How do I get rid of malware on my Macbook Air w OS X Yosemite?

My Macbook Air is infected with malware and I'm getting popup ads all the time. Is there any way to get rid of this problem?

You may have installed one of the common types of ad-injection malware. Follow the instructions on this Apple Support page to remove it.
Back up all data before making any changes.
One of the steps in the article is to remove malicious Safari extensions. Do the equivalent in the Chrome and Firefox browsers, if you use either of those. If Safari crashes on launch, skip that step and come back to it after you've done everything else.
If you don't find any of the files or extensions listed, or if removing them doesn't stop the ad injection, ask for further instructions.
Make sure you don't repeat the mistake that led you to install the malware. It may have come from an Internet cesspit such as "Softonic" or "CNET Download." Never visit either of those sites again. You might also have downloaded it from an ad in a page on some other site. The ad would probably have included a large green button labeled "Download" or "Download Now" in white letters. The button is designed to confuse people who intend to download something else on the same page. If you ever download a file that isn't obviously what you expected, delete it immediately.
Malware is also found on websites that traffic in pirated content such as video. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow. Never install any software that you downloaded from a bittorrent, or that was downloaded by someone else from an unknown source.
In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.
Still in System Preferences, open the App Store or Software Update pane and check the box marked
Install system data files and security updates
if it's not already checked.

Similar Messages

How do i get rid of malware on my macbook pro

I am not computer savvy, I tried to watch NFL live through safari and ultimately came down with a bad case of malware where I am constantly getting pop ups and my internet is extremely slow now. How can I get rid of this malware?

There is no need to download anything to solve this problem.
You may have installed one or more of the common types of ad-injection malware. Follow the instructions on this Apple Support page to remove it. It's been reported that some variants of the "VSearch" malware block access to the page. If that happens, start in safe mode by holding down the shift key at the startup chime, then try again.
Back up all data before making any changes.
One of the steps in the article is to remove malicious Safari extensions. Do the equivalent in the Chrome and Firefox browsers, if you use either of those. If Safari crashes on launch, skip that step and come back to it after you've done everything else.
If you don't find any of the files or extensions listed, or if removing them doesn't stop the ad injection, ask for further instructions.
Make sure you don't repeat the mistake that led you to install the malware. It may have come from an Internet cesspit such as "Softonic" or "CNET Download." Never visit either of those sites again. You might also have downloaded it from an ad in a page on some other site. The ad would probably have included a large green button labeled "Download" or "Download Now" in white letters. The button is designed to confuse people who intend to download something else on the same page. If you ever download a file that isn't obviously what you expected, delete it immediately.
Malware is also found on websites that traffic in pirated content such as video. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow. Never install any software that you downloaded from a bittorrent, or that was downloaded by someone else from an unknown source.
In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.
Still in System Preferences, open the App Store or Software Update pane and check the box marked
Install system data files and security updates (OS X 10.10 or later)
or
Download updates automatically (OS X 10.9 or earlier)
if it's not already checked.

How do I get rid of Genieo on my Macbook air

I have been trying to rid my Macbook air of Genieo. Can anyone help please.

You installed the "Genieo/InstallMac" rootkit. The product is a fraud, and the developer knowingly distributes an uninstaller that doesn't work. I suggest the tedious procedure below to disable Genieo. This procedure may leave a few small files behind, but it will permanently deactivate the rootkit (as long as you never reinstall it.)
Malware is constantly changing to get around the defenses against it. The instructions in this comment are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
Back up all data. You must know how to restore from a backup even if the system becomes unbootable. If you don't know how to do that, or if you don't have any backups, stop here and ask for guidance.
Step 1
In the Applications folder, there should be an item named "Genieo". Select it and open the Finder Info window. If it shows that the Version is less than 2.0, download and install the current version from the genieo.com website. This may seem paradoxical, since the goal is to remove it, but you'll be saving yourself some trouble as well as the risk of putting the system in an unusable state.
There should be another application in the same folder named "Uninstall Genieo". After updating Genieo, if necessary, launch "Uninstall Genieo" and follow the prompts to remove the "newspaper-style home page." Restart the computer.
This step does not completely inactivate Genieo.
Step 2
Don't take this step unless you completed Step 1, including the restart, without any error messages. If you couldn't complete Step 1, stop here and ask for instructions.
Triple-click anywhere in the line below on this page to select it:
/Library/Frameworks/GenieoExtra.framework
Right-click or control-click the line and select
Services ▹ Reveal in Finder (or just Reveal)
from the contextual menu.
If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select
Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.
A folder should open with an item named "GenieoExtra.framework" selected. Move that item to the Trash. You'll be prompted for your administrator password.
Move each of these items to the Trash in the same way:
/Library/LaunchAgents/com.genieo.completer.update.plist
/Library/LaunchAgents/com.genieo.engine.plist
/Library/LaunchAgents/com.genieoinnovation.macextension.plist
/Library/LaunchDaemons/com.genieoinnovation.macextension.client.plist
/Library/PrivilegedHelperTools/com.genieoinnovation.macextension.client
/usr/lib/libgenkit.dylib/usr/lib/libgenkitsa.dylib
/usr/lib/libimckit.dylib
/usr/lib/libimckitsa.dylib~/Library/Application Support/com.genieoinnovation.Installer~/Library/LaunchAgents/com.genieo.completer.download.plist
~/Library/LaunchAgents/com.genieo.completer.update.plist
If there are other items with a name that includes "Genieo" or "genieo" alongside any of those listed above, move them as well. There's no need to restart after each one. Some of these items will be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
Restart and empty the Trash. Don't try to empty the Trash until you have restarted.
Step 3
From the Safari menu bar, select
Safari ▹ Preferences... ▹ Extensions
Uninstall any extensions you don't know you need, including ones called "Genieo" or "Omnibar," and any that have the word "Spigot" or "InstallMac" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
Your web browser(s) should now be working, and you should be able to reset the home page and search engine. If not, stop here and post your results.
Make sure you don't repeat the mistake that led you to install this software. Chances are you got it from an Internet cesspit such as "Softonic" or "CNET Download." Never visit either of those sites again. You might also have downloaded it from an ad in a page on some other site. The ad has a large green button labeled "Download" or "Download Now" in white letters. The button is designed to confuse people who intend to download something else on the same page. If youever download a file that isn't obviously what you expected, delete it immediately.
You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that the Genieo developer has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing, has not done so, even though it's aware of the problem. It must be said that this failure of oversight is inexcusable and has seriously compromised the value of Gatekeeper and the Developer ID program. You cannot rely on Gatekeeper alone to protect you from harmful software.
Finally, be forewarned that when Genieo is mentioned on this site, the developer sometimes shows up under the name "Genieo support." If that happens, don't believe anything he says, but feel free to tell him what you think of his scam.

How do i get rid of malware on my macbook

If I open my hard drive icon on the desktop, on the left side under "shared" is this: your-4dacd0ea75 and has a little square blue screen next to it. How do I take this off? I appreciate any help.

Whenever anyone asks for help with Malware on a Mac, the stock answer is "there is no malware on a Mac..." because generally it is the UFO siting of problems on OSX.
your-4dacd0ea75 IS actual Malware. On a Mac. Congratulations, you have done the nearly impossible.
your-4dacd0ea75 is actually a big problem for PCs (Google it - it is) and a nagging problem for Mac owners. Posts here in "discussions" as well as elsewhere in cyberspace speak of Repair Permissions as the sure way to make it disappear, but others say it just comes back. Other people recommend ClamXav the free antivirus for Macs, but their Forum makes no mention of your-4dacd0ea75
If it were myself, I would do an Erase and Install, but most folks here hate that answer. You can do your own Search and trash all references to it. For that I would not use Spotlight, as much as freeware or trialware: EasyFind search tool or FindAnyFile search tool to seek out anyplace the bug may be hideing.
Perhaps the people who Repaired Permissions failed to erase all cookies & caches. I would look there first. You are in uncharted waters here - try anything you can think of.
As a rule you are in much LESS trouble that PCs (unless you got this through Boot Camp - did you?)

How can I get rid of 'Vidx' adverts on MacBook Air?

Vidx has been everywhere in literally any page whenever I use safari. They popped out annoying ads and direct me to their own webpage when I clicked some other safe links. My internet has been slowed down because of Vidx. I couldn't find any solutions. Does anyone have the same problem? Does anyone have any solutions that helps? Many thanks! 

You installed the "VidX" trojan, perhaps under a different name. To remove it, first open the Applications folder by selecting
Go ▹ Applications
from the Finder menu bar, or by pressing the key combination shift-command-A. Look for an item named "VidX," "MacVx," or similar. If present, drag it to the Trash and empty.
From the Safari menu bar, select
Safari ▹ Preferences... ▹ Extensions
Uninstall any extension you don't know you need. If in doubt, remove all of them. You may well have more than one that's adware or spyware.

How can I get rid of malware flash player

how can I get rid of malware flash player (May 18,'13)

How do you know you have malware, and where did you get it?

How can I get rid of malware or a virus?

How can I get rid of malware or a virus?

Hi .
Most likely adware or malware.
Download the AdMedic adware / malware removal tool here > AdwareMedic
Easy and only takes a minute or two.

How do i get rid of malware on my pc

how do i get rid of malware on my pc, i keep getting redirected on my browsers and ads on my mac. i think its malware

Relaunch your browser in safe mode with extensions and plug-ins disabled, remove and disable any you find.
Remove unwanted adware that displays pop-up ads and graphics on your Mac - Apple Support
Download and run AdwareMedic
http://www.adwaremedic.com/index.php
http://www.thesafemac.com/mmg/
Make sure your system is current
Apple security updates - Apple Support
The forum for MacBook Pro:
MacBook Pro

How do I get rid of viruses on my MAcBook Pro

How do I get rid of viruses on my MAcBook Pro

A
It may not be malware, a Web scam that only affects your browser, and only temporarily. There are several ways to recover.
1. Some of those scam pages can be dismissed very easily. Press the key combination command-W to close the tab or window. A huge box will pop up. Press the return key and both the box and the page will close. If that doesn't happen, continue.
2. Press and hold command-W. You may hear repeating alert sounds. While holding the keys, click the OK button in the popup. A different popup may appear, which you can cancel out of as usual.
3. From the Safari menu bar, select
          Safari ▹ Preferences... ▹ Security
and uncheck the box marked Enable JavaScript. Leave the preferences dialog open.
Close the malicious window or tab.
Re-enable JavaScript and close the preferences dialog.
4. If the Preferences menu item is grayed out, quit Safari. Force quit if necessary. Relaunch it by holding down the shift key and clicking its icon in the Dock. None of the windows and tabs will reopen.
After closing the malicious page, from the menu bar, select
          Safari ▹ Preferences... ▹ Privacy ▹ Remove All Website Data
to get rid of any cookies or other data left by the server. Open your Downloads folder and delete anything you don't recognize.
B
If the above step doesn't solve the problem, you may have installed one or more of the common types of ad-injection malware. Follow the instructions on this Apple Support page to remove it. It's been reported that some variants of the "VSearch" malware block access to the page. If that happens, start in safe mode by holding down the shift key at the startup chime, then try again.
Back up all data before making any changes.
One of the steps in the article is to remove malicious Safari extensions. Do the equivalent in the Chrome and Firefox browsers, if you use either of those. If Safari crashes on launch, skip that step and come back to it after you've done everything else.
If you don't find any of the files or extensions listed, or if removing them doesn't stop the ad injection, ask for further instructions.
Make sure you don't repeat the mistake that led you to install the malware. It may have come from an Internet cesspit such as "Softonic" or "CNET Download." Never visit either of those sites again. You might also have downloaded it from an ad in a page on some other site. The ad would probably have included a large green button labeled "Download" or "Download Now" in white letters. The button is designed to confuse people who intend to download something else on the same page. If you ever download a file that isn't obviously what you expected, delete it immediately.
Malware is also found on websites that traffic in pirated content such as video. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow. Never install any software that you downloaded from a bittorrent, or that was downloaded by someone else from an unknown source.
In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.
Still in System Preferences, open the App Store or Software Update pane and check the box marked
          Install system data files and security updates (OS X 10.10 or later)
or
          Download updates automatically (OS X 10.9 or earlier)
if it's not already checked.

How do I get a division sign on my macbook air keyboard?

How do I get a division sign on my MacBook Air Keyboard??

Lucy ~ You can use the Keyboard Viewer to help you learn which keyboard shortcuts to use to enter special characters or symbols.

How do I get rid of malware entries in my Prefs.js file (stored in my profile folder)?

I want to get rid of anything that contains the string "claro" in it. Here is part of my prefs.js file that shows what I want to clear:
\Mozilla\\\\Firefox\\\\Profiles\\\\a6s51y6q.default-1347242978286\\\\extensions\\\\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi\"},\"jid1-LSHV456F7wAw9g@jetpack\":{\"version\":\"1.1\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Users\\\\Clayton\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\a6s51y6q.default-1347242978286\\\\extensions\\\\[email protected]\"}}");
user_pref("extensions.bprivacy.DataDir", "C:\\Users\\Clayton\\AppData\\Roaming\\Macromedia");
user_pref("extensions.bprivacy.LSOcount", 23);
user_pref("extensions.bprivacy.donotaskonexit", true);
user_pref("extensions.bprivacy.initiated", 3);
user_pref("extensions.bprivacy.lastSession", "Sunday, September 09, 2012 10:13:43 PM");
user_pref("extensions.bprivacy.removed", 291);
user_pref("extensions.bprivacy.removedSession", 287);
user_pref("extensions.claro.admin", false);
user_pref("extensions.claro.aflt", "babsst");
user_pref("extensions.claro.autoRvrt", "false");
user_pref("extensions.claro.dfltLng", "en");
user_pref("extensions.claro.excTlbr", false);
user_pref("extensions.claro.id", "72da1096000000000000001fc604ff56");
user_pref("extensions.claro.instlDay", "15610");
user_pref("extensions.claro.instlRef", "sst");
user_pref("extensions.claro.prdct", "claro");
user_pref("extensions.claro.prtnrId", "claro");
user_pref("extensions.claro.tlbrId", "claro");
user_pref("extensions.claro.vrsn", "1.6.4.1");
user_pref("extensions.claro.vrsni", "1.6.4.1");
user_pref("extensions.claro_i.newTab", false);
user_pref("extensions.claro_i.smplGrp", "none");
user_pref("extensions.claro_i.vrsnTs", "1.6.4.19:51:28");

Additional info:
I also found these lines in my user.js file. How do I get rid of them? (They are also the ONLY lines in user.js.)
(Claro is known malware and these entries were not discovered by the malware "malbytes" program).
user_pref("extensions.claro.admin", false);
user_pref("extensions.claro.aflt", "babsst");
user_pref("extensions.claro.autoRvrt", "false");
user_pref("extensions.claro.dfltLng", "en");
user_pref("extensions.claro.excTlbr", false);
user_pref("extensions.claro.id", "72da1096000000000000001fc604ff56");
user_pref("extensions.claro.instlDay", "15610");
user_pref("extensions.claro.instlRef", "sst");
user_pref("extensions.claro.prdct", "claro");
user_pref("extensions.claro.prtnrId", "claro");
user_pref("extensions.claro.tlbrId", "claro");
user_pref("extensions.claro.vrsn", "1.6.4.1");
user_pref("extensions.claro.vrsni", "1.6.4.1");
user_pref("extensions.claro_i.newTab", false);
user_pref("extensions.claro_i.smplGrp", "none");
user_pref("extensions.claro_i.vrsnTs", "1.6.4.19:51:28");
And if that weren't enough, I found a reference to "isearch" in my "search.json" file:
Files\\Mozilla Firefox\\searchplugins\\amazondotcom.xml"},{"_id":"[app]/avg-secure-search.xml","_name":"AVG Secure Search","_hidden":false,"description":"AVG Secure '''Search","__searchForm":"https://isearch.avg.com/","_iconURL":"data''':image/x-icon,%00%00%01%00%01%00%10%10%00%00%00%00%20%00h%04%00%00%16%00%00%00(%00%00%00%10%00%00%00%20%00%00%00%01%00%20%00%00%00%00%00%40%04%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00pn%03%1Fb%83%15%25U%911
And one to "Babylon" in my search-metadata.json file (also malware) as follows:
'''"{"[app]/babylon.xml":{"hidden":true,"alias":null},"[app]/yahoo.xml":"'''

How do i get more memory installed on my macbook air

How do i get more memory installed on my macbook air

If you are referring to RAM, the Air's RAM is not an upgradeable component. The RAM memory is soldered to the main board, and there are no expansion slots.
It is the price Air owners pay for miniaturization. Every Air is manufactured with all the memory it will ever have. Shop wisely.
It is technically possible to upgrade the SSD storage though, but will probably void any warranty.

Downloaded cd book to old macbook iTunes. can sync to iphone when connect to old macbook but erased when sync phone with new macbook air. how do i get the cd book onto the macbook air?

ran out of room...how do i get the cd book onto my new macbook air? downloaded to old macbook from cd. goes on list when sync iphone with old mac. gets erased when sync with new macbook air
thanks

Copy it from the old computer to the new one.

How can I get Windows Internet explorer on my MacBook air?

I have several websites that I need to use for my new job that have not been tested for Mac. I don't want to have to buy a PC laptop, so I was wondering if there is a tried and true way to get windows Internet explorer on my MacBook air.

Or install Parallels 7 and then you can run IE just like any other app from within OS X itself. That costs around $50 plus the Windows license though.
Personally I have created an IE9 RDP (remote) App on my terminal server at work and just run that. Looks like it is running on my Mac natively.

How do I get my Rosetta Stone onto my macbook Air

I don't understand how to put my Rosetta Stone onto my new MacBook Air. I know it does not have a CD/DVD drive.

Is this a question generally regarding installing software which comes on CD/DVD, or specifically regarding problems with installing Rosetta Stone?

How do I get rid of malware on my Macbook Air w OS X Yosemite?

Similar Messages

Maybe you are looking for