How to uninstall DesktopService app/extension from Mac (Virus removal guide)

What is DesktopService

DesktopService is an adware application that targets Mac computers. Adware is a form of malicious software that delivers unwanted advertisements. Some of these ads are scams or fake advertisements created to trick users. Even the harmless advertisements can become really irritating. Adware can be installed unintentionally and without users knowing about it, when users open email attachments, install freeware.

Another reason why you need to remove adware is its online data-tracking activity. Adware may monetize its functionality by collecting personal data from your surfing sessions. This privacy information, afterwards, can be easily sold to third party companies. This puts your confidential info at a security risk.

Thus, the DesktopService app does not really have beneficial features. So, we advise you delete it as soon as possible. This will also prevent the adware from tracking your online activities. A full DesktopService removal can be easily carried out using manual or automatic solution listed below.

How does DesktopService get on your computer

The adware software was probably installed on your computer when you installed certain free software such as Email checker, PDF creator, video codec, etc. Because more often than not, adware software can be bundled with the installation files of Softonic, Cnet, Soft32, Brothersoft or other similar software download websites. Thus, you must be very careful when running any files downloaded from the Web! Always read the User Agreement, Software License and Terms of Use carefully. In the installation wizard, you should select the Advanced, Custom or Manual installation option to specify which components and third-party apps to install, otherwise you risk infecting your MAC with adware or a potentially unwanted application (PUA).

Threat Summary

Name	DesktopService
Type	adware software, PUP (potentially unwanted program), Mac malware, Mac virus
Detection Names	Program:MacOS/Vigram.A, Adware/Adload!OSX, MacOS.Agent-MT, Osx.Adware.Cimpli, OSX.Trojan.Gen, ApplicUnwnt, Adware.MAC.Generic and Trojan-Downloader.OSX.Adload
Distribution	Free software installers, fake update tools, torrent downloads and suspicious pop up ads
Symptoms	The web-page links redirect to a web-sites different from what you expected, unclosable window appear and recommend fake security software, there is an unwanted application in the ‘Applications’ section of the Finder, unwanted web browser toolbars, your Mac settings are being altered without your request, slow browsing Internet.
Removal	DesktopService removal guide

How to remove DesktopService from Mac device

In most cases adware software requires more than a simple uninstall through the use of the Finder in order to be fully uninstalled. For that reason, our team created several removal methods which we’ve combined in a detailed guidance. Therefore, if you have the intrusive DesktopService adware on your machine and are currently trying to have it removed then feel free to follow the steps below in order to resolve your problem. Certain of the steps below will require you to close this web-page. So, please read the step-by-step tutorial carefully, after that bookmark it or open it on your smartphone for later reference.

To remove DesktopService, use the following steps:

1. Remove unwanted profiles on Mac device
2. Remove DesktopService related applications through the Finder
3. Remove DesktopService related files and folders
4. Scan your Mac with MalwareBytes
5. Remove DesktopService from Safari, Chrome, Firefox
6. How to stay safe online

Remove unwanted profiles on Mac device

DesktopService can install a configuration profile on the Mac system to block changes made to the browser settings. Therefore, you need to open system preferences, find and delete the profile installed by the adware software.

Click the System Preferences icon ( ) in the Dock, or choose Apple menu ( ) > System Preferences.

In System Preferences, click Profiles, then select a profile related to DesktopService.

Click the minus button ( – ) located at the bottom-left of the Profiles screen to remove the profile.
Note: if you do not see Profiles in the System Preferences, that means there are no profiles installed on your Mac computer, which is normal.

Remove DesktopService related applications through the Finder

Try to identify and uninstall the application that causes the appearance of unwanted ads or web-browser redirect, using the Applications list which is located in the Finder.

Open Finder and click “Applications”.

It will show a list of all applications installed on your MAC. Scroll through the all list, and remove any questionable and unknown software. Right click to questionable program and choose “Move to Trash”. Another method is drag the program from the Applications folder to the Trash.

Most important, scroll through the all list, and move to trash any unknown applications. Don’t forget, choose Finder -> Empty Trash.

Remove DesktopService related files and folders

Now you need to try to find DesktopService related files and folders, and then delete them manually. You need to look for these files in certain directories. To quickly open them, we recommend using the “Go to Folder…” command.

DesktopService creates several files, these files must be found and removed. Below is a list of files associated with this unwanted program.

• /Library/LaunchDaemons/com.DesktopService.system.plist
• ~/Library/LaunchAgents/com.DesktopService.service.plist
• /Library/Application Support/.(RANDOM)/System/com.DesktopService.system
• ~/Library/Application Support/.(RANDOM)/Services/com.DesktopService.service.app

Some files created by DesktopService are hidden from the user. To find and delete them, you need to enable “show hidden files”. To do this, use the shortcut CMD + SHIFT + . Press once to show hidden files and again to hide them. There is another way. Click Finder -> Applications -> Utilities -> Terminal. In Terminal, paste the following text: defaults write com.apple.finder AppleShowAllFiles YES

Press Enter. Hold the ‘Option/alt’ key, then right click on the Finder icon in the dock and click Relaunch.

Click on the Finder icon. From the menu bar, select Go and click “Go to Folder…”. As a result, a small window opens that allows you to quickly open a specific directory.

Check for DesktopService generated files in the /Library/LaunchAgents folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/LaunchAgents

This will open the contents of the “/Library/LaunchAgents” folder. Look carefully at it and pay special attention to recently created files, as well as files that have a suspicious name. Move all suspicious files to the Trash. A few examples of files: com.net-preferences.plist, installapp.plist, com.DesktopService.service.plist, macsearch.plist, search.plist, com.machelper.plist and com.google.defaultsearch.plist, . Most often, browser hijackers, adware software and PUPs create several files with similar names.

Check for DesktopService generated files in the /Library/Application Support folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/Application Support

This will open the contents of the “Application Support” folder. Look carefully at its contents, pay special attention to recently added/changed folders and files. Check the contents of suspicious folders, if there is a file with a name similar to com.DesktopService.system, then this folder must be deleted. Move all suspicious folders and files to the Trash.

Check for DesktopService generated files in the “~/Library/LaunchAgents” folder

In the “Go to Folder…” window, type the following text and press Go:
~/Library/LaunchAgents

Proceed in the same way as with the “/Library/LaunchAgents” and “/Library/Application Support” folders. Look for suspicious and recently added files. Move all suspicious files to the Trash.

Check for DesktopService generated files in the /Library/LaunchDaemons folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/LaunchDaemons

Carefully browse the entire list of files and pay special attention to recently created files, as well as files that have a suspicious name. Move all suspicious files to the Trash. A few examples of files to be deleted: com.search.system.plist, com.macsearch.system.plist, com.installapp.system.plist, com.DesktopService.system.plist and com.machelper.system.plist. In most cases, adware, browser hijackers and potentially unwanted programs create several files with similar names.

Scan your Mac with MalwareBytes

If you carefully followed the previous steps, then you should be able to remove DesktopService. Of course, very often browser hijackers, adware software and PUPs hides on a Mac device, disguising itself as legitimate apps and files. Therefore, in some cases, it is difficult for an inexperienced user to decide whether a particular file is part of browser hijackers, adware and PUPs. Therefore, we suggest you to run MalwareBytes Free to scan the Mac computer.

Installing the MalwareBytes Anti-Malware is simple. First you’ll need to download MalwareBytes from the link below. Save it directly to your MS Windows Desktop.

Once the downloading process is done, close all apps and windows on your machine. Open a directory in which you saved it. Run the saved file and follow the prompts.

Once installation is done, you’ll see window like below.

Now press the “Scan” button to begin scanning your Apple Mac for the DesktopService adware. A scan can take anywhere from 10 to 30 minutes, depending on the number of files on your MAC OS and the speed of your MAC system. While the MalwareBytes AntiMalware (MBAM) tool is scanning, you can see number of objects it has identified as being infected by malware.

When MalwareBytes Anti Malware (MBAM) has completed scanning, MalwareBytes Anti-Malware will display a screen which contains a list of malicious software that has been detected. Make sure all items have ‘checkmark’ and click “Quarantine” button.

The Malwarebytes will now delete DesktopService adware and move the selected threats to the program’s quarantine.

Remove DesktopService from Safari, Chrome, Firefox

If you have ‘DesktopService ‘ removal problem, then remove unwanted addons can help you. In the steps below we’ll show you the solution to get rid of harmful extensions without reinstall. This will also allow to delete DesktopService adware software from your web-browser.

Google Chrome	Mozilla Firefox
In the top right corner, click on Google Chrome’s main menu button, represented by three vertical dots. Select ‘More tools’, then ‘Extensions’. Click ‘Remove’ to uninstall an extension. Click ‘Remove’ in the dialog box. You can also try to remove DesktopService adware by reset Chrome settings.	Click on ‘menu’ button and select ‘Add-ons’. Go to ‘Extensions’ tab. To uninstall an add-on, click on ‘Remove’ button next to it. If you are still experiencing problems with DesktopService removal, you need to reset Firefox browser.
Safari
On the top menu select ‘Safari’, then ‘Preferences’. Select ‘Extensions’ tab. Select an extension you want to delete and click ‘Uninstall’ button next to it.

How to stay safe online

It’s important to run adblocker apps such as AdGuard to protect your Apple Mac from harmful webpages. Most security experts says that it is okay to stop advertisements. You should do so just to stay safe! And, of course, the AdGuard can to block misleading and other unwanted web sites.

Visit the page linked below to download AdGuard.

When downloading is complete, run the downloaded file. You will see the “Setup Wizard” screen. Follow the prompts.

Each time, when you run your Apple Mac, AdGuard will start automatically and stop annoying pop ups, block harmful and misleading web sites.

Finish words

Now your computer should be clean of the DesktopService adware. We suggest that you keep AdGuard (to help you block unwanted pop-up advertisements and intrusive malicious websites) and MalwareBytes (to periodically scan your computer for new adwares and other malware).

If you are still having problems while trying to delete DesktopService ads from the Safari, Chrome and Firefox, then ask for help here here.