I just noticed in System Preferences a new icon "Profiles". When I click on it, it shows 'AdminPrefs' then in red letters "unsigned" details have a lot {, (, symbols .and 'default Search Provider lines.

What is this?

  • Could you add a screenshot ? @s0s0
    – anki
    Nov 7, 2019 at 20:56

1 Answer 1


Your MacBook is probably infected with the OSX/Shlayer/Crossrider malware.

It's a so-called dropper which may install/already has installed additional malware.

Searching for a reliable removal method I came across a lot of dubious websites offering tools pretending to remove this malware. Don't download and install them!

Malwarebytes' Malwarebytes 4.0 or other decent AntiVirus software should be able to detect and remove this malware and subsequently loaded malware/adware.

Analysis: Mitigating OSX/Shlayer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .