How to uninstall WindowsMegabyte app/extension from Mac (Virus removal guide)

What is WindowsMegabyte

According to security experts, WindowsMegabyte is a malicious application that belongs to the Adware family . In most cases, adware installs on MAC computers in a bundle with free applications that users downloaded and installed from the Internet. Once it gets inside the computer, it configures itself to start automatically when the computer is turned on. The WindowsMegabyte adware can alter MAC settings, redirect web browser to unwanted scam pages, display unwanted pop up advertisements from various third-party ad networks and these intrusive ads is hard to shut down.

The worst is, WindowsMegabyte can gather and transmit sensitive information without your knowledge. It can be used to track information about websites visited, browser and system information, and your MAC IP address.

How does WindowsMegabyte get on your machine

The majority of adware gets on MAC computers together with free software or even paid apps which users can easily download online. The install packages of such apps, most often, clearly show that they will install third-party software. The option is given to users to stop the setup of any additional apps. So, in order to avoid the installation of any adware software: read all disclaimers and install screens very carefully, choose only Custom or Advanced setup type and reject all third-party programs in which you are unsure.

Threat Summary

Name	WindowsMegabyte
Type	adware, potentially unwanted program (PUP), Mac virus, Mac malware
Detection Names	ApplicUnwnt, OSX.Trojan.Gen, Adware/Adload!OSX, MacOS.Agent-MT, Osx.Adware.Cimpli, Program:MacOS/Vigram.A, Trojan-Downloader.OSX.Adload and Adware.MAC.Generic
Distribution	Free software installers, fake software updaters, dubious popup advertisements and torrent downloads
Symptoms	Your web-browser is redirected to web-sites you did not want, you experience a large amount of of unwanted pop-up windows, your computer starts automatically installing unexpected apps, unexpected internet browser add-ons or toolbars keep coming back, your web-browser homepage has replaced and you are unable to modify it back, fast Internet but slow browsing speeds.
Removal	WindowsMegabyte removal guide

How to Remove WindowsMegabyte adware software (removal steps)

There are a simple manual guide below which will help you to remove WindowsMegabyte adware from your Mac. The most effective method to delete this adware is to complete the manual removal tutorial and then use MalwareBytes Anti Malware automatic tool (it is free). The manual solution will assist to weaken this adware and these malicious software removal tools will completely get rid of WindowsMegabyte adware and return the Safari, Google Chrome and Mozilla Firefox settings to default.

To remove WindowsMegabyte, complete the following steps:

1. Remove profiles created by WindowsMegabyte
2. Remove WindowsMegabyte related applications through the Finder
3. Remove WindowsMegabyte related files and folders
4. Scan your Mac with MalwareBytes
5. Remove WindowsMegabyte from Safari, Chrome, Firefox
6. How to stay safe online

Remove profiles created by WindowsMegabyte

WindowsMegabyte can install a configuration profile on the Mac system to block changes made to the browser settings. Therefore, you need to open system preferences, find and delete the profile installed by the adware.

Click Apple menu ( ) > System Preferences.

In System Preferences, select Profiles. if there is no Profiles in the list of preferences, that means there are no profiles installed on the Mac device. If there is Profiles in the list, then click on it, then select a profile related to WindowsMegabyte.

To delete a malicious profile, click on the minus button ( – ) located at the bottom-left of the Profiles screen.

Remove WindowsMegabyte related applications through the Finder

Try to identify and delete the application that causes the appearance of annoying ads or web-browser redirect, using the Applications list which is located in the Finder.

Open Finder and click “Applications”.

It will display a list of all applications installed on your MAC. Scroll through the all list, and uninstall any suspicious and unknown programs. Right click to suspicious application and select “Move to Trash”. Another method is drag the application from the Applications folder to the Trash.

Most important, scroll through the all list, and move to trash any unknown applications. Don’t forget, select Finder -> Empty Trash.

Remove WindowsMegabyte related files and folders

Now you need to try to find WindowsMegabyte related files and folders, and then delete them manually. You need to look for these files in certain directories. To quickly open them, we recommend using the “Go to Folder…” command.

WindowsMegabyte creates several files, these files must be found and removed. Below is a list of files associated with this unwanted program.

• /Library/LaunchDaemons/com.WindowsMegabyte.system.plist
• ~/Library/LaunchAgents/com.WindowsMegabyte.service.plist
• /Library/Application Support/.(RANDOM)/System/com.WindowsMegabyte.system
• ~/Library/Application Support/.(RANDOM)/Services/com.WindowsMegabyte.service.app

Some files created by WindowsMegabyte are hidden from the user. To find and delete them, you need to enable “show hidden files”. To do this, use the shortcut CMD + SHIFT + . Press once to show hidden files and again to hide them. There is another way. Click Finder -> Applications -> Utilities -> Terminal. In Terminal, paste the following text: defaults write com.apple.finder AppleShowAllFiles YES

Press Enter. Hold the ‘Option/alt’ key, then right click on the Finder icon in the dock and click Relaunch.

Click on the Finder icon. From the menu bar, select Go and click “Go to Folder…”. As a result, a small window opens that allows you to quickly open a specific directory.

Check for WindowsMegabyte generated files in the /Library/LaunchAgents folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/LaunchAgents

This will open the contents of the “/Library/LaunchAgents” folder. Look carefully at it and pay special attention to recently created files, as well as files that have a suspicious name. Move all suspicious files to the Trash. A few examples of files: com.net-preferences.plist, search.plist, com.google.defaultsearch.plist, , com.WindowsMegabyte.service.plist, installapp.plist, com.machelper.plist and macsearch.plist. Most often, adware, browser hijackers and PUPs create several files with similar names.

Check for WindowsMegabyte generated files in the /Library/Application Support folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/Application Support

This will open the contents of the “Application Support” folder. Look carefully at its contents, pay special attention to recently added/changed folders and files. Check the contents of suspicious folders, if there is a file with a name similar to com.WindowsMegabyte.system, then this folder must be deleted. Move all suspicious folders and files to the Trash.

Check for WindowsMegabyte generated files in the “~/Library/LaunchAgents” folder

In the “Go to Folder…” window, type the following text and press Go:
~/Library/LaunchAgents

Proceed in the same way as with the “/Library/LaunchAgents” and “/Library/Application Support” folders. Look for suspicious and recently added files. Move all suspicious files to the Trash.

Check for WindowsMegabyte generated files in the /Library/LaunchDaemons folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/LaunchDaemons

Carefully browse the entire list of files and pay special attention to recently created files, as well as files that have a suspicious name. Move all suspicious files to the Trash. A few examples of files to be deleted: com.search.system.plist, com.machelper.system.plist, com.macsearch.system.plist, com.WindowsMegabyte.system.plist and com.installapp.system.plist. In most cases, potentially unwanted programs, browser hijackers and adware software create several files with similar names.

Scan your Mac with MalwareBytes

If you’re still having problems with the WindowsMegabyte removal or just wish to check your Mac computer occasionally for adware software and other malicious software, then download MalwareBytes Anti Malware (MBAM). It’s free for home use, and detects and removes various unwanted apps that attacks your Apple Mac or degrades computer performance. MalwareBytes Free can get rid of potentially unwanted programs, adware, toolbars and browser hijackers as well as malicious software, including ransomware and trojans.

MalwareBytes Anti Malware can be downloaded from the following link.

When the downloading process is finished, close all apps and windows on your MAC OS. Open a directory in which you saved it. Run the saved file and follow the prompts.

Once installation is finished, you’ll see window as displayed on the image below.

Now click the “Scan” button to scan for WindowsMegabyte adware. A scan may take anywhere from 10 to 30 minutes, depending on the number of files on your machine and the speed of your MAC. When a threat is found, the number of the security threats will change accordingly.

After finished, the results are displayed in the scan report. Make sure to check mark the threats which are unsafe and then press “Quarantine” button.

The Malwarebytes will now remove WindowsMegabyte .

Remove WindowsMegabyte from Safari, Chrome, Firefox

If you have ‘WindowsMegabyte ‘ removal problem, then remove unwanted add-ons can help you. In the steps below we’ll show you the way to get rid of malicious addons without reinstall. This will also allow to remove WindowsMegabyte adware from your browser.

Google Chrome	Mozilla Firefox
In the top-right corner, expand the Google Chrome menu. In the menu go to ‘More tools’, then ‘Extensions’. Click ‘Remove’ to uninstall an extension. Click ‘Remove’ in the dialog box. You can also try to get rid of WindowsMegabyte adware software by reset Chrome settings.	Click on ‘menu’ button and select ‘Add-ons’. Go to ‘Extensions’ tab. To uninstall an add-on, click on ‘Remove’ button next to it. If you are still experiencing problems with WindowsMegabyte adware removal, you need to reset Mozilla Firefox browser.
Safari
On the top menu select ‘Safari’, then ‘Preferences’. Select ‘Extensions’ tab. Select an extension you want to delete and click ‘Uninstall’ button next to it.

How to stay safe online

Using an ad-blocker program such as AdGuard is an effective way to alleviate the risks. Additionally, ad-blocker software will also protect you from malicious ads and web pages, and, of course, stop redirection chain to misleading, scam and similar web-sites.

Please go to the following link to download the latest version of AdGuard for Mac OS.

When the download is finished, run the downloaded file. The “Setup Wizard” window will show up on the computer screen.

Follow the prompts. AdGuard will then be installed. A window will show up asking you to confirm that you want to see a quick guidance. Click “Skip” button to close the window and use the default settings, or click “Get Started” to see an quick instructions that will allow you get to know AdGuard better.

Each time, when you launch your MAC OS, AdGuard will start automatically and stop annoying popup advertisements, block harmful and misleading web-sites.

Finish words

After completing the step-by-step instructions shown above, your MAC OS should be clean from the adware and other malicious software. The Safari, Mozilla Firefox and Chrome will no longer display any unwanted WindowsMegabyte ads when you surf the Net. Unfortunately, if the few simple steps does not help you, then you have caught a new adware, and then the best way – ask for help.

Please create a new question by using the “Ask Question” button in the Questions and Answers. Try to give us some details about your problems, so we can try to help you more accurately. Wait for one of our trained “Security Team” or Site Administrator to provide you with knowledgeable assistance tailored to your problem with the unwanted WindowsMegabyte .