We’ve moved! You can now read the latest and greatest on Mac adware and malware at Malwarebytes.

Adware Removal Guide : OperatorMac

Published June 30th, 2015 at 5:23 PM EDT , modified September 8th, 2015 at 9:18 AM EDT

This adware will redirect you to different pages and inject content, such as an odd set of navigation controls floating over the page, into pages in your web browser.


Delete all of the following browser extensions that you find: Opti-Page, Toppy. (See Identifications > Examine Browser Extensions for instructions on how to locate your browser extensions.)

Move the following items to the trash, if present. Note that, if you don’t know how to locate a file or folder based on the paths that I will give in the instructions, you should read Locating files from paths.

~/Library/Application Support/Google/Chrome/Default/chromex
~/Library/Application Support/Google/Chrome/Default/chromexdm
~/Library/Application Support/mediahm

If you have Firefox installed, go to the following folder:

~/Library/Application Support/Firefox/Profiles/

Inside that folder, you will find another folder whose name begins with a series of random characters and ends with “.default”. Open that folder, and look for a folder named searchplugins. Inside that folder, delete the “mySearchPlug.xml” file, if present.