How to uninstall HelperFlow app/extension from Mac (Virus removal guide)

What is HelperFlow

According to security professionals, HelperFlow is an adware application that targets Apple computers. Adware is type of malware that can cause issues for your Mac. HelperFlow can generate numerous additional pop-up, banner, pop-under and in-text link advertisements flooding on your web browser; collect your privacy data such as login details, online searches, etc; run in the background and drag down your MAC running speed; give more chances for other adware, potentially unwanted apps even malicious software to get on your computer.

Another reason why you need to delete the HelperFlow adware is its online data-tracking activity. It is able to gather and transmit privacy information without your knowledge. HelperFlow can be used to track information about webpages visited, browser and system information, and your machine IP address.

How does HelperFlow get on your MAC system

In many cases, adware spreads together with the install packages from file sharing and torrents web sites. So, install free applications is a a good chance that you will find a bundled adware. If you don’t know how to avoid it, then use a simple trick. During the install, choose the Custom or Advanced install mode. Next, click ‘Decline’ button and clear all checkboxes on offers that ask you to install additional programs. Moreover, please carefully read Term of use and User agreement before installing any programs or otherwise you can end up with another unwanted application on your Mac like this adware.

Threat Summary

Name	HelperFlow
Type	adware, PUP (potentially unwanted program), Mac malware, Mac virus
Detection Names	OSX.Trojan.Gen, Trojan-Downloader.OSX.Adload, Adware/Adload!OSX, Adware.MAC.Generic, Osx.Adware.Cimpli, Program:MacOS/Vigram.A, MacOS.Agent-MT and ApplicUnwnt
Distribution	Freeware installers, dubious pop-up ads, fake update tools and torrent downloads
Symptoms	You keep getting redirected to suspicious web-pages, adverts appear in places they shouldn’t be, unwanted program installed without your say-so, unexpected web-browser extensions or toolbars keep coming back, your Mac settings are being altered without your request, low ping but slow Internet.
Removal	HelperFlow removal guide

How to remove HelperFlow adware software

To delete HelperFlow adware software from your machine, you must delete all suspicious programs and every file that could be related to the adware. Besides, to fix your web-browser home page, newtab page and search engine by default, you should reset the infected web browsers. As soon as you’re complete with HelperFlow removal procedure, we suggest you scan your machine with malware removal utilities listed below. It’ll complete the removal process on your MAC.

To remove HelperFlow, follow the steps below:

1. Remove profiles created by HelperFlow
2. Remove HelperFlow related software through the Finder
3. Remove HelperFlow related files and folders
4. Scan your Mac with MalwareBytes
5. Remove HelperFlow from Safari, Chrome, Firefox
6. How to stay safe online

Remove profiles created by HelperFlow

HelperFlow can make changes to the Mac system such as malicious changes to browser settings, and the addition of malicious system profiles. You need to check the system preferences, find and remove malicious profiles and ensure your settings are as you expect.

Click Apple menu ( ) > System Preferences.

In System Preferences, select Profiles. if there is no Profiles in the list of preferences, that means there are no profiles installed on the Mac computer. If there is Profiles in the list, then click on it, then select a profile associated with HelperFlow.

To delete a malicious profile, click on the minus button ( – ) located at the bottom-left of the Profiles screen.

Remove HelperFlow related software through the Finder

The next step in removing PUPs, browser hijackers and adware by yourself is to go into the Finder, then Applications. Take a look at the list of applications on your Mac and see if there are any dubious and unknown apps. If you see any, you need to remove it. Of course, before doing so, you can do an Internet search to find details on the application. If it is a adware software, browser hijacker and potentially unwanted program, you will likely find information that says so.

Open Finder and click “Applications”.

Carefully browse through the list of installed apps and get rid of all dubious and unknown programs.

When you’ve found anything questionable that may be the HelperFlow or other potentially unwanted program, then right click this program and select “Move to Trash”. Once complete, Empty Trash.

Remove HelperFlow related files and folders

Now you need to try to find HelperFlow related files and folders, and then delete them manually. You need to look for these files in certain directories. To quickly open them, we recommend using the “Go to Folder…” command.

HelperFlow creates several files, these files must be found and removed. Below is a list of files associated with this unwanted application.

• /Library/LaunchDaemons/com.HelperFlow.system.plist
• ~/Library/LaunchAgents/com.HelperFlow.service.plist
• /Library/Application Support/.(RANDOM)/System/com.HelperFlow.system
• ~/Library/Application Support/.(RANDOM)/Services/com.HelperFlow.service.app

Some files created by HelperFlow are hidden from the user. To find and delete them, you need to enable “show hidden files”. To do this, use the shortcut CMD + SHIFT + . Press once to show hidden files and again to hide them. There is another way. Click Finder -> Applications -> Utilities -> Terminal. In Terminal, paste the following text: defaults write com.apple.finder AppleShowAllFiles YES

Press Enter. Hold the ‘Option/alt’ key, then right click on the Finder icon in the dock and click Relaunch.

Click on the Finder icon. From the menu bar, select Go and click “Go to Folder…”. As a result, a small window opens that allows you to quickly open a specific directory.

Check for HelperFlow generated files in the /Library/LaunchAgents folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/LaunchAgents

This will open the contents of the “/Library/LaunchAgents” folder. Look carefully at it and pay special attention to recently created files, as well as files that have a suspicious name. Move all suspicious files to the Trash. A few examples of files: macsearch.plist, installapp.plist, com.google.defaultsearch.plist, , com.machelper.plist, com.net-preferences.plist, com.HelperFlow.service.plist and search.plist. Most often, adware, potentially unwanted programs and browser hijackers create several files with similar names.

Check for HelperFlow generated files in the /Library/Application Support folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/Application Support

This will open the contents of the “Application Support” folder. Look carefully at its contents, pay special attention to recently added/changed folders and files. Check the contents of suspicious folders, if there is a file with a name similar to com.HelperFlow.system, then this folder must be deleted. Move all suspicious folders and files to the Trash.

Check for HelperFlow generated files in the “~/Library/LaunchAgents” folder

In the “Go to Folder…” window, type the following text and press Go:
~/Library/LaunchAgents

Proceed in the same way as with the “/Library/LaunchAgents” and “/Library/Application Support” folders. Look for suspicious and recently added files. Move all suspicious files to the Trash.

Check for HelperFlow generated files in the /Library/LaunchDaemons folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/LaunchDaemons

Carefully browse the entire list of files and pay special attention to recently created files, as well as files that have a suspicious name. Move all suspicious files to the Trash. A few examples of files to be deleted: com.machelper.system.plist, com.macsearch.system.plist, com.installapp.system.plist, com.search.system.plist and com.HelperFlow.system.plist. In most cases, potentially unwanted programs, adware and browser hijackers create several files with similar names.

Scan your Mac with MalwareBytes

If you carefully followed the previous steps, then you should be able to remove HelperFlow. Of course, very often browser hijackers, PUPs and adware hides on a Mac computer, disguising itself as legitimate apps and files. Therefore, in some cases, it is difficult for an inexperienced user to decide whether a particular file is part of potentially unwanted programs, browser hijackers and adware. Therefore, we recommend you to use MalwareBytes AntiMalware (MBAM) to scan the Mac computer.

Visit the page linked below to download MalwareBytes Free.

After downloading is done, close all windows on your MAC OS. Further, run the saved file. Follow the prompts.

The MalwareBytes Free will automatically launch and you can see its main window like below.

Next, press the “Scan Now” button to perform a system scan for the HelperFlow . This process can take some time, so please be patient. During the scan MalwareBytes Anti Malware will detect threats present on your Apple Mac.

When MalwareBytes Free is done scanning your MAC system, MalwareBytes will show a list of all threats found by the scan. Once you’ve selected what you want to remove from your MAC press the “Quarantine” button.

The MalwareBytes will start to remove HelperFlow adware.

Remove HelperFlow from Safari, Chrome, Firefox

Remove unwanted extensions is a simple way to remove HelperFlow adware and restore web-browser’s settings that have been changed by adware.

Google Chrome	Mozilla Firefox
In the top right hand corner, click on ‘three vertical dots’, and this will open up the main menu on Chrome. When the drop-down menu appears, choose ‘More tools’ and click on ‘Extensions’. Click ‘Remove’ to uninstall an extension. Click ‘Remove’ in the dialog box. You can also try to delete HelperFlow adware by reset Chrome settings.	Click on ‘menu’ button and select ‘Add-ons’. Go to ‘Extensions’ tab. To uninstall an add-on, click on ‘Remove’ button next to it. If you are still experiencing issues with HelperFlow adware software removal, you need to reset Mozilla Firefox browser.
Safari
On the top menu select ‘Safari’, then ‘Preferences’. Select ‘Extensions’ tab. Select an extension you want to delete and click ‘Uninstall’ button next to it.

How to stay safe online

Run an ad-blocking tool such as AdGuard will protect you from harmful ads and content. Moreover, you can find that the AdGuard have an option to protect your privacy and stop phishing and spam web pages. Additionally, ad-blocking software will help you to avoid unwanted ads and unverified links that also a good way to stay safe online.

Click the following link to download the latest version of AdGuard for Mac.

After the download is done, run the downloaded file. You will see the “Setup Wizard” screen. Follow the prompts.

Each time, when you start your computer, AdGuard will run automatically and stop intrusive popup ads, block harmful and misleading web-pages.

Finish words

Once you have removed the adware software using this step-by-step tutorial, Safari, Chrome and Firefox will no longer display any unwanted ads. Unfortunately, if the steps does not help you, then you have caught a new adware, and then the best way – ask for help here.