How to Fix a Browser Hijack on Apple Safari

Authored by: Support.com Tech Pro Team

1. Introduction

Browser hijacking or 'pop-up phishing' involves fraudulent messages that unexpectedly pop up for users when they are surfing the web. In many cases, cyber criminals infect otherwise legitimate websites with malicious code that causes these messages to appear when people visit them.

The content of these messages themselves is what makes them so effective. Often, they present the unsuspecting website visitor with some kind of fraudulent warning from a well-known reputable company, typically about the security of their computer. Then they either prompt the visitor to download some tool to fix the problem, such as an antivirus application which turns out to be malware itself, or to call a fraudulent phone number for "support." The abnormal behavior of the message itself and the inability to close or navigate away from them, makes the fraudulent messages appear to be somewhat credible.

This guide will demonstrate how to rid yourself of the worrisome pop-up message, and then perform some simple operations to get Apple Safari back to normal.

Tools You'll Need:

  • A paperclip
  • iPhone charging cable
  • Access to a computer with iTunes installed
  • Any other non-consumable tools needed
  • Comment out tools section if no tools are necessary

-->

Supplies You'll Need:

  • Zip ties
  • Any other consumable supplies
  • Comment out supplies section if no supplies are necessary

-->

Before You Begin:

  • You must have access to a computer with iTunes installed.
  • You must have that thing for the other thing so you can do the thing.

You must have this thing before you whatever.

-->

A safari hijack

2. Force Quit Safari

  1. Select the Apple menu, then Force Quit.
Apple menu with Force Quit highlighted.
  1. Highlight Safari in the list, and select Force Quit.
Force Quit dialog with Safari and Force Quit button highlighted.
  1. You'll be prompted if you're sure, select Force Quit.
Force Quit conformation with Force Quit highlighted.

3. Check Homepage Settings

Your web browser's homepage settings dictate the websites that are loaded when it is opened up.

Safari
  1. From the (1) Safari menu, choose (2) Preferences.
Safari with Safari menu and Preferences highlighted. Screenshot
  1. Click on (1) General. Type in the (2) Homepage address that you want.
Safari General menu with Homepage highlighted. Screenshot

4. Remove Extensions

Extensions provide extra features to Safari. Sometimes, these Extensions are not coded well, break after an update, or they change the way Safari works in a malicious way to show you advertisements.

Disabling or removing unneeded or unwanted Extensions can help resolve these problems.

Some pop-ups are created from extensions and add-ons installed on your browser. We will be going over steps to remove the extension.

Apple Safari.
  1. From the Safari menu, choose Preferences.
Safari with Safari menu and Preferences highlighted. Screenshot
  1. The following steps can be repeated to remove multiple browser extensions.
  2. Click the Extensions tab. Click on Uninstall for any extensions you want to remove.
Extensions menu with Uninstall highlighted. Screenshot
  1. You will get a confirmation window.  Click on Uninstall to confirm removal.
Confirmation window with Uninstall highlighted. Screenshot
  1. If a new tab opens up, you can close it by hitting the X.
  2. Extensions are now gone, you may have to restart your browser for it to take effect. If you removed a malicious extension, it might have changed your homepage.

5. Clear Browser History

  1. Open Safari.
Apple Safari.
  1. Select the Safari menu, then select Clear History.
Safari menu with Clear History highlighted.
  1. Select Clear all history, then select Clear History.
Clear history dialog with Clear All History and Clear History button highlighted.

6. Test Search Page

  1. Open your browser and take note if it shows your normal home page or search page.
Apple Safari.
  1. Test your ability to search the web like you normally would.

7. What Are PUPs

Potentially unwanted programs, or "PUPs", often arrive bundled with your computer or can tag along with another software program you meant to install. Most times, they are snuck into the EULA as a "Recommended Offer" that many of us are so accustomed to just click right through. Lots of these types of programs end up being junkware that your computer will not benefit from. Unfortunately, some of these programs can add unwanted browser toolbars or extensions that can clutter your browser, track your web browsing, show additional advertisements, or change your search page and other related settings. Usually, unless these types of programs are removed, they will continue causing issues with your web browsing experience.

Example of a PUP installing a search bar

Remove PUPs via Windows 10 Settings

  1. Click Start (1), then click Settings (2).
Windows start menu with the start button and settings highlighted.
  1. Next, Select Apps.
Windows Settings with Apps highlighted.
  1. Scroll down and locate the app you wish to remove, and click on Uninstall.
Apps screen with the uninstall option for an app highlighted.
  1. Carefully read any prompts in case there are special instructions. Proceed until the application is removed.
  2. Some applications may require that you reboot.

Remove PUPs via the Control Panel

  1. On your keyboard push and release the Windows Key and R at the same time.
PC Desktop Keyboard with Windows key and R highlighted.
  1. You will see a Run window open up. Type in appwiz.cpl then click on OK.
Run windows with appwiz.cpl typed and OK highlighted. Screenshot
  1. Locate a program you wish to remove within the list, click once on it to highlight it, then click on Uninstall.
Uninstall window with program and uninstall highlighted. Screenshot
  1. Carefully read any prompts in case there are special instructions. Proceed until the application is removed.
  2. Some applications may require that your computer be restarted to complete the uninstallation.

Test your browser after removing any PUPs from your machine. This may require you to restart your browser or your computer beforehand depending on what was removed.

8. Remove App

Removing an app may also remove all data for that app. Make sure you have any information you need backed up before removing an app for your Mac.

To Remove an App Installed from the App Store

  1. Open the Launchpad from the dock.
Launchpad highlighted
  1. Click and hold on an icon until all icons start to jiggle.
Shaking icon
  1. Click the "x" on the top left of the icon you want to remove.
X highlighted
  1. Click Delete to confirm removal.
Delete button highlighted

To Remove All Other Apps

  1. Open the Finder from the dock.
Finder highlighted on the dock
  1. Click on Applications on the left.
Application highlighted
  1. Drag the app you wish to remove to the trash can.
Drag app to the trashcan
  1. Right click on the trashcan and click Empty Trash.
Empty Trash highlighted

9. Restart

  1. From the menu bar across the top of the screen, select the Apple menu (1), then select Restart... (2).
Apple menu with Restart option selected. Screenshot.

Any unsaved work will be lost.

10. Test Search Page

  1. Open your browser and take note if it shows your normal home page or search page.
  2. On a Desktop or Laptop, look for one of these icons:
Main Desktop Browsers.
  1. On a Smartphone or Tablet, look for one of these icons:
Main Mobile Browsers.
  1. Make sure the page loads properly, and try following a few of the links from the page.

11. Continued Browser Hijack Issues

Unfortunately, your browser issue cannot be resolved via basic troubleshooting steps. Your machine will require hands-on service to determine the root cause of your issues.

12. What's next?