How to uninstall PortalAgent app/extension from Mac

What is PortalAgent

PortalAgent is supposed to be a program that will improve the browsing experience, but according to security professionals, this application is adware. Adware is form of malware developed to insert adverts into your Internet browsing or even desktop experience. Adware software can be created to alter your homepage, search engine, search results, or even add toolbars to your web browser. Adware run in the background when you’re online, and adware software can slow down your computer and affect its performance.

Even worse, adware can install a component that enables its developer to track which web-sites you visit, which products you look at upon those pages. They are then able to choose the type of ads they display you. So, if you had adware on your Apple Mac, there is a good chance you have another that is collecting and sharing your confidential information with third parties, without your consent.

How does PortalAgent get on your MAC OS

In most cases, adware come along with the setup files from file sharing and torrents web pages. So, install free programs is a a good chance that you will find a bundled adware. If you don’t know how to avoid it, then use a simple trick. During the installation, choose the Custom or Advanced installation mode. Next, press ‘Decline’ button and clear all checkboxes on offers that ask you to install third-party apps. Moreover, please carefully read Term of use and User agreement before installing any apps or otherwise you can end up with another unwanted application on your machine like this adware.

Threat Summary

Name	PortalAgent, PortalAgent 1.0 app
Type	adware software, PUP (potentially unwanted program), pop up advertisements, popups, pop-up virus
Symptoms	you experience a large number of of unexpected advertising popups web-site links redirect to websites different from what you expected there is an unexpected apps in the ‘Applications’ section of the Finder unexpected browser addons or toolbars keep coming back your web browser startpage has modified and you are unable to change it back slow browsing Internet your machine is no stable leading to freezes
Removal	PortalAgent removal guide

How to remove PortalAgent adware

Fortunately, it is not hard to remove adware. In the following tutorial, we will provide two ways to clean your MAC of this adware. One is the manual removal method and the other is automatic removal way. You can choose the method that best fits you. Please follow the removal guide below to remove PortalAgent right now!

To remove PortalAgent, complete the following steps:

1. Remove profiles created by PortalAgent
2. Check the list of installed apps
3. Remove PortalAgent related files and folders
4. Scan your Mac with MalwareBytes
5. Remove PortalAgent from Safari, Chrome, Firefox
6. How to stay safe online

Remove profiles created by PortalAgent

PortalAgent can make changes to the Mac system such as malicious changes to browser settings, and the addition of malicious system profiles. You need to check the system preferences, find and remove malicious profiles and ensure your settings are as you expect.

Click Apple menu ( ) > System Preferences.

In System Preferences, select Profiles. if there is no Profiles in the list of preferences, that means there are no profiles installed on the Mac computer. If there is Profiles in the list, then click on it, then select a profile related to PortalAgent.

To delete a malicious profile, click on the minus button ( – ) located at the bottom-left of the Profiles screen.

Check the list of installed apps

Some of adware, PUPs and browser hijackers can be deleted using the Move to Trash tool that can be found in the Finder. So, if you are using any version of Mac and you have noticed an unwanted program, then first try to remove it through the Finder.

Open Finder and click “Applications” as displayed in the figure below.

You will see a list of apps installed on your MAC OS. We recommend to pay maximum attention to the application you installed last. Most probably, it’s the PortalAgent . If you are in doubt, you can always check the application by doing a search for her name in Google, Yahoo or Bing.

Once the application which you need to remove is found, simply right press on its name, and choose “Move to Trash”.

Don’t forget, choose Finder, then “Empty Trash”.

Remove PortalAgent related files and folders

Now you need to try to find PortalAgent related files and folders, and then delete them manually. You need to look for these files in certain directories. To quickly open them, we recommend using the “Go to Folder…” command.

Click on the Finder icon. From the menu bar, select Go and click “Go to Folder…”. As a result, a small window opens that allows you to quickly open a specific directory.

Check for PortalAgent generated files in the /Library/LaunchAgents folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/LaunchAgents

This will open the contents of the “/Library/LaunchAgents” folder. Look carefully at it and pay special attention to recently created files, as well as files that have a suspicious name. Move all suspicious files to the Trash. A few examples of files: macsearch.plist, com.machelper.plist, search.plist, installapp.plist and PortalAgent.plist. Most often, browser hijackers, potentially unwanted programs and adware create several files with similar names.

Check for PortalAgent generated files in the /Library/Application Support folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/Application Support

This will open the contents of the “Application Support” folder. Look carefully at its contents, pay special attention to recently added/changed folder. Move all suspicious folders to the Trash.

Check for PortalAgent generated files in the “~/Library/LaunchAgents” folder

In the “Go to Folder…” window, type the following text and press Go:
~/Library/LaunchAgents

Proceed in the same way as with the “/Library/LaunchAgents” and “/Library/Application Support” folders. Look for suspicious and recently added files. Move all suspicious files to the Trash.

Check for PortalAgent generated files in the /Library/LaunchDaemons folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/LaunchDaemons

Carefully browse the entire list of files and pay special attention to recently created files, as well as files that have a suspicious name. Move all suspicious files to the Trash. A few examples of files to be deleted: com.PortalAgent.plist, com.macsearch.plist, com.installapp.plist, com.search.plist and com.machelper.plist. In most cases, browser hijackers, adware software and PUPs create several files with similar names.

Scan your Mac with MalwareBytes

If you’re still having issues with the PortalAgent removal or just wish to scan your Mac device occasionally for adware and other malicious software, then download MalwareBytes Anti Malware (MBAM). It’s free for home use, and scans for and deletes various unwanted applications that attacks your machine or degrades MAC OS performance. MalwareBytes Anti Malware can remove PUPs, adware, toolbars and browser hijackers as well as malware, including ransomware and trojans.

1. Download MalwareBytes Anti Malware (MBAM) on your Apple Mac from the link below.
   
   

   Malwarebytes Anti-malware (Mac)
   20851 downloads
   Author: Malwarebytes
   Category: Security tools
   Update: September 10, 2020
   
2. Once downloading is done, please close all applications and open windows on your Apple Mac. Run the downloaded file. Follow the prompts.
3. The MalwareBytes Anti-Malware (MBAM) will run and display the main window.
4. Further, press the “Scan” button to look for PortalAgent . This process may take some time, so please be patient. While the tool is scanning, you may see how many objects and files has already scanned.
5. Once the scan get finished, MalwareBytes AntiMalware (MBAM) will display a screen which contains a list of malicious software that has been detected.
6. In order to delete all threats, simply click the “Remove Selected Items” button.
7. Close the Anti-Malware and continue with the next step.

Remove PortalAgent from Safari, Chrome, Firefox

Annoying PortalAgent adware or other symptoms of adware in your internet browser is a good reason to locate and delete malicious extensions. This is an easy way to recover browsers settings and not lose any important information.

Google Chrome	Mozilla Firefox
Click on ‘three dots menu’ button at the top right corner of the Google Chrome window. Select ‘More tools’, then ‘Extensions’. Click ‘Remove’ to uninstall an extension. Click ‘Remove’ in the dialog box. You can also try to delete PortalAgent by reset Google Chrome settings.	Click on ‘menu’ button and select ‘Add-ons’. Go to ‘Extensions’ tab. To uninstall an add-on, click on ‘Remove’ button next to it. If you are still experiencing problems with PortalAgent adware removal, you need to reset Firefox browser.
Safari
On the top menu select ‘Safari’, then ‘Preferences’. Select ‘Extensions’ tab. Select an extension you want to delete and click ‘Uninstall’ button next to it.

How to stay safe online

It’s also critical to protect your browsers from malicious websites and advertisements by using an ad blocker application such as AdGuard. Security experts says that it will greatly reduce the risk of malicious software, and potentially save lots of money. Additionally, the AdGuard can also protect your privacy by blocking almost all trackers.

1. Installing the AdGuard is simple. First you will need to download AdGuard on your MS Windows Desktop from the link below.
   
   

   AdGuard for Mac download
   3687 downloads
   Author: © Adguard
   Category: Security tools
   Update: January 17, 2018
   
2. Once the download is complete, launch the downloaded file. You will see the “Setup Wizard” program window. Follow the prompts.
3. Once the setup is finished, click “Skip” to close the install program and use the default settings, or press “Get Started” to see an quick tutorial that will allow you get to know AdGuard better.
4. In most cases, the default settings are enough and you do not need to change anything. Each time, when you launch your MAC system, AdGuard will start automatically and stop intrusive advertisements, block malicious and misleading websites.

Finish words

Now your computer should be clean of the PortalAgent adware. We suggest that you keep AdGuard (to help you block unwanted ads and unwanted malicious web-sites) and MalwareBytes Anti-Malware (MBAM) (to periodically scan your machine for new malicious software, hijackers and adware software). Make sure that you have all the Critical Updates recommended for Mac OS. Without regular updates you WILL NOT be protected when new browser hijackers, malicious applications and adware are released.

If you are still having problems while trying to remove PortalAgent from your web-browser, then ask for help here.