Skip to content
Spyware news
  • Active
  • Severity: Medium
  • Adware
  • Mac
  • Verified · Oct 2019

How to remove LookupShare

A step-by-step removal guide for affected devices. Follow the verified procedure below — most readers complete it in under 10 minutes.

Lucia Danes · Virus researcher

LookupShare – adware that might bring other PUPs to macOS

LookupShare

LookupShare is an adware program that takes 12 MB of disk space and appears in the Applications folder of macOS machines. User reports claim that some type of Yahoo redirect virus appeared on Safari after the unexpected installation of the adware app.[1] Continuously, the adware itself might append major changes to web browsers such as Chrome, Firefox, and Safari. You can expect LookupShare to perform modifications on the homepage and new tab search. Besides, the PUP will supposedly relate to harsh redirecting and advertising activities in the nearest future.

Name LookupShare
Type Adware application/potentially unwanted program
OS and browsers affected The suspicious product has been created specifically for macOS computer systems and can appear on web browsers such as Google Chrome, Mozilla Firefox, and Safari
Goal Developers who have produced this suspicious application seek to gather income from the cost-per-click method
Activities The main tasks carried out by this adware are intense advertising during browsing sessions, redirecting to affiliate domains, tracking the user's online sessions, etc. LookupShare virus might even tend to bring other PUPs together with itself 
Distribution Adware apps are promoted via software bundling, unsecured networks, and their hyperlinks/adverts
Removal Get rid of the PUP automatically or manually. Try using FortectIntego to diminish any changes that were hard to remove at the first place

The aim of LookupShare is to collect cost-per-click income from pop-up ads, banner texts, in-text adverts, and other promoted content. Once the affected user clicks on a particular advertisement, money falls straight to the developers' pockets. Nevertheless, third-parties might try to push bogus products through intense advertising. Most commonly, rogue security software is promoted and users are encouraged to buy a useless tool for a high price sometimes.

Additionally, LookupShare virus might attack you with intrusive surveys and questionnaires and ask you to fill some private or technical details. Usually, users are encouraged to reveal personal information if they want to claim a fake prize or reward, for example, an Android/iPhone mobile phone device. We advise not to do that as by revealing sensitive data, you might put yourself in danger of personal information or even identity exposure.

Continuously, adware such as LookupShare is involved in redirecting activities that are supposed to take the user to affiliate sources and provide attractive-looking deals. However, this process is not that harmless as it might seem from the first view as you might accidentally (or maybe even intentionally) be taken to a malware-laden domain. This is one of the main ways of how users get infected with dangerous viruses such as Trojan horses or ransomware.

LookupShare virus

Furthermore, LookupShare virus might plant browser helper objects (BHOs)[2] in the infected web browsers. You might spot newly-injected extensions, add-ons, and plug-ins in your browser settings that you did not insert on your own. Also, adware programs can insert tracking objects such as pixels, beacons, and cookies that aim to capture user online activities and browsing history. The captured information usually refers to:

  • IP address.
  • Geolocation.
  • Search query data.
  • Hyperlinks/ads clicked.
  • Saved bookmarks.
  • Deals/offers searched.
  • Commonly visited networks.

After this information falls in the hands of third-parties, they use it to deliver targeted advertising on the users' computer screens. The developers identify what types of products/services are relevant for the user at the moment and generate adverts regarding the person's needs, however, the offers are often fake and created just for income. You might also see some questionable offers and deals from LookupShare adware.

If you start experiencing unwanted activities and changes after the appearance of this adware, you should remove LookupShare from your macOS machine and web browsers such as Chrome, Firefox, and Safari. To terminate the potentially unwanted program entirely, you have to be sure that no suspicious objects are left lurking on your machine or browser apps, otherwise, the ad-supported application might easily return.

You can perform LookupShare removal in two different techniques – manual/automatical. The first one requires the user's interaction with all infected sources and components. The second one requires only employing reliable software and leaving the job for the program. Once the adware is no more on your system and browsers, you can try fixing any corrupted places with a tool such as FortectIntego in case the PUP has made more difficult changes than expected.

LookupShare adware

Spreading locations of adware apps and how to avoid them

Specialists from LesVirus.fr[3] claim that PUPs such as adware apps are distributed by using various techniques such as bundling, injecting the download of the suspicious program straight into a hyperlink or advertisement that often appear on unsecured networks such as gambling, gaming, and adult-themed pages.

However, we have good news for users that the secret installation of adware programs is easily avoidable if you just put a little bit of effort into it. Of course, automatical computer protection is necessary, so you should place a reliable antivirus tool on your computer. However, do not forget that manual actions are also required here. You can:

  • Change the downloading mode into Custom/Advanced. If you have earlier picked the Quick/Recommended configuration, there should be no surprise that suspicious content has invaded your computer system.
  • Avoid visiting unsecured online sources. If some type of website that you are tending to enter is marked as unsafe or you start receiving alerts from your antivirus tool, you should not proceed to it anymore.
  • Avoid clicking on suspicious advertisements/hyperlinks. You should not click on every notification that appears on your screen while browsing the web as there might be infectious content delivered. However, if ads start bothering you frequently, consider getting AdBlock or Adblock Plus on your browser for further ad prevention.

LookupShare virus can be eliminated manually or automatically 

You can remove LookupShare from your macOS by putting some effort of your own or by employing reliable antimalware software to complete the process for you. Which method works better for you and the computer is all up to you to decide. However, measure your skills and experience in the virus elimination field first.

If you think that you will be capable to deal with LookupShare removal on your own, go ahead and take a look at the below-provided elimination instructions. Here you will discover how to clean your macOS operating system and reverse browsers such as Google Chrome, Mozilla Firefox, and Safari back to their previous states.

Once LookupShare adware is gone, you should start taking your online and computing security more seriously in order to avoid repeated future incidents. Avoiding adware and similar threats is necessary for maintaining quality-full PC work.

Delete from macOS

Remove the unwanted application:

  1. From the menu bar, select Go > Applications.
  2. In the Applications folder, look for any suspicious entries, then drag them to Trash (or right-click and pick Move to Trash).Uninstall from Mac

Delete leftover files and folders:

  1. Select Go > Go to Folder.
  2. Enter /Library/Application Support and remove any suspicious folders related to the unwanted program.
  3. Repeat the same check in the /Library/LaunchAgents and /Library/LaunchDaemons folders, deleting any suspicious entries.Delete leftover files from Mac
  4. Finally, empty the Trash to permanently remove the leftovers.

Remove from Mozilla Firefox (FF)

Remove dangerous extensions:

  1. Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
  2. Select Add-ons.
  3. In here, select the unwanted extension and click Remove.Remove extensions from Firefox

Reset the homepage:

  1. Click three horizontal lines at the top right corner to open the menu.
  2. Choose Settings.
  3. Under Home, set your preferred homepage and new tab settings.

Clear cookies and site data:

  1. Click Menu and pick Settings.
  2. Go to Privacy & Security section.
  3. Scroll down to locate Cookies and Site Data.
  4. Click on Clear Data...
  5. Select Cookies and Site Data and Temporary cached files and pages, then click Clear.Clear cookies and site data from Firefox

Reset Mozilla Firefox

If clearing the browser as explained above did not help, reset Mozilla Firefox:

  1. Open Mozilla Firefox browser and click the Menu.
  2. Go to Help and then choose Troubleshooting Information.Reset Firefox 1
  3. Under Give Firefox a tune up section, click on Refresh Firefox...
  4. Once the pop-up shows up, confirm the action by pressing on Refresh Firefox.Reset Firefox 2

Remove from Google Chrome

Delete malicious extensions from Google Chrome:

  1. Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
  2. In the newly opened window, you will see all the installed extensions. Uninstall all suspicious extensions related to the unwanted program by clicking Remove.Remove extensions from Chrome

Clear cache and web data from Chrome:

  1. Click on Menu and pick Settings.
  2. Under Privacy and security, select Clear browsing data.
  3. Select Browsing history, Cookies and other site data, as well as Cached images and files.
  4. Click Clear data.Clear cache and web data from Chrome

Change your homepage:

  1. Click menu and choose Settings.
  2. Look for a suspicious site in the On startup section.
  3. Click on Open a specific or set of pages and click on three dots to find the Remove option.

Reset Google Chrome:

If the previous methods did not help you, reset Google Chrome to eliminate all the unwanted components:

  1. Click on Menu and select Settings.
  2. In the Settings, scroll down and click Advanced.
  3. Scroll down and locate Reset and clean up section.
  4. Now click Restore settings to their original defaults.
  5. Confirm with Reset settings.Reset Chrome 2

Delete from Safari

Remove dangerous extensions:

  1. Open Safari, click Safari in the menu at the top-left of the screen, and select Preferences.
  2. Go to the Extensions tab, look for any suspicious entries, and click Uninstall to remove them.Remove extensions from Safari

Clear history and website data:

  1. Click Safari in the menu and pick Clear History.
  2. Set Clear to all history and confirm with Clear History.Clear history from Safari

Reset Safari:

  1. Click Safari in the menu and select Preferences > Advanced.
  2. Enable Show Develop menu in menu bar.
  3. From the menu bar, click Develop and select Empty Caches.Reset Safari

Be the first to comment

Log in to post your comment
Log in to comment
Editor's pick · tested 2026

Fortect Intego

9.4 / 10 9.6 / 10 Best overall pick
  • Real-time ransomware shield
  • Free 14-day trial, no card
  • Cleans the threats listed above

Ad — we may earn a commission if you buy via this link.

Get protected →Get protected → Read our full review Read our full review

Still worried? Run a free check.

Scan a URL or domain in seconds — no install, no signup. Powered by 60+ engines.

Trusted by 2.4M+ readers this year.

Spyware news
Powered by  GDPR Cookie Compliance
Privacy preferences

We use cookies to improve your experience and analyze traffic. Some cookies enable embedded content like videos and social posts. Choose what you allow — you can change this anytime.