What is Adware?
Adware is software that automatically displays or downloads advertising material (often unwanted) when you're online. It's typically found within your web browser and might be unknowingly bundled with other free software downloaded from the internet — such as a fake Adobe Flash Player installer, or other freeware. Once installed, it can modify your default homepage and search engine, and display ads or pop-ups on pages where they've never appeared before.
Be cautious about the applications you agree to install, and never download files or software from untrusted sources.
Removing Adware and Pop-Ups From Your Mac
Adware can be tricky to fully remove, so follow all of the steps below in order. If you have any questions or concerns while completing these steps, contact Intego Support for assistance.
Jump to…
- Scan Your Mac
- Remove Malicious Software
- Remove LaunchAgents and LaunchDaemons
- Uninstall Adware Extensions
- Update Your Default Search Engine and Reset Browsers
- Remove Login Items and Network Proxies
- Remove Unwanted Device Profiles
Scan Your Mac
The best first step if your Mac is showing signs of adware is to run a full antivirus scan to detect and remove malicious files.
If you're an Intego ONE customer:
- Open Intego ONE and go to the Antivirus dashboard.
- Run a Full Scan.
- Once complete, use the options provided to Go to Quarantine, or Repair Selected, for any detected threats.
If you're an Intego X9 customer:
- Open VirusBarrier — click the Intego castle icon in your menu bar, or open it from Applications > Intego.
- Run a Full Scan.
- Once complete, use the options provided to Quarantine, Repair, or Delete any detected threats.
Don't have Intego installed yet? We recommend Intego ONE, our current Mac security suite, which includes real-time antivirus protection alongside Firewall, SmartClean, and VPN tools.
Remove Malicious Software
After scanning your Mac, check for any remnants of malicious applications that may be left behind.
- Open a Finder window and navigate to Applications.
- Look through the list to locate any suspicious software. A few examples of adware you might find include Mac Cleanup Pro, WeKnow, Shlayer, Spigot, SurfBuyer, MacSaver, ShopperHelper, and CrossRider.
- Note: This isn't a complete list — adware names change constantly, and what you find on your Mac may not match this list.
- Right-click the app and select Move to Trash.
- Empty the Trash from your Dock, then restart your Mac to complete the process.
Remove Unwanted LaunchAgents and LaunchDaemons
What are LaunchAgents and LaunchDaemons?
A daemon is a background program that doesn't require user input — it might perform daily maintenance tasks or scan for malware. An agent runs on behalf of the logged-in user, while a daemon runs on behalf of the root user (or another specified user).
You'll find these installed in the following locations:
- /Library/LaunchAgents
- /Library/LaunchDaemons
- /System/Library/LaunchAgents
- /System/Library/LaunchDaemons
- ~/Library/LaunchAgents (inside your home folder)
- ~/Library/Application Support (inside your home folder)
To check these locations:
- In Finder, select Go > Go to Folder...
- Enter one of the file paths listed above.
- Delete any files related to adware or unwanted applications.
| Note — Some files may be hidden by default. Show hidden files by clicking within the Finder window and pressing Command + Shift + . (period) — hidden files will appear translucent. |
| Be careful: Only remove files you're confident are related to adware. Deleting the wrong file may prevent legitimate software from working properly. |
Uninstall Adware Extensions From Your Web Browsers {#extensions}
Check all browsers you use for adware-related extensions. Here's where to find extensions in the three most common browsers:
- Safari: Safari > Settings > Extensions
- Chrome: Chrome menu > Extensions > Manage Extensions
- Firefox: Firefox > Settings > Extensions & Themes
Remove anything unfamiliar or unwanted using the Uninstall or Remove option.
Check your homepage in each browser too — if it's been changed to something you don't recognize, reset it back to your preferred page.
Update Your Default Search Engine and Reset Web Browsers
Redirecting adware commonly alters your browser settings. Resetting your browser and confirming your default search engine helps remove any lingering adware configuration:
- Safari: How to Reset Your Safari Browser — then check Safari > Settings > Search to confirm your preferred default search engine.
- Chrome: How to Reset Your Google Chrome Browser — then check Chrome Settings > Search Engine.
- Firefox: How to Reset Firefox — then check Firefox Settings > Search > Default Search Engine.
Remove Login Items and Network Proxies
Login Items are applications that launch automatically when you start up or log into your Mac. Malware can sometimes add itself to this list.
- Go to System Settings > General > Login Items & Extensions (on older macOS versions: System Preferences > Users & Groups > Login Items).
- Review the items listed in the table “Open at Login” and remove anything unfamiliar or unwanted using the – button.
Network Proxies act as intermediaries between your Mac and the internet, and can sometimes be manipulated by malware to redirect your traffic.
- Go to System Settings > Network, select your active connection, and click Details… > Proxies (on older macOS: System Preferences > Network > Advanced > Proxies).
- Make sure no proxy options are checked. The most common one used by malware is the SOCKS Proxy — uncheck anything you don't recognize as legitimate.
Remove Unwanted Device Profiles
It's rare for legitimate consumer software to install a device profile — this is mostly used by business IT tools to manage multiple Macs. If you don't see a "Profiles" option in your settings at all, you don't have any installed and don't need to take action.
- Go to System Settings > General > Device Management (on older macOS: System Preferences > Profiles).
- Review the list carefully, and remove any suspicious or unwanted profiles using the – button.
Following all of these steps should help keep your Mac adware-free!
Still Having Trouble?
If you still have questions about adware or malware on your Mac and can't find the answer here, contact Intego Support and include:
- Whether you're an Intego ONE or Intego X9 customer
- What symptoms you're seeing (pop-ups, homepage changes, unfamiliar apps, etc.)
- Which browser(s) are affected
- The results of your antivirus scan, if you've already run one