Malware

How to get rid of Search Marquis hijacker on Chrome, Safari, and Firefox

Mark O'Neill

Apr 18, 20257 min read

How to get rid of Search Marquis hijacker on Chrome, Safari, and Firefox: Header image

If you sit down at your computer, open up your browser, and it begins acting weird, you may have a browser hijacker on your hands. Browser hijackers can do things like change your default homepage and bombard you with pop-up ads, and one of them is known as Search Marquis.

If your browser is making you feel like a hostage, we’ll show you the Search Marquis removal process on a Mac so you can get back to your web browsing.

Why does my search engine keep changing to Search Marquis?

If you go to Google to run a search and you end up on another search page instead, then you have browser hijacker malware on your MacBook.

But why do browser hijackers do this? What’s in it for them? It all comes down to the oldest excuse in the world — money.

Here are some of the goals of browser hijackers:

  1. Ad revenue: When you’re taken from Google to another search engine, you are first taken through a few direction links. The end destination — Bing or Yahoo, for example — may be authentic and harmless. But the hoops it took you through to get there are anything but. Those redirects are designed to earn them affiliate revenue.
  2. Data theft: Another thing they’re after is your data. This includes search terms, sites you’ve visited, your location (via your IP address), and your device and browser information. Attackers can then sell this all to data brokers.
  3. More malware: One type of malware often leads to another. By infiltrating your device, browser hijackers can bring friends who are much more dangerous.
A screenshot of the Bing search engine homepage.

What is the Search Marquis virus, and how does it affect your browser?

The Search Marquis virus is technically not a virus at all. It doesn’t replicate onto other devices and networks. Instead, it is considered browser hijacker malware, which remains on the computer it has invaded and tries its absolute best to milk you for as long as possible.

Like other browser hijackers, such as Search Baron and QSearch, money is the motive. It accomplishes this goal by taking over your web searches and changing your browser settings. Your homepage and new tab page will be switched over, your browser security settings will be downgraded or disabled, and your web visits will be redirected.

How did Search Marquis get onto your device? The usual method of transportation is via bundled software downloads (also known as trojans). You download something willingly, believing it to be legitimate. But the browser hijacker is installing itself behind the scenes.

In addition to bundled software, it can also appear through pop-up ads and fake Flash Player updates. This is why you should never click on pop-ups or Flash Player ads. In fact, if you still have Flash Player on your device, remove it immediately.

So, is Search Marquis dangerous malware?

Yes, Search Marquis is definitely dangerous malware. Some victims may be inclined to write it off as an inconvenient nuisance, but this would be a mistake. You need to immediately remove Search Marquis from your Mac because:

  1. Every search query and web visit you make is logged and sold to less-than-ethical data brokers.
  2. Any personal data it can lift from your browser will also be taken. Many people save things like their credit card details in their browsers these days.
  3. Passwords and logins can also be taken if the malware is able to access your password manager.
  4. If you remove Search Marquis incorrectly, it will reinstall itself and keep going.
  5. It could slow down your machine to the point that it overheats and internal electric components start to get damaged.

Signs that your Mac is infected with Search Marquis

An image of a MacBook Pro with pop-up ads on its screen.

Before you start sounding the alarm bells, you need to be sure of what you’ve got. So, here is how you identify Search Marquis malware:

  1. Your browser settings have all been changed and redirected to Search Marquis websites.
  2. New installed extensions have appeared.
  3. Your screen is suddenly swarming with extremely irritating pop-up ads.
  4. Your MacBook has slowed down considerably (or, at the very least, your browser has). Both may crash at some point, requiring a system reboot.
  5. Suspicious scripts are running in Activity Monitor, consuming a significant portion of your CPU and memory.
  6. Any attempt to reset the browser or reinstall it results in the problem coming back.

How to remove Search Marquis malware from your Mac

If you’ve gone through the list above and realized that you do indeed have a browser hijacker, it’s time to go on the offensive and remove it.

Don’t forget that it’s ultimately up to you what stays and goes on your MacBook. Never feel that malware has taken over and won’t ever leave. We’ll show you how to shove it out the door.

Quick Search Marquis removal on Mac

A screenshot of the Protection feature on CleanMyMac.

As a Mac owner, you’re lucky because you have a powerful weapon backing you up. That weapon is CleanMyMac, powered by Moonlock Engine. It’s a Mac optimization tool with an extremely efficient piece of malware removal software.

To prove to you how efficient it is, we offer all new customers a no-obligation, free trial. You can test it for yourself and see why this should be a permanent fixture on everyone’s Mac.

A screenshot of the CleanMyMac Protection Manager featuring Google Chrome data.
Google Chrome is a trademark of Google LLC.

Once you’ve signed up for your free trial and installed the app, follow these easy steps to solve your Search Marquis problem:

  1. Click the Protection feature on the left sidebar of CleanMyMac. This opens the malware removal tool.
  2. Now, you need to open the scan settings and load your ammunition. Select Configure Scan and select everything. Save and exit.
  3. Click the Scan button. CleanMyMac will start scouring your Mac, looking for all traces of malware. When threats have been found, CleanMyMac will give you a list. Select everything and click Remove.

That is normally all it takes to remove malware threats from your device. However, there are a couple of other things you can do to make sure it’s really gone.

A screenshot of the CleanMyMac Cleanup feature.

First, click the Cleanup option in CleanMyMac to collect and delete all junk files. Some of them may be linked to Search Marquis, and removing them will prevent any possibility of the malware resurrecting itself.

The other thing to do is to manually check your browser, which we’ll go into next. This is also what you would need to do if you have chosen not to use CleanMyMac, although we wouldn’t recommend that. Browser hijackers are notoriously difficult to remove completely.

How to remove Search Marquis from Chrome

A screenshot of Google Chrome settings showing how to change the default search engine.
Google Chrome is a trademark of Google LLC.

Google Chrome is arguably the most popular browser out there. Go into the settings and check the following sections to remove malware from Chrome:

  1. Settings > Extensions > Manage Extensions. Remove any unknown suspicious ones.
  2. Settings > Appearance. Reset your homepage.
  3. Settings > Search Engine. Reset your default search settings.
  4. Settings > Privacy and Security. Delete all cache and temporary internet files.

How to get rid of Search Marquis in Firefox

A screenshot of Firefox settings showing how to change the default search engine.
Firefox is a trademark of the Mozilla Foundation.

Next up is Firefox. Here’s how to delete a browser hijacker from Firefox:

  1. Settings > Add-ons & Themes. Remove any suspicious add-ons.
  2. Settings > Home. Reset your homepage.
  3. Settings > Search. Reset your default search settings.
  4. Settings > Privacy & Security. Delete all cache and temporary internet files.

Search Marquis removal process in Safari

A screenshot of Safari settings showing how to change the default search engine.
Safari is a trademark of Apple Inc.

If you’re rocking a MacBook, then you likely use Safari. Let’s go over the browser hijacker removal for Safari:

  1. Safari > Settings > Extensions. Remove any unauthorized ones.
  2. Safari > Settings > General. Reset your homepage.
  3. Safari > Settings > Search. Reset your default search settings.
  4. Safari > Clear History… Delete all cache and temporary internet files.

Other factors to check

As well as the browser settings covered above, here are some other things to look at:

  1. Check your Applications folder to see if any unknown apps have been installed. If so, remove them.
  2. Go to the Library folder in Finder and go to LaunchAgents and LaunchDaemons. Anything with Search Marquis in the list of files should be deleted.
  3. Go to System Settings > General > Device Management and remove any unknown configuration files.

How to protect your browser from hijackers like Search Marquis

To finish off, let’s go over some preventative measures to stop a reoccurrence of a Search Marquis infection:

  1. Don’t download apps from shady websites. Try to limit your app purchases to the Mac App Store or recognized developers.
  2. Don’t download extensions from outside of the browser’s app store.
  3. Don’t click on any pop-ups, especially those claiming that you need to install an “update.”
  4. Use a top-grade tool to scan for malware like CleanMyMac powered by Moonlock Engine.
  5. Keep your Mac and your browser updated with the latest security patches.
  6. Check your browser settings and Applications folder approximately once every 2 to 3 weeks. Remove anything you don’t recognize or don’t need anymore.
  7. Don’t click any links sent from people you don’t know, and don’t download any email attachments from unknown senders.

Browser hijackers are one of the easiest types of malware to get rid of. Since they mainly affect your web browser, they are more or less straightforward to remove.

You still have to check a few other places, but even so, there are far worse kinds of malware out there that could give you a real headache.

This is an independent publication, and it has not been authorized, sponsored, or otherwise approved by Google LLC, Apple Inc., or the Mozilla Foundation. Google Chrome is a trademark of Google LLC. Safari is a trademark of Apple Inc. Firefox is a trademark of the Mozilla Foundation.

MoonLock Banner
Mark O'Neill Mark O'Neill
Mark has been a technology writer since 2004 when he wrote a regular eBay column for AuctionBytes (now eCommerceBytes). He was a contributing writer to Lifehacker, Lifewire, PC World, and Android Authority, as well as a managing editor at MakeUseOf.