Explore Search Results Daemon - Apple Support Communities

• Apple
• • Store
  • Mac
  • iPad
  • iPhone
  • Watch
  • Vision
  • AirPods
  • TV & Home
  • Entertainment
  • Accessories
  • Support
• 0+

Community Local Nav Open Menu Local Nav Close Menu

• Ask the Community
• Browse
• Search

Sign in

• Sign in
• Sign in corporate

Go back to my question macOS / Earlier Operating Systems User profile for user: YasAlbert YasAlbert Author User level: Level 1 12 points Explore Search Results Daemon

Hey guys so I just updated to OS Catalina and this pop up keeping popping up. I’m not sure how to get rid of it.

it says “ExploreSearchResultsDaemon” will damage your computer. It’s really really annoying. I’d appreciate all the help I can get.

Heres a photo

MacBook Air 13″, macOS 10.15

Posted on Jul 11, 2020 7:51 PM

Me too (163) Me too Me too (163) Me too Reply Question marked as Top-ranking reply User profile for user: John Galt John Galt User level: Level 10 156,218 points

Posted on Aug 17, 2020 3:59 PM

In anticipation of others piling on with additional "me too" requests consider the following general instructions for eradicating adware. These things are always the result of deliberately downloading and installing something, and you certainly do not need to download and install something else to fix it. To learn how not to make that mistake again, please read How to install adware.

The subject dialog always takes this form, as described in Safely open apps on your Mac:

Move to Trash is the correct response. When that message becomes persistent though, the cause is always the same: one or more files that spawn the process resulting in its appearance.

General instructions applicable to all similarly categorized malware are as follows:

• Back up the affected Mac with Time Machine which everyone ought to be doing anyway
• Boot Safe Mode
• While in Safe Mode, identify all the files that result in creating the process that causes the dialog above, and drag them to the Trash.

The folders to be examined are these three:

~/Library/LaunchAgents

/Library/LaunchDaemons

/Library/LaunchAgents

There should only be few files, if any, in each of the above folders. You should know what they are and why you need them. If you're unsure, ask.

Legitimate products that deposit system-altering components in those folders commonly include Adobe, Amazon, Dropbox, Google and Microsoft, including its product Skype. Teamviewer also, assuming you really need it. Less common but equally legitimate products include Steam (games), various non-Apple "cloud backup" products that don't work very well, VPNs that often don't do what they claim, and device drivers for external hardware such as printers and non-Apple input devices. You should have at least a passing familiarity with the products you installed on your Mac, and the files they deposit in those folders should never come as a surprise.

Illegitimate products notorious for causing trouble include any non-Apple product that claims to "clean", "enhance", "optimize", "protect", or "scan" your Mac. Anything in that broad category of junk should be uninstalled according to their instructions and never reinstalled, ever again.

Everything else should be regarded as suspicious. Some malware will litter those folders with hundreds of randomly named files in a pathetic attempt to obscure itself. For one particularly egregious example refer to notice unysgar.app, but if you have no explanation for any particular file in those folders you need to investigate.

Among the few examples are files containing the following in their names:

absolute

calculator

confcloud

copypaste

fixer

helper

hlpr

mafntask

moniter 🙄

pcv

scan

search

systemExtr

spigot

techyutil

updService

util

utilty

vlm

files containing nothing but a random string of long alphanumeric text

... among a few others, but deleting those is a good place to start.

Then, reset your desired Search Engine, uninstall any strange Extensions, remove any unwanted Login Items, delete any unwanted apps, examine System Preferences for the existence of any Profiles, and finally restart your Mac (normally; not Safe Mode). Each one of those several additional steps is necessary to ensure the adware doesn't come back.

Then, evaluate your Mac's operation. If something still isn't right re-examine those three folders and determine if you overlooked anything. If something really gets messed up you have Time Machine to fall back on, so keep that important fact in mind.

That in a nutshell is how you get rid of adware, on your own, without having to even ask anyone for help. If you prefer individual attention specifically tailored to your needs though, then by all means please post a new Discussion. To do that click the Post link above right, and choose Discussion from the dropdown menu:



View in context

Similar questions

• "SearchSystemDaemon" will damage your computer got the above pop-up after upgrading to Catalina. pls help. 2335 3
• Removing safe search... I haven't been using my MacBook much lately; the past few times I have used it I noticed instead of defaulting to Google to search, it is routing me to something called Safe Search for Yahoo - almost all of the results are irrelevant to what I searched for. I have checked to make sure my default search engine is google and there are no extensions listed. I did try googling this but 99% of the suggestions said to download something to remove it and I am a little wary to do so. Thanks in advance for any suggestions. 611 3
• how to remove GoWebSearch? what is GoWebSearch, which constantly appears on my Mac? 539 1

10 replies

Loading page content

Page content loaded

Question marked as Top-ranking reply User profile for user: John Galt John Galt User level: Level 10 156,218 points

Aug 17, 2020 3:59 PM in response to 94fzj80

In anticipation of others piling on with additional "me too" requests consider the following general instructions for eradicating adware. These things are always the result of deliberately downloading and installing something, and you certainly do not need to download and install something else to fix it. To learn how not to make that mistake again, please read How to install adware.

The subject dialog always takes this form, as described in Safely open apps on your Mac:

Move to Trash is the correct response. When that message becomes persistent though, the cause is always the same: one or more files that spawn the process resulting in its appearance.

General instructions applicable to all similarly categorized malware are as follows:

• Back up the affected Mac with Time Machine which everyone ought to be doing anyway
• Boot Safe Mode
• While in Safe Mode, identify all the files that result in creating the process that causes the dialog above, and drag them to the Trash.

The folders to be examined are these three:

~/Library/LaunchAgents

/Library/LaunchDaemons

/Library/LaunchAgents

There should only be few files, if any, in each of the above folders. You should know what they are and why you need them. If you're unsure, ask.

Legitimate products that deposit system-altering components in those folders commonly include Adobe, Amazon, Dropbox, Google and Microsoft, including its product Skype. Teamviewer also, assuming you really need it. Less common but equally legitimate products include Steam (games), various non-Apple "cloud backup" products that don't work very well, VPNs that often don't do what they claim, and device drivers for external hardware such as printers and non-Apple input devices. You should have at least a passing familiarity with the products you installed on your Mac, and the files they deposit in those folders should never come as a surprise.

Illegitimate products notorious for causing trouble include any non-Apple product that claims to "clean", "enhance", "optimize", "protect", or "scan" your Mac. Anything in that broad category of junk should be uninstalled according to their instructions and never reinstalled, ever again.

Everything else should be regarded as suspicious. Some malware will litter those folders with hundreds of randomly named files in a pathetic attempt to obscure itself. For one particularly egregious example refer to notice unysgar.app, but if you have no explanation for any particular file in those folders you need to investigate.

Among the few examples are files containing the following in their names:

absolute

calculator

confcloud

copypaste

fixer

helper

hlpr

mafntask

moniter 🙄

pcv

scan

search

systemExtr

spigot

techyutil

updService

util

utilty

vlm

files containing nothing but a random string of long alphanumeric text

... among a few others, but deleting those is a good place to start.

Then, reset your desired Search Engine, uninstall any strange Extensions, remove any unwanted Login Items, delete any unwanted apps, examine System Preferences for the existence of any Profiles, and finally restart your Mac (normally; not Safe Mode). Each one of those several additional steps is necessary to ensure the adware doesn't come back.

Then, evaluate your Mac's operation. If something still isn't right re-examine those three folders and determine if you overlooked anything. If something really gets messed up you have Time Machine to fall back on, so keep that important fact in mind.

That in a nutshell is how you get rid of adware, on your own, without having to even ask anyone for help. If you prefer individual attention specifically tailored to your needs though, then by all means please post a new Discussion. To do that click the Post link above right, and choose Discussion from the dropdown menu:



Reply

Link

User profile for user: John Galt John Galt User level: Level 10 156,218 points

Aug 17, 2020 3:58 PM in response to 94fzj80

Yes but there's more to it than that. Be sure to follow all the instructions below. Don't omit anything or the problem will persist.

This is Part 1 of 2 replies so be sure to read the one that follows next.

First, ensure you have a reliable backup of your Mac, in case something should go wrong with continued troubleshooting. To learn how to do that, please read Back up your Mac with Time Machine.

• A backup is a fundamental prerequisite regardless of whatever method you may choose uninstall adware, and would apply even if your Mac were running perfectly well. Do not overlook this fundamental requirement. It's important.

Next: This step will prevent the scam products from loading so that they can be removed while they are inactive. Restart in "Safe Mode", and log in: Use safe mode to isolate issues with your Mac. Starting in Safe Mode takes longer than usual so let it finish. The rogue processes affecting that Mac are inoperative in "Safe Mode".

The following files and / or folders need to be deleted while using your Mac in "Safe Mode":

Delete all the files in your screenshots with the exception of those with the following in their names:

Adobe

Apple

Cisco

Dropbox

efi

Google

Microsoft

Telestream

... and the VPN product you're using. Assuming you know what it is, how it works, and the limitations of using a VPN, leave it alone.

Conversely stated, drag all the files with "absolute" in their names, in addition to the two consisting of nothing but a lot of random numbers to the Trash.

Also, please be advised "Connectwise" is a remote access tool, a product you must be circumspect about having on a Mac.

Drag those selections of files to the Trash. You may be asked to authenticate. Confirm they are no longer present in that folder. Leave all the others alone for now.

Next: open Safari and select the Safari menu > Preferences... > Extensions. If you see any Safari Extensions that you do not recognize or understand, simply click the Uninstall button and they will be gone. No Safari Extensions are required for normal operation. Then, select the General pane and review your Homepage selection. Repeat those equivalent actions for any other browser you may use.

There may also be adware-associated app icons in your Mac's Applications folder. Open it and examine its contents. Any unwanted or mysterious app icons should be obvious to you, but again please don't remove anything if you are uncertain—ask first. Identify any suspicious apps by name, or post another screenshot.

Next: In an abundance of caution, examine System Preferences > Extensions. Determine if there are any System Extensions that may have been installed without your knowledge. Ask if you're uncertain.

Remaining in System Preferences, check for the presence of any Profiles. Profiles are installed by organizations with a need to manage Macs deployed in institutional corporate or educational environments (for example), but have also been exploited by adware creators and similar malcontents. If any Profiles are installed on your Mac an icon like this will appear in System Preferences:

If you see that icon in System Preferences, select it. To remove a Profile, select it, then click the [—] (minus) button and authenticate.

Remaining in System Preferences, open Users & Groups. Select your User Account's Login Items. You may or may not find those Applications in its list. If you do, select them then click the [—] (minus) button to remove them from Login Items.

You can then restart your Mac and log in as usual. Evaluate its operation and ensure everything is working as you expect it should.

Reply

Link

User profile for user: John Galt John Galt User level: Level 10 156,218 points

Jul 11, 2020 8:28 PM in response to YasAlbert

To ascertain the cause so that you can eliminate it, start by inspecting the contents of the following folder:

~/Library/LaunchAgents

To open that folder, copy the entire line above and paste it in the Finder's Go menu > Go to Folder... field. Make it look like this:

... and click the Go button.

A Finder window will open. Make sure all its file names are readable by selecting View > as List or other selection that shows that folder's complete contents. Then, take a screenshot of that Finder window.

• To learn how to capture a screenshot please read the Appendix in the following User Tip: Writing an effective Apple Support Communities question. It also includes instructions for posting a screenshot in a reply to this Discussion, so keep that Safari window open for now.

Often, there is nothing in that Launch Agents folder so don't be surprised to find it empty.

In the same manner as the above, navigate to this next folder:

/Library/LaunchDaemons

The Finder's Go menu > Go to Folder... field should look like this:

... and click the Go button once again.

Once again ensure all its files and their names are readable and capture a screenshot.

Then, repeat that exercise with the following folder:

/Library/LaunchAgents

Notice its pathname is different than the other two. The Finder's Go menu > Go to Folder... field should look like this:

In the end, you will have captured the contents of the following three separate folders:

~/Library/LaunchAgents

/Library/LaunchDaemons

/Library/LaunchAgents

All three will be saved to your Mac's Desktop with names "Screen Shot... " followed by the date and time they were captured. Please be sure to include or otherwise indicate the name of the folder that corresponds to each screenshot, so that you and I can keep track of which ones they are.

Post the entire contents of all three windows, one at a time, using the "picture" icon that appears below your reply text:

Reply

Link

User profile for user: John Galt John Galt User level: Level 10 156,218 points

Jul 11, 2020 9:15 PM in response to YasAlbert

If they are all empty there's nothing to delete in them. That's good.

First, ensure you have a reliable backup of your Mac, in case something should go wrong with continued troubleshooting. To learn how to do that, please read Back up your Mac with Time Machine.

• A backup is a fundamental prerequisite regardless of whatever method you may choose uninstall adware, and would apply even if your Mac were running perfectly well. Do not overlook this fundamental requirement. It's important.

Next: This step will prevent the scam products from loading so that they can be removed while they are inactive. Restart in "Safe Mode", and log in: Use safe mode to isolate issues with your Mac. Starting in Safe Mode takes longer than usual so let it finish. The rogue processes affecting that Mac are inoperative in "Safe Mode".

Next: open Safari and select the Safari menu > Preferences... > Extensions. If you see any Safari Extensions that you do not recognize or understand, simply click the Uninstall button and they will be gone. No Safari Extensions are required for normal operation. Then, select the General pane and review your Homepage selection. Repeat those equivalent actions for any other browser you may use (Brave, Firefox, or Opera for example).

There may also be adware-associated app icons in your Mac's Applications folder. Open it and examine its contents. Any unwanted or mysterious app icons should be obvious to you, but again please don't remove anything if you are uncertain—ask first. Identify any suspicious apps by name, or post another screenshot.

Next: In an abundance of caution, examine System Preferences > Extensions. Determine if there are any System Extensions that may have been installed without your knowledge. Ask if you're uncertain.

Remaining in System Preferences, check for the presence of any Profiles. Profiles are installed by organizations with a need to manage Macs deployed in institutional corporate or educational environments (for example), but have also been exploited by adware creators and similar malcontents. If any Profiles are installed on your Mac an icon like this will appear in System Preferences:

If you see that icon in System Preferences, select it. To remove a Profile, select it, then click the [—] (minus) button and authenticate.

Remaining in System Preferences, open Users & Groups. Select your User Account's Login Items. You may or may not find those Applications in its list. If you do, select them then click the [—] (minus) button to remove them from Login Items.

You can then restart your Mac and log in as usual. Evaluate its operation and ensure everything is working as you expect it should.

Next: if you want to eradicate all remaining adware remnants post a screenshot of the following folder, in the same manner as you did earlier:

~/Library/Application Support

It is normal for that folder to contain many items, but anything associated with the above adware may contain identical names. If you find a folder or folders bearing those names, drag those folders to the Trash. Without the files you already removed or the reintroduction of similar malware, they can do nothing but occupy space. These can be removed if you wish, but again don't remove anything if you are uncertain.

Finally: If any of the above actions result in abnormal operation or if something else stops working, the easiest way to recover would be to restore the Time Machine backup you created as a prerequisite, so the importance of that fundamental step cannot be overemphasized.

Reply

Link

User profile for user: John Galt John Galt User level: Level 10 156,218 points

Aug 17, 2020 3:59 PM in response to 94fzj80

Reply Part 2 of 2 follows.

Next: if you want to eradicate all remaining adware remnants post a screenshot of the following folder, in the same manner as you did earlier:

~/Library/Application Support

It is normal for that folder to contain many items, but anything associated with the above adware may contain identical names. If you find a folder or folders bearing those names, drag those folders to the Trash. Without the files you already removed or the reintroduction of similar malware, they can do nothing but occupy space. These can be removed if you wish, but again don't remove anything if you are uncertain.

Finally: If any of the above actions result in abnormal operation or if something else stops working, the easiest way to recover would be to restore the Time Machine backup you created as a prerequisite, so the importance of that fundamental step cannot be overemphasized.

Reply

Link

User profile for user: 94fzj80 94fzj80 User level: Level 1 9 points

Aug 17, 2020 10:32 AM in response to John Galt

Quick question @John Galt - I've had the same issue with the "Explore Results Daemon" being harmful... my screen shots show a number of items in the folders you specified. Do you suggest deleting all these items?

Reply

Link

User profile for user: shopon12 shopon12 User level: Level 1 12 points

Aug 17, 2020 11:42 PM in response to John Galt

Please help me to fix it

here attached three screenshot

Reply

Link

User profile for user: 94fzj80 94fzj80 User level: Level 1 9 points

Aug 18, 2020 9:46 AM in response to John Galt

Thanks John; super helpful and much appreciated.

Reply

Link

User profile for user: John Galt John Galt User level: Level 10 156,218 points

Aug 18, 2020 7:02 PM in response to shopon12

shopon12 wrote:

Please help me to fix it

I'd be happy to help you, but you must demonstrate the ability to follow instructions.

Reply

Link

User profile for user: YasAlbert YasAlbert Author User level: Level 1 12 points

Jul 11, 2020 9:03 PM in response to John Galt

there was nothing in the folders

~/Library/LaunchAgents

/Library/LaunchDaemons

/Library/LaunchAgents

Reply

Link

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

• Go to page of 1

Explore Search Results Daemon

Welcome to Apple Support Community A forum where Apple customers help each other with their products. Get started with your Apple Account. Learn more Sign up Ask a question Reset