What is ProjectSource
According to security researchers, ProjectSource is an adware application that targets Mac computers. Adware is short for ‘ad software’. Additionally, some malware contains adware or behaves similarly to adware. The ProjectSource adware displays unwanted advertisements that appear in unclosable windows or in-text links on computer. In order to show unwanted ads as often as possible it can alter browser settings and MAC settings. The authors of adware software do so in order to earn revenue via third-party ad network. Thus every your click on the ads generates money for them.
Another reason why you need to delete ProjectSource is its online data-tracking activity. It can monetize its functionality by gathering user info from your browsing sessions. This confidential information, afterwards, can be easily sold to third parties. This puts your privacy information at a security risk.
How does ProjectSource get on your Apple Mac
Adware usually comes bundled with freeware which downloaded from the World Wide Web. Which means that you need to be proactive and carefully read the Terms of use and the License agreement properly. For the most part, adware and potentially unwanted software will be clearly described, so take the time to carefully read all the information about the software that you downloaded and want to install on your computer.
Threat Summary
Name | ProjectSource |
Type | adware, potentially unwanted program (PUP), Mac malware, Mac virus |
Detection Names | ApplicUnwnt, Adware/Adload!OSX, MacOS.Agent-MT, Osx.Adware.Cimpli, Adware.MAC.Generic, Trojan-Downloader.OSX.Adload, OSX.Trojan.Gen and Program:MacOS/Vigram.A |
Distribution | Freeware installers, suspicious pop up ads, torrent downloads and fake updaters |
Symptoms | When you go to a web-site, you’re constantly redirected to another website that you do not intend to visit, popups and new tab pages are loaded without your request, your computer starts automatically installing unexpected programs, unwanted browser toolbars, your browser search provider has changed without your permission, your browser slows to a crawl. |
Removal | ProjectSource removal guide |
How to Remove ProjectSource adware (removal instructions)
There exist several free adware removal tools. Also it is possible to remove ProjectSource manually. But we recommend to combine all these methods below into the one removal algorithm. Follow the steps of the guidance. Read it once, after doing so, please bookmark this page (or open it on your smartphone) as you may need to exit your internet browser or restart your MAC.
To remove ProjectSource, complete the following steps:
- Remove profiles created by ProjectSource
- Uninstall ProjectSource associated software by using the Finder
- Remove ProjectSource related files and folders
- Scan your Mac with MalwareBytes
- Remove ProjectSource from Safari, Chrome, Firefox
- How to stay safe online
Remove profiles created by ProjectSource
ProjectSource can install a configuration profile on the Mac system to block changes made to the browser settings. Therefore, you need to open system preferences, find and delete the profile installed by the adware software.
Click the System Preferences icon ( ) in the Dock, or choose Apple menu ( ) > System Preferences.
In System Preferences, click Profiles, then select a profile related to ProjectSource.
Click the minus button ( – ) located at the bottom-left of the Profiles screen to remove the profile.
Note: if you do not see Profiles in the System Preferences, that means there are no profiles installed on your Mac computer, which is normal.
Uninstall ProjectSource associated software by using the Finder
Some PUPs, adware and browser hijackers may be uninstalled by uninstalling the free applications they came with. If this way does not succeed, then looking them up in the list of installed programs in the Finder. Use the “Move to Trash” command in order to remove them.
Open Finder and click “Applications”.
Very carefully look around the entire list of software installed on your MAC. Most likely, one of them is the ProjectSource adware. Once you have found a suspicious, unwanted or unused application, right click to it and choose “Move to Trash”. Another way is drag the application from the Applications folder to the Trash.
Don’t forget, select Finder -> “Empty Trash”.
Remove ProjectSource related files and folders
Now you need to try to find ProjectSource related files and folders, and then delete them manually. You need to look for these files in certain directories. To quickly open them, we recommend using the “Go to Folder…” command.
ProjectSource creates several files, these files must be found and removed. Below is a list of files associated with this unwanted program.
- /Library/LaunchDaemons/com.ProjectSource.system.plist
- ~/Library/LaunchAgents/com.ProjectSource.service.plist
- /Library/Application Support/.(RANDOM)/System/com.ProjectSource.system
- ~/Library/Application Support/.(RANDOM)/Services/com.ProjectSource.service.app
Some files created by ProjectSource are hidden from the user. To find and delete them, you need to enable “show hidden files”. To do this, use the shortcut CMD + SHIFT + .
Press once to show hidden files and again to hide them. There is another way. Click Finder -> Applications -> Utilities -> Terminal. In Terminal, paste the following text: defaults write com.apple.finder AppleShowAllFiles YES
Press Enter. Hold the ‘Option/alt’ key, then right click on the Finder icon in the dock and click Relaunch.
Click on the Finder icon. From the menu bar, select Go and click “Go to Folder…”. As a result, a small window opens that allows you to quickly open a specific directory.
Check for ProjectSource generated files in the /Library/LaunchAgents folder
In the “Go to Folder…” window, type the following text and press Go:
/Library/LaunchAgents
This will open the contents of the “/Library/LaunchAgents” folder. Look carefully at it and pay special attention to recently created files, as well as files that have a suspicious name. Move all suspicious files to the Trash. A few examples of files: com.google.defaultsearch.plist, , installapp.plist, macsearch.plist, com.machelper.plist, com.ProjectSource.service.plist, search.plist and com.net-preferences.plist. Most often, browser hijackers, PUPs and adware software create several files with similar names.
Check for ProjectSource generated files in the /Library/Application Support folder
In the “Go to Folder…” window, type the following text and press Go:
/Library/Application Support
This will open the contents of the “Application Support” folder. Look carefully at its contents, pay special attention to recently added/changed folders and files. Check the contents of suspicious folders, if there is a file with a name similar to com.ProjectSource.system, then this folder must be deleted. Move all suspicious folders and files to the Trash.
Check for ProjectSource generated files in the “~/Library/LaunchAgents” folder
In the “Go to Folder…” window, type the following text and press Go:
~/Library/LaunchAgents
Proceed in the same way as with the “/Library/LaunchAgents” and “/Library/Application Support” folders. Look for suspicious and recently added files. Move all suspicious files to the Trash.
Check for ProjectSource generated files in the /Library/LaunchDaemons folder
In the “Go to Folder…” window, type the following text and press Go:
/Library/LaunchDaemons
Carefully browse the entire list of files and pay special attention to recently created files, as well as files that have a suspicious name. Move all suspicious files to the Trash. A few examples of files to be deleted: com.search.system.plist, com.ProjectSource.system.plist, com.installapp.system.plist, com.macsearch.system.plist and com.machelper.system.plist. In most cases, browser hijackers, adware and PUPs create several files with similar names.
Scan your Mac with MalwareBytes
We recommend using MalwareBytes Free. You can download and install MalwareBytes to scan for and remove ProjectSource associated applications from your Mac. When installed and updated, the malware remover automatically scans for and removes all security threats exist on the machine.
Please go to the link below to download MalwareBytes AntiMalware.
20841 downloads
Author: Malwarebytes
Category: Security tools
Update: September 10, 2020
Once the download is done, close all applications and windows on your MAC system. Open a directory in which you saved it. Run the saved file and follow the prompts.
Once installation is finished, you will see window as displayed below.
Now click the “Scan” button to detect ProjectSource adware software. This task can take quite a while, so please be patient. When a threat is detected, the number of the security threats will change accordingly. Wait until the the checking is finished.
Once the scan is done, MalwareBytes AntiMalware will produce a list of unwanted software and adware software. Next, you need to press “Quarantine” button.
The Malwarebytes will now start to remove ProjectSource .
Remove ProjectSource from Safari, Chrome, Firefox
If you’re still getting ProjectSource adware, then you can try to delete it by deleting malicious extensions.
Google Chrome | Mozilla Firefox |
---|---|
You can also try to get rid of ProjectSource by reset Chrome settings. |
If you are still experiencing issues with ProjectSource adware software removal, you need to reset Mozilla Firefox browser. |
Safari | |
|
How to stay safe online
If you want to delete annoying ads, web browser redirects and popups, then install an ad blocking application like AdGuard. It can block unwanted advertisements and pop ups, stop websites from tracking your online activities when using the Firefox, Safari and Google Chrome. So, if you like surf the Internet, but you don’t like annoying ads and want to protect your computer from harmful webpages, then the AdGuard is your best choice.
Installing the AdGuard is simple. First you will need to download AdGuard by clicking on the link below. Save it on your MS Windows desktop.
3677 downloads
Author: © Adguard
Category: Security tools
Update: January 17, 2018
Once the download is complete, run the downloaded file. The “Setup Wizard” window will show up on the computer screen.
Follow the prompts. AdGuard will then be installed. A window will show up asking you to confirm that you want to see a quick guide. Press “Skip” button to close the window and use the default settings, or press “Get Started” to see an quick instructions which will help you get to know AdGuard better.
Each time, when you start your computer, AdGuard will run automatically and stop unwanted pop-up ads, block harmful and misleading web sites.
Finish words
We suggest that you keep AdGuard (to help you block unwanted pop ups and unwanted harmful web-pages) and MalwareBytes (to periodically scan your MAC for new malicious software, hijackers and adware software). Make sure that you have all the Critical Updates recommended for Mac OS. Without regular updates you WILL NOT be protected when new browser hijackers, harmful software and adware are released.
If you are still having problems while trying to get rid of ProjectSource from your web browser, then ask for help here.