Adware is a type of computer nuisance that almost dominates the threat geography, sharing the limelight with similar widespread ransomware infections. Fortunately, adware is not too hazardous. Its main target is to infiltrate internet browser applications like Google Chrome and Safari. Once adware gets inside the target application, it restructures the behavior of internet program and completely disregards user’s preferences. One example of adware that is presently active in targeting browsers, particularly those that are operating on Mac OS, is called PROMANAGER RECORD.


Developers of PROMANAGER RECORD are the same people who formed similar threats as AphroditeTechResults, SearchForWords, and many more. The objective behind these browser pests boils down to the idea of cyber offenders generating profit by taking control of internet programs. Because the takeover is obviously not favorable to Mac users, the actors behind this threat resort to different tactics to silently enter the Mac system and intrude on the target browser application.

The first of the most favored contributors to the successful deployment of PROMANAGER RECORD are malicious software bundles, typically disguised as worthy freeware or shareware. While Mac users liberally acquire and load these free apps without spending a penny, attackers are watching from afar and waiting for the victims to integrate PROMANAGER RECORD onto their browser program without them knowing. Because PROMANAGER RECORD app is an inclusion in the main freeware, it adopts the same administrative privileges assigned to the host app. Therefore, PROMANAGER RECORD bypass the installation permission stage with no effort. In addition to that, Mac users may also acquire PROMANAGER RECORD by disguising itself as a software update for Adobe products (see image below).

Screenshot of PROMANAGER RECORD Fake Update

The moment that PROMANAGER RECORD is active on the browser, Mac user will start to see its forceful response to online browsing and searching. It hijacks the homepage and search engine to promote an affiliated search tool that is unknown and suspicious. At the time that PROMANAGER RECORD is handling the search function, there will be a noticeable series of redirects on the browser program before it issues the final search outcome on Yahoo or Google. The attacker’s motive behind this is to receive monetary benefits simply by forcing Mac users to utilize the third party search provider.

In addition to redirects, there will be a continuous flow of pop-up ads that run a pay-per-click scheme. Meaning, every click gained has equal revenue for authors. So, the ads reflected by PROMANAGER RECORD are so rampant because attackers have a higher chance of attracting clicks by exhibiting a rotation of different ad types.

PROMANAGER RECORD app also gains revenue by driving internet traffic to affiliated sites where the scheme is able to convert referrals into money. So basically, the more traffic it redirects, the higher the payout these crooks can get. On the Mac user’s side, this is not healthy because the majority of destination sites are filled with adware and malware that can easily contaminate Mac computers if accidentally accessed.

How to safeguard Mac against PROMANAGER RECORD adware?

Given the source of infection above, it is basically straightforward to prevent the PROMANAGER RECORD infection. Keeping away from malicious file download sites and torrent portals shuts down a possible entry point for this adware. In addition, avoid accessing or clicking on aggressive pop-up ads, especially those that originate while viewing questionable sites. Above all, securing Macs with effective anti-virus or anti-malware software is the best defense against PROMANAGER RECORD adware infection.

Procedures to Remove PROMANAGER RECORD from Mac

This area contains comprehensive procedures to help you remove adware and potentially unwanted program from the computer. Guide on this page are written in a manner that can be easily understand and execute by Mac users.

Step 1 : - Scan the Mac Computer with Combo Cleaner

Combo Cleaner is a trusted Mac utility application with complete antivirus and optimization features. It is useful in dealing with adware, malware, and PUP's. Moreover, it can get rid of malicious browser hijacker like PROMANAGER RECORD.

1. Download the tool from the following page:

2. Double-click the downloaded file and proceed with the installation.

3. In the opened window, drag and drop the Combo Cleaner icon onto your Applications folder icon.

4. Open your Launchpad and click on the Combo Cleaner icon.

5. Wait until antivirus downloads its latest virus definition updates and click on "Start Combo Scan" to start removing PROMANAGER RECORD.

Screenshot of Combo Cleaner Dashboard

To fully optimize the features of antivirus and privacy scanners, users may have to upgrade to the premium version.

Proceed with the rest of the removal steps if you are comfortable manually removing malicious objects associated with the threat.

Step 2 : Delete PROMANAGER RECORD from Mac Applications

1. Go to Finder.

2. On the menu, click Go and then, select Applications from the list to open Applications Folder.

3. Find PROMANAGER RECORD or any unwanted program.

Screenshot of Deleting App

4. Drag PROMANAGER RECORD to Trash Bin to delete the application from Mac.

5. Next, go to the Dock, right-click on the Trash icon, and click on Empty Trash.

Step 3 : Remove Browser Extensions that belongs to PROMANAGER RECORD

Most adware and unwanted programs use an application called a "browser extension" to be able to take over the settings of internet applications. Therefore, we highly recommend checking and removing the extension that is closely related to PROMANAGER RECORD. If it is not present, look for and delete any suspicious browser extension.

Google Chrome

Remove the PROMANAGER RECORD Extension from Google Chrome

1. Open the Google Chrome browser.

2. Input the strings below in the address bar and press Enter on the keyboard:


Screenshot of Chrome Extensions in PC

3. Find PROMANAGER RECORD or a relevant entry and remove it from Google Chrome.


Remove Malicious Extension from Safari

1. Open the Safari browser.

2. On the top menu, click Safari > Settings or Preferences.

3. The Safari settings window will open. Please select the Extensions tab.

Screenshot of Safari Extension Removal

4. Locate the suspicious extension and click the Uninstall button to remove it from Safari.

5. You may now close the window and restart Safari.

Microsoft Edge

Remove PROMANAGER RECORD from Microsoft Edge Browser

1. Open the Microsoft Edge program.

2. Input or copy and paste the following string in the address bar. Press press Enter on the keyboard:


Screenshot of Edge Extension on Mac

3. Look for and Remove or Disable entries for PROMANAGER RECORD from the Installed Extensions area.

Screenshot of Edge Extension Removal - Mac

4. You may now close the window and restart the Microsoft Edge browser.

Mozilla Firefox

Uninstall the PROMANAGER RECORD Extension from Mozilla Firefox

1. Open the Mozilla Firefox browser.

2. Type or copy and paste the strings below in the address bar and press Enter on the keyboard:


Screenshot of Firefox Extension

3. Click on Extensions from the sidebar menu.

4. Look for an entry that pertains to PROMANAGER RECORD and Disable or Remove it from the browser using the options button.

Step 4 : Delete Malicious Files that have installed PROMANAGER RECORD

1. Go to your Finder. From the menu bar, please select Go > Go to Folder.

2. Input the following string and press Enter on the keyboard.


Screenshot of Go To Folder

3. You will now see a hidden folder named LaunchAgents. Take note of the following files inside the folder:

  • unknown.service.plist
  • unknown.system.plist
  • unknown.update.plist

4. The term unknown is just a representation of the actual malware name. Attackers may use the following file names:

- PROMANAGER RECORD Daemon, (random characters).plist

If you cannot find the specified file, please look for any unfamiliar or suspicious entries. It may be the one causing PROMANAGER RECORD to be present on your Mac. Arranging all items to see the latest ones may also help you identify recently installed unfamiliar files.

5. Please click on "Show items as..."

Screenshot of LaunhAgents Folder

6. To arrange the items in chronological order, click Date Modified.

7. Drag all suspicious files that you may find to Trash.

Important: Take note of all the suspicious files, as you may also delete the same item in another folder as we go on.

8. Please restart the Mac computer.

9. Open another folder using the same method as above. Copy and paste the following string to easily locate the folder:

~/Library/Application Support

Screenshot of Go to Folder

10. Select any suspicious items that you have noted previously. Drag them to the Trash.

11. Repeat the process in the following non-hidden folders (without ~):

/Library/Application Support

12. Lastly, go to your Finder > Go and open the Applications folder. Look for subfolders with the following names and drag them to Trash.


Optional : For locked files that cannot be removed, do the following:

1. Go to Launchpad > Other folder, open the Activity Monitor.

2. Select the process you want to quit.

3. In the upper part of the window, click the Stop button.

Screenshot of Force Quit

4. Click on Force Quit button.

5. You may now delete or remove the locked file that belongs to PROMANAGER RECORD homepage hijacker.

Step 5 : Double-check with Malwarebytes for Mac

1. Download Malwarebytes for Mac from the link below.

2. Locate the downloaded Malwarebytes-Mac.pkg and install it with the default settings.

3. Run Malwarebytes for Mac. It will check for updates and download the most recent version if one is available. This is necessary for finding recent malware threats, including PROMANAGER RECORD.

4. Once you are on the Malwarebytes dashboard, please click on the Scan button to start scanning your Mac computer.

Screenshot of Malwarebytes Dashboard

5. After the scan, Malwarebytes for Mac will display a list of identified threats, and PROMANAGER RECORD is surely part of it. Be sure to select all items in the list. Then, click the Remove button to clean the computer.

Step 6 : Fixing the Homepage and Search Engine

Google Chrome

Remove PROMANAGER RECORD from the Homepage and Search of Chrome

1. Open the Google Chrome browser and type the following on the address bar and press Enter on the keyboard:


Screenshot of Chrome Settings

2. Go to the left sidebar and click On Startup.

3. Select "Open a specific page or set of pages" in the right panel.

Screenshot of Chrome Startup

4. Locate the unwanted Homepage URL, click on More Actions (3-dot icon), and select Edit.

5. Enter the desired web address as your home page, replacing PROMANAGER RECORD. Click Save.

6. To set the default search engine, go to the sidebar, and this time, select Search Engine.

Screenshot of Default Search

7. Click on the Manage search engines and site search button in the right panel.

8. Find the unwanted Search Engine in the list. Click on More Actions, and then click Delete.

9. Go back to the left side bar and click Search Engine.

Screenshot of Search Engine Address Bar

10. In the right panel, choose a valid entry from the "Search engine used in the address bar."

You can now restart the Google Chrome browser to see if the unwanted homepage and search engine related to PROMANAGER RECORD are gone.


Get Rid of PROMANAGER RECORD from Safari's Homepage and Search

1. Open your Safari browser.

2. Go to the Safari Menu located in the upper left-hand corner, and then select Settings or Preferences.

3. In the General tab, remove the PROMANAGER RECORD item or unwanted URL from the Homepage section. Replace it with your preferred URL to be set as your default homepage.

Screenshot of Safari Home Settings

4. Next, be sure that the "New windows open with" and "New tabs open with" fields are set to "Homepage".

5. Please click on the Search tab, and in the "Search engine" section, select Google or any valid search engine.

Screenshot of Safari Search Settings

6. You may now restart the Safari browser.

Microsoft Edge

Remove PROMANAGER RECORD from the Homepage of Edge Browser

1. Open the Microsoft Edge browser on your Mac computer.

2. In the address bar, type or copy and paste the string below, then press Enter on the keyboard:


Screenshot of Edge Homepage Settings on Mac

3. Go to the "When Edge Starts" area. Under the "Open these pages" section, click More Actions (3-dot).

4. Select Edit to open the Edit Page window.

5. Input your desired address to replace the homepage settings of PROMANAGER RECORD.

Screenshot of Edge for Mac Default Homepage

6. Click the Save button. You may now restart Microsoft Edge for Mac.

Mozilla Firefox

Delete PROMANAGER RECORD from the Homepage and Search of Firefox.

1. Open the Mozilla Firefox browser on your Mac computer.

2. Type the following on the address bar, then press Enter on the keyboard:


3. Click Home in the sidebar area.

Screenshot of Firefox Homepage Settings

4. Under "Homepage and new windows", you may choose Firefox Home (Default) or Custom URLs.

5. If you chose Custom URLs, input the desired URL to replace PROMANAGER RECORD settings.

6. To configure the default search engine, select Search in the sidebar to display the settings.

Screenshot of Firefox Search Settings

7. Under the Default Search Engine list, please select a legitimate one (i.e., Google).

8. Scroll down to "Search Shortcuts" and select an unwanted search engine.

Screenshot of Deleting Search

9. Click on the Remove button to delete the unwanted search engine. You may now restart the Mozilla Firefox for Mac.

About the author

Leave a Comment

Your email address will not be published. Required fields are marked *