How to uninstall PlusMethod app/extension from Mac (Virus removal guide)

What is PlusMethod

PlusMethod is a malicious application that acts as adware. Adware is not as dangerous as such as a Trojan horse or Ransomware, but its presence can bring numerous popups and/or annoying advertising. Actually makers of adware software is associated with some merchants and by displaying ads to users they make profit for yourself. These adverts not only bother your browsing experience but also redirect you to malicious and scam sites.

Another reason why you need to remove adware is its online data-tracking activity. The PlusMethod adware can monetize its functionality by collecting privacy data from your surfing sessions. This sensitive info, later, can be easily used for marketing purposes. This puts your privacy information at a security risk.

If you want to delete PlusMethod adware, you will not succeed, because it is very stubborn. But with the help of the following guidance, you surely can remove PlusMethod completely from your MAC system.

How does PlusMethod get on your MAC system

The most common way to get adware is a freeware install package. In most cases, a user have a chance to disable all bundled browser add-ons, but certain installers are created to confuse the average users, in order to trick them into installing potentially unwanted apps and adware. Anyway, easier to prevent adware rather than clean up your MAC after one. So, keep your web-browser updated (turn on automatic updates), use good antivirus applications, double check free software before you open it (do a google search, scan a downloaded file with VirusTotal), avoid malicious and unknown web sites.

Threat Summary

Name	PlusMethod
Type	adware, PUP (potentially unwanted program), Mac virus, Mac malware
Detection Names	Trojan-Downloader.OSX.Adload, MacOS.Agent-MT, Osx.Adware.Cimpli, Program:MacOS/Vigram.A, Adware/Adload!OSX, OSX.Trojan.Gen, ApplicUnwnt and Adware.MAC.Generic
Distribution	Free software installers, shady pop up ads, fake updaters and torrent downloads
Symptoms	Every time you perform an Internet search, your browser is redirected to another webpage, advertising banners appear on web-pages that you are visiting, unwanted program installed without your consent, an unwanted add-on appears in your browser, your internet browser homepage has modified without your permission, slow browsing Internet.
Removal	PlusMethod removal guide

How to Remove PlusMethod (removal instructions)

There are a simple manual instructions below that will assist you to remove PlusMethod from your Mac system. The most effective way to remove this adware is to complete the manual removal tutorial and then run MalwareBytes Anti Malware (MBAM) automatic tool (it is free). The manual solution will help to weaken this adware and these malicious software removal utilities will completely uninstall the PlusMethod adware and return the Safari, Firefox and Google Chrome settings to default.

To remove PlusMethod, use the following steps:

1. Remove unwanted profiles on Mac device
2. Remove PlusMethod associated software by using the Finder
3. Remove PlusMethod related files and folders
4. Scan your Mac with MalwareBytes
5. Remove PlusMethod from Safari, Chrome, Firefox
6. How to stay safe online

Remove unwanted profiles on Mac device

PlusMethod can make changes to the Mac system such as malicious changes to browser settings, and the addition of malicious system profiles. You need to check the system preferences, find and remove malicious profiles and ensure your settings are as you expect.

Click Apple menu ( ) > System Preferences.

In System Preferences, select Profiles. if there is no Profiles in the list of preferences, that means there are no profiles installed on the Mac device. If there is Profiles in the list, then click on it, then select a profile related to PlusMethod.

To delete a malicious profile, click on the minus button ( – ) located at the bottom-left of the Profiles screen.

Remove PlusMethod associated software by using the Finder

Some of adware, PUPs and browser hijackers can be deleted using the Move to Trash tool which can be found in the Finder. So, if you are using any version of Mac and you have noticed an unwanted application, then first try to remove it through the Finder.

Open Finder and click “Applications”.

It will display a list of all apps installed on your MAC. Scroll through the all list, and remove any suspicious and unknown programs. Right click to dubious program and choose “Move to Trash”. Another way is drag the program from the Applications folder to the Trash.

Most important, scroll through the all list, and move to trash any unknown applications. Don’t forget, choose Finder -> Empty Trash.

Remove PlusMethod related files and folders

Now you need to try to find PlusMethod related files and folders, and then delete them manually. You need to look for these files in certain directories. To quickly open them, we recommend using the “Go to Folder…” command.

PlusMethod creates several files, these files must be found and removed. Below is a list of files associated with this unwanted application.

• /Library/LaunchDaemons/com.PlusMethod.system.plist
• ~/Library/LaunchAgents/com.PlusMethod.service.plist
• /Library/Application Support/.(RANDOM)/System/com.PlusMethod.system
• ~/Library/Application Support/.(RANDOM)/Services/com.PlusMethod.service.app

Some files created by PlusMethod are hidden from the user. To find and delete them, you need to enable “show hidden files”. To do this, use the shortcut CMD + SHIFT + . Press once to show hidden files and again to hide them. There is another way. Click Finder -> Applications -> Utilities -> Terminal. In Terminal, paste the following text: defaults write com.apple.finder AppleShowAllFiles YES

Press Enter. Hold the ‘Option/alt’ key, then right click on the Finder icon in the dock and click Relaunch.

Click on the Finder icon. From the menu bar, select Go and click “Go to Folder…”. As a result, a small window opens that allows you to quickly open a specific directory.

Check for PlusMethod generated files in the /Library/LaunchAgents folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/LaunchAgents

This will open the contents of the “/Library/LaunchAgents” folder. Look carefully at it and pay special attention to recently created files, as well as files that have a suspicious name. Move all suspicious files to the Trash. A few examples of files: search.plist, com.google.defaultsearch.plist, , macsearch.plist, com.net-preferences.plist, com.PlusMethod.service.plist, com.machelper.plist and installapp.plist. Most often, adware, browser hijackers and potentially unwanted programs create several files with similar names.

Check for PlusMethod generated files in the /Library/Application Support folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/Application Support

This will open the contents of the “Application Support” folder. Look carefully at its contents, pay special attention to recently added/changed folders and files. Check the contents of suspicious folders, if there is a file with a name similar to com.PlusMethod.system, then this folder must be deleted. Move all suspicious folders and files to the Trash.

Check for PlusMethod generated files in the “~/Library/LaunchAgents” folder

In the “Go to Folder…” window, type the following text and press Go:
~/Library/LaunchAgents

Proceed in the same way as with the “/Library/LaunchAgents” and “/Library/Application Support” folders. Look for suspicious and recently added files. Move all suspicious files to the Trash.

Check for PlusMethod generated files in the /Library/LaunchDaemons folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/LaunchDaemons

Carefully browse the entire list of files and pay special attention to recently created files, as well as files that have a suspicious name. Move all suspicious files to the Trash. A few examples of files to be deleted: com.machelper.system.plist, com.macsearch.system.plist, com.PlusMethod.system.plist, com.search.system.plist and com.installapp.system.plist. In most cases, adware, PUPs and browser hijackers create several files with similar names.

Scan your Mac with MalwareBytes

Manual PlusMethod removal requires some computer skills. Some files and system entries that created by the adware may be not fully removed. We recommend that run MalwareBytes Anti Malware (MBAM) to scan the Mac. Moreover, this application will help you to get rid of toolbars, PUPs, adware and browser hijackers that your MAC system can be affected too.

Click the link below to download the latest version of MalwareBytes Anti-Malware (MBAM) for Mac.

Once the download is finished, run it and follow the prompts. Click the “Scan” button to perform a system scan with this utility for the PlusMethod adware software. This process can take some time, so please be patient. During the scan MalwareBytes Free will locate threats exist on your Apple Mac. You may delete items (move to Quarantine) by simply press the “Quarantine” button.

The MalwareBytes Free is a free application that you can use to remove all detected folders, files, malicious services and so on.

Remove PlusMethod from Safari, Chrome, Firefox

Annoying PlusMethod or other symptoms of adware software in your web browser is a good reason to locate and remove harmful extensions. This is an easy method to recover web browsers settings and not lose any important information.

Google Chrome	Mozilla Firefox
Click on ‘three dots menu’ button at the top right corner of the Google Chrome window. In the menu go to ‘More tools’, then ‘Extensions’. Click ‘Remove’ to uninstall an extension. Click ‘Remove’ in the dialog box. You can also try to get rid of PlusMethod adware software by reset Google Chrome settings.	Click on ‘menu’ button and select ‘Add-ons’. Go to ‘Extensions’ tab. To uninstall an add-on, click on ‘Remove’ button next to it. If you are still experiencing issues with PlusMethod adware removal, you need to reset Firefox browser.
Safari
On the top menu select ‘Safari’, then ‘Preferences’. Select ‘Extensions’ tab. Select an extension you want to delete and click ‘Uninstall’ button next to it.

How to stay safe online

It is also critical to protect your internet browsers from malicious web sites and advertisements by using an ad-blocker application like AdGuard. Security experts says that it’ll greatly reduce the risk of malicious software, and potentially save lots of money. Additionally, the AdGuard can also protect your privacy by blocking almost all trackers.

1. Visit the page linked below to download AdGuard.
   
   

   AdGuard for Mac download
   3687 downloads
   Author: © Adguard
   Category: Security tools
   Update: January 17, 2018
   
2. After downloading is complete, start the downloaded file. You will see the “Setup Wizard” program window. Follow the prompts.
3. Once the installation is complete, click “Skip” to close the install program and use the default settings, or click “Get Started” to see an quick tutorial which will assist you get to know AdGuard better.
4. In most cases, the default settings are enough and you do not need to change anything. Each time, when you start your computer, AdGuard will launch automatically and stop annoying ads, block malicious and misleading websites.

Finish words

We suggest that you keep AdGuard (to help you block unwanted pop-up ads and annoying harmful web-pages) and MalwareBytes AntiMalware (MBAM) (to periodically scan your MAC system for new adware softwares and other malware).

If you are still having problems while trying to remove PlusMethod from the Firefox, Safari and Chrome, then ask for help here here.