News for hackers. Stuff that matters.

Ask HN: Does anybody know what 'searchbenny' is?

I installed Skype on a new mac and then bing hijacked my Chrome and Safari and now I can't get rid of it...And also when I search for something it goes to search.searchbenny.com, is this a virus? Anyone know how to remove?
( 17 comments | 6 points | on HN )
Re:Ask HN: Does anybody know what 'searchbenny' is? by abcdefghasdifka on Tuesday February 17, 2015 @02:58PM (#9064572)
Many thanks, this helped me too. I got it from downloading a supposedly safe app from

http://en.softonic.com/s/pdf-merge:mac

Re:Ask HN: Does anybody know what 'searchbenny' is? by scorpwarp23 on Thursday February 05, 2015 @06:31AM (#9002705)
Where did you download the Skype installer from?

It is malware quite likely and can be undone. If you could share the link of where you downloaded the Skype dmg I can try and give you a fix.

Re:Ask HN: Does anybody know what 'searchbenny' is? by neilpeel on Thursday February 05, 2015 @06:33AM (#9002707)
It appears I stupidly downloaded it from here:

http://skype.download-for-mac.com/

I wasn't really paying attention at the time.

Would be great if you could help, thanks!

Re:Ask HN: Does anybody know what 'searchbenny' is? by wildthing84 on Thursday February 05, 2015 @07:19AM (#9002827)
So here goes:

1. Open Finder.

2. Go to Applications

3. You'll see an app called "Reset Search" Alternatively there may be a folder called "InstallMac". Drag it to Trash and empty Trash

4. Open Chrome. Go to Settings

5. Click the button called "manage search engines" and make Google the default. Then click the cross to remove "search the web"

6. In Chrome Settings under "Appearance" click "Change" and then set "Use the new tab page." Also in the "On Startup" section ensure you delete the searchbenny page. and then set to "open a new tab".

7. In Safari open Preferences and head to "General Settings". Change your default engine (IMHO bing is better than Google). In newer Safari versions you can do this in the "Search" tab. Also remove all garbage from the "Manage Websites" section.

8. Set the homepage to "http://www.apple.com/startpage/" Alternatively open "Top Sites" in a new tab and use that by selecting "Use Current page"

9. Open "Activity Monitor" - Quit the "InstallerT" process.

10. You're set. Just some malware. No permanent damage. All it did was change your search defaults.

Had to post using a different account cause HN says I was submitting too fast.

Re:Ask HN: Does anybody know what 'searchbenny' is? by neilpeel on Thursday February 05, 2015 @07:38AM (#9002890)
WOW! It worked, thank you so much, pleased it wasn't anything too harmful. Thanks a lot for spending the time to help on this.
Re:Ask HN: Does anybody know what 'searchbenny' is? by bella22 on Tuesday February 10, 2015 @12:00PM (#9028362)
Thanks a lot, I followed all the steps but there is no "InstallerT" process in my activity monitor... is there an other name for it?
Re:Ask HN: Does anybody know what 'searchbenny' is? by cr3ative on Thursday February 05, 2015 @09:38AM (#9003394)
There's an honest-enough looking uninstall procedure on the site itself:

http://download-for-mac.com/uninstall.php?name=Skype#how_to_...

Re:Ask HN: Does anybody know what 'searchbenny' is? by brudgers on Thursday February 05, 2015 @07:13AM (#9002801)
What search engine led you to that site?
Re:Ask HN: Does anybody know what 'searchbenny' is? by smeyer on Thursday February 05, 2015 @10:48AM (#9003795)
I just googled "download skype for mac" without the quotes and an ad for the mentioned site was the first result. Another non-skype site's ad was second, and the first real result was the expected download page on skype's website. I could see a lot of people falling for that.
Re:Ask HN: Does anybody know what 'searchbenny' is? by brudgers on Friday February 06, 2015 @12:22AM (#9007822)
If true, Google collected revenue from the advertiser on "Mac" and "Skype" from a company obviously preying on people's level of sophistication. In 2000, claiming naivety would at least be plausible. Today it ain't.
Re:Ask HN: Does anybody know what 'searchbenny' is? by neilpeel on Thursday February 05, 2015 @07:14AM (#9002808)
Chrome.
Re:Ask HN: Does anybody know what 'searchbenny' is? by Kadavu22 on Friday February 13, 2015 @01:02PM (#9045842)
I have not been able to uninstall searchbenny. I have a mac and I'm using foxfire. I deleted install mac, emptied trash and reset google chrome settings. And restared computer. Search benny.com still comes up as search engine. I'm very frustrated. Can anyone help.
Re:Ask HN: Does anybody know what 'searchbenny' is? by Kadavu22 on Friday February 13, 2015 @01:00PM (#9045809)
I use fox fire and have not been able to get rid of searchbenny. I deleted file called installmac and when I go to google chrome it looks like all settings have been corrected I even restarted computer many time but search benny keeps opening as my search engine.
Re:Ask HN: Does anybody know what 'searchbenny' is? by ihaveaquestair on Thursday February 12, 2015 @04:49PM (#9041617)
I have also the same problem. If I search in Google, and click on a search result. I don't go to the URL of the search result, but to Bing, in the URL it says 'search.searchbenny.com' How do you remove this? I have a Mac and use Safari
Re:Ask HN: Does anybody know what 'searchbenny' is? by applakias on Thursday February 12, 2015 @05:53PM (#9041899)
I had the same problem and just fixed it.

it was an extension named "fast search" in the Safari > Preferences > Extensions section. I unistalled it and the problem was solved!

Before that though i moved to trash all the suspicious files from the Finder > Applications section as they were described from the wildthing84 below.

hope i helped

Re:Ask HN: Does anybody know what 'searchbenny' is? by Kadavu22 on Friday February 13, 2015 @03:53PM (#9047126)
I solved my problem, searchbenny actually provides a link that tells you how to uninstall in variety of situations - safari, foxfire etc
Re:Ask HN: Does anybody know what 'searchbenny' is? by fustify on Friday February 06, 2015 @04:19PM (#9011610)
Hello, I downloaded the same malware on accident when trying to download utorrent. I have followed the steps below sucessfully, but I noticed that the installerT process keeps coming back after I reboot my computer. Also advice on how to remove it completely? Thanks, this thread has been extremely helpful.