Solved margamish locks my homepage in Safari

[DonB]

searcv.margamish piggy backed on a file I downloaded. It now controls my homepage in Safari. I've done usual deleted new files, etc & have run Malwarebytes. It found 3 infected files & deleted them. Still have the problem. Can't see anything suspicious in Activity monitor

 

[Jack]

Hello @DonB,
Let's check if there are any malicious extensions installed on your browser:

1. On the menu bar, click the “Safari” menu and select “Preferences”.
2. This will open a new window with your Safari preferences, opened to the “General” tab. Some browser hijackers may change your default homepage, so in the Homepage field make sure it’s a web page you want to use as your start-up page.
3. Next, click on the “Extensions” tab.
4. The “Extensions” screen will be displayed with a list of all the extensions installed on Safari. Scroll through the list until you find the SearchMine extension, and then click on “Uninstall” to remove it. By default, there are no extensions installed on Safari.

Let me know which homepage was set in Safari, and what extension you have installed.

 

[jlinich]

I didn't see Searchmine in my applications I followed all the other instructions and it is still the search engine. It is still a default search engine

 

[rborel]

Check to see if you have any crontab entries that weren't there. I just found 2 entries on my daughters. One was set to re-add every 5min and the second was set to re-add @reboot. Removed both of those entries, uninstalled Chrome and re-installed using appcleaner. Seems to be gone now.