search.playsearchnow.com

[crawles]

A malware called playsearchnow has infected my safari browser. I have installed premium Malwarebytes app and have run the scan. Initially it found  and deleted some of the files, but playsearchnow still has control of Safari. Any suggestions on completely eliminating this malware?

[alvarnell]

If Malwarebytes found and removed anything, then you may need to reset your search engine on each browser, in addition to your home page:

Safari: https://support.apple.com/kb/PH21448

Chrome: https://support.google.com/chrome/answer/95426

Firefox: https://support.mozilla.org/en-US/kb/add-or-remove-search-engine-firefox

If you are still having the issue, then you may have been infected by something new. The staff will likely contact you in that case and ask you to send a diagnostic report directly to them.

[treed]

I'd agree with everything Al said. Note that Malwarebytes does not try to fix your browser settings that may have been changed - and, in fact, cannot currently do so in Safari at all without using hack-ish, buggy solutions like the adware creators do. (The reason is that Apple has put protections on that to ensure it can only be done through Safari's user interface.)

If you're unable to change Safari's settings, there's a bug where sometimes it gets stuck after being changed by adware, and there's a workaround you can try:

* In Safari, choose Preferences from the Safari menu.

* In the window that opens, click the General icon (if necessary)

* Enter your desired home page in the "Homepage" field, but DO NOT press return!

* At the top of the window, click any of the other icons (eg, Tabs, AutoFill, etc).

* You may see a prompt asking for confirmation for changing the home page. If so, confirm.

* Switch back to the General page and check to make sure the home page has been changed.

If that doesn't work, let me know, and I'll want to collect more info from you.

[Angie72]

I had the same issue as crawles and did what treed suggested above, and my homepage changed within preferences, but playsearchnow is still coming up when I launch safari. Anything else I can do? Thanks.

[treed]

Check the suggestions here:

 

[CChoj]

Safari still infected with PlaysearchNow

I've gone through all the steps and playsearchnow is still the default homepage when I launch Safari on my Mac.  I've done scans in Safemode and in regular mode.  I've removed all extensions.  I don't have profiles.  I've checked every field in Safari and I've even done the "trick" where you change your home page but don't hit return.  I can't find playsearchnow listed anywhere in the settings, apps, nothing yet still Safari defaults to it when I launch.  New tabs do open up blank as set in preferences.  Any suggestions would be helpful.  Thanks.

[alvarnell]

 

New variants of this kind of adware are being found almost daily, so you probably have discovered one.

Recommend you submit a system report created with the help of below article (please don't post the zip file here).

https://support.malwarebytes.com/docs/DOC-3235

Instead, log a support ticket with help of below link and attach the file with the email

https://support.malwarebytes.com/community/contactsupport/pages/home-support

[CChoj]

Will do - much appreciated.