How to uninstall BufferRecord app/extension from Mac (Virus removal guide)

What is BufferRecord

According to security specialists, BufferRecord is a malicious application that falls under the category of Adware. Adware is a type of malware. Once adware gets installed in your Mac then it starts showing unwanted advertisements and pop-ups. Some of these ads are scams or fake ads developed to trick you. In some cases, adware can promote p*rn web-sites and adult products. Even the harmless ads can become really irritating. Adware software can be installed accidentally and without you knowing about it, when you open email attachments, install free applications.

Another reason why you need to delete the BufferRecord adware is its online data-tracking activity. It has the ability to collect lots of your confidential information such as what websites you are opening, what you are looking for the Web and so on. This sensitive information, subsequently, may be transferred third party companies.

So, if you happen to encounter the adware, then be quick and take effort to remove it as quickly as possible. Follow the tutorial below to remove BufferRecord adware. Let us know how you managed by sending us your comments please.

How does BufferRecord get on your MAC OS

Usually, adware gets into MAC computers as part of a bundle with free programs, sharing files and other unsafe apps that users downloaded from the Web. The authors of adware software pays software developers for distributing adware software within their apps. So, bundled apps is often included as part of the setup package. In order to avoid the installation of any adware: select only Manual, Custom or Advanced installation mode and uncheck all third-party applications in which you are unsure.

Threat Summary

Name	BufferRecord, BufferRecord 1.0 app
Type	adware software, potentially unwanted program (PUP), Mac malware, Mac virus
Detection Names	ApplicUnwnt, Trojan-Downloader.OSX.Adload, Adware.MAC.Generic, Adware/Adload!OSX, MacOS.Agent-MT, OSX.Trojan.Gen, Osx.Adware.Cimpli and Program:MacOS/Vigram.A
Distribution	Free software installers, torrent downloads, suspicious pop-up ads and fake software updaters
Symptoms	The web page links redirect to a web sites different from what you expected, unclosable window appear and recommend fake Flash updates, there is an unexpected program in the ‘Applications’ section of the Finder, new toolbars on your desktop, your browser homepage has changed and you cannot modify it back, low ping but slow Internet.
Removal	BufferRecord removal guide

How to remove BufferRecord from Mac device

In the few simple steps below, we will try to cover the Safari, Google Chrome and Firefox and provide general advice to get rid of BufferRecord . You may find some minor differences in your Mac OS install. No matter, you should be okay if you follow the steps outlined below: remove all suspicious and unknown applications, reset internet browsers settings, run free malicious software removal tools. Certain of the steps will require you to restart your machine or exit this web site. So, read this guide carefully, then bookmark this page or open it on your smartphone for later reference.

To remove BufferRecord, use the following steps:

1. Remove profiles created by BufferRecord
2. Check the list of installed apps
3. Remove BufferRecord related files and folders
4. Scan your Mac with MalwareBytes
5. Remove BufferRecord from Safari, Chrome, Firefox
6. How to stay safe online

Remove profiles created by BufferRecord

BufferRecord can make changes to the Mac system such as malicious changes to browser settings, and the addition of malicious system profiles. You need to check the system preferences, find and remove malicious profiles and ensure your settings are as you expect.

Click Apple menu ( ) > System Preferences.

In System Preferences, select Profiles. if there is no Profiles in the list of preferences, that means there are no profiles installed on the Mac computer. If there is Profiles in the list, then click on it, then select a profile associated with BufferRecord.

To delete a malicious profile, click on the minus button ( – ) located at the bottom-left of the Profiles screen.

Check the list of installed apps

Some adware, browser hijackers and PUPs may be deleted by uninstalling the free programs they came with. If this way does not succeed, then looking them up in the list of installed programs in the Finder. Use the “Move to Trash” command in order to delete them.

1. Open the Finder.
2. Click “Applications”.
3. It will show a list of all programs installed on the Apple Mac.
4. Scroll through the all list, and remove dubious and unknown programs. Pay maximum attention to the application you installed last.
5. Drag the questionable program from the Applications folder to the Trash.
6. Empty Trash.

Remove BufferRecord related files and folders

Now you need to try to find BufferRecord related files and folders, and then delete them manually. You need to look for these files in certain directories. To quickly open them, we recommend using the “Go to Folder…” command.

BufferRecord creates several files, these files must be found and removed. Below is a list of files associated with this unwanted program.

• /Library/LaunchDaemons/com.BufferRecord.system.plist
• ~/Library/LaunchAgents/com.BufferRecord.service.plist
• /Library/Application Support/.(RANDOM)/System/com.BufferRecord.system
• ~/Library/Application Support/.(RANDOM)/Services/com.BufferRecord.service.app

Some files created by BufferRecord are hidden from the user. To find and delete them, you need to enable “show hidden files”. To do this, use the shortcut CMD + SHIFT + . Press once to show hidden files and again to hide them. There is another way. Click Finder -> Applications -> Utilities -> Terminal. In Terminal, paste the following text: defaults write com.apple.finder AppleShowAllFiles YES

Press Enter. Hold the ‘Option/alt’ key, then right click on the Finder icon in the dock and click Relaunch.

Click on the Finder icon. From the menu bar, select Go and click “Go to Folder…”. As a result, a small window opens that allows you to quickly open a specific directory.

Check for BufferRecord generated files in the /Library/LaunchAgents folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/LaunchAgents

This will open the contents of the “/Library/LaunchAgents” folder. Look carefully at it and pay special attention to recently created files, as well as files that have a suspicious name. Move all suspicious files to the Trash. A few examples of files: com.google.defaultsearch.plist, , installapp.plist, macsearch.plist, search.plist, com.net-preferences.plist, com.machelper.plist and com.BufferRecord.service.plist. Most often, adware software, browser hijackers and potentially unwanted programs create several files with similar names.

Check for BufferRecord generated files in the /Library/Application Support folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/Application Support

This will open the contents of the “Application Support” folder. Look carefully at its contents, pay special attention to recently added/changed folders and files. Check the contents of suspicious folders, if there is a file with a name similar to com.BufferRecord.system, then this folder must be deleted. Move all suspicious folders and files to the Trash.

Check for BufferRecord generated files in the “~/Library/LaunchAgents” folder

In the “Go to Folder…” window, type the following text and press Go:
~/Library/LaunchAgents

Proceed in the same way as with the “/Library/LaunchAgents” and “/Library/Application Support” folders. Look for suspicious and recently added files. Move all suspicious files to the Trash.

Check for BufferRecord generated files in the /Library/LaunchDaemons folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/LaunchDaemons

Carefully browse the entire list of files and pay special attention to recently created files, as well as files that have a suspicious name. Move all suspicious files to the Trash. A few examples of files to be deleted: com.search.system.plist, com.installapp.system.plist, com.macsearch.system.plist, com.BufferRecord.system.plist and com.machelper.system.plist. In most cases, PUPs, adware and browser hijackers create several files with similar names.

Scan your Mac with MalwareBytes

Manual BufferRecord removal requires some computer skills. Some files and system entries that created by the adware software can be not completely removed. We advise that use MalwareBytes Free to scan the Mac computer. Moreover, this program will allow you to remove potentially unwanted programs, browser hijackers, adware and toolbars that your MAC system can be affected too.

Please go to the following link to download the latest version of MalwareBytes AntiMalware for Mac OS.

When the download is finished, close all windows on your machine. Further, launch the saved file. Follow the prompts.

The MalwareBytes Free will automatically start and you can see its main window as shown in the following example.

Next, click the “Scan Now” button to begin scanning your MAC OS for the BufferRecord . This task can take quite a while, so please be patient.

Once the scan get finished, MalwareBytes Anti Malware will show a list of found items. Next, you need to click the “Quarantine” button.

The MalwareBytes Anti Malware will remove BufferRecord adware.

Remove BufferRecord from Safari, Chrome, Firefox

If you are still seeing BufferRecord adware software that won’t go away, you might have malicious extensions installed on your web browser. Check your browser for unwanted extensions using the steps below.

Google Chrome	Mozilla Firefox
In the top-right corner, expand the Google Chrome menu. In the menu go to ‘More tools’, then ‘Extensions’. Click ‘Remove’ to uninstall an extension. Click ‘Remove’ in the dialog box. You can also try to get rid of BufferRecord adware by reset Chrome settings.	Click on ‘menu’ button and select ‘Add-ons’. Go to ‘Extensions’ tab. To uninstall an add-on, click on ‘Remove’ button next to it. If you are still experiencing issues with BufferRecord adware removal, you need to reset Firefox browser.
Safari
On the top menu select ‘Safari’, then ‘Preferences’. Select ‘Extensions’ tab. Select an extension you want to delete and click ‘Uninstall’ button next to it.

How to stay safe online

In order to increase your security and protect your MAC system against new annoying advertisements and malicious web pages, you need to run ad blocking application that stops an access to harmful advertisements and web sites. Moreover, the application can stop the display of intrusive advertising, that also leads to faster loading of websites and reduce the consumption of web traffic.

Visit the following page to download AdGuard.

Once the download is done, run the downloaded file. The “Setup Wizard” window will show up on the computer screen.

Follow the prompts. AdGuard will then be installed. A window will show up asking you to confirm that you want to see a quick guidance. Click “Skip” button to close the window and use the default settings, or press “Get Started” to see an quick guide which will help you get to know AdGuard better.

Each time, when you start your MAC OS, AdGuard will start automatically and stop intrusive ads, block malicious and misleading websites.

To sum up

Once you have done the guidance outlined above, your machine should be clean from the BufferRecord adware and other malware. The Chrome, Safari and Mozilla Firefox will no longer display any unwanted ads. Unfortunately, if the step-by-step guide does not help you, then you have caught a new adware, and then the best way – ask for help here.