Hello Gavin.
Did you also check the search engines installed in Chrome?
Launch Chrome.
Click the Settings menu icon (three horizontal lines) on the left of the window or type chrome://settings/ into the address bar.
Click On start-up and check the button next to “Open a specific page or set of pages”.
Click on the More icon (three vertical dots).
Choose Edit and type or paste the URL you want as your start-up page into the text box.
Click Save.
Click on the Settings icon again.
Choose Search Engine.
Click Manage search engines and press the More button next to the Any Search engine, then select Remove from list.
Hello Gavin.
Did you also check the search engines installed in Chrome?
Launch Chrome.
Click the Settings menu icon (three horizontal lines) on the left of the window or type chrome://settings/ into the address bar.
Click On start-up and check the button next to “Open a specific page or set of pages”.
Click on the More icon (three vertical dots).
Choose Edit and type or paste the URL you want as your start-up page into the text box.
Click Save.
Click on the Settings icon again.
Choose Search Engine.
Click Manage search engines and press the More button next to the Any Search engine, then select Remove from list.
It seems that my AVG is not able to identify therefore not remove this malware. It has embedded itself as an extension to Chrome and has managed to control the settings.
So far I have reset Chrome, deleted any trace within /Library/LaunchAgents and~/Library/LaunchAgents, removed Chrome policy, removed unknown extensions/apps etc. Yet none of these work.
Please can someone help.