How to get rid of lunaticake

I have this malicious extension browser hijacker on my MacBook Pro and it will not allow me to delete it, any advise available on my next step please.


iMac 24″, macOS 15.6

Posted on Nov 9, 2025 6:20 AM

Reply
Question marked as Top-ranking reply

Posted on Nov 9, 2025 6:41 AM

Here are 2 good options for you. Both of these programs are free to use so you do not have to pay anything and are also recommended by many others here of doing exactly what you want to do. MalwareBytes does have a subscription service, but I don't recommend that for what you are looking to do, and EtreCheck does have a Power User update for an additional charge, but it is not needed either for the Malware removal.. No credit card/financial information is needed to use either program as free and you don't need to sign up for a free trial that you have to cancel later to avoid a charge. .

  • MalwareBytes - This will do a scan of your computer and remove any Malware that it has in its database. Easy to use and nothing else to do if it has been removed.

https://www.malwarebytes.com/

  • EtreCheck - EtreCheck also has a Malware removal component where it will automate removal for free for any Malware in its database. This one also has the ability to post a report of your system and we can assist in identifying the files in the report that should not be there and tell you where they are so you can remove them. There is no personal information provided in the report and you simply post it here using the Additional Text option following the instructions below.

How to use the Add Text Feature When Post… - Apple Community


6 replies
Question marked as Top-ranking reply

Nov 9, 2025 6:41 AM in response to kevinfrombrigg

Here are 2 good options for you. Both of these programs are free to use so you do not have to pay anything and are also recommended by many others here of doing exactly what you want to do. MalwareBytes does have a subscription service, but I don't recommend that for what you are looking to do, and EtreCheck does have a Power User update for an additional charge, but it is not needed either for the Malware removal.. No credit card/financial information is needed to use either program as free and you don't need to sign up for a free trial that you have to cancel later to avoid a charge. .

  • MalwareBytes - This will do a scan of your computer and remove any Malware that it has in its database. Easy to use and nothing else to do if it has been removed.

https://www.malwarebytes.com/

  • EtreCheck - EtreCheck also has a Malware removal component where it will automate removal for free for any Malware in its database. This one also has the ability to post a report of your system and we can assist in identifying the files in the report that should not be there and tell you where they are so you can remove them. There is no personal information provided in the report and you simply post it here using the Additional Text option following the instructions below.

How to use the Add Text Feature When Post… - Apple Community


Nov 11, 2025 6:51 AM in response to kevinfrombrigg

I understand you are experiencing a "browser hijack" problem, and that you are using an older macOS version that will not be able to load many recent webpages.


The following is excerpted from Removing "Search Marquis" / "Search Baron" / etc on your own - Apple Community knowing that you may not be able to load that page. You may not be able to load some of the links in the following either, but they are included only for reference.


The salient point is that you do not need to download or install anything to fix it. It is never necessary to install something to uninstall something else you may have installed.


If you have questions or find yourself unable to complete any of these instructions please write back.



What you need to do


Fortunately fixing it is easy and you don't need to install anything.


First, you need to ascertain the cause so that you can eliminate it. Start by inspecting the contents of the following folder:


~/Library/LaunchAgents


To open that folder, copy the entire line above and paste it in the Finder's Go menu > Go to Folder... field:



Make it look like this:



... and click the Go button. A Finder window will open.


  • Make sure all that folder's file names are readable by selecting View > as List or other selection that shows that folder's complete contents, including complete file names.


Then, take a screenshot of that Finder window: Take a screenshot on your Mac - Apple Support.


  • To learn how to capture a screenshot please read the Appendix in the following User Tip: Writing an effective Apple Support Communities question. It also includes instructions for posting a screenshot in a reply to this Discussion, so keep that Safari window open for now.
  • It is not necessary to capture anything other than what is displayed in that Finder window. How to capture a window or menu in Take a screenshot on your Mac describes how to capture only what needs to be shown.


Often, there is nothing in that Launch Agents folder so don't be surprised to find it empty.


In the same manner as the above, navigate to this next folder:


/Library/LaunchDaemons


The Finder's Go menu > Go to Folder... field should look like this:



... and click the Go button once again.


Once again ensure all its files and their names are readable and capture a screenshot.


Then, repeat that exercise with the following folder:


/Library/LaunchAgents


Notice its pathname is different than the other two. The Finder's Go menu > Go to Folder... field should look like this:



In the end, you will have captured the contents of the following three separate folders:


~/Library/LaunchAgents

/Library/LaunchDaemons

/Library/LaunchAgents


All three will be saved to your Mac's Desktop with names "Screen Shot... " followed by the date and time they were captured. Please be sure to include or otherwise indicate the name of the folder that corresponds to each screenshot, so that you and I can keep track of which ones they are.


What happens next


Next, either post a reply to your existing Discussion or post a brand new Discussion containing the entire contents of all three of those windows, one at a time, using the "picture" icon that appears below your reply text:



  • When posting your message, please review and confirm the screenshots you post reveal complete, readable file names. If they do not, then please review the above instructions.


Then, your fellow Apple users or the author of this User Tip or even you yourself will be able to identify the files that are likely to be causing the problem.


Please wait for that reply, but if you get impatient and want to "read ahead" to find out what you will be doing next, you can peruse this one recent example among many others. That example Discussion also includes general instructions, if you prefer to proceed on your own.


While you wait for that reply, be sure that you create a backup of your Mac's contents. Why? The reason is only peripherally related to the issue at hand — any device can fail at any time for any reason, or no apparent reason whatsoever. If you do not have a backup of your Mac, it means the prospect of permanently losing all the information on it does not concern you.


Back up your files with Time Machine on Mac - Apple Support describes how to use Apple's Time Machine software, which every Mac already has:


  • If you have been using Time Machine, you can fix the problem by restoring a backup created prior to having installed "Search Baron" or whatever else may be causing the browser redirect. Restoring a backup from a "local snapshot" takes only a couple of minutes.
  • If you have not been using Time Machine, now would be a good time. Don't put it off any longer.



Nov 9, 2025 2:04 PM in response to kevinfrombrigg

"How to get rid of lunaticake: I have this malicious extension browser hijacker on my MacBook Pro and it will not allow me to delete it, any advise available on my next step please."

-------


For the record, here's what Google has to say on this:

  1. Go here: How to get rid of lunaticake
  2. As it Reads: "To get rid of 'lunaticake,' you likely need to remove a malicious app or browser extension by uninstalling the application, removing suspicious extensions, and resetting your browser settings. For a Mac, this involves using Activity Monitor and potentially the Terminal to force quit and delete the app, then checking your browser's extensions and startup pages. On Windows, you can remove the app through the Apps & Features menu, then clean up your browser extensions and reset its settings."

Nov 9, 2025 2:00 PM in response to kevinfrombrigg

"How to get rid of lunaticake: I have this malicious extension browser hijacker on my MacBook Pro and it will not allow me to delete it, any advise available on my next step please."

-------


Restore form a Time Machine Backup:

IF you are not concerned for loss of data, then Restore the Mac from a Time Machine Backup that you created prior to all of this happening.

Nov 11, 2025 4:52 AM in response to Mac Jim ID

Hi, many thanks for your advice on this issue, but unfortunately I'm unable to download and get started on any of these because my laptop is possibly too old and the software will no longer update, I'm currently using OS X Yosemite Version 10.10.5 and the program requires 10.13 or later. When searching for any updates it says no updates available. May try and restore from Time Machine, hopefully if that gets rid of the malware I may still be able to use the laptop. Many Thanks.

How to get rid of lunaticake

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.