Skip to content

Remove Search Marquis injection in Safari on Mac

Are you facing issues with 'Search Marquis' spam in the Safari browser on your Mac? Learn how to remove and clean the malware injection.

The Search Marquis is a browser hijacker that automatically changes the default search engine to a malicious site.

There are different ways to remove the malware and make Safari normal again. Force quit your browser and end suspicious activity from Activity Monitor.

Also, delete the extension and clear browsing data for a complete cleanup.

Remove Search Marquis from Safari browser

Search Marquis is one kind of browser hijacker that automatically redirects Mac users to their search engines and sets it as their default search engine without the user’s permission. You must remove search marquis from the Safari browser because it may also open a door for other threats on your Mac device.

Search Marquis is a program that usually looks like a helpful add-on or extension for popular browsers like Safari and Chrome. But instead of helping you to improve your browsing experience, it deteriorates the healthy experience causing us irritation while browsing the internet.

searchmarquis homepage

When search marquis gets installed in your Safari, it changes some settings without permission, such as search engines on our start page, adding new tools to your browser, and other fake buttons.

Additionally, it starts displaying frustrating ads on the whole screen in pop-up ads, banners, boxes, and other promotional materials that stick on a screen.

Force Quit the Safari

If your Safari browser is already running, the first thing you need to do is quit it. If you have trouble closing it usually, you must force quit the browser. Here is the how to force close:

  1. Click on the Apple apple logo logo for options.
  2. From the options list, click on Force Quit… (another way is to press the Cmd + Option + Esc key).
    Apple macOS System Preferences
  3. Force Quit Applications window will pop up.
  4. Then select the Safari app within the window.
  5. Hit on Force Quit button and close the window.

This will close the Safari browser from the background and terminate all running process threads. You should use this option only when Safari cannot close by Close action.

Find and Delete Malicious Files

Start Activity Monitor by launching Finder and going to Application > Utilities > Activity Monitor.

Activity Monitor Location

Once you are there, start analyzing all the processes; if you think any process can be part of hijacking, highlight that process and click on the I (information) button at the top to open the following box.

In the case of Google Chrome, you can find the process information in this format.

Google Chrome Activity Monitor in Mac

Now click on the Sample command button at the bottom to open the Sample Text of the application.

Chrome Activity Sample in MacOS

Do this for all processes you think are part of hijacking and quit the malicious files process from the activity monitor.

info icon
Note: Be extremely careful while deleting files or quitting the process. You may damage your system if you delete the wrong file.

Check Browser and Prevent Hacking

Now that we have cleared the hijacked processes, we will check if everything works.

  1. Press the shift key while relaunching Safari.
    Pressing the shift key will prevent the previously opened pages from relaunching in Safari.
  2. You can release the shift key once Safari is safely launched.

If you still face trouble closing unwanted pages in Safari, you must take additional steps.

  1. Force quit Safari again.
  2. Turn off the WiFi connection from Mac’s menu.
  3. If you are using an ethernet connection, disconnect the ethernet cable.

This will kill the connection between the hacker and your Safari browser.

Delete Marquis Search Extensions

There is a high chance that a browser extension might be causing the issue of injecting malicious sites. In that case, you should quickly identify and delete the extensions from the Safari browser. Here are the steps to remove the extension:

  1. Launch the Safari browser on Mac while holding the shift key.
  2. After the successful launch of the Safari browser
  3. Click on Preferences from the Safari menu. This will open a new Preferences window.
    Safari Preferences Menu
  4. Switch to the Extensions tab.
    Safari Extensions tab with third-party extensions disabled
  5. Within the Extensions tab, select the extension you think might be malicious.
  6. Click on the Uninstall button.

This will remove the extension from the Safari browser and also delete all malicious activity. However, If you are unsure which extension to remove and don’t want to take any risk, you can uninstall all extensions.

Also, if you do not plan to use any extension, then make sure to turn OFF the option. Third-party developers create extensions to customize and enhance your web experience, as shown in the above screenshot.

Clean up Browser Settings and Data

The search marquis may have infected Safari and all other browsers on your Mac computer. The instructions below must be applied to all browsers you use on your Mac.

Since we are talking mainly about the Safari browser, the steps below will be applied to Apple Safari. However, similar options will also be available for other browsers installed on your computer.

Clear Website Data

The first thing that we need to do is to delete all browsing data from our Safari browser so that any traces aren’t left in the browser. Clearing the website data will delete all the storage, cookies, and cache from the browser.

  1. Open the Preferences option from the Safari menu.
  2. Switch to click on the Privacy tab.
    Safari Browser Privacy Preference
  3. Open the Manage Website Data… option.
  4. Now click on Remove All Website Data and confirm it by clicking on Remove Now
info icon
Note: Remember that after following the above instruction, you will lose all your stored website data and need to sign in again for all websites.

Default Homepage Set up

Next, we will ensure the default Homepage is set correctly on the Safari browser. We just wanted to ensure that the Marquis search isn’t the homepage of the browser.

  1. Hit on the General tab in the preferences menu.
  2. Check if your Homepage field is the same as you have entered.
    General Settings Homepage URL in Safari
  3. If something else, change it to whatever you want to see first when you open Safari – preferably a search engine like Google.

Clear Browsing History

Lastly, we will delete all the browsing history so you won’t accidentally open a problematic web page again.

  1. Within the Safari app, go to the History from the menubar.
  2. Click on the Clear History menu at the bottom.
  3. Choose the Time range from the drop-down.
  4. Hit the Clear History command button.
    Clear History from Safari MacOS computer

This will delete the browsing history from the Safari browser. Select the most extended date range from the drop-down, probably before the Marquis takeover.

Bottom Line

Thus, this was all about how to remove Search Marquis from Safari Mac. If you use other browsers, don’t forget to delete it from there too.

There was no need for antivirus products on Mac devices for a long time. Still, with the growing popularity, Mac devices are also being attacked by malware, trojans, and viruses. Hence, I advise installing antivirus software, updating things, and taking daily backups.

Similarly, Safari can get the Yahoo and Bing redirect issues from spam script injection.

However, please share with us how you could fix and remove the Marquis search injection from your browser on Macbook.

Lastly, if you've any thoughts or feedback, then feel free to drop in below comment box. You can also report the outdated information.

Please share the article if you find it helpful:

Disclosure: This page may contain affiliate links, which means we may receive compensation for your purchases; of course at no extra cost to you (indeed, you may get special discounts).
Kushal Azza

Kushal Azza

Kushal Azza is a Google Certified IT Professional, Digital Content Creator, and Go-To Digital Marketer with Engineering Degree. He has over a decade of experience solving tech problems, troubleshooting, and innovating digital solutions. Follow him on Twitter and LinkedIn.

Leave a thought or feedback

Please leave a descriptive comment or feedback with your real name. Our human moderator vets every comment, and it may take 24 to 48 hours to get published or rejected.

Your email address will not be published, and we will never spam your inbox. Required fields are marked *