Adware.OperatorMac not blocked by Malwarebytes

[Steal]

My default browser in Safari is Google. Since yesterday my browser has continually re-directed to Yahoo. I installed Malwarebytes (free 14 day trial) which detected (the dreaded) 'Adware.OperatorMac' problem.

I quarantined the adware, but the problem just persists (re-directs to Yahoo) I continue to re-run Malwarebytes, which simply re-detects & re-quarantines the adware, but does not prevent or resolve the problem.

I am currently on Catalina 10.15.7

Any help appreciated as this is driving me nuts, please note I am only basic comp tech savvy

Thanks in advance

[alvarnell]

I think you meant to say your default search engine in Safari is Google. When Malwarebytes finds and removes adware on your Mac, you often need to reset settings that the adware has changed, since that's not something Apple allows Malwarebytes to do. To accomplish that, please check this pinned article at the top of this forum 

I also recommend that you trash everything that Malwarebytes moved into Quarantine.

Edited December 1, 2020 by alvarnell

[Steal]

Hi alvarnell, thanks for your response. I went through the article which you kindly posted, & followed the instructions, unfortunately all to no avail, problem persists

[Bentov]

I'm seeing the same thing.  It's been quarantined the past 3 days and it comes just seems to come back.

[Bentov]

I went to ~Library/Application Support found a few "com." directories that had the same name as the quarantined items.  Some of them contained executables.  2 of them were created by root :-( but I was able to delete them with "sudo rm" and then the Preferences file.  I hope this helps.  I'll report back it pops back up tomorrow..

 

[treed]

We've updated to detect a recent new version of OperatorMac, so if you haven't tried yet, try scanning again and remove everything found. Then you'll probably need to go back and follow the instructions posted by alvarnell.