Help - hard to remove text enhancer malware/adware

I installed the infamous "genieo" malware; then I uninstalled (or so I believe) the application and several files buried in the system (Launch demons and agents). No more Genieo popping anywhere...
BUT now I still have a text enhancer malware/adware installed on ALL my browsers (Safari, Firefox, Chrome)
Already:
reset Safari (except clear history)
removed all extensions;
blocked plug-ins and cookies;
ran MainMenu, which flushes .DS_Store files from the system
restarted browser and computer several times
a Safari solution could be repeated on the others, so how to proceed with SAFARI?
or is it a system problem, since it's hijacking all browsers?
Please help!
Searched everywhere, most solutions are "delete extensions" which was one of the first things I did...
MacBook Pro 2.7 i7 / 16gbRAM / OS X 10.8.5 / Safari 6.1.4

To remove the Codec-M spyware, first back up all data, then select
Safari ▹ Preferences... ▹ Extensions
from the Safari menu bar. For any extension with a name you don't recognize, select it and click Uninstall. If in doubt, delete all extensions.
If you use Firefox or Chrome, take the corresponding steps in those browsers. You might have to delete Chrome completely and reinstall it from a fresh download.
Triple-click anywhere in the line of text below on this page to select it:
~/Library/LaunchAgents/com.codecm.uploader.plist
Copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select
Go ▹ Go to Folder
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return. A folder may open with a file selected. Delete the selected file. Then do the same with this line:
~/Library/Application Support/Codec-M
Finally, this:
/Applications/Codec-M.app
This time you may be prompted for your administrator password.
Log out and log back in.

Similar Messages

Browser Virus Malware Adware etc. HELP!

I have been trying for 3 days to kick this absurd problem off of my Macbook Pro. It feels like I have a virus/malware/adware situation that is making me feel like I'm back on a PC (UGHHHHH).
BEFORE THE PROBLEM:
I kept getting "scratchdisk" or "startup disk" is full notices so I could not download the new OS
I started searching the web for solutions
I started removing all unneeded files
I used Clean My Mac to remove unwanted/unneeded files
I downloaded OS X 10.9.5
THE PROBLEM:
The following things occur when I attempt to use any of the 3 browsers: Google Chrome, Safari, Firefox:
pop up windows appear ALL over the place
Pop up windows block my ability to use the intended web page
tabs automatically open for Wix, Mackeeper, Credit Check websites etc. (It's infuriating!)
Sites I am attempting to use fail to respond
ACTIONS TAKEN:
run Clean My Mac (nada)
delete all cookies (nada)
trash or uninstall any/all unknown apps/programs
uninstall Google Chrome
uninstall Firefox
reset Safari
some terminal exercise from an Apple forum (did...nada)
RESOLVE:
NOTHING seems to be working...I'm about to launch my computer out the window... HELP!?

There is no need to download anything to solve this problem.
A.
You may have installed the "VSearch" trojan. Remove it as follows.
Malware is always changing to get around the defenses against it. These instructions are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
Back up all data before proceeding.
Step 1
From the Safari menu bar, select
          Safari ▹ Preferences... ▹ Extensions
Uninstall any extensions you don't know you need, including any that have the word "Spigot," "Trovi," or "Conduit" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
Reset the home page and default search engine in all the browsers, if it was changed.
Step 2
Triple-click anywhere in the line below on this page to select it:
/Library/LaunchAgents/com.vsearch.agent.plist
Right-click or control-click the line and select
          Services ▹ Reveal in Finder (or just Reveal)
from the contextual menu.* A folder should open with an item named "com.vsearch.agent.plist" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
Repeat with each of these lines:
/Library/LaunchDaemons/com.vsearch.daemon.plist
/Library/LaunchDaemons/com.vsearch.helper.plist
/Library/LaunchDaemons/Jack.plist
Restart the computer and empty the Trash. Then delete the following items in the same way:
/Library/Application Support/VSearch
/Library/PrivilegedHelperTools/Jack
/System/Library/Frameworks/VSearch.framework
~/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
Some of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
The problem may have started when you downloaded and ran an application called "MPlayerX." That's the name of a legitimate free movie player, but the name is also used fraudulently to distribute VSearch. If there is an item with that name in the Applications folder, delete it, and if you wish, replace it with the genuine article from mplayerx.org.
This trojan is often found on illegal websites that traffic in pirated content such as movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow.
You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that the Internet criminal behind VSearch has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing has not done so, even though it's aware of the problem. This failure of oversight has compromised both Gatekeeper and the Developer ID program. You can't rely on Gatekeeper alone to protect you from harmful software.
*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select
          Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.
B.
Remove "MacKeeper" as follows. First, back up all data.
"MacKeeper" is a scam with only one useful feature: it deletes itself.
Note: These instructions apply to the version of the product that I downloaded and tested in early 2012. I can't be sure that they apply to other versions.
If you have incompletely removed MacKeeper—for example, by dragging the application to the Trash and immediately emptying—then you'll have to reinstall it and start over.
IMPORTANT: "MacKeeper" has what the developer calls an “encryption” feature. In my tests, I didn't try to verify what this feature really does. If you used it to “encrypt” any of your files, “decrypt” them before you uninstall, or (preferably) restore the files from backups made before they were “encrypted.” As the developer is not trustworthy, you should assume that the "decrypted" files are corrupt unless proven otherwise.
In the Finder, select
          Go ▹ Applications
from the menu bar, or press the key combination shift-command-A. The "MacKeeper" application is in the folder that opens. Quit it if it's running, then drag it to the Trash. You'll be prompted for your login password. Click the Uninstall MacKeeper button in the dialog that appears. All the other functional components of the software will be deleted. Restart the computer and empty the Trash.
☞ Quit MacKeeper before dragging it to the Trash.
☞ Let MacKeeper delete its other components before you empty the Trash.
☞ Don't try to drag the MacKeeper Dock icon to the Trash.

Help with removing text from background

Hi,
I'm pretty new to this, but I'm trying to figure out how to remove text from a background. My problem is that when I use tools to grab the text, it only selects part of it because the pixels of the text are actually different colors as it blends in with the backgorund. Does anyone have a quick idea how to do this?
Thanks
<link removed>

Don't you like to see people's websites/projects/works in forums? Seems to me that you get to know people and what they are into when they post their work. Anyways in the spirit of you helping me, here is the picture.
I'm trying to remove the letters from the background. Everything about the letters including the shadows.
Thanks

How to remove Malware/adware from my mac mini which I downloaded by mistake?

Downloaded a malware/adware unknowingly when I wanted to download a videoplayer for my mac mini. Already tried doing a reinstall but the problem did not go a away. It hampers my web surfing. I'm using Google Chrome. Please advice.

Here are places to check:
-System Preferences/Accounts/ -> click your account on the left. Click login items at the top and see if there are any items you wish not to start up on launch.
-In Google Chrome you can go to the settings area and it will show you extensions. If there is an ad extension, you will be able to disable it.
-In Safari, fo to the top of the screen, click Safari, choose Preferences, go to extensions and remove any items that may be linked inside that area.
-Go to the applications folder and see if there are any items that pertain to the malware/adware you might be experiencing.
Once you have gone through these items, restart and see if the issue is resolved. I would suspect an extension got installed unknowingly.

Text enhance remove

Recently I have been recieving this pop up called text enhance whenever I use a Firefox browser. On any given web page it will highlight a word in green and underline it, whenever you hover over the word it will show you some sort of ad. It usually does this for words like "lonely" showing links to ****. Any suggestions on how to get rid of it?
My MacBook Pro is only a year old and I haven't had any popup problems before this.

Aready asked and answered. See the "More Like This" box on this page.

Help! Trying to remove text from an already saved image

I accidently saved an image with my watermark & now the image is locked & also saved as a jpeg image. I can't remove the text without stamping it out or just starting over. Does anyone know how to remove text from an image that has already been saved?

You could have saved it before closing the image. As long as the image is open in Editor, we can always go back to the original position and get back the original file.
In case you have closed, check if you have saved it as a version set. If your file name contains "edited-1" something, you have the file preserved.
Otherwise, if you have replaced the file without having any copy of it anywhere else, you cannot revert the changes.

Can't get rid of text enhance virus

text enhance is doing my head in.
I've disabled every extension, cleared the cookies, but it will not go away.
The only extensions I have are:
adban 2.3.1
adblock plus 2.6.3
norton toolbar 2014.7.3.12
norton vulnerability protection 12.2.0.5 - 1
updated adblocker for firefox 110.7.7
webmail adblocker 4.25
Please help, almost every word on every page is affected by this virus and I'm about to throw my laptop out the window.
Regards, Alan

Create a new profile as a test to check if your current profile is causing the problems. <br>
See '''Creating a profile''':
*https://support.mozilla.org/kb/profile-manager-create-and-remove-firefox-profiles
*http://kb.mozillazine.org/Standard_diagnostic_-_Firefox#Profile_issues
If the new profile works then you can transfer files from a previously used profile to the new profile, but be cautious not to copy corrupted files to avoid carrying over the problem <br>
'''Profile Backup and Restore'''
*http://kb.mozillazine.org/Profile_backup
*https://support.mozilla.org/en-US/kb/back-and-restore-information-firefox-profiles
*http://kb.mozillazine.org/Transferring_data_to_a_new_profile_-_Firefox

Text enhance problems!!

I recently bought a macbook pro 13'' and haven't really done to much on it, i went onto safari a couple of days ago and noticed some words were highlighted and when i scrolled over them pop up ads came up,, it is still here and after doing research i found out the problem was something called text enhance virus..? i don't know much about computers but i went onto preferences and blocked add ons.. still the problem is here, i have seen a few people talking about this problem and people are saying to go on to preferences-extensions-and disable extensions but when i go onto extensions nothing comes up.. does anybody else have any idea how to get rid of the problem and if you know if there is a bigger problem i.e a virus on my mac, although i am told macs don't get viruses? If anybody has any idea PLEASEE help as it is driving me crazy, thanks.

To remove the Codec-M spyware, first back up all data, then select
Safari ▹ Preferences... ▹ Extensions
from the Safari menu bar. For any extension with a name you don't recognize, select it and click Uninstall. If in doubt, delete all extensions.
If you use Firefox or Chrome, do the equivalent in those browsers. You might have to delete Chrome completely and reinstall it from a fresh download.
Triple-click anywhere in the line of text below on this page to select it:
~/Library/LaunchAgents/com.codecm.uploader.plist
Copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select
Go ▹ Go to Folder
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return. A folder may open with a file selected. Delete the selected file. Then do the same with this line:
~/Library/Application Support/Codec-M
Finally, this:
/Applications/Codec-M.app
This time you may be prompted for your administrator password.
Log out and log back in.

Text Enhance suddenly on almost all websites

I woke up this morning, and nearly every Web site I visit, including several of my own, now have text enhance ads, the kind where a word or two is underlined and if you hover your mouse over the underlined word, an ad displays. So it looks like I've been infected somehow. This is affecting both Safari and Firefox.
I tried resetting Safari as far as getting rid of the cache and all cookies, but that didn't do it. Anyone else know about this or what to do about it?
Thanks.

If you are using iPhoto on your iPhone these steps may help:
Try to remove the "text" by
Select the photo then
Do one of these steps---
Choose Photos > “Revert to Original.” (If you are in full-screen view, move the pointer to the top of the window to make the menu bar appear.)
In the Quick Fixes tab of the Edit pane, click “Revert to Original.” If you don’t see the “Revert to Original” button, click “Revert to Previous” until the button changes to “Revert to Original.”
You can also check to see if a caption has been placed on the photo(s) by selecting the photo, tapping the grey "square" with the i in it, and check to see if this could be a caption gone wrong. Or check to see if removing any special effects will help-- tap the gear icon, then tap reset.
ALSO Try here for more help---- http://help.apple.com/iphoto/index.html#button-1
Good Luck~

Text enhance and windows popping up

I am running OS X 10.9.4 on my MacBook Pro. Recently I have a problem with text enhance on random words in safari, as well as pop up windows appearing for a League of Angels online game, and a website called grenio.co.za.
I have run CLAMXav and found no viruses, however, it is very frustrating using the internet with these poppies and text enhances.
Can anyone advise how to remove? See screenshots below
TEXT ENHANCE
LEAGUE OF ANGELS POP UP
GENIO POP UP
Thanks!

1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.
Don't be put off merely by the seeming complexity of these instructions. The process is much less complicated than the description. You do harder tasks with the computer all the time.
2. If you don't already have a current backup, back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.
There are ways to back up a computer that isn't fully functional. Ask if you need guidance.
3. Below are instructions to run a UNIX shell script, a type of program. All it does is to collect information about the state of the computer. That information goes nowhere unless you choose to share it. However, you should be cautious about running any kind of program (not just a shell script) at the behest of a stranger. If you have doubts, search this site for other discussions in which this procedure has been followed without any report of ill effects. If you can't satisfy yourself that the instructions are safe, don't follow them. Ask for other options.
Here's a summary of what you need to do, if you choose to proceed:
☞ Copy a line of text in this window to the Clipboard.
☞ Paste into the window of another application.
☞ Wait for the test to run. It usually takes a few minutes.
☞ Paste the results, which will have been copied automatically, back into a reply on this page.
The sequence is: copy, paste, wait, paste again. You don't need to copy a second time. Details follow.4. You may have started the computer in "safe" mode. Preferably, these steps should be taken in “normal” mode, under the conditions in which the problem is reproduced. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual. If you can only test in safe mode, do that.
5. If you have more than one user, and the one affected by the problem is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.
6. The script is a single long line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, though you may not see all of it in the browser window, and you can then copy it. If you try to select the line by dragging across the part you can see, you won't get all of it.
Triple-click anywhere in the line of text below on this page to select it:
PATH=/usr/bin:/bin:/usr/sbin:/sbin:/usr/libexec;clear;cd;p=(Software Hardware Memory Diagnostics Power FireWire Thunderbolt USB Fonts SerialATA 4 1000 25 5120 KiB/s 1024 85 \\b%% 20480 1 MB/s 25000 ports ' com.autodesk\* \*dropbox \*GoogleDr\* vidinst\* ' DYLD_INSERT_LIBRARIES\ DYLD_LIBRARY_PATH -86 ` route -n get default|awk '/e:/{print $2}' ` 25 N\\/A down up 102400 25600 recvfrom sendto CFBundleIdentifier 25 25 25 1000 MB com.apple.AirPortBaseStationAgent 464843899 51 );N5=${#p[@]};p[N5]=` networksetup -listnetworkserviceorder|awk ' NR>1 { sub(/^$[0-9]+$ /,"");n=$0;getline;} $NF=="'${p[26]}')" { sub(/.$/,"",$NF);print n;exit;} ' `;f=('\n%s: %s\n' '\n%s\n\n%s\n' '\nRAM details\n%s\n' %s\ %s '%s\n-\t%s\n' );S0() { echo ' { q=$NF+0;$NF="";u=$(NF-1);$(NF-1)="";gsub(/^ +| +$/,"");if(q>='${p[$1]}') printf("%s (UID %s) is using %s '${p[$2]}'",$0,u,q);} ';};s=(' /^ *$|CSConfigDot/d;s/^ */ /;s/[-0-9A-Fa-f]{22,}/UUID/g;s/(ochat)\.[^.]+(\..+)/\1\2/;/Shared/!s/\/Users\/[^/]+/~/g ' ' s/^ +//;5p;6p;8p;12p;' ' {sub(/^ +/,"")};NR==6;NR==13&&$2<'${p[10]} ' 1s/://;3,6d;/[my].+:/d;s/^ {4}//;H;${ g;s/\n$//;/s: [^EO]|x([^08]|02[^F]|8[^0])/p;} ' ' 5h;6{ H;g;/P/!p;} ' ' ($1~/^Cy/&&$3>'${p[11]}')||($1~/^Cond/&&$2!~/^N/) ' ' /:$/{ N;/:.+:/d;s/ *://;b0'$'\n'' };/^ *(V.+ [0N]|Man).+ /{ s/ 0x.... //;s/[()]//g;s/(.+: )(.+)/ (\2)/;H;};$b0'$'\n'' d;:0'$'\n'' x;s/\n\n//;/Apple[ ,]|Intel|SMSC/d;s/\n.*//;/\)$/p;' ' s/^.*C/C/;H;${ g;/No th|pms/!p;} ' '/= [^GO]/p' '{$1=""};1' ' /Of/!{ s/^.+is |\.//g;p;} ' ' $0&&!/ / { n++;print;} END { if(n<200) print "com.apple.";} ' ' $3~/[0-9]:[0-9]{2}$/ { gsub(/:[0-9:a-f]{14}/,"");} { print|"tail -n'${p[12]}'";} ' ' NR==2&&$4<='${p[13]}' { print $4;} ' ' END { $2/=256;if($2>='${p[15]}') print int($2) } ' ' NR!=13{next};{sub(/[+-]$/,"",$NF)};'"`S0 21 22`" 'NR!=2{next}'"`S0 37 17`" ' NR!=5||$8!~/[RW]/{next};{ $(NF-1)=$1;$NF=int($NF/10000000);for(i=1;i<=3;i++){$i="";$(NF-1-i)="";};};'"`S0 19 20`" 's:^:/:p' '/\.kext\/(Contents\/)?Info\.plist$/p' 's/^.{52}(.+) <.+/\1/p' ' /Launch[AD].+\.plist$/ { n++;print;} END { print "'${p[41]}'";if(n<200) print "/System/";} ' '/\.xpc\/(Contents\/)?Info\.plist$/p' ' NR>1&&!/0x|\.[0-9]+$|com\.apple\.launchctl\.(Aqua|Background|System)$|'${p[41]}'/ { print $3;} ' ' /\.(framew|lproj)|\):/d;/plist:|:.+(Mach|scrip)/s/:[^:]+//p ' '/root/p' ' !/\/Contents\/.+\/Contents|Applic|Autom|Frameworks/&&/Lib.+\/Info.plist$/ { n++;print;} END { if(n<1000) print "/System/";} ' '/^\/usr\/lib\/.+dylib$/p' ' /Temp|emac/ { next;} /(etc|Preferences|Launch[AD].+)\// { sub(".(/private)?","");n++;print;} END { print "'${p[41]}'.plist\t'${p[42]}'";if(n<500) print "Launch";} ' ' /\/(Contents\/.+\/Contents|Frameworks)\/|\.wdgt\/.+\.([bw]|plu)/d;p;' 's/\/(Contents\/)?Info.plist$//;p' ' { gsub("^| |\n","\\|\\|kMDItem'${p[35]}'=");sub("^...."," ") };1 ' p '{print $3"\t"$1}' 's/\'$'\t''.+//p' 's/1/On/p' '/Prox.+: [^0]/p' '$2>'${p[43]}'{$2=$2-1;print}' ' BEGIN { i="'${p[26]}'";M1='${p[16]}';M2='${p[18]}';M3='${p[31]}';M4='${p[32]}';} !/^A/ { next;} /%/ { getline;if($5<M1) a="user "$2"%, system "$4"%";} /disk0/&&$4>M2 { b=$3" ops/s, "$4" blocks/s";} $2==i { if(c) { d=$3+$4+$5+$6;next;};if($4>M3||$6>M4) c=int($4/1024)" in, "int($6/1024)" out";} END { if(a) print "CPU: "a;if(b) print "I/O: "b;if(c) print "Net: "c" (KiB/s)";if(d) print "Net errors: "d" packets/s";} ' ' /r\[0\] /&&$NF!~/^1(0|72\.(1[6-9]|2[0-9]|3[0-1])|92\.168)\./ { print $NF;exit;} ' ' !/^T/ { printf "(static)";exit;} ' '/apsd|OpenD/!s/:.+//p' ' (/k:/&&$3!~/(255\.){3}0/ )||(/v6:/&&$2!~/A/ ) ' ' $1~"lR"&&$2<='${p[25]}';$1~"li"&&$3!~"wpa2";' ' BEGIN { FS=":";} { n=split($3,a,".");sub(/_2[01].+/,"",$3);print $2" "$3" "a[n]" "$1;b=b$1;} END { if(b) print("\n\t* Code injection");} ' ' NR!=4{next} {$NF/=10240} '"`S0 27 14`" ' END { if($3~/[0-9]/)print$3;} ' ' BEGIN { L='${p[36]}';} !/^[[:space:]]*(#.*)?$/ { l++;if(l<=L) f=f"\n "$0;} END { F=FILENAME;if(!F) exit;if(!f) f="\n [N/A]";"file -b "F|getline T;if(T!~/^(AS.+ (En.+ )?text$|POSIX sh.+ text ex)/) F=F" ("T")";printf("\nContents of %s\n%s\n",F,f);if(l>L) printf("\n ...and %s more line(s)\n",l-L);} ' ' /^ +[NP].+ =/h;/^( +D.+[{]|[}])/{ g;s/.+= //p;};' 's/0/Off/p' ' END{print NR} ' ' /id: N|te: Y/{i++} END{print i} ' ' / / { print "'"${p[28]}"'";exit;};1;' '/ en/!s/\.//p' ' NR!=13{next};{sub(/[+-M]$/,"",$NF)};'"`S0 39 40`" ' $10~/$L/&&$9!~"localhost" { sub(/.+:/,"",$9);print $1": "$9;} ' '/^ +r/s/.+"(.+)".+/\1/p' 's/(.+\.wdgt)\/(Contents\/)?Info\.plist$/\1/p' 's/^.+\/(.+)\.wdgt$/\1/p' ' /l: /{ /APPLE [HS]|DVD/d;s/.+: //;H;};/s: /{ /V/d;s/^ */- /;H;};${ g;p;};' ' /^find: /d;p;' );c1=(system_profiler pmset\ -g nvram fdesetup find syslog df vm_stat sar ps sudo\ crontab sudo\ iotop top pkgutil 'PlistBuddy 2>&1 -c "Print' whoami cksum kextstat launchctl sudo\ launchctl crontab 'sudo defaults read' stat lsbom mdfind ' for i in ${p[24]};do ${c1[18]} ${c2[27]} $i;done;' defaults\ read scutil sudo\ dtrace sudo\ profiles sed\ -En awk /S*/*/P*/*/*/C*/*/airport networksetup mdutil sudo\ lsof test );c2=(com.apple.loginwindow\ LoginHook '" /L*/P*/loginw*' '" L*/P*/*loginit*' 'L*/Ca*/com.ap*.Saf*/E*/* -d 1 -name In*t -exec '"${c1[14]}"' :CFBundleDisplayName" {} \;|sort|uniq' '~ $TMPDIR.. \( -flags +sappnd,schg,uappnd,uchg -o ! -user $UID -o ! -perm -600 $' '.??* -path .Trash -prune -o -type d -name *.app -print -prune' :${p[35]}\" :Label\" '{/,}L*/{Con,Pref}* -type f ! -size 0 -name *.plist -exec plutil -s {} \;' "-f'%N: %l' Desktop L*/Keyc*" therm sysload boot-args status " -F '\$Time \$Message' -k Sender kernel -k Message Req 'bad |Beac|caug|dead[^bl]|FAIL|fail|GPU |hfs: Ru|inval|jnl:|last value [1-9]|n Cause: -|NVDA$|pagin|proc: t|Roamed|rror|ssert|Thrott|tim(ed? ?|ing )o|WARN' -k Message Rne 'Goog|ksadm|SMC:' -o -k Sender fseventsd -k Message Req 'SL' " '-du -n DEV -n EDEV 1 10' 'acrx -o comm,ruid,%cpu' '-t1 10 1' '-f -pfc /var/db/r*/com.apple.*.{BS,Bas,Es,J,OSXU,Rem,up}*.bom' '{/,}L*/Lo*/Diag* -type f -regex .\*[cgh] ! -name *ag \( -exec grep -lq "^Thread c" {} \; -exec printf \* \; -o -true $ -execdir stat -f:%Sc:%N -t%F {} \;|sort -t: -k2 |tail -n'${p[38]} '-L {/{S*/,},}L*/Lau* -type f' '-L /{S*/,}L*/StartupItems -type f -exec file {} +' '-L /S*/L*/{C*/Sec*A,E}* {/,}L*/{A*d,Ca*/*/Ex,Compon,Ex,In,iTu,Keyb,Mail/B,P*P,Qu*T,Scripti,Sec,Servi,Spo,Widg}* -type f -name Info.plist' '/usr/lib -type f -name *.dylib' `awk "${s[31]}"<<<${p[23]}` "/e*/{auto,{cron,fs}tab,hosts,{[lp],sy}*.conf,pam.d/*,ssh{,d}_config,*.local} {,/usr/local}/etc/periodic/*/* /L*/P*{,/*}/com.a*.{Bo,sec*.ap}*t /S*/L*/Lau*/*t .launchd.conf" list getenv /Library/Preferences/com.apple.alf\ globalstate --proxy '-n get default' -I --dns -getdnsservers\ "${p[N5]}" -getinfo\ "${p[N5]}" -P -m\ / '' -n1 '-R -l1 -n1 -o prt -stats command,uid,prt' '--regexp --only-files --files com.apple.pkg.*|sort|uniq' -kl -l -s\ / '-R -l1 -n1 -o mem -stats command,uid,mem' -i4TCP:0-1023 com.apple.dashboard\ layer-gadgets '-d /L*/Mana*/$USER&&echo On' '-app Safari WebKitDNSPrefetchingEnabled' );N1=${#c2[@]};for j in {0..9};do c2[N1+j]=SP${p[j]}DataType;done;N2=${#c2[@]};for j in 0 1;do c2[N2+j]="-n ' syscall::'${p[33+j]}':return { @out[execname,uid]=sum(arg0) } tick-10sec { trunc(@out,1);exit(0);} '";done;l=(Restricted\ files Hidden\ apps 'Elapsed time (s)' POST Battery Safari\ extensions Bad\ plists 'High file counts' User Heat System\ load boot\ args FileVault Diagnostic\ reports Log 'Free space (MiB)' 'Swap (MiB)' Activity 'CPU per process' Login\ hook 'I/O per process' Mach\ ports kexts Daemons Agents launchd Startup\ items Admin\ access Root\ access Bundles dylibs Apps Font\ issues Inserted\ dylibs Firewall Proxies DNS TCP/IP Wi-Fi Profiles Root\ crontab User\ crontab 'Global login items' 'User login items' Spotlight Memory Listeners Widgets Parental\ Controls Prefetching SATA );N3=${#l[@]};for i in 0 1 2;do l[N3+i]=${p[5+i]};done;N4=${#l[@]};for j in 0 1;do l[N4+j]="Current ${p[29+j]}stream data";done;A0() { id -G|grep -qw 80;v[1]=$?;((v[1]==0))&&sudo true;v[2]=$?;v[3]=`date +%s`;clear >&-;date '+Start time: %T %D%n';};for i in 0 1;do eval ' A'$((1+i))'() { v=` eval "${c1[$1]} ${c2[$2]}"|'${c1[30+i]}' "${s[$3]}" `;[[ "$v" ]];};A'$((3+i))'() { v=` while read i;do [[ "$i" ]]&&eval "${c1[$1]} ${c2[$2]}" \"$i\"|'${c1[30+i]}' "${s[$3]}";done<<<"${v[$4]}" `;[[ "$v" ]];};A'$((5+i))'() { v=` while read i;do '${c1[30+i]}' "${s[$1]}" "$i";done<<<"${v[$2]}" `;[[ "$v" ]];};';done;A7(){ v=$((`date +%s`-v[3]));};B2(){ v[$1]="$v";};for i in 0 1;do eval ' B'$i'() { v=;((v['$((i+1))']==0))||{ v=No;false;};};B'$((3+i))'() { v[$2]=`'${c1[30+i]}' "${s[$3]}"<<<"${v[$1]}"`;} ';done;B5(){ v[$1]="${v[$1]}"$'\n'"${v[$2]}";};B6() { v=` paste -d: <(printf "${v[$1]}") <(printf "${v[$2]}")|awk -F: ' {printf("'"${f[$3]}"'",$1,$2)} ' `;};B7(){ v=`grep -Fv "${v[$1]}"<<<"$v"`;};C0(){ [[ "$v" ]]&&echo "$v";};C1() { [[ "$v" ]]&&printf "${f[$1]}" "${l[$2]}" "$v";};C2() { v=`echo $v`;[[ "$v" != 0 ]]&&C1 0 $1;};C3() { v=`sed -E "$s"<<<"$v"`&&C1 1 $1;};for i in 1 2;do for j in 2 3;do eval D$i$j'(){ A'$i' $1 $2 $3; C'$j' $4;};';done;done;{ A0;A2 0 $((N1+1)) 2;C0;A1 0 $N1 1;C0;B0;C2 27;B0&&! B1&&C2 28;D12 15 37 25 8;A1 0 $((N1+2)) 3;C0;D13 0 $((N1+3)) 4 3;D23 0 $((N1+4)) 5 4;D13 0 $((N1+9)) 59 50;for i in 0 1 2;do D13 0 $((N1+5+i)) 6 $((N3+i));done;D13 1 10 7 9;D13 1 11 8 10;D22 2 12 9 11;D12 3 13 10 12;D23 4 19 44 13;D23 5 14 12 14;D22 6 36 13 15;D22 7 37 14 16;D23 8 15 38 17;D22 9 16 16 18;B1&&{ D22 11 17 17 20;for i in 0 1;do D22 28 $((N2+i)) 45 $((N4+i));done;};D22 12 44 54 45;D22 12 39 15 21;A1 13 40 18;B2 4;B3 4 0 19;A3 14 6 32 0;B4 0 5 11;A1 17 41 20;B7 5;C3 22;B4 4 6 21;A3 14 7 32 6;B4 0 7 11;B3 4 0 22;A3 14 6 32 0;B4 0 8 11;B5 7 8;B1&&{ A2 19 26 23;B7 7;C3 23;};A2 18 26 23;B7 7;C3 24;A2 4 20 21;B7 6;B2 9;A4 14 7 52 9;B2 10;B6 9 10 4;C3 25;D13 4 21 24 26;B4 4 12 26;B3 4 13 27;A1 4 22 29;B7 12;B2 14;A4 14 6 52 14;B2 15;B6 14 15 4;B3 0 0 30;C3 29;A1 4 23 27;B7 13;C3 30;D13 24 24 32 31;D13 25 37 32 33;A2 23 18 28;B2 16;A2 16 25 33;B7 16;B3 0 0 34;B2 21;A6 47 21&&C0;B1&&{ D13 21 0 32 19;D13 10 42 32 40;D22 29 35 46 39;};D13 14 1 48 42;D12 34 43 53 44;D22 0 $((N1+8)) 51 32;D13 4 8 41 6;D12 26 28 35 34;D13 27 29 36 35;A2 27 32 39&&{ B2 19;A2 33 33 40;B2 20;B6 19 20 3;};C2 36;D23 33 34 42 37;B1&&D23 35 45 55 46;D23 32 31 43 38;D12 36 47 32 48;D13 20 42 32 41;D13 14 2 48 43;D13 4 5 32 1;D22 4 4 50 0;D13 4 3 60 5;D12 26 48 49 49;B3 4 22 57;A1 26 46 56;B7 22;B3 0 0 58;C3 47;D23 22 9 37 7;A7;C2 2;} 2>/dev/null|pbcopy;exit 2>&-
Copy the selected text to the Clipboard by pressing the key combination command-C.
7. Launch the built-in Terminal application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.
Click anywhere in the Terminal window and paste by pressing command-V. The text you pasted should vanish immediately. If it doesn't, press the return key.
8. If you see an error message in the Terminal window such as "Syntax error" or "Event not found," enter
exec bash
and press return. Then paste the script again.
9. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. In most cases, the difference is not important. If you don't know the password, or if you prefer not to enter it, press the key combination control-C or just press return three times at the password prompt. Again, the script will still run.
If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.
10. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, there will be nothing in the Terminal window and no indication of progress. Wait for the line
[Process completed]
to appear. If you don't see it within half an hour or so, the test probably won't complete in a reasonable time. In that case, close the Terminal window and report the results. No harm will be done.
11. When the test is complete, quit Terminal. The results will have been copied to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.
At the top of the results, there will be a line that begins with the words "Start Time." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "Process completed" message to appear in the Terminal window. Please wait for it and try again.
If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.
12. When you post the results, you might see the message, "You have included content in your post that is not permitted." It means that the forum software has misidentified something in the post as a violation of the rules. If that happens, please post the test results on Pastebin, then post a link here to the page you created.
Note: This is a public forum, and others may give you advice based on the results of the test. They speak only for themselves, and I don't necessarily agree with them.
Copyright © 2014 by Linc Davis. As the sole author of this work, I reserve all rights to it except as provided in the Use Agreement for the Apple Support Communities website ("ASC"). Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.

Please, help me to remove this virus...

Hello everybody!
I just bought my imac (because i didn't want to deal with virus anymore) and I transfered all my folders from my old pc notebook on it... Now,some of those folders doesn't want to be deleted after being reorganized and emptied, and when I run avast on my mac, it detects a virus 'Malware-gen' and a lot off 'errors', I don't really know what this is and I can't delete them. The last 4 time i run Avast, it stopped by himself
With a error message :
The application com.avast.MAD quit unexpectedly
Mac Os and other applications are not affected
Click relaunch to laucnch the application again. Cick report to see more details or send a report to Apple
The 2nd message I get from avast is :
The file scan deamon died scanning path
of 2 paths (1 remains). Do you want to scan again when the deamon is relaunches?
Does somebody can help me to remove those virus(es) ?
Thank you for your future answers
cycy

I never heard of avast until now. User comments at versiontracker.com don't seem to speak very highly of it, with one poster stating that it is worse than the viruses it claims to guard against. You might want to consider removing avast from your system and trying the free clamxav scanner instead.
According to one antivirus website of whom I have never heard, malware-gen is a windows-only virus, so it can't affect you in a Mac environment. If you are running Windows on your Mac and this Windows virus is real, that's a different story. But another antivirus website of whom I have heard didn't show a virus by this name in their database.
clamxav will identify (these orphaned) windows viruses and you can set it up to "quarantine" and I think delete them, or at least locate them so that you can deal with them manually. To the best of my knowledge, there are zero Mac OS X viruses and maybe four trojans/worms that all require a successful social engineering deception to install.
Your inability to remove files and folders may be nothing more than an innocent permissions and/or ownership issue related to your having transferred them from a Windows computer. Select the files/folders in Finder, Get Info them, and look at the sharing and permissions. Make sure you have read and write privileges for affected files and folders, as well as for all of the folders' contents. Also make sure that you are the owner of all those files and folders and their contents. Then you should be able to delete them.

Will formatting my hard drive remove my bootcamp partition? Also, downgrading...?

Hi!
I have 2 partitions, one for Mavericks and one for Windows 8. I would like to do a clean install of Mavericks. I have already redownloaded Mavericks and I'm about to put it on a USB so I can boot from it and reinstall the operating system. I read somewhere that to format your hard drive and do a clean install, you have to boot into the USB and then you'll have an option to format your hard drive from there. I'm not sure if that's correct so that's another thing I would like to inquire about.
Another thing I would like to know about, although not relevant to my previous questions, is this: Is it possible to get a free download of Mountain Lion (legally, of course)? I would much rather do a clean install of Mountain Lion than Mavericks, but I've searched google and there seems to be no way to get it for free. However, I did read that it's possible to get it free within 30 days of purchasing your Mac but that 30 days have long passed for me.
So my 3 questions are the following:
1) Will formatting my hard drive remove my already existing bootcamp partition? (If it does, I don't mind but I would still like to know)
2) How exactly do I format my hard drive?
3) Is it possible to get Mountain Lion for free so I can downgrade?
Thanks to anyone who helps!

Formatting a HDD will delete all user data on the drive. Yes you can do it on an older MBP by connecting to it via USB, but do you really want to? If the repair shop says the HDD is functional, there is no need to wipe it and reinstall the OSX. The problem then is something else.
It would be helpful if you indicated the EXACT model/year MBP that you have.
Ciao.

Safari Quits Unexpectedly On Startup OS X 10.10.2 can anyone help? I cant find any malware or any virus

Safari Quits Unexpectedly On Start up OS X 10.10.2 can anyone help? I cant find any malware or any virus I updated to 10.10.2 also to try to fix the problem.

Launch the Console application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad and start typing the name.
Step 1
For this step, the title of the Console window should be All Messages. If it isn't, select
          SYSTEM LOG QUERIES ▹ All Messages
from the log list on the left. If you don't see that list, select
          View ▹ Show Log List
from the menu bar at the top of the screen.
In the top right corner of the Console window, there's a search box labeled Filter. Initially the words "String Matching" are shown in that box. Enter the name of the crashed application or process. For example, if Safari crashed, you would enter "Safari" (without the quotes.)
Each message in the log begins with the date and time when it was entered. Select the messages from the time of the last crash, if any. Copy them to the Clipboard by pressing the key combination command-C. Paste into a reply to this message by pressing command-V.
☞ The log contains a vast amount of information, almost all of which is irrelevant to solving any particular problem. When posting a log extract, be selective. A few dozen lines are almost always more than enough.
Please don't indiscriminately dump thousands of lines from the log into this discussion.
Please don't post screenshots of log messages—post the text.
☞ Some private information, such as your name, may appear in the log. Anonymize before posting.
Step 2
In the Console window, select
          DIAGNOSTIC AND USAGE INFORMATION ▹ User Diagnostic Reports
(not Diagnostic and Usage Messages) from the log list on the left. There is a disclosure triangle to the left of the list item. If the triangle is pointing to the right, click it so that it points down. You'll see a list of crash reports. The name of each report starts with the name of the process, and ends with ".crash". Select the most recent report related to the process in question. The contents of the report will appear on the right. Use copy and paste to post the entire contents—the text, not a screenshot.
I know the report is long, maybe several hundred lines. Please post all of it anyway.
If you don't see any reports listed, but you know there was a crash, you may have chosen Diagnostic and Usage Messages from the log list. Choose DIAGNOSTIC AND USAGE INFORMATION instead.
In the interest of privacy, I suggest that, before posting, you edit out the “Anonymous UUID,” a long string of letters, numbers, and dashes in the header of the report, if it’s present (it may not be.)
Please don’t post other kinds of diagnostic report—they're very long and rarely helpful.

Text-Enhance: Unwanted Program

Is Shockwave Flash Player reponsible for the "Text Enhance" link:hover adverts that I'm now seeing coming up on various keywords on wbpages viewed with Internet Explorer?
I'm working on local HTML files so I can see that the "enhanced" content is being generated in my browser, not coming from the website.
I was searching forums because I thought this was some sort of virus, and then someone said that Flash player was responsible. I disabled Flash and it stopped - although that's not conclusive because flash might just be needed for it's operation.
Other forums talk about disabling the "I want this" toolbar extension, but I don't have that.
What's the story?

Disabling Shockwave Flash in IE is not really acceptable because Flash is a required component for some of the websites I visit.
The fact that Flash is facilitating Text Enhance’s operation put me onto a workaround which was to look at the Flash Global Storage Settings which you get to via this webpage: http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager03.htm l
And then uncheck the box which says “Allow third-party Flash content to store data on your computer”
That seems to have prevented Text Enhance from operating on two machines I’ve looked at, without having to disable Flash entirely. I don’t know if there’s still something installed on my machine – neither AVG or AdAware picked it up at any point in a full scan.
There's certainly nothing showing up in msconfig.exe / startup or in my recently installed programs which doesn't have a good pedigree.

Removing text in RH that is conditionalized using attributes in FM

I use TCS 1 (FM8 (structured) + RH7).
Does anyone know how to remove text in RH that was conditionalized in FM using attributes?
The filter works perfect in FM - text is removed, but it is still present when the FM files are imported into RH.

Hi there
Sorry for the delay in replying. I've been trying to make this work and it just doesn't want to!
So here is a thought. You are able to make the border surrounding and highlighting the image show and hide on the mouse click. I'm doing that using a Positioned Text Box. My thought here is that you could use these to layer in images that also have the descriptive text as part of the image or maybe even inside the Positioned Text Box. I'm thinking that would work.
Please note that the DHTML Hide/Show functionality is far from being remotely close to "cross browser". It works in IE, but not in Firefox. At least on my own PC here.
Cheers... Rick
Helpful and Handy Links
RoboHelp Wish Form/Bug Reporting Form
Begin learning RoboHelp HTML within the day - $24.95!
Adobe Certified RoboHelp HTML Training
SorcerStone Blog
RoboHelp eBooks

Help - hard to remove text enhancer malware/adware

Similar Messages

Maybe you are looking for