How to uninstall MacRunnerDaemon app from Mac (Virus removal guide)

What is MacRunnerDaemon

MacRunnerDaemon is an application that belongs to the group of Adware. Adware is a kind of mlicious software that can cause all kind of problems within internet browsers. Most often, this kind of software do not have any uninstall procedures and can use technologies that are similar to those used by malware to penetrate computers. If you are unfortunate have adware software, you can follow the instructions below that will help you to delete MacRunnerDaemon and thereby remove intrusive ads from your internet browser.

The MacRunnerDaemon app can cause unwanted redirects, pop ups or inline text links with ads. These ads are used to promote sales or web-traffic to malicious web-pages or publisher in order to make profit. Another reason why you need to get rid of MacRunnerDaemon is its online data-tracking activity. It is able to gather a wide variety of marketing-type data about you that may be later sold to third parties. You don’t know if your home address, account names and passwords are safe.

How does MacRunnerDaemon get on your MAC system

The most common way to get adware is a freeware setup file. Most commonly, a user have a chance to disable all unnecessary apps, but some installers are created to confuse the average users, in order to trick them into installing potentially unwanted programs and adware software. Anyway, easier to prevent adware rather than clean up your Apple Mac after one. So, keep your web browser updated (turn on automatic updates), run good antivirus software, double check free software before you start it (do a google search, scan a downloaded file with VirusTotal), avoid shady and unknown web sites.

Threat Summary

Name	MacRunnerDaemon, “Mac Runner Daemon”
Type	adware, PUP (potentially unwanted program), Mac malware, Mac virus
Detection Names	OSX.Trojan.Gen, ApplicUnwnt, Adware/Adload!OSX, Adware.MAC.Generic, Trojan-Downloader.OSX.Adload, Osx.Adware.Cimpli, MacOS.Agent-MT and Program:MacOS/Vigram.A
Distribution	Free software installers, suspicious pop up advertisements, torrent downloads and fake update tools
Symptoms	When you go to a web page, you are occasionally redirected to another website that you do not intend to visit, browser popups appear and recommend fake Jave updates, new entries appear in your Applications folder, an unexpected extension appears in your internet browser, your browser start page has modified without your permission, slow Internet browsing speeds.
Removal	MacRunnerDaemon removal guide

How to remove MacRunnerDaemon adware

There are a few solutions that can be used to remove MacRunnerDaemon. But, not all PUAs like this adware can be completely removed using only manual methods. In many cases you are not able to delete any adware utilizing standard Mac options. In order to delete adware software you need complete a few manual steps and use reliable removal utilities. Most IT security experts states that MalwareBytes Free tool is a right choice. The free program is able to look for and remove MacRunnerDaemon from your MAC and revert back your internet browser settings to defaults.

To remove MacRunnerDaemon, complete the following steps:

1. Remove profiles created by MacRunnerDaemon
2. Uninstall MacRunnerDaemon associated software by using the Finder
3. Remove MacRunnerDaemon related files and folders
4. Scan your Mac with MalwareBytes
5. Remove MacRunnerDaemon from Safari, Chrome, Firefox
6. How to stay safe online

Remove profiles created by MacRunnerDaemon

MacRunnerDaemon can install a configuration profile on the Mac system to block changes made to the browser settings. Therefore, you need to open system preferences, find and delete the profile installed by the adware.

Click the System Preferences icon ( ) in the Dock, or choose Apple menu ( ) > System Preferences.

In System Preferences, click Profiles, then select a profile associated with MacRunnerDaemon.

Click the minus button ( – ) located at the bottom-left of the Profiles screen to remove the profile.
Note: if you do not see Profiles in the System Preferences, that means there are no profiles installed on your Mac, which is normal.

Uninstall MacRunnerDaemon associated software by using the Finder

In the next step, you need to check the list of installed apps on your Mac and remove all unused, unknown and dubious software.

Open Finder and click “Applications”.

Carefully browse through the list of installed software and remove all dubious and unknown software.

When you’ve found anything dubious that may be the MacRunnerDaemon adware software or other PUP, then right click this program and choose “Move to Trash”. Once complete, Empty Trash.

Remove MacRunnerDaemon related files and folders

Now you need to try to find MacRunnerDaemon related files and folders, and then delete them manually. You need to look for these files in certain directories. To quickly open them, we recommend using the “Go to Folder…” command.

MacRunnerDaemon creates several files, these files must be found and removed. Below is a list of files associated with this unwanted program.

• /Library/LaunchDaemons/com.MacRunnerDaemon.system.plist
• ~/Library/LaunchAgents/com.MacRunnerDaemon.service.plist
• /Library/Application Support/.(RANDOM)/System/com.MacRunnerDaemon.system
• ~/Library/Application Support/.(RANDOM)/Services/com.MacRunnerDaemon.service.app

Some files created by MacRunnerDaemon are hidden from the user. To find and delete them, you need to enable “show hidden files”. To do this, use the shortcut CMD + SHIFT + . Press once to show hidden files and again to hide them. There is another way. Click Finder -> Applications -> Utilities -> Terminal. In Terminal, paste the following text: defaults write com.apple.finder AppleShowAllFiles YES

Press Enter. Hold the ‘Option/alt’ key, then right click on the Finder icon in the dock and click Relaunch.

Click on the Finder icon. From the menu bar, select Go and click “Go to Folder…”. As a result, a small window opens that allows you to quickly open a specific directory.

Check for MacRunnerDaemon generated files in the /Library/LaunchAgents folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/LaunchAgents

This will open the contents of the “/Library/LaunchAgents” folder. Look carefully at it and pay special attention to recently created files, as well as files that have a suspicious name. Move all suspicious files to the Trash. A few examples of files: installapp.plist, search.plist, macsearch.plist, com.google.defaultsearch.plist, , com.net-preferences.plist, com.MacRunnerDaemon.service.plist and com.machelper.plist. Most often, adware, potentially unwanted programs and browser hijackers create several files with similar names.

Check for MacRunnerDaemon generated files in the /Library/Application Support folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/Application Support

This will open the contents of the “Application Support” folder. Look carefully at its contents, pay special attention to recently added/changed folders and files. Check the contents of suspicious folders, if there is a file with a name similar to com.MacRunnerDaemon.system, then this folder must be deleted. Move all suspicious folders and files to the Trash.

Check for MacRunnerDaemon generated files in the “~/Library/LaunchAgents” folder

In the “Go to Folder…” window, type the following text and press Go:
~/Library/LaunchAgents

Proceed in the same way as with the “/Library/LaunchAgents” and “/Library/Application Support” folders. Look for suspicious and recently added files. Move all suspicious files to the Trash.

Check for MacRunnerDaemon generated files in the /Library/LaunchDaemons folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/LaunchDaemons

Carefully browse the entire list of files and pay special attention to recently created files, as well as files that have a suspicious name. Move all suspicious files to the Trash. A few examples of files to be deleted: com.search.system.plist, com.MacRunnerDaemon.system.plist, com.macsearch.system.plist, com.installapp.system.plist and com.machelper.system.plist. In most cases, browser hijackers, PUPs and adware create several files with similar names.

Scan your Mac with MalwareBytes

You can get rid of MacRunnerDaemon related files automatically through the use of MalwareBytes Free. We advise this free malicious software removal utility because it may easily get rid of adware, toolbars, PUPs and browser hijackers with all their components such as files, folders and system entries.

1. Click the following link to download MalwareBytes AntiMalware (MBAM).
   
   

   Malwarebytes Anti-malware (Mac)
   20984 downloads
   Author: Malwarebytes
   Category: Security tools
   Update: September 10, 2020
   
2. When downloading is complete, please close all software and open windows on your machine. Run the downloaded file. Follow the prompts.
3. The MalwareBytes Anti-Malware will run and display the main window.
4. Further, click the “Scan” button to locate MacRunnerDaemon adware. A scan can take anywhere from 10 to 30 minutes, depending on the number of files on your machine and the speed of your Apple Mac. While the MalwareBytes AntiMalware (MBAM) application is scanning, you can see count of objects it has identified as threat.
5. When MalwareBytes AntiMalware is complete scanning your MAC OS, MalwareBytes AntiMalware (MBAM) will create a list of unwanted programs and adware.
6. In order to delete all threats, simply press the “Remove Selected Items” button.
7. Close the AntiMalware and continue with the next step.

Remove MacRunnerDaemon from Safari, Chrome, Firefox

If you have ‘MacRunnerDaemon adware’ removal problem, then remove unwanted extensions can help you. In the steps below we’ll show you the way to remove malicious extensions without reinstall. This will also allow to get rid of MacRunnerDaemon adware from your web-browser.

Google Chrome	Mozilla Firefox
In the top right corner, click on Google Chrome’s main menu button, represented by three vertical dots. In the menu go to ‘More tools’, then ‘Extensions’. Click ‘Remove’ to uninstall an extension. Click ‘Remove’ in the dialog box. You can also try to remove MacRunnerDaemon adware software by reset Google Chrome settings.	Click on ‘menu’ button and select ‘Add-ons’. Go to ‘Extensions’ tab. To uninstall an add-on, click on ‘Remove’ button next to it. If you are still experiencing issues with MacRunnerDaemon adware removal, you need to reset Firefox browser.
Safari
On the top menu select ‘Safari’, then ‘Preferences’. Select ‘Extensions’ tab. Select an extension you want to delete and click ‘Uninstall’ button next to it.

How to stay safe online

It is also critical to protect your web-browsers from malicious webpages and advertisements by using an ad blocking program such as AdGuard. Security experts says that it’ll greatly reduce the risk of malicious software, and potentially save lots of money. Additionally, the AdGuard may also protect your privacy by blocking almost all trackers.

Download AdGuard on your MAC OS by clicking on the link below.

Once downloading is done, run the downloaded file. The “Setup Wizard” window will show up on the computer screen.

Follow the prompts. AdGuard will then be installed. A window will show up asking you to confirm that you want to see a quick tutorial. Click “Skip” button to close the window and use the default settings, or click “Get Started” to see an quick guidance which will help you get to know AdGuard better.

Each time, when you run your MAC system, AdGuard will launch automatically and stop annoying pop up ads, block malicious and misleading web sites.

To sum up

Now your Apple Mac should be free of the MacRunnerDaemon adware. We suggest that you keep AdGuard (to help you block unwanted popup ads and intrusive harmful web-pages) and MalwareBytes (to periodically scan your Apple Mac for new malicious software, hijackers and adware). Make sure that you have all the Critical Updates recommended for Mac operating system. Without regular updates you WILL NOT be protected when new hijackers, harmful software and adware are released.

If you are still having problems while trying to delete unwanted ads from your web-browser, then ask for help here.