How to uninstall CoinCycling app/extension from Mac (Virus removal guide)

What is CoinCycling

CoinCycling is an Adware application that targets Mac platform. Adware is a type of malware that is designed just to display numerous pop-ups and/or unwanted ads using intrusive and at times dangerous methods. Adware can also include other forms of malware. It can steal privacy information from the MAC computer and pass it on to third parties. Adware has also been the basis for hacking to gain access to the computer.

Does adware steal your personal information? CoinCycling can analyze the location and which Net web pages you visit, and then show advertisements to the types of content, goods or services featured there. Its creators can gather and sell your surfing information and behavior to third parties. So, we recommend you get rid of it ASAP. This will also prevent the adware from tracking your online activities. A full CoinCycling removal can be easily carried out using manual or automatic way listed below.

How does CoinCycling get on your Apple Mac

Adware usually spreads along with certain freeware that users download off of the Internet. So, think back, have you ever download and run any free applications. In order to avoid infection, in the Setup wizard, you should be be proactive and carefully read the ‘Terms of use’, the ‘license agreement’ and other setup screens, as well as to always choose the ‘Manual’ or ‘Advanced’ installation option, when installing anything downloaded from the Internet.

Threat Summary

Name	CoinCycling
Type	adware, potentially unwanted program (PUP), Mac virus, Mac malware
Detection Names	Adware.MAC.Generic, MacOS.Agent-MT, Program:MacOS/Vigram.A, OSX.Trojan.Gen, Trojan-Downloader.OSX.Adload, Osx.Adware.Cimpli, Adware/Adload!OSX and ApplicUnwnt
Distribution	Freeware installers, fake updaters, malicious pop up ads and torrent downloads
Symptoms	Every time you perform an Internet search, your web-browser is redirected to another web page, you experience lots of of unexpected advertising pop-ups, your MAC system starts automatically installing unwanted applications, new toolbars suddenly installed on your web browser, your browser start page has changed without your permission, your browser slows to a crawl.
Removal	CoinCycling removal guide

How to remove CoinCycling from Mac computer

Without a doubt, the adware software is harmful to your computer. So you need to quickly and completely remove this CoinCycling adware software. To get rid of this adware, you can use the manual removal guide which are given below or free malware removal tool like MalwareBytes (it is free). We suggest you use automatic removal method which will help you to remove CoinCycling adware easily and safely. Manual removal is best used only if you are well versed in computer or in the case where adware is not uninstalled automatically. Read this manual carefully, bookmark it or open this page on your smartphone, because you may need to close your web-browser or restart your MAC OS.

To remove CoinCycling, complete the steps below:

1. Remove profiles created by CoinCycling
2. Uninstall CoinCycling associated software by using the Finder
3. Remove CoinCycling related files and folders
4. Scan your Mac with MalwareBytes
5. Remove CoinCycling from Safari, Chrome, Firefox
6. How to stay safe online

Remove profiles created by CoinCycling

CoinCycling can install a configuration profile on the Mac system to block changes made to the browser settings. Therefore, you need to open system preferences, find and delete the profile installed by the adware software.

Click the System Preferences icon ( ) in the Dock, or choose Apple menu ( ) > System Preferences.

In System Preferences, click Profiles, then select a profile associated with CoinCycling.

Click the minus button ( – ) located at the bottom-left of the Profiles screen to remove the profile.
Note: if you do not see Profiles in the System Preferences, that means there are no profiles installed on your Mac computer, which is normal.

Uninstall CoinCycling associated software by using the Finder

The next step in uninstalling adware, PUPs and browser hijackers by yourself is to go into the Finder, then Applications. Take a look at the list of apps on your Mac computer and see if there are any dubious and unknown applications. If you see any, you need to delete it. Of course, before doing so, you can do an World Wide Web search to find details on the program. If it is a potentially unwanted program, adware and browser hijacker, you will likely find information that says so.

Open Finder and click “Applications”.

It will display a list of all applications installed on your MAC. Scroll through the all list, and uninstall any suspicious and unknown software. Right click to questionable program and choose “Move to Trash”. Another method is drag the program from the Applications folder to the Trash.

Most important, scroll through the all list, and move to trash any unknown applications. Don’t forget, select Finder -> Empty Trash.

Remove CoinCycling related files and folders

Now you need to try to find CoinCycling related files and folders, and then delete them manually. You need to look for these files in certain directories. To quickly open them, we recommend using the “Go to Folder…” command.

CoinCycling creates several files, these files must be found and removed. Below is a list of files associated with this unwanted program.

• /Library/LaunchDaemons/com.CoinCycling.system.plist
• ~/Library/LaunchAgents/com.CoinCycling.service.plist
• /Library/Application Support/.(RANDOM)/System/com.CoinCycling.system
• ~/Library/Application Support/.(RANDOM)/Services/com.CoinCycling.service.app

Some files created by CoinCycling are hidden from the user. To find and delete them, you need to enable “show hidden files”. To do this, use the shortcut CMD + SHIFT + . Press once to show hidden files and again to hide them. There is another way. Click Finder -> Applications -> Utilities -> Terminal. In Terminal, paste the following text: defaults write com.apple.finder AppleShowAllFiles YES

Press Enter. Hold the ‘Option/alt’ key, then right click on the Finder icon in the dock and click Relaunch.

Click on the Finder icon. From the menu bar, select Go and click “Go to Folder…”. As a result, a small window opens that allows you to quickly open a specific directory.

Check for CoinCycling generated files in the /Library/LaunchAgents folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/LaunchAgents

This will open the contents of the “/Library/LaunchAgents” folder. Look carefully at it and pay special attention to recently created files, as well as files that have a suspicious name. Move all suspicious files to the Trash. A few examples of files: macsearch.plist, com.google.defaultsearch.plist, , search.plist, com.machelper.plist, installapp.plist, com.net-preferences.plist and com.CoinCycling.service.plist. Most often, adware software, browser hijackers and PUPs create several files with similar names.

Check for CoinCycling generated files in the /Library/Application Support folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/Application Support

This will open the contents of the “Application Support” folder. Look carefully at its contents, pay special attention to recently added/changed folders and files. Check the contents of suspicious folders, if there is a file with a name similar to com.CoinCycling.system, then this folder must be deleted. Move all suspicious folders and files to the Trash.

Check for CoinCycling generated files in the “~/Library/LaunchAgents” folder

In the “Go to Folder…” window, type the following text and press Go:
~/Library/LaunchAgents

Proceed in the same way as with the “/Library/LaunchAgents” and “/Library/Application Support” folders. Look for suspicious and recently added files. Move all suspicious files to the Trash.

Check for CoinCycling generated files in the /Library/LaunchDaemons folder

In the “Go to Folder…” window, type the following text and press Go:
/Library/LaunchDaemons

Carefully browse the entire list of files and pay special attention to recently created files, as well as files that have a suspicious name. Move all suspicious files to the Trash. A few examples of files to be deleted: com.macsearch.system.plist, com.machelper.system.plist, com.installapp.system.plist, com.search.system.plist and com.CoinCycling.system.plist. In most cases, adware, browser hijackers and potentially unwanted programs create several files with similar names.

Scan your Mac with MalwareBytes

We recommend using MalwareBytes AntiMalware (MBAM). You can download and install MalwareBytes Free to scan for and get rid of CoinCycling related apps from your Mac. When installed and updated, the malicious software remover automatically identifies and removes all security threats exist on the MAC OS.

Visit the page linked below to download the latest version of MalwareBytes for Mac OS.

After downloading is complete, close all programs and windows on your Apple Mac. Open a directory in which you saved it. Run the saved file and follow the prompts.

Once install is done, you will see window similar to the one below.

Now press the “Scan” button to scan for CoinCycling adware. This procedure can take quite a while, so please be patient. While the MalwareBytes is checking, you can see count of objects it has identified either as being malicious software.

After the system scan is done, you can check all threats found on your MAC. Make sure to check mark the threats which are unsafe and then click “Quarantine” button.

The Malwarebytes will now begin to get rid of CoinCycling adware.

Remove CoinCycling from Safari, Chrome, Firefox

If you have ‘CoinCycling ‘ removal problem, then remove unwanted plugins can help you. In the steps below we will show you the way to remove malicious extensions without reinstall. This will also help to get rid of CoinCycling adware from your web-browser.

Google Chrome	Mozilla Firefox
Click on ‘three dots menu’ button at the top right corner of the Google Chrome window. In the menu go to ‘More tools’, then ‘Extensions’. Click ‘Remove’ to uninstall an extension. Click ‘Remove’ in the dialog box. You can also try to remove CoinCycling by reset Chrome settings.	Click on ‘menu’ button and select ‘Add-ons’. Go to ‘Extensions’ tab. To uninstall an add-on, click on ‘Remove’ button next to it. If you are still experiencing problems with CoinCycling adware software removal, you need to reset Mozilla Firefox browser.
Safari
On the top menu select ‘Safari’, then ‘Preferences’. Select ‘Extensions’ tab. Select an extension you want to delete and click ‘Uninstall’ button next to it.

How to stay safe online

It is also critical to protect your internet browsers from malicious websites and advertisements by using an ad blocking application such as AdGuard. Security experts says that it will greatly reduce the risk of malware, and potentially save lots of money. Additionally, the AdGuard may also protect your privacy by blocking almost all trackers.

Installing the AdGuard is simple. First you will need to download AdGuard by clicking on the following link. Save it on your Windows desktop.

When the download is finished, start the downloaded file. You will see the “Setup Wizard” screen. Follow the prompts.

Each time, when you launch your computer, AdGuard will launch automatically and stop annoying popups, block harmful and misleading web-pages.

To sum up

We suggest that you keep MalwareBytes (to periodically scan your computer for new adwares and other malware) and AdGuard (to help you stop annoying ads and harmful web pages). Moreover, to prevent any adware, please stay clear of unknown and third party programs.

If you need more help with CoinCycling related issues, go to here.