Help! Safari and trojan? How do I identify and get rid of it?
Please help me understand and get rid of this—your expertise sincerly appreciated! I posted about this problem a couple of weeks ago, but got no response. I seem to have a trojan attached to Safari (my analysis). It delays or stops loading of all pages, thumbnails don't load (such as in ebay), overall response is slow or freezes, etc. My console shows the following sets of messages whenever I try to open a page:
4/13/11 8:27:14 AM Safari[286] iSkysoft: removeObjectFromDic: ReloadPage
4/13/11 8:42:16 AM Safari[286] iSkysoft: removeObjectFromDic: ReloadPage
4/13/11 8:57:22 AM Safari[286] iSkysoft: removeObjectFromDic: ReloadPage
4/13/11 9:12:23 AM Safari[286] iSkysoft: removeObjectFromDic: ReloadPage
4/13/11 9:25:18 AM Safari[286] iSkysoft: removeObjectFromDic: ReloadPage
4/13/11 9:25:19 AM Safari[286] iSkysoft: removeObjectFromDic: ReloadPage
4/13/11 9:25:45 AM Safari[286] iSkysoft: Add Button.
4/13/11 9:25:45 AM Safari[286] iSkysoft: Show Button: <SFSButton: 0x12b194a60>(146.0,46.0)
4/13/11 9:25:46 AM Safari[286] iSkysoft: disappearBtn
4/13/11 9:25:47 AM Safari[286] iSkysoft: Hidden Button.
4/13/11 9:25:55 AM Safari[286] iSkysoft: Show Button: <SFSButton: 0x12b194a60>(146.0,46.0)
How do I identify this iskysoft, where it is located, and delete it?? Please help if you can.
I have followed all (possibly-related) advice I could find in the forums, including deleting all safari extensions, repeated cache empty, reload safari from scratch, delete safari library folders as admin and user, scan with sophos and intenet cleanup, etc. Finder doesn't locate anything named iskysoft on my computer, but the iskysoft website has to do with video conversion.
The slowdown has lasted since the end of 2010, but I just discovered the console messages a few weeks ago, and have been trying to understand and deal with that since.
Thanks for your time and knowledge. I could really use the help!
Hi,
Try MacScan for malware.
http://macscan.securemac.com/
You are positive you haven't installed the iSkysoft software??
Purchased as a bundle by chance by another name?
http://www.squidoo.com/current-mac-bundles/144089781-Previous-Mac-Bundles
The slowdown has lasted since the end of 2010,
Maybe it's not the iSkysoft causing the slow down. Check to see how much free space there is on the startup disk.
Right or control click the MacintoshHD icon. Click Get Info. In the Get Info window you will see Capacity and Available. *Make sure you always have a minimum of 15% free disk space.*
Try using Spotlight (top right corner of your screen, the magnifying glass icon, to find the software.
Carolyn
Similar Messages
-
I downloaded something called MPlayerX and it is ruining my computer (a macbook pro) and now on safari theres pop up adds that shouldn't be there and on the google homepage theres adds. I want to know how to fix this and get rid of MPlayerX PLEASE HELP ME!!!!
MPlayerX isn't itself the problem; it was downloaded from a source that packaged adware with it. Click here and follow the instructions, or if desired, run Adware Medic.
(114466) -
I have double and triples of photo's on my iPad. Not all my pics but most of them. I was told that I screwed up in synching with iTunes when I initally set up. How in the **** do I get rid of all the dups? I cannot delete them from my iPad. HELP ME!
If the shows are in fact still on the pad, they will be found in the videos app, not the music or I tunes app. Look there and see if they are still there.
If you don't see them there, go to the searchlight screen ( farthest left home page) and type in the name of one of the shows. If it is on the pad, hiding somewhere, this will find it.
If they are not there, they should not be using up space.
To get them back onto your pad, plug in and sync again. Make sure you transfer purchases first. Before you sync, take a look at the video tab in your I tunes, and check what you want and don't want synced. -
Anyone help? I click on buttons within websites and my mac opens new webpages advertising, mac keeper pro or some foreign exchange trading platform. Did i pick something hop in a download? how do i search for and get rid of this annoying infiltration?
You've installed some form of adware. Take a look here: http://www.thesafemac.com/arg/
-
Something was hidden in a download and now these double green underlined hyperlinks show up everywhere, and pop ups too whenever I click on ANYTHING. I can't figure out how to find it and get rid of it.
You installed the "DownLite" trojan, perhaps under a different name. Remove it as follows.
Malware is constantly changing to get around the defenses against it. The instructions in this comment are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
Back up all data.
Triple-click anywhere in the line below on this page to select it:
/Library/LaunchAgents/com.vsearch.agent.plist
Right-click or control-click the line and select
Services ▹ Reveal in Finder (or just Reveal)
from the contextual menu.* A folder should open with an item named "VSearch" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
Repeat with each of these lines:
/Library/LaunchDaemons/com.vsearch.daemon.plist
/Library/LaunchDaemons/com.vsearch.helper.plist
/Library/LaunchDaemons/Jack.plist
Restart the computer and empty the Trash. Then delete the following items in the same way:
/Library/Application Support/VSearch
/Library/PrivilegedHelperTools/Jack
/System/Library/Frameworks/VSearch.framework
Some of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
From the Safari menu bar, select
Safari ▹ Preferences... ▹ Extensions
Uninstall any extensions you don't know you need, including any that have the word "Spigot" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
This trojan is distributed on illegal websites that traffic in pirated movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect much worse to happen in the future.
You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that the DownLite developer has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing, has not done so, even though it's aware of the problem. This failure of oversight is inexcusable and has compromised the value of Gatekeeper and the Developer ID program. You can't rely on Gatekeeper alone to protect you from harmful software.
*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select
Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return. -
Had my computer serviced recently and had to reinstall itunes. Now its saying I have two accounts. How can I switch to my original account where all my music that I imported is and get rid of the new one that only shows my purchased music?
Had my computer serviced recently and had to reinstall itunes. Now its saying I have two accounts. How can I switch to my original account where all my music that I imported is and get rid of the new one that only shows my purchased music?
-
How do I find and get rid of a virus?
I was on a website called 'thedarehub.tv' to watch a movie, and when I went to click on a link to watch it, another window popped up and said "There was a virus on one of the pages and now your computer has a virus". (FYI, I did not download anything) I quickly closed out every window, but now I want to find the virus it said I had and get rid of it and clean my laptop. I thought Mac's couldn't get viruses...I guess I was mistaken. HELP!!!
You don't have a virus, or any other type of malware. There is no software in the world that can tell what is on another computer through a web browser.
Any such popup or web page is a scam. Either to sell you worthless software, or to call some number where they will fleece out of as much money as you're willing to cough up. -
How can I find and get rid of key loggers on my iPhone and ipad
How can I find and get rid of key loggers on my iPhone and ipad
Why do you think you have them on there? Have you allowed someone to physically have each device and jailbreak it?
-
If I'm suspecting that I'm hacked, how can I confirm it and how can I Un-hack/get rid of it ?
If I'm suspecting that I'm hacked, how can I confirm it and how can I Un-hack/get rid of it ?
Knowing that when I turn On my Macpro, the Apple logo appeares late and always when Im connected to the WiFi It notifys me that there is someone using my IP address!!You aren't being hacked. Your wireless network is probably misconfigured and/or hacked. Turn on WPA security and then reboot it.
-
HT2487 how do I clean my mac mini and get rid of old files and clutter please
how do I clean my mac mini and get rid of old files and clutter lease
Try using one of these applications to see what is taking up your hard drive space.
File Scanner - OmniDiskSweeper Requires 10.8 or better
File Scanner – Whatsize -
I just got a MacBook Pro and when I was setting up I got this voice over thing to help me out...I now can't get rid of it and it is driving me crazy...can anyone help?
System Preferences > Universal Access. Turn off Voice Over in the "Seeing" tab:
-
In iPhoto 11, how do I find and get rid of duplicate photos?
in iPhoto 11, how do I find and get rid of doplicate photos?
For dealing with duplicates in iPhoto check out Duplicate Annihilator
-
time machine: I get the following message: The backup disk image “/Volumes/Data-1/Clemens’s iMac.sparsebundle” is already in use - what to do? Where and how do I find that file and get rid of it?
I'm on Mountain Lion and have version 6.1 of AirPort utility so there is no button to "Disconnect All Users"and the only other option of "removing and re-selecting the drive via Time Machine Prefs" doesn't work either. So this will work.
Launch Airport Utility and select the TC "Edit" button, then select the Disks tab. Deselect "Enable File Sharing" and click "Update". The TC will reboot then follow the same procedure and reselect "Enable File Sharing" and click "Update". After TC reboots again you'll be up and running. Not the neatest way to do it but saves having to unplug the TC which risks disk damage and the whole procedure takes less than a minute.The "Enable File Sharing" button seems to have replaced the "Disconnect All Users" button but with the slight disadvantage that it reboots the TC which takes up additional time. -
How to install OSX on 2nd HD and get rid of 1st HD?
(thanks to this forum) I managed to install a second HD on my MacPro (I have to specify that I'm degree below z-e-r-o in hardware...).
now, my second HD appears on the desktop (it's set for 1 partition in D.U.)
AND THE BIG QUESTION IS:
HOW CAN I INSTALL OSX ON THIS NEW DISK AND GET RID (once it's done) OF THE OLD CRAPPY SEAGATE HD?
I know that it can be 'cloned' (I've read about for that here on the forum) but, is this the best thing to do? or shall I restart from the original APPLE CD? but how to do that...?
thanks!Why is your Seagate "crappy?" Is it not behaving well in some manner? Because if you were to clone, the exact software issues that it has would appear on the clone. If you simply erase and install on the second empty hard drive, none of the other hard drive's software issues would be present. However, I would make sure your data is backed up before installing anything, and attempt to isolate whatever issues you are having first. If there is nothing on the second hard drive, you can go ahead and install and find out if you have the same issues on that drive. Erase and install is one of the installation options from the installation disks included with your Mac Pro. Be careful not to erase and install your original hard drive unless you are totally backed up as my FAQ explains:
http://www.macmaps.com/backup.html
P.S. in case you didn't realize it, on the internet using ALL UPPERCASE means you are attempting to shout and be rude. Please avoid it so people don't misunderstand you. -
iphone shows 96 photos, how do i find what is using my memory for photos and get rid of them
You're looking in the wrong place. The "96 photos" are in iPhoto on your Mac and are being synced to your phone. This doesn't include all those taken on the phone.
To see the total number of photos on your phone:
Settings > General > About > Photos >
To see how much memory photos are using:
Settings > General > Usage > Storage > Manage Storage >Photos & Camera
To select what to delete:
For photos taken on the phone: Photos > select photo you want to delete > trashcan on bottom. Note that deleted photos are stored in the Recently Deleted album for 30 days. To delete them immediately, select them again from that album > delete or select Delete All
For photos synced to your phone from your computer, deselect them in iTunes and sync again. They can't be deleted directly on the phone.
Maybe you are looking for
-
Adding to WHERE based on an IF statement in a procedure
Is this legitimate? select CRIME_CLASSIFICATION_ID, crime_type, nvl(count(CRIME_CLASSIFICATION_ID),0) as CRIMECNT From vaps.vw_offenses where location_id in (vaLoc) If fromdate is not null Then AND offense_date >= to_date(fromdate, 'm
-
A bug and some suggestions to return to old ways of doing things in ical
hi there when i first started using ical i could double click an event to edit it and press enter when finished now i have to press apple E and click done when finished - with hundreds of events its painful any ideas apart from someone at apple makin
-
How to fetch data in report related to fb03 , bkpf, bset table ?
how to fetch data in report related to fbo3, table bkpf, bset etc. if any body is having any report related to these tables then please share.
-
Where to place application setting?
Hello, my J2SE application runs in background in linux shell and from time to time I need to reload application setting. Until now I've used java setting files to save these values, but this is inappropriate because it can not be changed during appli
-
I have an HTML region with some items - two date pickers, a button, a display only field and a couple of select lists in that order vertically. The date pickers and select lists have labels above them. My problem is the button has an open and close t