macOS remove lkysearch virus from chrome

Solution 1:

Ok, so this is how I removed the malware.

1) sudo rm -rf /Library/LaunchDaemons/com.ElementarySignalSearchDaemon.plist

the content of plist was,

cat  /Library/LaunchDaemons/com.ElementarySignalSearchDaemon.plist 
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
    <dict>
        <key>Label</key>
        <string>com.ElementarySignalSearchDaemon</string>
        <key>ProgramArguments</key>
        <array>
            <string>/Library/Application Support/com.ElementarySignalSearchDaemon/ElementarySignalSearch</string>
            <string>r</string>
        </array>
        <key>RunAtLoad</key>
        <true />
        <key>StartInterval</key>
        <integer>14400</integer>
    </dict>
</plist>

2) sudo rm -rf /Library/Application\ Support/com.ElementarySignalSearchDaemon/

3) restarting the chrome did not work, so edited the plist file and removed the occurrence of links in that file,

This is because chrome://policy had Mandatory level.

sudo vi /Library/Managed\ Preferences/prayagupd/com.google.Chrome.plist 

4) remove suspicious profiles,

enter image description here