How to uninstall UniversalField app/extension from Mac (Virus removal guide)

What is UniversalField

According to security specialists, UniversalField is an adware application that targets Mac computers. Adware is a type of malware. When the UniversalField app gets inside your Apple Mac, it might carry out various harmful tasks. Some of the more common acts on machines include: it can show various popup windows and/or annoying deals; it can redirect web-browser to shady web sites; it can slow down your Apple Mac; it can alter browser settings and install malicious browser plugins. Even worse, the adware can have spyware and keyloggers built into itself leading to greater damage to your machine and possible invasion of your personal data.

UniversalField can gather confidential info, including:

• IP addresses;
• URLs visited;
• search queries/terms;
• clicks on links and ads;
• internet browser version information.

How does UniversalField get on your machine

The majority of adware software gets onto MAC computers by being attached to freeware or even paid software which users can easily download online. The installers of such software, most commonly, clearly display that they will install optional apps. The option is given to users to stop the setup of any additional applications. So, in order to avoid the installation of any adware: read all disclaimers and install screens very carefully, choose only Custom or Advanced install method and uncheck all third-party software in which you are unsure.

Threat Summary

Name	UniversalField, UniversalField 1.0 app
Type	adware software, potentially unwanted application (PUA), Mac virus, Mac malware
Detection Names	Adware/Adload!OSX, MacOS.Agent-MT, Trojan-Downloader.OSX.Adload, Osx.Adware.Cimpli, ApplicUnwnt, Adware.MAC.Generic, OSX.Trojan.Gen and Program:MacOS/Vigram.A
Distribution	Freeware installers, shady popup ads, fake software updaters and torrent downloads
Symptoms	Your web browser is redirected to web sites you did not want, undesired advertising links appear on web sites that you are visiting, unwanted application installed without your knowledge, new icons in your internet browser, unwanted changes in your web browser such as displaying new tabs you did not open, your browser slows to a crawl.
Removal	UniversalField removal guide

How to Remove UniversalField adware (removal guide)

Fortunately, we’ve an effective solution which will assist you manually or/and automatically remove UniversalField from your browser and bring your web-browser settings, including new tab page, default search engine and start page, back to normal. Below you will find a removal guide with all the steps you may need to successfully get rid of adware and its traces. Read this manual carefully, bookmark it or open this page on your smartphone, because you may need to exit your web browser or restart your Apple Mac.

To remove UniversalField, complete the steps below:

• Remove unwanted profiles on Mac device
• Uninstall UniversalField related applications through the Finder
• Remove UniversalField related files and folders
• Scan your Mac with MalwareBytes
• Remove UniversalField from Safari, Chrome, Firefox
• How to stay safe online

Remove unwanted profiles on Mac device

UniversalField can make changes to the Mac system such as malicious changes to browser settings, and the addition of malicious system profiles. You need to check the system preferences, find and remove malicious profiles and ensure your settings are as you expect.

Click the System Preferences icon ( ) in the Dock, or choose Apple menu ( ) > System Preferences.

In System Preferences, click Profiles, then select a profile related to UniversalField.

Click the minus button ( – ) located at the bottom-left of the Profiles screen to remove the profile.
Note: if you do not see Profiles in the System Preferences, that means there are no profiles installed on your Mac device, which is normal.

Uninstall UniversalField related applications through the Finder

In order to delete potentially unwanted programs, adware and browser hijackers, open the Finder and click on “Applications”. Check the list of installed apps. For the ones you do not know, run an Internet search to see if they are browser hijackers, adware and potentially unwanted programs. If yes, delete them off. Even if they are just a applications which you do not use, then removing them off will increase your MAC OS start up time and speed dramatically.

• • 1. Open the Finder.
    2. Click “Applications”.
    3. It will display a list of all apps installed on the computer.
    4. Scroll through the all list, and delete dubious and unknown programs. Pay maximum attention to the program you installed last.
    5. Drag the suspicious program from the Applications folder to the Trash.
    6. Empty Trash.

Remove UniversalField related files and folders

Now you need to try to find UniversalField related files and folders, and then delete them manually. You need to look for these files in certain directories. To quickly open them, we recommend using the “Go to Folder…” command.

UniversalField creates several files, these files must be found and removed. Below is a list of files associated with this unwanted program.

• • • /Library/LaunchDaemons/com.UniversalField.system.plist
    • ~/Library/LaunchAgents/com.UniversalField.service.plist
    • /Library/Application Support/.(RANDOM)/System/com.UniversalField.system
    • ~/Library/Application Support/.(RANDOM)/Services/com.UniversalField.service.app

Some files created by UniversalField are hidden from the user. To find and delete them, you need to enable “show hidden files”. To do this, use the shortcut CMD + SHIFT + . Press once to show hidden files and again to hide them. There is another way. Click Finder -> Applications -> Utilities -> Terminal. In Terminal, paste the following text: defaults write com.apple.finder AppleShowAllFiles YES

Press Enter. Hold the ‘Option/alt’ key, then right click on the Finder icon in the dock and click Relaunch.

Click on the Finder icon. From the menu bar, select Go and click “Go to Folder…”. As a result, a small window opens that allows you to quickly open a specific directory.

Check for UniversalField generated files in the /Library/LaunchAgents folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/LaunchAgents

This will open the contents of the “/Library/LaunchAgents” folder. Look carefully at it and pay special attention to recently created files, as well as files that have a suspicious name. Move all suspicious files to the Trash. A few examples of files: com.UniversalField.service.plist, com.net-preferences.plist, macsearch.plist, search.plist, installapp.plist, com.machelper.plist and com.google.defaultsearch.plist, . Most often, adware, browser hijackers and PUPs create several files with similar names.

Check for UniversalField generated files in the /Library/Application Support folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/Application Support

This will open the contents of the “Application Support” folder. Look carefully at its contents, pay special attention to recently added/changed folders and files. Check the contents of suspicious folders, if there is a file with a name similar to com.UniversalField.system, then this folder must be deleted. Move all suspicious folders and files to the Trash.

Check for UniversalField generated files in the “~/Library/LaunchAgents” folder

In the “Go to Folder…” window, type the following text and press Go:
~/Library/LaunchAgents

Proceed in the same way as with the “/Library/LaunchAgents” and “/Library/Application Support” folders. Look for suspicious and recently added files. Move all suspicious files to the Trash.

Check for UniversalField generated files in the /Library/LaunchDaemons folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/LaunchDaemons

Carefully browse the entire list of files and pay special attention to recently created files, as well as files that have a suspicious name. Move all suspicious files to the Trash. A few examples of files to be deleted: com.UniversalField.system.plist, com.search.system.plist, com.machelper.system.plist, com.macsearch.system.plist and com.installapp.system.plist. In most cases, browser hijackers, adware software and PUPs create several files with similar names.

Scan your Mac with MalwareBytes

We suggest using MalwareBytes Anti Malware. You may download and install MalwareBytes to locate and remove UniversalField associated programs from your Mac. When installed and updated, the malicious software remover automatically scans for and deletes all security threats exist on the MAC OS.

MalwareBytes Anti Malware (MBAM) can be downloaded from the following link.

After the downloading process is finished, close all programs and windows on your MAC. Run the saved file. Follow the prompts.

The MalwareBytes Anti Malware will automatically start and you can see its main screen as displayed below.

Now click the “Scan” button to start scanning your MAC OS for the UniversalField adware software.

As the scanning ends, MalwareBytes will open a scan report. Make sure to check mark the items that are unsafe and then click the “Quarantine” button. The MalwareBytes Free will begin to delete UniversalField .

Remove UniversalField from Safari, Chrome, Firefox

This step will show you how to get rid of malicious extensions. This can remove UniversalField adware and fix some surfing issues, especially after adware infection.

Google Chrome	Mozilla Firefox
In the top right hand corner, click on ‘three vertical dots’, and this will open up the main menu on Chrome. In the menu go to ‘More tools’, then ‘Extensions’. Click ‘Remove’ to uninstall an extension. Click ‘Remove’ in the dialog box. You can also try to delete UniversalField by reset Google Chrome settings.	Click on ‘menu’ button and select ‘Add-ons’. Go to ‘Extensions’ tab. To uninstall an add-on, click on ‘Remove’ button next to it. If you are still experiencing problems with UniversalField removal, you need to reset Mozilla Firefox browser.
Safari
On the top menu select ‘Safari’, then ‘Preferences’. Select ‘Extensions’ tab. Select an extension you want to delete and click ‘Uninstall’ button next to it.

How to stay safe online

It’s also critical to protect your browsers from harmful web-sites and ads by using an ad blocking program such as AdGuard. Security experts says that it’ll greatly reduce the risk of malicious software, and potentially save lots of money. Additionally, the AdGuard may also protect your privacy by blocking almost all trackers.

Please go to the following link to download the latest version of AdGuard for Apple Mac.

Once the downloading process is done, run the downloaded file. You will see the “Setup Wizard” screen. Follow the prompts.

Each time, when you run your machine, AdGuard will start automatically and stop annoying pop up advertisements, block malicious and misleading web-sites.

To sum up

Now your MAC OS should be free of the UniversalField adware software. We suggest that you keep AdGuard (to help you block unwanted pop-ups and intrusive harmful web-sites) and MalwareBytes Free (to periodically scan your machine for new adware softwares and other malware).

If you are still having problems while trying to remove UniversalField from the Firefox, Safari and Chrome, then ask for help here here.