Jimbrie has hijacked Safari home page

Hi Guys,
I have a client with a Mac Book Pro with OSX 10.13. We discovered his Safari home page is set to http: slash slash search dot jimbrie dot com. It added some extensions as well.
I ran the attached code to reset Safari which took care of the extensions but cannot change the home page.
mv ~/Library/Safari ~/Desktop/Safari-`date +%Y%m%d%H%M%S`; \
rm -Rf ~/Library/Caches/Apple\ -\ Safari\ -\ Safari\ Extensions\ Gallery; \
rm -Rf ~/Library/Caches/Metadata/Safari; \
rm -Rf ~/Library/Caches/com.apple.Safari; \
rm -Rf ~/Library/Caches/com.apple.WebKit.PluginProcess; \
rm -Rf ~/Library/Cookies/Cookies.binarycookies; \
rm -Rf ~/Library/Preferences/Apple\ -\ Safari\ -\ Safari\ Extensions\ Gallery; \
rm -Rf ~/Library/Preferences/com.apple.Safari.LSSharedFileList.plist; \
rm -Rf ~/Library/Preferences/com.apple.Safari.RSS.plist; \
rm -Rf ~/Library/Preferences/com.apple.Safari.plist; \
rm -Rf ~/Library/Preferences/com.apple.WebFoundation.plist; \
rm -Rf ~/Library/Preferences/com.apple.WebKit.PluginHost.plist; \
rm -Rf ~/Library/Preferences/com.apple.WebKit.PluginProcess.plist; \
rm -Rf ~/Library/PubSub/Database; \
rm -Rf ~/Library/Saved\ Application\ State/com.apple.Safari.savedState

Open in new window

I have followed several websites that tell you to go into various Library folders and manually delete suspicious files. I have found nothing suspicious in the designated library folders. I even ran Malwarebytes for Mac but no luck. In addition, I cannot find any suspicious the Applications folder that matches known malware pertaining to jimbrie dot com.

Any suggestions for changing the homepage from http: slash slash search dot jimbrie dot com ?
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

You set that in your preferences.
command , (comma)


Safari --> Preferences

In the General tab, about 1/3 of the way down, change homepage to http://www.apple.com/startpage/  (or whatever you want it to be).
You might also check to see if there is a /Library/Safari/ folder and /Library/Preferences/com.apple.safari.* files as well. Normally, preferences just go in the users default ~/Library Folder, but you can put stuff in the root /Library folder to set initial default settings for all users.
PAMurilloAuthor Commented:
Hi serialband,
No luck. I found every Safari folder and deleted contents of all for the User and HD. I even deleted the ~/Library/Safari.
I can enter: www.google.com but as soon as I close or change taps in Safari Preferences, it goes back to jimbrie dot com.

Another clue: I cannot change the search engine from Yahoo. When I do, it reverts back to Yahoo

Any suggestions to complete restore Safari to factory?
Introduction to R

R is considered the predominant language for data scientist and statisticians. Learn how to use R for your own data science projects.

PAMurilloAuthor Commented:
Update: I am able to change the Search Engine
Home Page still eluding me
Maybe remove the extension.
Select Safari's Preferences...
Click the Exteynsions tab
Uninstall the SearchMe Extension.

Download and Install MalwareBytes and scan your system.
PAMurilloAuthor Commented:
I removed all extensions previously and scanned with Malwarebytes - it comes up with nothing.
If we could go back in time, I'd reset Safari to Factory. I have tried multiple ways to do it manually (Developer Tab), clear Cache etc.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.