. To sum up

Remove unwanted profiles on Mac device

ExploreSync can make changes to the Mac system such as malicious changes to browser settings, and the addition of malicious system profiles. You need to check the system preferences, find and remove malicious profiles and ensure your settings are as you expect.

Click the System Preferences icon ( ) in the Dock, or choose Apple menu ( ) > System Preferences.

In System Preferences, click Profiles, then select a profile associated with ExploreSync.

Click the minus button ( – ) located at the bottom-left of the Profiles screen to remove the profile.
Note: if you do not see Profiles in the System Preferences, that means there are no profiles installed on your Mac computer, which is normal.

Check the list of installed programs

It’s of primary importance to identify and remove adware software, browser hijackers and potentially unwanted programs through ‘Applications’ section of your Finder.

Open Finder and click “Applications”.

Very carefully look around the entire list of software installed on your computer. Most likely, one of them is the ExploreSync adware. Once you’ve found a dubious, unwanted or unused program, right click to it and choose “Move to Trash”. Another way is drag the program from the Applications folder to the Trash.

Don’t forget, select Finder -> “Empty Trash”.

Remove ExploreSync related files and folders

Now you need to try to find ExploreSync related files and folders, and then delete them manually. You need to look for these files in certain directories. To quickly open them, we recommend using the “Go to Folder…” command.

ExploreSync creates several files, these files must be found and removed. Below is a list of files associated with this unwanted program.

• /Library/LaunchDaemons/com.ExploreSync.system.plist
• ~/Library/LaunchAgents/com.ExploreSync.service.plist
• /Library/Application Support/.(RANDOM)/System/com.ExploreSync.system
• ~/Library/Application Support/.(RANDOM)/Services/com.ExploreSync.service.app

Some files created by ExploreSync are hidden from the user. To find and delete them, you need to enable “show hidden files”. To do this, use the shortcut CMD + SHIFT + . Press once to show hidden files and again to hide them. There is another way. Click Finder -> Applications -> Utilities -> Terminal. In Terminal, paste the following text: defaults write com.apple.finder AppleShowAllFiles YES

Press Enter. Hold the ‘Option/alt’ key, then right click on the Finder icon in the dock and click Relaunch.

Click on the Finder icon. From the menu bar, select Go and click “Go to Folder…”. As a result, a small window opens that allows you to quickly open a specific directory.

Check for ExploreSync generated files in the /Library/LaunchAgents folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/LaunchAgents

This will open the contents of the “/Library/LaunchAgents” folder. Look carefully at it and pay special attention to recently created files, as well as files that have a suspicious name. Move all suspicious files to the Trash. A few examples of files: com.ExploreSync.service.plist, installapp.plist, search.plist, com.machelper.plist, macsearch.plist, com.net-preferences.plist and com.google.defaultsearch.plist, . Most often, PUPs, adware and browser hijackers create several files with similar names.

Check for ExploreSync generated files in the /Library/Application Support folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/Application Support

This will open the contents of the “Application Support” folder. Look carefully at its contents, pay special attention to recently added/changed folders and files. Check the contents of suspicious folders, if there is a file with a name similar to com.ExploreSync.system, then this folder must be deleted. Move all suspicious folders and files to the Trash.

Check for ExploreSync generated files in the “~/Library/LaunchAgents” folder

In the “Go to Folder…” window, type the following text and press Go:
~/Library/LaunchAgents

Proceed in the same way as with the “/Library/LaunchAgents” and “/Library/Application Support” folders. Look for suspicious and recently added files. Move all suspicious files to the Trash.

Check for ExploreSync generated files in the /Library/LaunchDaemons folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/LaunchDaemons

Carefully browse the entire list of files and pay special attention to recently created files, as well as files that have a suspicious name. Move all suspicious files to the Trash. A few examples of files to be deleted: com.machelper.system.plist, com.macsearch.system.plist, com.installapp.system.plist, com.ExploreSync.system.plist and com.search.system.plist. In most cases, browser hijackers, adware and PUPs create several files with similar names.

Scan your Mac with MalwareBytes

You can remove ExploreSync related files automatically through the use of MalwareBytes Free. We recommend this free malware removal utility because it may easily remove adware, browser hijackers, potentially unwanted programs and toolbars with all their components such as files, folders and system entries.

Download MalwareBytes AntiMalware (MBAM) on your MAC from the following link.

After downloading is finished, run it and follow the prompts. Press the “Scan” button to perform a system scan with this utility for the ExploreSync . This procedure may take some time, so please be patient. While the MalwareBytes Free application is checking, you can see how many objects it has identified as threat. Review the report and then press the “Quarantine” button.

The MalwareBytes Anti Malware is a free program that you can use to delete all detected folders, files, malicious services and so on.

Remove ExploreSync from Safari, Chrome, Firefox

Remove unwanted extensions is a simple method to delete ExploreSync adware and restore internet browser’s settings that have been changed by adware software.

Google Chrome	Mozilla Firefox
Click on ‘three dots menu’ button at the top right corner of the Google Chrome window. In the menu go to ‘More tools’, then ‘Extensions’. Click ‘Remove’ to uninstall an extension. Click ‘Remove’ in the dialog box. You can also try to delete ExploreSync adware software by reset Google Chrome settings.	Click on ‘menu’ button and select ‘Add-ons’. Go to ‘Extensions’ tab. To uninstall an add-on, click on ‘Remove’ button next to it. If you are still experiencing problems with ExploreSync adware removal, you need to reset Mozilla Firefox browser.
Safari
On the top menu select ‘Safari’, then ‘Preferences’. Select ‘Extensions’ tab. Select an extension you want to delete and click ‘Uninstall’ button next to it.

How to stay safe online

Enabling an ad-blocking application like AdGuard is an effective way to alleviate the risks. Additionally, adblocker software will also protect you from harmful ads and web pages, and, of course, block redirection chain to misleading, scam and similar web sites.

1. Download AdGuard by clicking on the following link.
   
   

   AdGuard for Mac download
   3677 downloads
   Author: © Adguard
   Category: Security tools
   Update: January 17, 2018
   
2. After downloading is done, start the downloaded file. You will see the “Setup Wizard” program window. Follow the prompts.
3. When the setup is complete, click “Skip” to close the setup application and use the default settings, or press “Get Started” to see an quick tutorial which will assist you get to know AdGuard better.
4. In most cases, the default settings are enough and you don’t need to change anything. Each time, when you start your computer, AdGuard will start automatically and stop annoying advertisements, block harmful and misleading web sites.

To sum up

Now your MAC should be free of the ExploreSync adware. We suggest that you keep MalwareBytes Free (to periodically scan your MAC system for new adwares and other malicious software) and AdGuard (to help you block unwanted pop up advertisements and malicious webpages). Moreover, to prevent any adware, please stay clear of unknown and third party apps.

If you need more help with ExploreSync related issues, go to here.