Remove Firesear.ch (Mac) virus

Firesear.ch is a browser hijacker for Mac. Firesear.ch browser hijacker modifies the search engine and homepage of Safari and Google Chrome on Mac OSX.

Firesear.ch is regularly offered on the internet as a convenient homepage. However, in reality, this is a browser hijacker that collects all kinds of data from your browser.

The data collected by Firesear.ch is used for advertising purposes. The data is sold to advertising networks. Because Firesear.ch collects data from your browser, Firesear.ch is also classified as (PUP) Potentially Unwanted Program.

Fire Search browser extension will install itself in the Google Chrome and Safari browser only on Mac OS X. Neither Apple of any browser developer yet notices this browser hijacker as unwanted.

If your home page has changed to Firesear.ch and the Fire Search browser extension has been installed, remove the Fire Search extension as soon as possible using this Fire Search removal instruction.

Remove Firesear.ch with Malwarebytes for Mac

In this first step for Mac, you need to remove adware that is accountable for the Firesear.ch malware using Malwarebytes for Mac. Malwarebytes is the most reliable software to remove unwanted programs, adware, and browser hijackers from your Mac. Malwarebytes is free to detect and remove malware on your Mac computer.

Download Malwarebytes (Mac OS X)

You can find the Malwarebytes installation file in the Downloads folder on your Mac. Double click the installation file to begin.

Follow instructions in the Malwarebytes installation file. Click the Get Started button.

Where are you installing Malwarebytes on a personal computer or on a work computer? Make your choice by clicking any of the buttons.

Make your choice to either use the Free version of Malwarebytes or the Premium version. The premium versions include protection against ransomware and offer real-time protection against malware.
Both Malwarebytes free and premium are able to detect and remove malware from your Mac.

Malwarebytes needs “Full Disk Access” permission in Mac OS X to scan your harddisk for malware. Click Open Preferences.

In the left panel click on “Full Disk Access”. Check the Malwarebytes Protection and close the settings.

Go back to Malwarebytes and click the Scan button to begin scanning your Mac for malware.

Click on the Quarantine button to delete the found malware.

Reboot your Mac to complete the malware removal process.

When the removal process is done, continue to the next step.

Continue to the next step to remove unwanted browser settings from Safari, Chrome, or Firefox (Mac)

Uninstall Firesear.ch Extension from Safari for Mac

Open the Safari browser. In the left top corner click on Safari. In the Safari menu click on Preferences. Open the “Extensions” tab.
Click on the extension you would like to remove, make sure to check any installed Safari extension, and click on “Uninstall”.

Uninstall Firesear.ch Extension from Google Chrome for Mac

Open the Google Chrome browser on Mac. In the address bar type: chrome://extensions/. Verify all listed browser extensions.
If you notice an installed extension you do not know or do not trust, click the Remove button to uninstall the extension from Google Chrome.

Some malware programs create policy’s to prevent users from resetting browser configurations such as the web browser’s homepage and the search engine. If you cannot change your homepage or search engine in the Google Chrome browser you might want to remove the policies created by the malware to restore the browser’s configurations.

Remove unwanted profile from your Mac

First, you need to remove unwanted profiles from your Mac, follow the steps.

Click the Apple symbol () in the top left corner on Mac OS X, click on “Preferences” in the menu bar, and select “Profiles”. If profiles don’t exist you do not have any malicious profile installed on your Mac.

Select the “AdminPrefs“, “Chrome Profile“, or “Safari profile” and delete it.

Next, you need to check if there are policies created for Google Chrome. Open the Chrome browser, in the address bar type: chrome://policy.
If there are policies loaded into the Chrome browser, follow the steps below to remove the policies.

On the Applications folder on your Mac, go to Utilities and Open the Terminal application.

Enter the following commands in the Terminal application, press ENTER after each command.

Remove “Managed by your Organization” from Google Chrome on Mac

Some adware and malware on Mac force the browser’s homepage and search engine using a setting known as “Managed by your organization”. If you see the browser extension or settings in Google chrome is forced using the “Managed by your organization” setting, follow the steps below.

Make sure to bookmark this webpage and open it in another web browser, you need to Quit Google Chrome.

On the Applications folder on your Mac, go to Utilities and Open the Terminal application.

Enter the following commands in the Terminal application, press ENTER after each command.

Restart Google Chrome when you are done.

Uninstall Firesear.ch Add-on from Mozilla Firefox for Mac

Open the Firefox browser. In the address bar type: about:addons. Verify all installed Firefox add-ons.
If you notice an installed add-on you do not know or do not trust, click the Remove button to uninstall the add-on from Firefox.

Your Mac should be free of Mac adware or Mac malware. Try this guide on how to remove Mac malware.