I think I have  some Malware/Trojan Horse on MacBook Pro. How to get rid of it?

My MacBook Pro has worked perfect for the last 2 years, but over the last 2 days when I am on Chrome it has started clicking onto random websites when I click other links, and showing certain words as underlined and as hotlinks. I think I recognise that from having a PC as Malware or Trojan Horse? What is the best way to remove this as I have read through a few threads on here and they advise not downloading any anti virus software as it slows down your Mac instead of helping.
<Post Edited By Host>

You installed the "VSearch" trojan, perhaps under a different name. Remove it as follows.
Malware is constantly changing to get around the defenses against it. The instructions in this comment are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
Back up all data before proceeding.
Triple-click anywhere in the line below on this page to select it:
/Library/LaunchAgents/com.vsearch.agent.plist
Right-click or control-click the line and select
          Services ▹ Reveal in Finder (or just Reveal)
from the contextual menu.* A folder should open with an item named "com.vsearch.agent.plist" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
Repeat with each of these lines:
/Library/LaunchDaemons/com.vsearch.daemon.plist
/Library/LaunchDaemons/com.vsearch.helper.plist
/Library/LaunchDaemons/Jack.plist
Restart the computer and empty the Trash. Then delete the following items in the same way:
/Library/Application Support/VSearch
/Library/PrivilegedHelperTools/Jack
/System/Library/Frameworks/VSearch.framework
~/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
Some of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
From the Safari menu bar, select
          Safari ▹ Preferences... ▹ Extensions
Uninstall any extensions you don't know you need, including any that have the word "Spigot," "Trovi," or "Conduit" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
Reset the home page and default search engine in all the browsers, if it was changed.
This trojan is distributed on illegal websites that traffic in pirated content. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect much worse to happen in the future.
You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that this Internet criminal has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing, has not done so, even though it's aware of the problem. This failure of oversight has compromised both Gatekeeper and the Developer ID program. You can't rely on Gatekeeper alone to protect you from harmful software.
*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination  command-C. In the Finder, select
          Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.

Similar Messages

  • If I don't have icloud, only mobileme on my macbook pro, how do i get icloud on my computer?

    If I don't have icloud, only mobileme on my macbook pro, how do i get icloud on my computer?

    By upgrading to OS X Lion 10.7.2 or higher (required for iCloud).  First check to see if your system meets the system requirements to upgrade.
    Lion system requirements are:
    Mac computer with an Intel Core 2 Duo, Core i3, Core i5, Core i7, or Xeon processor
    2GB of memory
    OS X v10.6.6 or later (v10.6.8 recommended)
    7GB of available space
    Mountain Lion requirements are shown here: http://support.apple.com/kb/HT5444.
    If you can run Mountain Lion, you can purchase an upgrade from the Mac App Store.  If you can only run Lion, contact the online store in your country and purchase a download code to download it from the Mac App Store.
    After upgrading, you will find iCloud in System Preferences>iCloud on your Mac, and can set it up as explained here: http://www.apple.com/icloud/setup/mac.html.
    Before upgrading, you may want to check the compatibility of your existing programs by checking here: http://roaringapps.com/apps:table.

  • Think I have a systemic problem with my MacBook Pro

    I have posted 3 diff questions but now think it's a systemic problem. Lately, the Mac doesn't see my BB, ICAL is deleting appointments, and I can't download pics from my Canon camera. What could be going on. I didn't change anything substantial.
    Mac is 10.6.4

    As a first step, Try using Disk Utility to do a Disk Repair, as shown in this link, while booted up on your install disk.
    You could have some directory corruption. Let us know what errors Disk Utility reports and if DU was able to repair them. Disk Utility's Disk Repair is not perfect and may not find or repair all directory issues. A stronger utility may be required to finish the job.
    After that Repair Permissions.
    No need to report Permissions errors....we all get them.
      DALE

  • About this Mac does not have a storage tab on my MacBook Pro  How do I find the storage info

    I am looking to find how much storage capacity I have left on my MacBook Pro....  I have read clicking on About my Mac and going to additional Info, but the window showing the info does not display a tab to view Storage.....should it and how do I restore it

    Select the drive's Desktop icon. Press COMMAND-I to open the Get Info window. The information is displayed in the topmost panel as: Capacity, Available, and Used.

  • I have a new MacBook Pro. While getting rid of voice over I ended up with a black box with icons in it and I cannot get rid of it and I can't get off the home screen

    I have a brand new MacBook Pro . I got into voice over and then figured out how to stop that but now have a black box in the middle of the home screen and that box has a bunch of icons .....(Keyboard, pointer etc) I cannot get it to close and I'm not able to go past the home screen.  Help

    If you click on that window, the menu bar should change to whatever program that is. Then click the program name and click Exit.
    If that doesn't work, click the Apple icon, then Force Quit. Look for something that says Not Responding and quit it.
    Last... if nothing else works reboot and see if that does it.

  • My little red circle with a 1 in it that looks like an update, is on my MAC desktop, I have no idea what it is for or how to get rid of it

    On my desktop on the dock, where the calendar app is, there is a rd circle with a 1 in it like the ones on iphone that show up for u pdates, I have never seen this on my desktop, does anyone know what it means? I don't think it is for an update?

    Cheryl,
    The number "1"  means that you have an event invitation. Open iCal and use iCal>View>Show Notifications to choose what to do with the notification.

  • I lost my HOME and REFRESH buttons and don't know why. Since I can't have them anymore please tell me in detail how I get rid of Mozilla Foxfire and let me know what all I'm going to lose in the process. Thanks, Neil

    I have used Mozilla Firefox for almost a year and it was good. Now I make on stupid mistake by upgrading to the new version and I lose my Home button, Refresh button and I don't know how many other buttons.
    Since I can't have WHAT I USED TO HAVE please explain in detail how I rid of Mozilla Firefox and what I'm all going to lose in the process.

    The home icon by default has moved to the right hand side of the navigation toolbar.
    In Firefox 4 by default the Stop, Go and Reload (Refresh) buttons are combined and attached to the right hand edge of the location bar.
    When you are typing in the location bar it will show the Go button. When a site is loading it shows the Stop button. At other times it shows the Reload button.
    If you want separate buttons stop/go/reload buttons, or want to move the home button, right-click on a toolbar and choose Customize, you can then drag and drop the buttons and place them elsewhere. If you place them in the order "Reload-Stop" on the right hand edge of the location bar they will be combined again. For more details on customizing the toolbar see https://support.mozilla.com/kb/How+to+customize+the+toolbar

  • Html. script.inf some firefox exe what is this and how to get rid off

    when i click a genuine site, avast blocks this with html.script.inf.
    when i browse the firefox history, the exact site is not known, but the message ends in firefox.exe, which is shown as script.inf. I am using the latest firefox with all necessary updates.
    I have written to avast and to the site, excelforum and awaiting replies.
    What that firefox exe means? what is that script. How to stop this.When i browse, firefox alerts, if i want to leave that page, and sometimes, a script is being written, do you want to continue or stop. Why this behaviour

    nobody even see the post , i suppose, why c:program files\Mozilla firefox\firefox.exe is shown as html.script.inf file in the picture

  • After starting up a brand new 10.8.2 iMac it linked to an older iMac, 15 hrs later I have a duplicate screen of 10.6.8; how to get rid of all that down load and free up the new iMac?

    After starting up a brand new imac it down loaded off an older 10.6.8 running imac for 15 hiurs, now I have a duplicate of the older; how to dump all the older stuff and get my new imac?

    OK. Log into your migrated account. Open Users & Groups preferences, click on the lock icon and authenticate.
    Click on the Add [-] button and create a new account. Make it an Administrative account and name it whatever you want (but not the same as your current account) and set it up to login automatically. Log out of your current account and log into the new account. Now, select your migrated account and click on the Delete [-] button to remove it. Select the bottom option to delete immediately. DO NOT select the option to erase securely.
    Now, you can choose to migrate again from your old account but be more selective of what you migrate or you can simply copy over the data you want.

  • When I'm going through Faces, I am finding faces that i don't have in my photos. Could anyone tell how to get rid of them or why they are there?

    I would appreciate any info someone could give me. I really don't know where they came from?

    Those symbols signify that the photos are in either a photo "stack" or version "set" (group).  Right-click on the "top" photo and choose "Stack" (or "Version Set") for the options to un-group the photos.
    Most likely, they are version sets that were created when you edited a photo in the Editor.  To prevent versions sets being created, pay close attention when you save a photo in the Editor -- by default the save options have the "Include in version set" option checked.
    Ken

  • I have a cd stuck in my Macbook Pro. need help getting it out.

    so i was watching a movie, then i wanted to grab a bite to eat. i just pause the movie and closed my computer screen. then when i came back, the dvd did not want to play saying that "Supported Disc Not Available" and it would not eject when i hit the eject key button. NEED HELP ASAP

    Five ways to eject a stuck CD or DVD from the optical drive
    Ejecting the stuck disc can usually be done in one of the following ways:
      1. Restart the computer and after the chime press and hold down the
          left mouse button until the disc ejects.
      2. Press the Eject button on your keyboard.
      3. Click on the Eject button in the menubar.
      4. Press COMMAND-E.
      5. If none of the above work try this: Open the Terminal application in
          your Utilities folder. At the prompt enter or paste the following:
            /usr/bin/drutil eject
    If this fails then try this:
    Boot the computer into Single-user Mode. At the prompt enter the same command as used above. To restart the computer enter "reboot" at the prompt without quotes.

  • Cant get rid of repeating future events. How to get rid of these and not have forever!! ??

    Cant get rid of repeating future events.  I deleted the calendar with these events but now I still have these "ghost" events showing up!! How to get rid of these and not have forever!! Really irritating, wont use repeat events ever again!! Have this problem on iphone and ipad even though deleted calendar from both!! Which BTW deleted my email connected with it too which was really irritating.

    Marisalynne wrote:
    I have the applications folder in my harddrive and then the one that I moved to my desktop when I first got my computer.
    Where was the one that you moved to your desktop before you moved it to the desktop?
    I really don't understand what you're trying to say. If I have a folder in A, and I move it to B, then the folder will be in B. There is no duplication. I still have only one folder, only the location is different.
    Furthermore, your desktop is on your hard drive. Everything is on your hard drive.

  • Email phishing, malware, trojan horses, key stroke

    I have a iMac with the new Yosemite 10.10.1 SW installed. I received an email and clicked on a web link that was characterised as Phishing and I enterred private information. I have since truned off all online contacts that may be compromised. What is the likelyhood that when I went to this scam website and enterred information that Malware, Trojan Horse, Key stroke counting type SW was installed?  Would the new Yosemite OS prevented this from happening?

    Those sites are mostly designed for Windows PCs, so OS X should not be affected. Furthermore, OS X Yosemite uses Gatekeeper, which only allows to install apps from the Mac App Store and identified developers by default.
    If you want to be sure there is nothing bad in your Mac, you can use ClamXav and scan the hard disk.

  • Can you give me some reasons about why I need to buy an iPod touch 5.Although I have the iPhone ,iPod nano, iPad ,MacBook pro,I think the iPod touch 5 is so attractive that I can't help buying it at once.If I have it,what I can do with it,can you tell me?

    can you give me some reasons about why I need to buy an iPod touch 5.Although I have the iPhone ,iPod nano, iPad ,MacBook pro,I think the iPod touch 5 is so attractive that I can't help buying it at once.If I have it,what I can do with it,can you tell me?

    All I can say is that I REALLY like my Touch 4th gen because I have all sorts of capabilities in a small form: e-mail, web browsing, news, weather, books, magazines, etc. etc.  Plus lots and lots of apps out there, including so many free ones.  I use the Cloud a lot so it's great to have everything sync'd to my MacBookPro (e-mail, Evernote, Pocket, etc.)
    It would be easier, though, to do some of this, especially magazines, on the iPad mini, but, again, I love the small size of the Touch. 
    As for the 5th gen instead of the 4th, the fifth has Siri and the 3D feature in maps, which are great.  And I'm sure it's a lot faster in iOS 6 than the 4th gen.  And cool colors! 
    Don't know if this helps . . .

  • I have some malware that will only let me open a safari window part way

    I have some malwars that will only let me open a window in Safari part of the way. how can i fix this

    Safari 5.0.1 or later: Slow or partial webpage loading, or webpage cannot be found
    http://support.apple.com/kb/TS3408

Maybe you are looking for

  • Output type not appearing in interco. document - Req. 905 not fulfilled

    Hi everyone. WHen i am creating my intercompany document, no output type is appearing. I have maintained VV31 condition records as well as WE20 settings. Also i have set output device to LOCL .When i click on Analysis output , it gives me RD00     50

  • Applet in a package

    Hi, I have my main applet inside a package such as: package temp; import java.awt.Container; ...However, when I tried to call it from the browser as: <applet code="HelloWorld.class" width=500 height=500> <blockquote> <hr> You can't run applets, so he

  • Controlling multiple videos with one set of controls

    I'm currently working on a project that allows the user to view multiple videos at one time. The videos will be exactly the same length and video format/type. I'd like to let the user use just one set of controls to view each video. Is this possible?

  • Report based on project codes

    Dear all, I have a number of projects in our system with different codes and I would like to produce a report with the various Business Partners (BPs) with their different account balances displayed as per the various projects. This is very important

  • ITunes and Quicktime crashing

    I recently got a new computer and I installed iTunes on it. When I start iTunes it says "iTunes has encountered a problem and needs to close. We are sorry for the inconvenience." Then I can choose to either report my problem to Microsoft or not. When