{"id":302,"date":"2019-02-07T22:33:42","date_gmt":"2019-02-08T06:33:42","guid":{"rendered":"http:\/\/35.243.195.209\/?p=302"},"modified":"2019-02-07T22:42:48","modified_gmt":"2019-02-08T06:42:48","slug":"how-to-remove-safe-finder-on-mac-os","status":"publish","type":"post","link":"https:\/\/nanzhou.cc\/index.php\/2019\/02\/07\/how-to-remove-safe-finder-on-mac-os\/","title":{"rendered":"How to Remove Safe Finder on Mac OS"},"content":{"rendered":"<h2>Summary<\/h2>\n<p>In this post, I will introduce how to remove Safe Finder, a notorious malware on multiple platforms.<\/p>\n<p>This post is not a technical post but really helps.<\/p>\n<h2>Conclusion<\/h2>\n<p>Use <a href=\"https:\/\/www.malwarebytes.com\">Malwarebytes<\/a>. I&#8217;m not advertising. And the free version works.<\/p>\n<h2>Details<\/h2>\n<h3>Safe Finder<\/h3>\n<p>I come across Safe Finder when I surf a website which requires me to upgrade my Flash Player. It is normal until I install a software called Player downloaded from that website.<\/p>\n<p>My laptop gets out of my control and installs other strange software (I also begin to suspect the safety of the Mac OS). The strange software even makes my laptop stuck. I reboot it and find that my laptop is hijacked. I present the bad things the bunch of software does.<\/p>\n<ol>\n<li>It hijacks your homepage and search engines.<br \/>\n<img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/35.243.195.209\/wp-content\/uploads\/2019\/02\/Untitled2-1024x94.png\" alt=\"\" width=\"640\" height=\"59\" class=\"alignnone size-large wp-image-304\" srcset=\"https:\/\/nanzhou.cc\/wp-content\/uploads\/2019\/02\/Untitled2-1024x94.png 1024w, https:\/\/nanzhou.cc\/wp-content\/uploads\/2019\/02\/Untitled2-300x28.png 300w, https:\/\/nanzhou.cc\/wp-content\/uploads\/2019\/02\/Untitled2-768x71.png 768w, https:\/\/nanzhou.cc\/wp-content\/uploads\/2019\/02\/Untitled2.png 2016w\" sizes=\"auto, (max-width: 640px) 100vw, 640px\" \/><br \/>\nWhatever you do to reset the preference of your browser, every time you reboot your computer, the &#8220;XXX search&#8221; comes again;<\/li>\n<li>It automatically installs other malware;<\/li>\n<li>You can remove it using Finder, but the browser still remains hijacked; <\/li>\n<\/ol>\n<h3>What Can I Do<\/h3>\n<p>I tried many ways. Note that when you google &#8220;How to remove Safe Finder&#8221;, some websites lead you to download other malware such as ComboCleaner. <em>I get that engineers do know CamelCase.<\/em><\/p>\n<p>As usual, what I present is what works.<\/p>\n<ol>\n<li>Download  <a href=\"https:\/\/www.malwarebytes.com\">Malwarebytes<\/a>. Free version works fine;<\/li>\n<li>Start manually scan; <\/li>\n<li>Show quarantine and clear it;<br \/>\n<img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/35.243.195.209\/wp-content\/uploads\/2019\/02\/Untitled-1024x103.png\" alt=\"\" width=\"640\" height=\"64\" class=\"alignnone size-large wp-image-306\" srcset=\"https:\/\/nanzhou.cc\/wp-content\/uploads\/2019\/02\/Untitled-1024x103.png 1024w, https:\/\/nanzhou.cc\/wp-content\/uploads\/2019\/02\/Untitled-300x30.png 300w, https:\/\/nanzhou.cc\/wp-content\/uploads\/2019\/02\/Untitled-768x77.png 768w, https:\/\/nanzhou.cc\/wp-content\/uploads\/2019\/02\/Untitled.png 1172w\" sizes=\"auto, (max-width: 640px) 100vw, 640px\" \/><\/li>\n<li>Reboot. <\/li>\n<li>Set your preference of browsers and remove viral extensions. <\/li>\n<li>I believe things go well now. <\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>Summary In this post, I will introduce how to remove Safe Finder, a notorious malware on multiple platforms. This post is not a technical post but really helps. Conclusion Use Malwarebytes. I&#8217;m not advertising. And the free version works. Details Safe Finder I come across Safe Finder when I surf a website which requires me&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[21],"tags":[],"class_list":["post-302","post","type-post","status-publish","format-standard","hentry","category-mac-os"],"_links":{"self":[{"href":"https:\/\/nanzhou.cc\/index.php\/wp-json\/wp\/v2\/posts\/302","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nanzhou.cc\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nanzhou.cc\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nanzhou.cc\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nanzhou.cc\/index.php\/wp-json\/wp\/v2\/comments?post=302"}],"version-history":[{"count":4,"href":"https:\/\/nanzhou.cc\/index.php\/wp-json\/wp\/v2\/posts\/302\/revisions"}],"predecessor-version":[{"id":310,"href":"https:\/\/nanzhou.cc\/index.php\/wp-json\/wp\/v2\/posts\/302\/revisions\/310"}],"wp:attachment":[{"href":"https:\/\/nanzhou.cc\/index.php\/wp-json\/wp\/v2\/media?parent=302"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nanzhou.cc\/index.php\/wp-json\/wp\/v2\/categories?post=302"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nanzhou.cc\/index.php\/wp-json\/wp\/v2\/tags?post=302"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}