How do I remove this virus?
So I just bought my macbook pro 3 days ago and I downloaded google chrome and suddenly there are a toooon of popups. like I have a dell and none of this happens on its browsers? I don't even have an adblock on that.
However in google chrome with adblock i still get popups and i get certain words with double underlines. i checked the extensions and plugins and i disabled and deleted everything yet nothing is helpng these popups.
safari is completely unusable since the popups occur at every click and then they restore safari to its homepage.
is there a way i can reboot the computer and wipe everything? will that get rid of the virus too since i dont have any files on the macbook that i would miss. i mean i would miss all the settings though but i dont care.
or is there a better solution?
by the way this is my first apple computer and i always thought macs were really good at guarding against viruses.
You may have installed the "DownLite" trojan, perhaps under a different name. Remove it as follows.
Malware is constantly changing to get around the defenses against it. The instructions in this comment are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
Back up all data.
Triple-click anywhere in the line below on this page to select it:
/Library/LaunchAgents/com.vsearch.agent.plist
Right-click or control-click the line and select
Services ▹ Reveal in Finder (or just Reveal)
from the contextual menu.* A folder should open with an item named "VSearch" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
Repeat with each of these lines:
/Library/LaunchDaemons/com.vsearch.daemon.plist
/Library/LaunchDaemons/com.vsearch.helper.plist
/Library/LaunchDaemons/Jack.plist
Restart the computer and empty the Trash. Then delete the following items in the same way:
/Library/Application Support/VSearch
/Library/PrivilegedHelperTools/Jack
/System/Library/Frameworks/VSearch.framework
Some of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
From the Safari menu bar, select
Safari ▹ Preferences... ▹ Extensions
Uninstall any extensions you don't know you need, including any that have the word "Spigot" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
This trojan is distributed on illegal websites that traffic in pirated movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect much worse to happen in the future.
You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that the DownLite developer has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing, has not done so, even though it's aware of the problem. This failure of oversight is inexcusable and has compromised both Gatekeeper and the Developer ID program. You can't rely on Gatekeeper alone to protect you from harmful software.
*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select
Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.
Similar Messages
-
My Internet company sent me a notification saying I had a "BOT" virus on my computer and that they would shut down my internet access. They given 28 hours to remove this virus. How Can I remove this thing!?
Flashback is only one possibility. See About the Flashback malware for information about it and how to get rid of it.
Unfortunately, these kinds of problems can happen for a variety of other reasons. There's very little malware that actually can cause a Mac to become part of a botnet. You could have an infected Windows PC on your network. (Perhaps because of a visitor or because you're using an open, unencrypted wireless network and have a "squatter.") Or it could be false positives.
If you do all the checks mentioned on my Flashback page and still can't find any infection, you need to lock down your wireless network (change the security to WPA2 with a strong password) and check out any Windows machines that are on your network.
(Note that my pages contain links to other pages that promote my services, and this should not be taken as an endorsement of my services by Apple.) -
I have a ransomware virus on chrome browser the blocks use of browser How do I disable virus?
It's likely the "FBI Moneypak browser hijack" which works by hijacking Javascript in the web browser so you can't escapte.
What you do is press command tab to get to the Finder, then from the Apple Menu select > Force Quit on Chrome.
Apple menu > System Preferences > General >
Uncheck “Restore windows when quitting and re-opening apps“
Apple Menu select > Shutdown, restart and don't start up Chrome.
Use Safari to find out how to disable loading of previous web pages in Chrome ( I don't use it )
Once Chrome loads, then Reset it's caches etc.
If you know the domain name of the malicious site, then feed it here
https://www.google.com/safebrowsing/report_badware/ -
It Gives me no reason this message often the first to enter my pass:" When you can not buy Equilibrium - Leonardo da Vinci's Balance Puzzle " and 27other elements. Please try again later". How can I remove this annoyng message? Maybe it's a Virus?
The old rule of thumb was to keep 10-12 GB free. Any lower than that and you will start to have trouble. I was very close to that for a long time and never had any complaints. Now, Lion "encourages" 20% free space (on my newer 250 GB drive) so I try to keep it with more than 50 GB free.
Do you still have the original memory in that machine too? The metal plate you have to remove in the battery compartment also provides access to the RAM. Your machine will take 2 GB of RAM, possibly 3. You definitely want to max that out too.
Regardless, you definitely need a new hard drive. When Apple switched to PC components, they had to take a quality hit. These 2.5" notebook hard drives are not very reliable. I'm surprised your hard drive hasn't died by now. I usually get a new hard drive with every major OS upgrade. A $ 50 investment every couple of years is no big deal.
Unfortunately, you (and I) suffer from being an early adopter in 2006. Those 32-bit machines only accept 2 GB RAM (maybe 3) and are only 32-bit so they can't be upgraded to Lion. Because of this limitation, you won't see as dramatic an improvement as you would with a 2007 machine. If you run more than a couple of applications, your hard drive is always going to have to be doing some VM work. My 2006 machine has even lost its bluetooth. I gave it to my brother. My very similar 2007 Macbook is still running great.
So, you must get a new hard drive because your old one is likely on death's door. If you don't have at least 2 GB - get it. If you can't afford a new machine, you might want to consider an SSD. That might help mitigate your RAM limitations. You can spend from $ 100 to $ 350 and get a dramatic speed improvement. -
At start up I get a request to install a bitdefender extension to safari. I am sure this is a virus as the link is not familiar, how do I remove this start up request
Hi Pero127,
What I mean is was this a package installer, or an actual extension?
If just an extension, when you double click one, the OS asks if you want the extension installed. In which case, yes, that is the only item installed on your computer and you can then just uninstall it.
But if it was an application installer package, then it could have installed many more items onto your computer than just the extension. The rest will still be on your drive after removing the extension. -
I have iPhone 4s, and using latest iOS. When I try to open any link from Twitter or Facebook, it goes to open some wrong webpage. My iphone seems to be infected or suffering from some spyware or malware. How can I remove this wrong link opening ? Please help me to resolve...
I think the McAfee suite will do the trick when I pay them a one-time fee of $69 or $179 for a year for unlimited support.
Your call of course but IMO a waste of money. Please read this first:
There are many forms of ‘Malware’ that can affect a computer system, of which ‘a virus’ is but one type, ‘trojans’ another. Using the strict definition of a computer virus, no viruses that can attack OS X have so far been detected 'in the wild', i.e. in anything other than laboratory conditions. The same is not true of other forms of malware, such as Trojans. Whilst it is a fairly safe bet that your Mac has NOT been infected by a virus, it may have another security-related problem, but more likely a technical problem unrelated to any malware threat.
You may find this User Tip on Viruses, Trojan Detection and Removal, as well as general Internet Security and Privacy, useful:
https://discussions.apple.com/docs/DOC-2435
The User Tip (which you are welcome to print out and retain for future reference) seeks to offer guidance on the main security threats and how to avoid them.
More useful information can also be found here:
http://www.reedcorner.net/mmg/ -
I have changed my icloud email in my iphone but in macbook still using old email. I tried to delete the old email in macbook but it requires password and it does not accept the old password for the old email anymore. How do I remove this old email?
Hello farahani hairon nizar,
If your Apple ID was changed from your old account, you may have to change it back to your old account to be able to sign out and then change it back after that is done. Take a look at the article below for more information.
If you're asked for the password to your previous Apple ID when signing out of iCloud
http://support.apple.com/en-us/HT203828
Regards,
-Norm G. -
i have an iphone4. every time i turn it on i get an old I.D. and a message saying, "Apple password " then my email address and asks for the password. I have a different account that itunes on my computer recognizes. How do i remove this from my phone?
to remove that account.
go to settings > iTunes & App Stores > click on that apple ID then sign out. -
I installed LION on my mac pro 2008 and it's alway's pop with " there was a problem connecting to the server " Time Capsule" .How can i remove this popup. My Time machine is working fine and also rename it with less than 7 karakters. But the popup keeps on coming with the old name.
I have a BT Infinity router plugged into the Time Capsule, not sure where the radio settings are?
They are able to use the network settings of the TC i.e. they can connect to the internet via the wifi through the TC but when they try and connect to the AirPort Disk this is where it is not allowing a connection.
I don;t have the drive shared out at all at the moment, is this necessary? How do I do this if so?
I have attached the screen shots of all the settings.
Thanks again for your help. -
Adobe Photoshop Elements 11. When in EXPERT MODE i get the following on the bottom PHOTO BIN, TOOL OPTIONS, UNDO, REDO, ROTATE, LAYOUT ORGANIZER how do i remove this?
Sorry, but you don't. That's part of the way adobe changed PSE starting with PSE 11. If you don't like it, you can leave feedback here:
Photoshop Family Customer Community -
I've blocked certain photos showing up in facebook by accident, The toddler got click happy. How do I remove this block on certain photos?
You're welcome
-
I'm new to Photoshop Elements and just getting started. While in the organizer I have one group of photos up to learn with and now it says Edit in Progress with a padlock icon. How can I remove this so that the photos will be restored to normal?
Go back to the editor and close the photo there.
-
When i try to install ijii reactor it install almost ill end but then fail error is following:
Feature: ijji Auto Installer
Component: iAIFile1
File: C:\Program Files (x86)\Mozilla Firefox\Plugins\
How i i remove this file because it says thath already exist?You need to download this file: http://www.ijji.com/hanstartguide4ie.nhn
Run it and it'll remove the browser plugin from Firefox. Then re-run Reactor installer. -
I somehow managed to add lines on my master slide and can't get rid of them. I now have a useless rectangle on the left half of many of my slides. How do I remove this?
Select the master slide,
copy any objects you want to keep,
Select all, (command A), and press delete key.
Paste back the items to retain (Command V) -
Every time I send a photo it sends with "For Review Only" on the photo. How can I remove this so my recipient gets a good quality photo?
If you used the Apple Professional Training Series 'Aperture 3' book, then this was in lesson #1 which had you set the 'Image Export' preset for the 'Email Medium - JPEG' to 25% of Original Size and to add a watermark (which happens to be the PSD file that overlays the image with 'For Review Only').
You can fix this by going to 'Aperture menu > Presets > Image Export...' and selecting the 'Email Medium - JPEG' preset and then deselecting the 'Show Watermark' option.
Note - you can also reset the 'Percentage of Original' field to %100 to get back to the defaults.
If you did not use the APTS - Aperture 3 book mentioned above, then I am not sure where you got the watermark.
Maybe you are looking for
-
How do I set a noise print for the entire track? (Back to Basics)
Ok. I've only worked in STP with single audio clips. Now, I'm trying to adjust audio inside a Multi-Track project sent from FCP... and it's a little different. At least to a guy like me. I'm struggling with the most basic issue, and that's possibly w
-
How to manage too many languages in Oracle db?
Hello, Is it possible to have an oracle instance and work with Bulgarian ,Roumanian,English,Greek and Serbian language together? What character set must have the instance when install?? every client will have the appropriate Nls_lang and thats all??
-
Transferring from old itunes to new
hi - i have an old version of itunes on my PC laptop and am getting a MacBook with the latest version. I want to transfer all my tunes from old itunes to new one - is this possible? my old PC laptop cannot access internet so i can't upgrade it. are o
-
Oracle 9.2 installation nightmare!
Hi n Hello any Oracle expert, I am trying 2 install Oracle 9.2.2 on Redhat 9 OS box.(my sense taken leave). Any way I read the documentation all of for pre-installation steps configure/tuned up kernel, created group(s), n User allocated user to group
-
So i applied for a Cap One Quicksilver card. I have two secured cards and needed to add a third unsecured one. My scores are in the 640s and was surprised when they approved me with a 3K limit. I lost about 8 points due to the hard inquiry though I