How to remove Searchitdown malware from Mac from Chrome, Firefox, Safari

What is Searchitdown.com?

The cyber threat analysts have determined that Searchitdown.com is a website that’s promoted by PUAs and Browser hijackers. Browser hijackers are developed to take over the web browser and control user’s surfing preferences. It commonly aims at Safari and Google Chrome, but it’s possible that it can hijack other web-browser too. Potentially unwanted applications (PUAs) and browser hijackers can sneak into the MAC system unnoticed due to the fact that it’s actively being promoted in freeware. We recommend that you get rid of Searchitdown.com as soon as you notice the changes it has made to your startpage, default search engine and newtab page.

Most often, browser hijackers promote fake search engines by setting their address as the default search provider. In this case, the browser hijacker installs Searchitdown.com as a search provider. This means that users whose web browser is affected with the hijacker are forced to visit Searchitdown.com each time they search in the Net, open a new window or tab. And since Searchitdown.com is not a real search provider and does not have the ability to find the information users need, this web-site redirects the user’s internet browser to the Bing search engine.

Another reason why you need to delete Searchitdown.com is its online data-tracking activity. It can gather personal data, including:

• IP addresses;
• URLs visited;
• search queries/terms;
• clicks on links and advertisements;
• web browser version information.

As evident, browser hijackers and potentially unwanted apps are quite dangerous. So, we recommend you remove it from your MAC without a wait. Follow the instructions presented below to remove Searchitdown.com from Safari, Firefox and Chrome.

How can a browser hijacker get on your MAC

Potentially unwanted apps and browser hijackers actively distributed with freeware, together with the setup file of these programs. Therefore, it’s very important, when installing an unknown application even downloaded from well-known website, read the Terms of use and the Software license, as well as to choose the Manual, Advanced or Custom install mode. In this method, you can disable the install of unneeded modules and applications and protect your machine from such hijackers as the Searchitdown.com.

Threat Summary

Name	Searchitdown.com
Type	redirect virus, search engine hijacker, browser hijacker, PUP, home page hijacker
Affected Browser Settings	new tab page URL, home page, search provider
Distribution	dubious pop-up advertisements, fake software updaters, free software setup files
Symptoms	You experience a huge count of of unexpected popup windows. Every time you perform an Internet search, your browser is redirected to another web-site. There is an unwanted program in the ‘App & Features’ section of Microsoft Windows settings. Unwanted browser toolbar(s) Your web browser home page has replaced and you are unable to modify it back.
Removal	Searchitdown.com removal guide

How to remove Searchitdown.com

There are several steps to removing Searchitdown.com search, because it installs itself so deeply into Mac. You need to delete all suspicious and unknown programs, then delete malicious add-ons from the Safari, Mozilla Firefox and Google Chrome and other internet browsers you have installed. Finally, you need to reset your internet browser settings to remove any changes Searchitdown.com browser hijacker has made, and then check your Apple Mac with MalwareBytes Anti-Malware (MBAM) to ensure the hijacker is fully removed. It will take a while.

To remove Searchitdown.com, execute the steps below:

1. Remove profiles created by Searchitdown.com
2. Uninstall Searchitdown.com associated software by using the Finder
3. Remove Searchitdown.com related files and folders
4. Scan your Mac with MalwareBytes
5. Remove Searchitdown.com from Safari, Chrome, Firefox
6. Block Searchitdown.com and other unwanted web pages

Remove profiles created by Searchitdown.com

Searchitdown.com can make changes to the Mac system such as malicious changes to browser settings, and the addition of malicious system profiles. You need to check the system preferences, find and remove malicious profiles and ensure your settings are as you expect.

Click the System Preferences icon ( ) in the Dock, or choose Apple menu ( ) > System Preferences.

In System Preferences, click Profiles, then select a profile related to Searchitdown.com.

Click the minus button ( – ) located at the bottom-left of the Profiles screen to remove the profile.
Note: if you do not see Profiles in the System Preferences, that means there are no profiles installed on your Mac, which is normal.

Uninstall Searchitdown.com associated software by using the Finder

The next step in deleting adware, browser hijackers and PUPs by yourself is to go into the Finder, then Applications. Take a look at the list of programs on your Mac computer and see if there are any dubious and unknown apps. If you see any, you need to remove it. Of course, before doing so, you can do an Web search to find details on the program. If it is a adware, PUP and browser hijacker, you will likely find information that says so.

Open Finder and click “Applications”.

Very carefully look around the entire list of programs installed on your MAC. Most likely, one of them is the browser hijacker that developed to redirect your internet browser to the Searchitdown.com web-page. Once you have found a questionable, unwanted or unused program, right click to it and choose “Move to Trash”. Another way is drag the program from the Applications folder to the Trash.

Don’t forget, select Finder -> “Empty Trash”.

Remove Searchitdown.com related files and folders

Now you need to try to find Searchitdown.com related files and folders, and then delete them manually. You need to look for these files in certain directories. To quickly open them, we recommend using the “Go to Folder…” command.

Searchitdown.com creates several files, these files must be found and removed. Some files created by Searchitdown are hidden from the user. To find and delete them, you need to enable “show hidden files”. To do this, use the shortcut CMD + SHIFT + . Press once to show hidden files and again to hide them. There is another way. Click Finder -> Applications -> Utilities -> Terminal. In Terminal, paste the following text: defaults write com.apple.finder AppleShowAllFiles YES

Press Enter. Hold the ‘Option/alt’ key, then right click on the Finder icon in the dock and click Relaunch.

Click on the Finder icon. From the menu bar, select Go and click “Go to Folder…”. As a result, a small window opens that allows you to quickly open a specific directory.

Check for Searchitdown generated files in the /Library/LaunchAgents folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/LaunchAgents

This will open the contents of the “/Library/LaunchAgents” folder. Look carefully at it and pay special attention to recently created files, as well as files that have a suspicious name. Move all suspicious files to the Trash. A few examples of files: com.machelper.plist, com.Searchitdown.service.plist, search.plist, macsearch.plist, com.net-preferences.plist, com.google.defaultsearch.plist, and installapp.plist. Most often, potentially unwanted programs, browser hijackers and adware create several files with similar names.

Check for Searchitdown generated files in the /Library/Application Support folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/Application Support

This will open the contents of the “Application Support” folder. Look carefully at its contents, pay special attention to recently added/changed folders and files. Check the contents of suspicious folders, if there is a file with a name similar to com.Searchitdown.system, then this folder must be deleted. Move all suspicious folders and files to the Trash.

Check for Searchitdown generated files in the “~/Library/LaunchAgents” folder

In the “Go to Folder…” window, type the following text and press Go:
~/Library/LaunchAgents

Proceed in the same way as with the “/Library/LaunchAgents” and “/Library/Application Support” folders. Look for suspicious and recently added files. Move all suspicious files to the Trash.

Check for Searchitdown generated files in the /Library/LaunchDaemons folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/LaunchDaemons

Carefully browse the entire list of files and pay special attention to recently created files, as well as files that have a suspicious name. Move all suspicious files to the Trash. A few examples of files to be deleted: com.machelper.system.plist, com.macsearch.system.plist, com.search.system.plist, com.installapp.system.plist and com.Searchitdown.system.plist. In most cases, browser hijackers, potentially unwanted programs and adware software create several files with similar names.

Scan your Mac with MalwareBytes

If you carefully followed the previous steps, then you should be able to delete Searchitdown.com. Of course, very often PUPs, adware and browser hijackers hides on a Mac device, disguising itself as legitimate apps and files. Therefore, in some cases, it is difficult for an inexperienced user to decide whether a particular file is part of adware, potentially unwanted programs and browser hijackers. Therefore, we recommend you to run MalwareBytes to scan the Mac device.

1. MalwareBytes Free can be downloaded from the following link.
   
   

   Malwarebytes Anti-malware (Mac)
   20841 downloads
   Author: Malwarebytes
   Category: Security tools
   Update: September 10, 2020
   
2. Once the download is done, close all programs and windows on your computer. Open a directory in which you saved it. Run the downloaded file and follow the prompts.
3. Press the “Scan” button to perform a system scan for the hijacker which changes web-browser settings to Searchitdown.com. When a threat is detected, the count of the security threats will change accordingly. Wait until the the scanning is complete.
4. Once finished, MalwareBytes will show a scan report. When you are ready, press “Quarantine”.

Remove Searchitdown.com from Safari, Chrome, Firefox

Unwanted Searchitdown.com home page or other symptoms of browser hijacker in your web browser is a good reason to find and remove harmful add-ons. This is an easy method to recover browsers settings and not lose any important information.

Google Chrome	Mozilla Firefox
In the top right corner, click on Chrome’s main menu button, represented by three vertical dots. Select ‘More tools’, then ‘Extensions’. Click ‘Remove’ to uninstall an extension. Click ‘Remove’ in the dialog box. You can also try to remove Searchitdown.com startpage by reset Chrome settings.	Click on ‘menu’ button and select ‘Add-ons’. Go to ‘Extensions’ tab. To uninstall an add-on, click on ‘Remove’ button next to it. If you are still experiencing problems with Searchitdown.com removal, you need to reset Firefox browser.
Safari
On the top menu select ‘Safari’, then ‘Preferences’. Select ‘Extensions’ tab. Select an extension you want to delete and click ‘Uninstall’ button next to it.

Block Searchitdown.com and other unwanted web pages

The AdGuard is a very good ad-blocker program for the Google Chrome, Safari and Mozilla Firefox, with active user support. It does a great job by removing certain types of unwanted advertisements, popunders, popups, intrusive newtabs, and even full page advertisements and web site overlay layers. Of course, the AdGuard can stop the Searchitdown.com redirects automatically or by using a custom filter rule.

1. Installing the AdGuard is simple. First you will need to download AdGuard on your MS Windows Desktop from the link below.
   
   

   AdGuard for Mac download
   3677 downloads
   Author: © Adguard
   Category: Security tools
   Update: January 17, 2018
   
2. After the download is complete, start the downloaded file. You will see the “Setup Wizard” program window. Follow the prompts.
3. When the setup is complete, press “Skip” to close the install program and use the default settings, or click “Get Started” to see an quick tutorial that will allow you get to know AdGuard better.
4. In most cases, the default settings are enough and you do not need to change anything. Each time, when you launch your MAC system, AdGuard will run automatically and stop intrusive advertisements, block Searchitdown.com, as well as other malicious or misleading web-sites.

To sum up

Once you have finished the steps outlined above, your MAC system should be clean from hijacker responsible for modifying your browser settings to Searchitdown.com. The Firefox, Chrome and Safari will no longer open the Searchitdown.com website on startup. Unfortunately, if the instructions does not help you, then you have caught a new hijacker, and then the best way – ask for help here.