How do I uninstall site scout malware?

Not sure how it happened, but I've picked up site scout malware that opens Safari windows upon reboot. iMac running OS X Yosemite, Safari 8.

Forgot to mention...I've run MacKeeper and Bitdefender and neither found site scout.

Similar Messages

  • How do I uninstall mackeeper from my macbook pro?

    How do i uninstall mackeeper from my Macbook Pro?

    You may have installed a variant of the "VSearch" ad-injection malware. Follow Apple Support's instructions to remove it.
    If you have trouble following those instructions, see below.
    Malware is always changing to get around the defenses against it. This procedure works as of now, as far as I know. It may not work in the future. Anyone finding this comment a few days or more after it was posted should look for a more recent discussion, or start a new one.
    The VSearch malware tries to hide itself by varying the names of the files it installs. To remove it, you must first identify the naming pattern.
    Triple-click the line below on this page to select it, then copy the text to the Clipboard by pressing the key combination  command-C:
    /Library/LaunchDaemons
    In the Finder, select
              Go ▹ Go to Folder...
    from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.
    A folder named "LaunchDaemons" may open. Look inside it for two files with names of the form
              com.something.daemon.plist
    and
               com.something.helper.plist
    Here something is a variable string of characters, which can be different in each case. So far it has always been a string of letters without punctuation, such as "cloud," "dot," "highway," "submarine," or "trusteddownloads." Sometimes it's a meaningless string such as "e8dec5ae7fc75c28" rather than a word. Sometimes the string is "apple," and then you must be especially careful not to delete the wrong files, because many built-in OS X files have similar names.
    If you find these files, leave the LaunchDaemons folder open, and open the following folder in the same way:
    /Library/LaunchAgents
    In this folder, there may be a file named
              com.something.agent.plist
    where the string something is the same as before.
    If you feel confident that you've identified the above files, back up all data, then drag just those three files—nothing else—to the Trash. You may be prompted for your administrator login password. Close the Finder windows and restart the computer.
    Don't delete the "LaunchAgents" or "LaunchDaemons" folder or anything else inside either one.
    The malware is now permanently inactivated, as long as you never reinstall it. You can stop here if you like, or you can remove two remaining components for the sake of completeness.
    Open this folder:
    /Library/Application Support
    If it has a subfolder named just
               something
    where something is the same string you saw before, drag that subfolder to the Trash and close the window.
    Don't delete the "Application Support" folder or anything else inside it.
    Finally, in this folder:
    /System/Library/Frameworks
    there may an item named exactly
                v.framework
    It's actually a folder, though it has a different icon than usual. This item always has the above name; it doesn't vary. Drag it to the Trash and close the window.
    Don't delete the "Frameworks" folder or anything else inside it.
    If you didn't find the files or you're not sure about the identification, post what you found.
    If in doubt, or if you have no backups, change nothing at all.
    The trouble may have started when you downloaded and ran an application called "MPlayerX." That's the name of a legitimate free movie player, but the name is also used fraudulently to distribute VSearch. If there is an item with that name in the Applications folder, delete it, and if you wish, replace it with the genuine article from mplayerx.org.
    This trojan is often found on illegal websites that traffic in pirated content such as movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow. Never install any software that you downloaded from a bittorrent, or that was downloaded by someone else from an unknown source.
    In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere  should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.
    Then, still in System Preferences, open the App Store or Software Update pane and check the box marked
              Install system data files and security updates (OS X 10.10 or later)
    or
              Download updates automatically (OS X 10.9 or earlier)
    if it's not already checked.

  • Firefox 6 forces you to log into e-mail again & again, since you can't view an e-mail & simply close that tab.. I want to close the tab, not exit the function I am in. How do I uninstall Firefox 6 & go back to the previous version?

    With Firefox 6, you can't close the tab you are in and remain in the program; opting to close one e-mail means you are forced to exit the (e-mail) program completely and then go back into it...this is ridiculous if you are trying to read all your e-mails...not have this issue. How do I uninstall Firefox 6 & go back to the previous version?

    I am unwilling to attempt navigation away from these sites. The pop-ups that occur on the attempt to leave a site or to close the browser are exit traps offering incentive to stay.
    Once upon a time, when the internet was less dangerous, I would be willing to close the exit pop-ups. Now, after twice being infected with malware trying to close the pop-ups, I now force close whichever browser I am using.
    Recently, I clicked on the red X to close one pop-up, and it installed a trojan that I had to pay to be removed. When I clicked on 'Leave' in another exit pop, it didn't exit and it turned out I was giving permission to run a script file. Now that criminals have learned these exit pop-ups can be used to force a click action, the sites using them have become dangerous.
    If I force the browser to close using Task manager, Please tell me how to stop FireFox from sending me directly back to the same site because it mistakenly believes it crashed when it did not. I forced it to close because I was on a site that had taken control of my browser and was not allowing me to leave the site.
    No other browser sends me back to the potentially dangerous sites. I prefer Firefox, but the new version must have a setting that allows me to get safely away from a problem site?

  • How do I uninstall the Nation search tool bar?

    My kids downloaded a video game and it appears the Nation searh toolbar was bundled with it.  Now it has highjacked Safari and all my Google searches end up with Nation responses.
    How do I uninstall the Nation search tool bar?

    dustin_jhb wrote:
    I have run MacKeeper and all seems well
    Yikes!
    Many users will see references to an application called MacKeeper on various web sites and via pop-ups (and even re-directs) on their browser. Not only is it expensive for what it purports to do (freeware applications that do the same or more are readily available and in fact make up a large part of MacKeeper), it can sometimes install itself without the user realising it, and it can be very tricky to get rid of.
    Most positive reviews of it have been found to have been paid for by Zeobit (developers of MacKeeper) in the form of ‘free upgrades’ etc. For example (posted by fellow contributor Softwater), on their Facebook page and on their webpage they have this apparent endorsement from UNC Charlotte:
    https://discussions.apple.com/servlet/JiveServlet/downloadImage/2-18670779-12515 7/450-259/Screen+Shot+2012-06-17+at+17.04.04.png
    Softwater contacted the Director of IT at the College of Arts and Architecture UNC Charlotte, about whether they endorse MacKeeper and his response, quoted here, was:
    No, please do not download and install MacKeeper. We have seen problems with this software in the past.
    MacKeeper has been described by various sources as highly invasive malware* that can de-stablize your operating system, adding that it is unethically marketed by a company called Zeobit, with a history of making false advertising claims backed up with paid-for reviews, and a rip-off. One such opinion is:
    http://themacschool.blogspot.co.uk/2012/09/mackeeper-is-scam.html
    Further opinion on it and how to uninstall MacKeeper malware can be read here:
    http://applehelpwriter.com/2011/09/21/how-to-uninstall-mackeeper-malware/
    MacKeeper have recently said that the uninstaller from here:
    http://applehelpwriter.wordpress.com/2011/09/21/how-to-uninstall-mackeeper-malwa re/
    now works.
    This is also worth reading:
    http://www.reedcorner.net/news.php/?p=245
    Equally phoney was iAntivirus:
    http://www.reedcorner.net/news.php/?p=341
    until it was purchased recently (May 2012) by Symantic (makers of Norton anti-virus which does not work well with Apple OS X). Even after having tinkered with it, iAntivirus still fails to do the job properly and cannot be recommended.
    There are no viruses that can affect Apple OS X and there is therefore no reason to run anti-virus software on a Mac, but a Mac, like all computers, can transmit viruses and malware to other users particularly those running Windows. Note, however, that Trojans are another matter and can represent a genuine threat, an example of which was the recent 'Flashback Trojan' which you can read more about here:
    https://discussions.apple.com/docs/DOC-3261
    For further information you may find this User Tip on Viruses, Trojan Detection and Removal, as well as general Internet Security and Privacy, useful:
    https://discussions.apple.com/docs/DOC-2435
    The User Tip (which you are welcome to print out and retain for future reference) seeks to offer some guidance on the main security threats and how to avoid them.
    * The expression ‘malware’ is a general term used by computer professionals to mean a variety of forms of hostile, intrusive, or annoying software.

  • How do I uninstall anything running in background that I don't need?

    I am having problems (iMac OSX 10.6.8) with my searches being intercepted.
    Could this be caused by applications running in the background?
    If so, how do I uninstall anything running in background that I don't need?

    But whatever I search on Google, within moments my email box is crammed with spam on a related topic.
    If that's true, then it would seem you have put your email addrress out on the Internet somewhere.
    At the same time, it's possible that you have inadvertently got some malware on your system and that it is what is intercepting your web searching and then sending you email on that or related topics. I'm not suggestng this is likely, only that it's a possibility, however small.
    Who is your Internet provider? Some of them actively intercept searches and foist ads on you, especially when you try to go to a web site that doesn't exist or one that isn't cached in their DNS servers.

  • How can I uninstall Shop Mate?

    I agreed to install Shop Mate from some reason and now it's making life miserable.
    How do I uninstall it? Where is it, how do I find it, and how can it be removed?
    Thank you for the hand-holding.
    -karen

    parmcharm wrote:
    I understand there is an app but the one I agreed to install has pirated my every move on the
    internet in in its overly-ambitious desire to bring key-word shopping to me. I do not know where this "app" is located, only
    know it's trade name, ShopMate.
    It sounds like you accidentally installed adware in the process. It's included when you download from certain sites and gives you a chance to opt-out, but many users miss the notice.
    The safest, most efficient way to locate and optionally delete all currently known adware is to use the AdwareMedic as seventy one recommended, which was written by one of the Forum's foremost malware gurus and a colleague of mine, thomas_r. If you have any problems downloading the file then you definitely have been infected and need to read About Downline adware.
    To understand why this happened and how to avoid it in the future see John Galt's How to install adware.

  • How do I uninstall "completer" app ?

    I keep getting a pop-up message prompting me for my password, because "Completer wants to make changes". How do I uninstall this app. And is this malware ?

    There is no need to download anything to solve this problem.
    If Safari crashes on launch and you don't have another web browser, you should be able to launch Safari by starting up in safe mode.
    You may have installed the "Genieo" or "InstallMac" ad-injection malware. Follow the instructions on this Apple Support page to remove it.
    Back up all data before making any changes.
    Besides the files listed in the linked support article, you may also need to remove this file in the same way:
    ~/Library/LaunchAgents/com.genieo.completer.ltvbit.plist
    If there are other items with a name that includes "Genieo" or "genieo" alongside any of those you find, remove them as well.
    One of the steps in the article is to remove malicious Safari extensions. Do the equivalent in the Chrome and Firefox browsers, if you use either of those.
    After removing the malware, remember to reset your home page in all the web browsers affected, if it was changed.
    If you don't find any of the files or extensions listed, or if removing them doesn't stop the ad injection, then you may have one of the other kinds of adware covered by the support article. Follow the rest of the instructions in the article.
    Make sure you don't repeat the mistake that led you to install the malware. Chances are you got it from an Internet cesspit such as "Softonic" or "CNET Download." Never visit either of those sites again. You might also have downloaded it from an ad in a page on some other site. The ad would probably have included a large green button labeled "Download" or "Download Now" in white letters. The button is designed to confuse people who intend to download something else on the same page. If you ever download a file that isn't obviously what you expected, delete it immediately.
    In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere  should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.
    Still in System Preferences, open the App Store or Software Update pane and check the box marked
              Install system data files and security updates (OS X 10.10 or later)
    or
              Download updates automatically (OS X 10.9 or earlier)
    if it's not already checked.

  • How do you uninstall pop up ads

    how do you uninstall pop up ads

    There is no need to download anything to solve this problem.
    You may have installed one or more of the common types of ad-injection malware. Follow the instructions on this Apple Support page to remove it. It's been reported that some variants of the "VSearch" malware block access to the page. If that happens, start in safe mode by holding down the shift key at the startup chime, then try again.
    Back up all data before making any changes.
    One of the steps in the article is to remove malicious Safari extensions. Do the equivalent in the Chrome and Firefox browsers, if you use either of those. If Safari crashes on launch, skip that step and come back to it after you've done everything else.
    If you don't find any of the files or extensions listed, or if removing them doesn't stop the ad injection, ask for further instructions.
    Make sure you don't repeat the mistake that led you to install the malware. It may have come from an Internet cesspit such as "Softonic" or "CNET Download." Never visit either of those sites again. You might also have downloaded it from an ad in a page on some other site. The ad would probably have included a large green button labeled "Download" or "Download Now" in white letters. The button is designed to confuse people who intend to download something else on the same page. If you ever download a file that isn't obviously what you expected, delete it immediately.
    Malware is also found on websites that traffic in pirated content such as video. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow. Never install any software that you downloaded from a bittorrent, or that was downloaded by someone else from an unknown source.
    In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere  should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.
    Still in System Preferences, open the App Store or Software Update pane and check the box marked
              Install system data files and security updates (OS X 10.10 or later)
    or
              Download updates automatically (OS X 10.9 or earlier)
    if it's not already checked.

  • Specifically, how do i uninstall Firefox 4? (I want to go back to 3.6.16 ASAP)

    I love change, and I love Firefox. That said, I simply cannot stand Firefox 4. I HATE it. It has robbed me of all kinds of flexibility and customization and until that changes, I have absolutely NO INTENTION of using Firefox 4 on any of my Macs.
    Bottom line, I would like to revert back to version 3.6.16 and do not want to lose whatever it was that was being used on my Mac when I was running 3.6.16 a mere half an hour ago. Thank gawd I didn't upgrade to FF 4 on my MacPro running Snow Leopard. I'd be really pissed.
    So.... on the computer I am using now which is a Macbook Pro running OS 10.5.8. I would be grateful if someone could instruct me as to how, specifically, to UNINSTALL Firefox 4 (prior to my reinstalling FF 3.6.16?
    Thanks in advance,
    Lisa

    http://kb.mozillazine.org/Uninstalling_firefox
    this site helps me a lot......hope this can help

  • How do I uninstall SyncMate Server, Activity Monitor shows it still there after appzapper uninstall of SyncMate app? Killing in AM proceeds with a SyncMate Server startup again??

    How do I uninstall SyncMate Server, Activity Monitor shows it still there after appzapper uninstall of SyncMate app? Killing in AM proceeds with a SyncMate Server startup again??
    Mavricks, MacbookPro, typical config of everything and standard business user, no heavy graphics, animation or media editing. MS Office, web apps, etc.
    I have the same issue with Logmein, which I installed a trial, uninstalled with appzapper, which I thought does a good job of untangling the components of apps but for these 2 it doesn't.  Any help would be greatly appreciated.
    Thx,

    Usually applications like these have their own uninstallers, either build into the installer ( ! ) itself or as a separate uninstaller app. Check the site of the software provider for instructions.
    Here's the instructions for SyncMate: http://wiki.eltima.com/user-guides/syncmate-mac-os/uninstall.html
    And LogMeIn: http://help.logmein.com/SelfServiceKnowledgeRenderer?type=FAQ&id=kA030000000DGF1 CAO&kw=

  • How do I uninstall adobe reader 11

    How do I uninstall adobe reader 11? I am running OSX 10.9.1 Mavericks. I have not configured it completely. When it ask if I wanted the reader to be the
    default instead of preview I said no and have tried to find  a way to uninstall it. Also what do I use when a file I am trying to open on a web site says it requires
    adobe reader if I don't use adobe reader?

    My Mavericks was loaded at the Genius Bar as I was unable to load it successfully even with telephone support help.  Can anyone tell me how to get to the Mavericks configuration referenced in several of the e-mails?
    Also I have spend much time with Support trying to get my Adobe Reader to work, and I have NOT been told that it simply incompatible with Mavericks.  VBerg

  • How do you Uninstall Camera Raw 5.5 and 5.6 updates

    My 5.5 Raw Update was working well, then I decided to update to the 5.6 Raw plugin.  I was not happy with the colors and sharpness of the images opened with the 5.6 plugin.  I would like to thrash this and get back to 5.5.  However, PS E does not allow me to open any RAW images now and the Camera Raw Preference in Bridge does not open.  New updates cannot be installed either as my system say I have the 5.6 plugin installed.  How do I uninstall everything and get back to my 5.5 update? I cannot find the location of my 5.6 Raw plugin, I have looked under PS 4 Photoshop application folders as well as Bridge folders. Thanks for your help.

    Finally, my problem was solved by Adobe Support, go to  : www.tinyurl.com/yfznztk and hit Enter.  Then manually download Camera Raw 5.5 plugin from their site.  Once its on your desktop highlight the "Plugin".  Copy this Plugin ( Command C), then open your Hard disk on the desktop and go to Application Support-Adobe CS4-File Format- hit command V to load the Camera Raw 5.5 into the Plugin Folder.  Then re-start computer. Now,  you should have a working Camera Raw 5.5.  Do not download the Camera Raw 5.6 as it is a Beta version meant for developers!

  • How do I uninstall photoshop elements 6 (windows) when there is not option in add-remove programs

    How do I uninstall photoshop elements 6 (windows) when there is not option in add-remove programs.  I have looked on my hard drive extensively for a library or utility folder that would have an uninstall program, nothing.  I want to install Elements 9, but have found out that Elements 9 does not remove Elements 6, so I want to remove elements 6 first.

    Strange that PSE6 does not show up via the control pane.
    I wouldn’t worry about uninstalling it. The two versions sit happily side by side and PSE6 takes up hardly any file space compared with PSE9.

  • How do I uninstall version 5.0?

    I am registered with the Inland Revenue Department New Zealand as a tax agent. Since I installed 5.0 I can no longer access the tax agents' site. They advise me to uninstall 5.0. Their web site address is www.ird.govt.nz. Apparently other users are having this problem

    ''How do I uninstall version 5.0?''
    Just reinstall Version 4.
    For those that really need an earlier version of Firefox, find your system and the Firefox version you want in releases, download and start the install.
    * ftp://ftp.mozilla.org/pub/firefox/releases/
    When reinstalling Firefox from a download, Firefox must be down once the installation starts. When the installation finishes, don't let the install start firefox for you. Instead end the install and start Firefox in your normal manner, thus preventing creating a new profile which does not have your bookmarks cookies, etc (but your old profile would still be around and would).

  • How do I uninstall the HP printers drivers?

    how do I uninstall the HP printers drivers?
    And after that reinstall them?

    Try going to /Library/Printers and delete the HP folder. Then go into the PPDs folder in the same path and delete the Contents folder. Before delete, copy the Printers folder to your Desktop for restore purposes if needed.
    Reinstall the HP printer drivers from the install CD or download from HP's site.

Maybe you are looking for

  • Dynamic webservice selection

    Hello friends, Is it possible to decide at runtime to which web application server the request should send to depending on one of field in sender file? e.g in file adapter we could specify the file name at runtime. I am not sure whether would it be p

  • WUMC710 SETUP ISSUE / SOLUTION

    When settting up a new WUMC710 with a new WRT1900AC Router, I experienced problems when trying to connect to the Manual Wireless Configuration screen. After the usual diagnostics (Restore to Default, Firmware Upgrade, etc.) I eventually narrowed it d

  • Marketplace adapter (receiver) - DDID issue

    Hey guys! We are trying to configure the Marketplace adapter in XI to act as a receiver communication channel. Our scenario is like this: SRM (Purchase Order)  >  XI  >  MarketSite (Purchase Order) It seems as if we need to define the DDIDs (Document

  • SWCV RFC/IDOC Import settings

    I have to input client number for SWCV. We have different client number for DEV, QA, PRODUCTION system. I have to change this parameter for each build of integration content. How do you solve this problem?

  • Resubmitting podcast after removal because of errors

    I am using a Wordpress plugin to make my podcast feeds and for a while it was generating feeds that had errors in it and my feed was removed from iTunes.  I fixed the errors and when I try to resubmit the feed I get an error 'It appears the feed has