macOS remove lkysearch virus from chrome
Solution 1:
Ok, so this is how I removed the malware.
1) sudo rm -rf /Library/LaunchDaemons/com.ElementarySignalSearchDaemon.plist
the content of plist was,
cat /Library/LaunchDaemons/com.ElementarySignalSearchDaemon.plist
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.ElementarySignalSearchDaemon</string>
<key>ProgramArguments</key>
<array>
<string>/Library/Application Support/com.ElementarySignalSearchDaemon/ElementarySignalSearch</string>
<string>r</string>
</array>
<key>RunAtLoad</key>
<true />
<key>StartInterval</key>
<integer>14400</integer>
</dict>
</plist>
2) sudo rm -rf /Library/Application\ Support/com.ElementarySignalSearchDaemon/
3) restarting the chrome did not work, so edited the plist file and removed the occurrence of links in that file,
This is because chrome://policy
had Mandatory level.
sudo vi /Library/Managed\ Preferences/prayagupd/com.google.Chrome.plist
4) remove suspicious profiles,