How to uninstall CommonLocator app/extension from Mac (Virus removal guide)

What is CommonLocator

CommonLocator is an adware application that targets Mac platform. Adware is considered by many to be synonymous with ‘malicious software’. It’s a malicious application which displays unwanted ads to computer users. Some examples include popup advertisements, various offers and deals, unclosable windows, push notifications and even fake virus alerts. Adware can redirect web-browsers to web-resources which may load other malicious software. Adware can be installed onto MAC computers via infected web pages, when users open email attachments, anytime they download and install freeware.

Does adware software steal your personal data? Adware is often harmless, but sometimes the adware you inadvertently download can also be spyware. Spyware can sometimes seek out your privacy information stored on the MAC, collect this information and use it to steal your identity. So, we advise to remove CommonLocator adware, as soon as possible.

How does CommonLocator get on your computer

The most common way to get adware is a freeware setup file. Most often, a user have a chance to disable all unneeded modules, but certain installers are designed to confuse the average users, in order to trick them into installing PUPs and adware software.

Anyway, easier to prevent adware rather than clean up your machine after one. So, keep your browser updated (turn on automatic updates), use good antivirus software, double check free software before you run it (do a google search, scan a downloaded file with VirusTotal), avoid suspicious and unknown websites.

Threat Summary

Name	CommonLocator, “Common Locator”, “CommonLocator 1.0”
Type	adware, potentially unwanted program (PUP), Mac malware, Mac virus
Detection Names	Osx.Adware.Cimpli, Adware.MAC.Generic, Program:MacOS/Vigram.A, Trojan-Downloader.OSX.Adload, Adware/Adload!OSX, OSX.Trojan.Gen, ApplicUnwnt and MacOS.Agent-MT
Distribution	Free software installers, torrent downloads, fake updaters and shady popup advertisements
Symptoms	Every time you perform an Internet search, your browser is redirected to another web-page, popups and newtab pages are loaded without your request, new entries appear in your Applications folder, new toolbars suddenly installed on your browser, your browser homepage has changed and you cannot modify it back, low ping but slow Internet.
Removal	CommonLocator removal guide

How to Remove CommonLocator adware (removal guidance)

If you have constant pop-ups or undesired advertisements, slow Mac, freezing system problems, you are in need of adware software removal assistance. The step-by-step guidance below will guide you forward to get CommonLocator removed and will allow you get your MAC OS operating at peak capacity again.

To remove CommonLocator, use the steps below:

1. Remove unwanted profiles on Mac device
2. Remove CommonLocator related software through the Finder
3. Remove CommonLocator related files and folders
4. Scan your Mac with MalwareBytes
5. Remove CommonLocator from Safari, Chrome, Firefox
6. How to stay safe online

Remove unwanted profiles on Mac device

CommonLocator can make changes to the Mac system such as malicious changes to browser settings, and the addition of malicious system profiles. You need to check the system preferences, find and remove malicious profiles and ensure your settings are as you expect.

Click the System Preferences icon ( ) in the Dock, or choose Apple menu ( ) > System Preferences.

In System Preferences, click Profiles, then select a profile associated with CommonLocator.

Click the minus button ( – ) located at the bottom-left of the Profiles screen to remove the profile.
Note: if you do not see Profiles in the System Preferences, that means there are no profiles installed on your Apple computer, which is normal.

Remove CommonLocator related software through the Finder

Check out the Finder (Applications section) to see all installed applications. If you see any unknown and questionable programs, they are the ones you need to remove.

Open Finder and click “Applications”.

Very carefully look around the entire list of apps installed on your MAC system. Most probably, one of them is the CommonLocator adware. Once you have found a questionable, unwanted or unused program, right click to it and select “Move to Trash”. Another solution is drag the program from the Applications folder to the Trash.

Don’t forget, choose Finder -> “Empty Trash”.

Remove CommonLocator related files and folders

Now you need to try to find CommonLocator related files and folders, and then delete them manually. You need to look for these files in certain directories. To quickly open them, we recommend using the “Go to Folder…” command.

CommonLocator creates several files, these files must be found and removed. Below is a list of files associated with this unwanted application.

• /Library/LaunchDaemons/com.CommonLocator.system.plist
• ~/Library/LaunchAgents/com.CommonLocator.service.plist
• /Library/Application Support/.(RANDOM)/System/com.CommonLocator.system
• ~/Library/Application Support/.(RANDOM)/Services/com.CommonLocator.service.app

Some files created by CommonLocator are hidden from the user. To find and delete them, you need to enable “show hidden files”. To do this, use the shortcut CMD + SHIFT + . Press once to show hidden files and again to hide them. There is another way. Click Finder -> Applications -> Utilities -> Terminal. In Terminal, paste the following text: defaults write com.apple.finder AppleShowAllFiles YES

Press Enter. Hold the ‘Option/alt’ key, then right click on the Finder icon in the dock and click Relaunch.

Click on the Finder icon. From the menu bar, select Go and click “Go to Folder…”. As a result, a small window opens that allows you to quickly open a specific directory.

Check for CommonLocator generated files in the /Library/LaunchAgents folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/LaunchAgents

This will open the contents of the “/Library/LaunchAgents” folder. Look carefully at it and pay special attention to recently created files, as well as files that have a suspicious name. Move all suspicious files to the Trash. A few examples of files: com.machelper.plist, com.net-preferences.plist, macsearch.plist, search.plist, com.CommonLocator.service.plist, com.google.defaultsearch.plist, and installapp.plist. Most often, PUPs, browser hijackers and adware create several files with similar names.

Check for CommonLocator generated files in the /Library/Application Support folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/Application Support

This will open the contents of the “Application Support” folder. Look carefully at its contents, pay special attention to recently added/changed folders and files. Check the contents of suspicious folders, if there is a file with a name similar to com.CommonLocator.system, then this folder must be deleted. Move all suspicious folders and files to the Trash.

Check for CommonLocator generated files in the “~/Library/LaunchAgents” folder

In the “Go to Folder…” window, type the following text and press Go:
~/Library/LaunchAgents

Proceed in the same way as with the “/Library/LaunchAgents” and “/Library/Application Support” folders. Look for suspicious and recently added files. Move all suspicious files to the Trash.

Check for CommonLocator generated files in the /Library/LaunchDaemons folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/LaunchDaemons

Carefully browse the entire list of files and pay special attention to recently created files, as well as files that have a suspicious name. Move all suspicious files to the Trash. A few examples of files to be deleted: com.CommonLocator.system.plist, com.macsearch.system.plist, com.installapp.system.plist, com.search.system.plist and com.machelper.system.plist. In most cases, adware, potentially unwanted programs and browser hijackers create several files with similar names.

Scan your Mac with MalwareBytes

If you carefully followed the previous steps, then you should be able to delete CommonLocator. Of course, very often browser hijackers, potentially unwanted programs and adware hides on a Mac computer, disguising itself as legitimate apps and files. Therefore, in some cases, it is difficult for an inexperienced user to decide whether a particular file is part of adware, PUPs and browser hijackers. Therefore, we recommend you to run MalwareBytes AntiMalware to scan the Apple computer.

MalwareBytes Anti-Malware can be downloaded from the following link.

When downloading is done, close all windows on your MAC. Further, run the saved file. Follow the prompts.

The MalwareBytes AntiMalware will automatically run and you can see its main window as on the image below.

Next, press the “Scan Now” button to begin checking your machine for the CommonLocator . This process can take quite a while, so please be patient. When a malicious software, adware or potentially unwanted software are detected, the number of the security threats will change accordingly.

As the scanning ends, MalwareBytes Anti-Malware will show a list of all items detected by the scan. Review the report and then click the “Quarantine” button.

The MalwareBytes will remove CommonLocator adware software and move the selected items to the Quarantine.

Remove CommonLocator from Safari, Chrome, Firefox

Remove unwanted extensions is a simple way to delete CommonLocator adware software and return browser’s settings that have been changed by adware software.

Google Chrome	Mozilla Firefox
In the top-right corner, expand the Chrome menu. Select ‘More tools’, then ‘Extensions’. Click ‘Remove’ to uninstall an extension. Click ‘Remove’ in the dialog box. You can also try to get rid of CommonLocator adware by reset Google Chrome settings.	Click on ‘menu’ button and select ‘Add-ons’. Go to ‘Extensions’ tab. To uninstall an add-on, click on ‘Remove’ button next to it. If you are still experiencing issues with CommonLocator removal, you need to reset Mozilla Firefox browser.
Safari
On the top menu select ‘Safari’, then ‘Preferences’. Select ‘Extensions’ tab. Select an extension you want to delete and click ‘Uninstall’ button next to it.

How to stay safe online

Enabling an ad-blocker program like AdGuard is an effective way to alleviate the risks. Additionally, ad-blocker applications will also protect you from malicious advertisements and web sites, and, of course, stop redirection chain to misleading, scam and similar webpages.

1. Download AdGuard from the link below.
   
   

   AdGuard for Mac download
   3677 downloads
   Author: © Adguard
   Category: Security tools
   Update: January 17, 2018
   
2. After downloading is complete, run the downloaded file. You will see the “Setup Wizard” program window. Follow the prompts.
3. Once the setup is finished, press “Skip” to close the installation application and use the default settings, or click “Get Started” to see an quick tutorial which will allow you get to know AdGuard better.
4. In most cases, the default settings are enough and you don’t need to change anything. Each time, when you run your MAC system, AdGuard will run automatically and stop annoying ads, block malicious and misleading web-pages.

To sum up

We suggest that you keep AdGuard (to help you stop unwanted pop-ups and unwanted malicious web-pages) and MalwareBytes (to periodically scan your computer for new adware and other malicious software).

If you are still having problems while trying to delete CommonLocator ads from Google Chrome, Safari and Mozilla Firefox, then ask for help here.