How to uninstall RunningUpdater app/extension from Mac

What is RunningUpdater

According to security professionals, RunningUpdater is a potentially unwanted program (PUP) that falls under the category of Adware. Adware is a form of malicious software that designed only to present numerous pop ups and/or annoying adverts using intrusive and at times dangerous methods. Adware can also include other types of malicious software. It can steal user information from the MAC OS and pass it on to third parties. Adware software has also been the basis for hacking to gain access to the MAC OS.

Adware software is often harmless, but sometimes the adware you inadvertently download can also be spyware. Spyware can sometimes seek out your personal information stored on the MAC computer, gather this information and use it to steal your identity. To find out how to get rid of RunningUpdater adware, we advise to read the step-by-step instructions added to this post below. The instructions was prepared by experienced security professionals who discovered a way to remove the annoying adware out of the MAC.

How does RunningUpdater get on your Apple Mac

Most commonly, adware spreads bundled with the install packages from file sharing and torrents web pages. So, install freeware is a a good chance that you will find a bundled adware software. If you don’t know how to avoid it, then use a simple trick. During the install, choose the Custom or Advanced setup option. Next, click ‘Decline’ button and clear all checkboxes on offers that ask you to install optional applications. Moreover, please carefully read Term of use and User agreement before installing any applications or otherwise you can end up with another unwanted program on your machine like this adware software.

Threat Summary

Name	RunningUpdater, RunningUpdater 1.0 app
Type	adware, potentially unwanted application (PUA), pop-up virus, pop-ups, pop up advertisements
Symptoms	you experience a ton of of unwanted advertisements every time you perform an Internet search, your internet browser is re-directed to another web-page there is an unexpected application in the ‘Uninstall a program’ section of your Control Panel intrusive toolbars your web browser homepage or search engine keeps changing or is not set to Google anymor low ping but slow Internet your browser crashes
Removal	RunningUpdater removal guide

How to Remove RunningUpdater adware (removal steps)

The answer is right here on this page. We have put together simplicity and efficiency. It will allow you easily to clean your machine of RunningUpdater adware. Moreover, you can choose manual or automatic removal method. If you are familiar with MAC computers then use manual removal, otherwise use the free antimalware utility designed specifically to get rid of adware. Of course, you may combine both methods. Some of the steps below will require you to exit this website. So, please read the few simple steps carefully, after that bookmark it or open it on your smartphone for later reference.

To remove RunningUpdater, execute the following steps:

1. Remove unwanted profiles on Mac device
2. Check the list of installed applications
3. Remove RunningUpdater related files and folders
4. Scan your Mac with MalwareBytes
5. Remove RunningUpdater from Safari, Chrome, Firefox
6. How to stay safe online
7. To sum up

Remove unwanted profiles on Mac device

RunningUpdater can install a configuration profile on the Mac system to block changes made to the browser settings. Therefore, you need to open system preferences, find and delete the profile installed by the adware.

Click Apple menu ( ) > System Preferences.

In System Preferences, select Profiles. if there is no Profiles in the list of preferences, that means there are no profiles installed on the Mac computer. If there is Profiles in the list, then click on it, then select a profile associated with RunningUpdater.

To delete a malicious profile, click on the minus button ( – ) located at the bottom-left of the Profiles screen.

Check the list of installed applications

In the next step, you need to check the list of installed applications on your Mac computer and delete all unused, unknown and suspicious apps.

Open Finder and click “Applications”.

Carefully browse through the list of installed programs and remove all dubious and unknown apps.

When you have found anything dubious that may be the RunningUpdater adware software or other PUP, then right click this program and select “Move to Trash”. Once complete, Empty Trash.

Remove RunningUpdater related files and folders

Now you need to try to find RunningUpdater related files and folders, and then delete them manually. You need to look for these files in certain directories. To quickly open them, we recommend using the “Go to Folder…” command.

Click on the Finder icon. From the menu bar, select Go and click “Go to Folder…”. As a result, a small window opens that allows you to quickly open a specific directory.

Check for RunningUpdater generated files in the /Library/LaunchAgents folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/LaunchAgents

This will open the contents of the “/Library/LaunchAgents” folder. Look carefully at it and pay special attention to recently created files, as well as files that have a suspicious name. Move all suspicious files to the Trash. A few examples of files: search.plist, com.machelper.plist, macsearch.plist, installapp.plist and RunningUpdater.plist. Most often, browser hijackers, potentially unwanted programs and adware software create several files with similar names.

Check for RunningUpdater generated files in the /Library/Application Support folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/Application Support

This will open the contents of the “Application Support” folder. Look carefully at its contents, pay special attention to recently added/changed folder. Move all suspicious folders to the Trash.

Check for RunningUpdater generated files in the “~/Library/LaunchAgents” folder

In the “Go to Folder…” window, type the following text and press Go:
~/Library/LaunchAgents

Proceed in the same way as with the “/Library/LaunchAgents” and “/Library/Application Support” folders. Look for suspicious and recently added files. Move all suspicious files to the Trash.

Check for RunningUpdater generated files in the /Library/LaunchDaemons folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/LaunchDaemons

Carefully browse the entire list of files and pay special attention to recently created files, as well as files that have a suspicious name. Move all suspicious files to the Trash. A few examples of files to be deleted: com.RunningUpdater.plist, com.macsearch.plist, com.installapp.plist, com.search.plist and com.machelper.plist. In most cases, browser hijackers, PUPs and adware create several files with similar names.

Scan your Mac with MalwareBytes

You can delete RunningUpdater related files automatically with a help of MalwareBytes Free. We recommend this free malware removal tool because it can easily remove toolbars, potentially unwanted programs, browser hijackers and adware software with all their components such as files, folders and system entries.

Visit the page linked below to download the latest version of MalwareBytes Free for Apple Mac.

After downloading is done, close all windows on your MAC. Further, start the saved file. Follow the prompts.

The MalwareBytes will automatically start and you can see its main window as shown below.

Next, click the “Scan Now” button to perform a system scan for the RunningUpdater adware. This process may take quite a while, so please be patient. While the MalwareBytes Free tool is checking, you may see how many objects it has identified as being infected by malware.

As the scanning ends, MalwareBytes will show a list of all items found by the scan. When you are ready, click the “Quarantine” button.

The MalwareBytes Anti Malware will get rid of RunningUpdater and move the selected items to the Quarantine.

Remove RunningUpdater from Safari, Chrome, Firefox

Remove unwanted plugins is a easy method to remove RunningUpdater adware software and return web-browser’s settings which have been modified by adware.

Google Chrome	Mozilla Firefox
In the top right corner, click on Chrome’s main menu button, represented by three vertical dots. In the menu go to ‘More tools’, then ‘Extensions’. Click ‘Remove’ to uninstall an extension. Click ‘Remove’ in the dialog box. You can also try to remove RunningUpdater by reset Chrome settings.	Click on ‘menu’ button and select ‘Add-ons’. Go to ‘Extensions’ tab. To uninstall an add-on, click on ‘Remove’ button next to it. If you are still experiencing problems with RunningUpdater adware removal, you need to reset Firefox browser.
Safari
On the top menu select ‘Safari’, then ‘Preferences’. Select ‘Extensions’ tab. Select an extension you want to delete and click ‘Uninstall’ button next to it.

How to stay safe online

Using an ad blocker application such as AdGuard is an effective way to alleviate the risks. Additionally, ad-blocker programs will also protect you from malicious advertisements and web-sites, and, of course, stop redirection chain to misleading, scam and similar web sites.

Download AdGuard on your machine from the link below.

After the download is complete, run the downloaded file. The “Setup Wizard” window will show up on the computer screen.

Follow the prompts. AdGuard will then be installed. A window will show up asking you to confirm that you want to see a quick instructions. Press “Skip” button to close the window and use the default settings, or press “Get Started” to see an quick instructions which will allow you get to know AdGuard better.

Each time, when you start your machine, AdGuard will launch automatically and stop unwanted pop ups, block harmful and misleading web-pages.

To sum up

Once you have complete the steps outlined above, your MAC should be clean from RunningUpdater and other malicious software. The Chrome, Safari and Mozilla Firefox will no longer redirect you to various unwanted webpages sand online ads. Unfortunately, if the steps does not help you, then you have caught a new adware, and then the best way – ask for help here.