How to uninstall CommonHandler app/extension from Mac (Virus removal guide)

What is CommonHandler

CommonHandler is an adware application that targets Mac computers. Adware is something that created in order to show third-party ads to users without asking permission. Adware takes control of web browsers and redirects them to online ads and scam pages every time the users browse the Web. Adware can end up on Mac computers in various ways. Most commonly is when users install freeware and forget to uncheck the box for the optional applications installation.

Does adware steal your personal information? The CommonHandler adware can gather a wide variety of your personal data (your ip address, what is a web site you are viewing now, what you are looking for on the World Wide Web, which links you are clicking), which can later transfer to third parties. So, you should delete adware as quickly as possible. Here, in this blog post below, you can found the helpful steps on How to get rid of CommonHandler and get rid of intrusive ads from your MAC for free.

How does CommonHandler get on your MAC

Usually, adware gets into computers as part of a bundle with free programs, sharing files and other unsafe applications which users downloaded from the Net. The creators of adware pays software developers for distributing adware software within their applications. So, optional programs is often included as part of the setup file. In order to avoid the installation of any adware software: select only Manual, Custom or Advanced setup method and reject all additional software in which you are unsure.

Threat Summary

Name	CommonHandler, CommonHandler 1.0 app
Type	adware software, potentially unwanted application (PUA), Mac virus, Mac malware
Detection Names	MacOS.Agent-MT, Adware/Adload!OSX, Trojan-Downloader.OSX.Adload, Program:MacOS/Vigram.A, Osx.Adware.Cimpli, Adware.MAC.Generic, ApplicUnwnt and OSX.Trojan.Gen
Distribution	Free software installers, dubious popup ads, fake updaters and torrent downloads
Symptoms	The web page links redirect to a web sites different from what you expected, pop-ups and new tabs are loaded without your request, your machine starts automatically installing unexpected software, unexpected web browser plugins or toolbars keep coming back, unwanted changes in your internet browser such as displaying new tabs you didn’t open, speed test good but internet slow.
Removal	CommonHandler removal guide

How to remove CommonHandler

There exist several free adware removal tools. Also it is possible to get rid of CommonHandler adware manually. But we suggest to combine all these solutions below into the one removal algorithm. Follow the steps of the guide. Some of the steps below will require you to exit this web-site. So, please read the step-by-step guide carefully, after that bookmark it or open it on your smartphone for later reference.

To remove CommonHandler, execute the steps below:

1. Remove profiles created by CommonHandler
2. Check the list of installed software
3. Remove CommonHandler related files and folders
4. Scan your Mac with MalwareBytes
5. Remove CommonHandler from Safari, Chrome, Firefox
6. How to stay safe online

Remove profiles created by CommonHandler

CommonHandler can make changes to the Mac system such as malicious changes to browser settings, and the addition of malicious system profiles. You need to check the system preferences, find and remove malicious profiles and ensure your settings are as you expect.

Click the System Preferences icon ( ) in the Dock, or choose Apple menu ( ) > System Preferences.

In System Preferences, click Profiles, then select a profile related to CommonHandler.

Click the minus button ( – ) located at the bottom-left of the Profiles screen to remove the profile.
Note: if you do not see Profiles in the System Preferences, that means there are no profiles installed on your Mac computer, which is normal.

Check the list of installed software

Go to the Finder and delete questionable software, all programs you do not remember installing. It is important to pay the most attention to programs you have recently installed. If you don’t know what a program does, look for the answer on the Internet.

Open Finder and click “Applications” as shown below.

You will see a list of applications installed on your machine. We recommend to pay maximum attention to the program you installed last. Most likely, it is the CommonHandler adware. If you’re in doubt, you can always check the application by doing a search for her name in Google, Yahoo or Bing.

Once the program which you need to remove is found, simply right press on its name, and choose “Move to Trash”.

Don’t forget, select Finder, then “Empty Trash”.

Remove CommonHandler related files and folders

Now you need to try to find CommonHandler related files and folders, and then delete them manually. You need to look for these files in certain directories. To quickly open them, we recommend using the “Go to Folder…” command.

CommonHandler creates several files, these files must be found and removed. Below is a list of files associated with this unwanted application.

• /Library/LaunchDaemons/com.CommonHandler.system.plist
• ~/Library/LaunchAgents/com.CommonHandler.service.plist
• /Library/Application Support/.(RANDOM)/System/com.CommonHandler.system
• ~/Library/Application Support/.(RANDOM)/Services/com.CommonHandler.service.app

Some files created by CommonHandler are hidden from the user. To find and delete them, you need to enable “show hidden files”. To do this, use the shortcut CMD + SHIFT + . Press once to show hidden files and again to hide them. There is another way. Click Finder -> Applications -> Utilities -> Terminal. In Terminal, paste the following text: defaults write com.apple.finder AppleShowAllFiles YES

Press Enter. Hold the ‘Option/alt’ key, then right click on the Finder icon in the dock and click Relaunch.

Click on the Finder icon. From the menu bar, select Go and click “Go to Folder…”. As a result, a small window opens that allows you to quickly open a specific directory.

Check for CommonHandler generated files in the /Library/LaunchAgents folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/LaunchAgents

This will open the contents of the “/Library/LaunchAgents” folder. Look carefully at it and pay special attention to recently created files, as well as files that have a suspicious name. Move all suspicious files to the Trash. A few examples of files: com.CommonHandler.service.plist, com.net-preferences.plist, com.machelper.plist, macsearch.plist, com.google.defaultsearch.plist, , search.plist and installapp.plist. Most often, potentially unwanted programs, browser hijackers and adware software create several files with similar names.

Check for CommonHandler generated files in the /Library/Application Support folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/Application Support

This will open the contents of the “Application Support” folder. Look carefully at its contents, pay special attention to recently added/changed folders and files. Check the contents of suspicious folders, if there is a file with a name similar to com.CommonHandler.system, then this folder must be deleted. Move all suspicious folders and files to the Trash.

Check for CommonHandler generated files in the “~/Library/LaunchAgents” folder

In the “Go to Folder…” window, type the following text and press Go:
~/Library/LaunchAgents

Proceed in the same way as with the “/Library/LaunchAgents” and “/Library/Application Support” folders. Look for suspicious and recently added files. Move all suspicious files to the Trash.

Check for CommonHandler generated files in the /Library/LaunchDaemons folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/LaunchDaemons

Carefully browse the entire list of files and pay special attention to recently created files, as well as files that have a suspicious name. Move all suspicious files to the Trash. A few examples of files to be deleted: com.CommonHandler.system.plist, com.macsearch.system.plist, com.machelper.system.plist, com.installapp.system.plist and com.search.system.plist. In most cases, PUPs, browser hijackers and adware create several files with similar names.

Scan your Mac with MalwareBytes

We suggest using MalwareBytes AntiMalware (MBAM). You may download and install MalwareBytes to detect and get rid of CommonHandler associated apps from your Mac computer. When installed and updated, the malicious software remover automatically scans for and removes all security threats exist on the MAC.

MalwareBytes can be downloaded from the following link.

Once downloading is finished, close all software and windows on your computer. Run the saved file. Follow the prompts.

The MalwareBytes Anti-Malware (MBAM) will automatically start and you can see its main screen as displayed in the figure below.

Now click the “Scan” button . MalwareBytes AntiMalware (MBAM) program will scan through the whole machine for the CommonHandler adware software. Depending on your Apple Mac, the scan can take anywhere from a few minutes to close to an hour. While the utility is checking, you can see number of objects and files has already scanned.

After MalwareBytes completes the scan, a list of all items found is produced. Review the results once the utility has finished the system scan. If you think an entry should not be quarantined, then uncheck it. Otherwise, simply press the “Quarantine” button. The MalwareBytes will begin to delete CommonHandler adware.

Remove CommonHandler from Safari, Chrome, Firefox

This step will show you how to delete malicious extensions. This can remove CommonHandler and fix some browsing issues, especially after adware infection.

Google Chrome	Mozilla Firefox
Click on ‘three dots menu’ button at the top right corner of the Google Chrome window. Select ‘More tools’, then ‘Extensions’. Click ‘Remove’ to uninstall an extension. Click ‘Remove’ in the dialog box. You can also try to remove CommonHandler adware software by reset Google Chrome settings.	Click on ‘menu’ button and select ‘Add-ons’. Go to ‘Extensions’ tab. To uninstall an add-on, click on ‘Remove’ button next to it. If you are still experiencing issues with CommonHandler removal, you need to reset Firefox browser.
Safari
On the top menu select ‘Safari’, then ‘Preferences’. Select ‘Extensions’ tab. Select an extension you want to delete and click ‘Uninstall’ button next to it.

How to stay safe online

It’s also critical to protect your internet browsers from malicious websites and ads by using an ad-blocking program like AdGuard. Security experts says that it’ll greatly reduce the risk of malicious software, and potentially save lots of money. Additionally, the AdGuard can also protect your privacy by blocking almost all trackers.

1. Visit the following page to download AdGuard.
   
   

   AdGuard for Mac download
   3677 downloads
   Author: © Adguard
   Category: Security tools
   Update: January 17, 2018
   
2. Once the downloading process is done, start the downloaded file. You will see the “Setup Wizard” program window. Follow the prompts.
3. After the installation is done, press “Skip” to close the installation program and use the default settings, or press “Get Started” to see an quick tutorial which will assist you get to know AdGuard better.
4. In most cases, the default settings are enough and you do not need to change anything. Each time, when you run your MAC, AdGuard will start automatically and stop annoying ads, block malicious and misleading web pages.

To sum up

Now your MAC should be free of the CommonHandler adware. We suggest that you keep AdGuard (to help you stop unwanted advertisements and annoying malicious web pages) and MalwareBytes Anti Malware (MBAM) (to periodically scan your MAC system for new malware, hijackers and adware). Make sure that you have all the Critical Updates recommended for Mac OS. Without regular updates you WILL NOT be protected when new browser hijackers, malicious programs and adware are released.

If you are still having problems while trying to delete CommonHandler ads from your internet browser, then ask for help here.