How to remove DigitalBrowser Mac virus

DigitalBrowser is a malicious Mac app that can breach your system without asking

DigitalBrowser is a harmful application that specifically targets Mac devices and is part of a large adware family known as Adload, notorious for creating hundreds of variants. Although its primary purpose aligns with typical adware – delivering unwanted advertisements – its behavior and activities on an infected system also classify it as a Trojan.

Users often unknowingly install DigitalBrowser on their systems by falling for fake Flash Player updates or by downloading pirated software from unreliable sources. Once it is on the device, the program installs several malicious components, including a browser extension and a system-level application.

These components enable DigitalBrowser to maintain its presence on the system for an extended period while making it difficult for users to remove. During this time, it hijacks the user's browser, displaying intrusive ads at every opportunity. Some of these ads may be dangerous, leading to further infections with malware. Additionally, phishing and scam messages are common, potentially exposing users to data theft or financial loss. It is crucial to remove DigitalBrowser as quickly as possible to avoid these risks.

How Adload variants are spread

DigitalBrowser has quickly become one of the most widespread adware strains affecting Mac systems. Its success lies in its effective distribution techniques, which, surprisingly, often involve users unknowingly installing the malware themselves. The methods used are straightforward but highly effective, leading to numerous infections daily.

One common method is through fake Flash Player update prompts. Flash Player, once a popular plugin developed by Adobe in 1996, was essential for viewing multimedia content on the internet for many years. Due to its widespread use, many users are familiar with it and might still believe that they need the latest version to access certain online content or games.

However, Flash Player had numerous vulnerabilities that were frequently exploited by cybercriminals. Because of these security issues, Adobe officially discontinued Flash Player at the end of 2020. Therefore, any prompt asking to install or update Flash Player is now fraudulent and likely part of a scam designed to deliver malware like DigitalBrowser.

Another distribution method involves pirated software installers. Users who attempt to bypass the cost of paid software by downloading cracked versions from torrents, peer-to-peer networks, or similar sources not only engage in illegal activity but also expose themselves to significant security risks. Malware like DigitalBrowser is often disguised as a legitimate application or bundled with pirated software, tricking users into installing it alongside the desired program. 

For example, you might think you're installing a pirated version of a popular app, only to discover later that DigitalBrowser was installed on your system as well.

How to remove the DigitalBrowser virus?

When users enter their AppleID to install the DigitalBrowser malware, it utilizes AppleScript to deploy various malicious components across the system. These components include new profiles, login items, PLIST files, and others. This setup allows the malware to operate with elevated permissions, effectively bypassing the built-in security features of macOS.

Given the sophistication of DigitalBrowser and its ability to evade detection, it is highly advisable to perform a comprehensive system scan when attempting to remove it. Utilizing security tools like SpyHunterCombo Cleaner or MalwarebytesMalwarebytes can automate the removal process, making it easier to eliminate the infection without manually following complicated steps. However, even if you use these tools, you should still manually clean your browser to ensure that all traces of the malware are removed.

Remove the main app

In case any malicious tasks are running in the background, they can be terminated via the Activity Monitor before proceeding with elimination.

• Open Applications folder
• Select Utilities
• Double-click Activity Monitor
• Here, look for suspicious processes and use the Force Quit command to shut them down
• Go back to the Applications folder
• Find the malicious entry and place it in Trash.

Your next target is the Login Items and unwanted Profiles created by the virus, as these elements might increase the persistence if not removed correctly:

• Go to Preferences and pick Accounts
• Click Login items and delete everything suspicious
• Next, pick System Preferences > Users & Groups
• Find Profiles and remove unwanted profiles from the list.

• Select Go > Go to Folder.
• Enter /Library/Application Support and click Go or press Enter.
• In the Application Support folder, look for any dubious entries and then delete them.
• Now enter /Library/LaunchAgents and /Library/LaunchDaemons folders the same way and terminate all the related .plist files.

Get rid of browser extension and remove trackers

DigitalBrowser typically installs a browser extension with elevated permissions by placing malicious files on the system. If you have successfully removed these files, as described in the previous section, you should be able to eliminate the extension without encountering any further issues.

Safari

1. Click Safari > Preferences…
2. In the new window, pick Extensions.
3. Select the unwanted extension and select Uninstall.

Google Chrome

1. Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
2. In the newly opened window, you will see all the installed extensions. Uninstall all the suspicious plugins that might be related to the unwanted program by clicking Remove.

If you still can't remove the extension from the browser, you should simply reset it. Follow these steps:

Safari

1. Click Safari > Preferences…
2. Go to the Advanced tab.
3. Tick the Show Develop menu in the menu bar.
4. From the menu bar, click Develop, and then select Empty Caches.

Google Chrome

1. Click on Menu and select Settings.
2. In the Settings, scroll down and click Advanced.
3. Scroll down and locate Reset and clean up section.
4. Now click Restore settings to their original defaults.
5. Confirm with Reset settings.

Data tracking is a significant business within the online world, and most potentially unwanted applications (PUAs) engage in tracking users to some extent, as it provides them with a steady stream of passive income. Because of this, it is advisable to remove data trackers like cookies after eliminating adware such as DigitalBrowser. The fastest way to do this is by using a tool like FortectIntego, which can automate the process. However, if you prefer a hands-on approach, you can also follow the manual steps provided below.

Safari

1. Click Safari > Clear History…
2. From the drop-down menu under Clear, pick all history.
3. Confirm with Clear History.

Google Chrome

1. Click on Menu and pick Settings.
2. Under Privacy and security, select Clear browsing data.
3. Select Browsing history, Cookies and other site data, as well as Cached images and files.
4. Click Clear data.