Pop ups and ads totally covering my screen
I just bought a Mac today, I was downloading programs and I accidentally download this video player, and now whenever I open my web browser it is filled with ads and whenever I try to click a link it redirects me to this site. Please help I can't get it off
You probably installed the "DownLite" trojan, perhaps under a different name. Remove it as follows.
Malware is constantly changing to get around the defenses against it. The instructions in this comment are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
Back up all data.
Triple-click anywhere in the line below on this page to select it:
/Library/LaunchAgents/com.vsearch.agent.plist
Right-click or control-click the line and select
Services ▹ Reveal in Finder (or just Reveal)
from the contextual menu.* A folder should open with an item named "VSearch" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
Repeat with each of these lines:
/Library/LaunchDaemons/com.vsearch.daemon.plist
/Library/LaunchDaemons/com.vsearch.helper.plist
/Library/LaunchDaemons/Jack.plist
Restart the computer and empty the Trash. Then delete the following items in the same way:
/Library/Application Support/VSearch
/Library/PrivilegedHelperTools/Jack
/System/Library/Frameworks/VSearch.framework
~/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
Some of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
From the Safari menu bar, select
Safari ▹ Preferences... ▹ Extensions
Uninstall any extensions you don't know you need, including any that have the word "Spigot" or "Conduit" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
This trojan is distributed on illegal websites that traffic in pirated movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect much worse to happen in the future.
You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that the DownLite developer has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing, has not done so, even though it's aware of the problem. This failure of oversight is inexcusable and has compromised both Gatekeeper and the Developer ID program. You can't rely on Gatekeeper alone to protect you from harmful software.
*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select
Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.
Similar Messages
-
How do I get rid of spam pop ups and ads?
how do I get rid of spam pop ups and ads?
It's malware.
Help here ..
The Safe Mac » Adware Removal Guide
The Safe Mac » Genieo
The Safe Mac » Mac Malware Guide -
Inappropriate websites and now my computer has all these pop ups and ads.
Younger cousin was on "xxx" websites and I need help stopping pop ups and ads from computer. Any solutions?
It is on google chrome and my safari. Please help me figure out how to get this off my MacBook Air
<Edited by Host>You may have installed the "DownLite" trojan, perhaps under a different name. Remove it as follows.
Malware is constantly changing to get around the defenses against it. The instructions in this comment are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
Back up all data.
Triple-click anywhere in the line below on this page to select it:
/Library/LaunchAgents/com.vsearch.agent.plist
Right-click or control-click the line and select
Services ▹ Reveal in Finder (or just Reveal)
from the contextual menu.* A folder should open with an item named "VSearch" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
Repeat with each of these lines:
/Library/LaunchDaemons/com.vsearch.daemon.plist
/Library/LaunchDaemons/com.vsearch.helper.plist
/Library/LaunchDaemons/Jack.plist
Restart the computer and empty the Trash. Then delete the following items in the same way:
/Library/Application Support/VSearch
/Library/PrivilegedHelperTools/Jack
/System/Library/Frameworks/VSearch.framework
~/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
Some of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
From the Safari menu bar, select
Safari ▹ Preferences... ▹ Extensions
Uninstall any extensions you don't know you need, including any that have the word "Spigot" or "Conduit" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
This trojan is distributed on illegal websites that traffic in pirated movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect much worse to happen in the future.
You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that the DownLite developer has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing, has not done so, even though it's aware of the problem. This failure of oversight is inexcusable and has compromised both Gatekeeper and the Developer ID program. You can't rely on Gatekeeper alone to protect you from harmful software.
*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select
Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return. -
I have adblock but still get pop ups and ads
I get pop ups and ads on both safari and google chrome and have an adblocker on both. These pop ups are ads in many different ways most common is a new tab opening usually that stupid mac keeper website.
You installed the "DownLite" trojan, perhaps under a different name. Remove it as follows.
Malware is constantly changing to get around the defenses against it. The instructions in this comment are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
Back up all data.
Triple-click anywhere in the line below on this page to select it:
/Library/LaunchAgents/com.vsearch.agent.plist
Right-click or control-click the line and select
Services ▹ Reveal in Finder (or just Reveal)
from the contextual menu.* A folder should open with an item named "VSearch" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
Repeat with each of these lines:
/Library/LaunchDaemons/com.vsearch.daemon.plist
/Library/LaunchDaemons/com.vsearch.helper.plist
/Library/LaunchDaemons/Jack.plist
Restart the computer and empty the Trash. Then delete the following items in the same way:
/Library/Application Support/VSearch
/Library/PrivilegedHelperTools/Jack
/System/Library/Frameworks/VSearch.framework
~/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
Some of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
From the Safari menu bar, select
Safari ▹ Preferences... ▹ Extensions
Uninstall any extensions you don't know you need, including any that have the word "Spigot" or "Conduit" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
This trojan is distributed on illegal websites that traffic in pirated movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect much worse to happen in the future.
You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that the DownLite developer has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing, has not done so, even though it's aware of the problem. This failure of oversight is inexcusable and has compromised both Gatekeeper and the Developer ID program. You can't rely on Gatekeeper alone to protect you from harmful software.
*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select
Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return. -
it well looks like the pop ups are frozen into firefox or something. i uninstalled firefox 3 times to fix this and its still there. i dont even know how to properly describe it.
Do a malware check with some malware scanning programs on the Windows computer.<br />
You need to scan with all programs because each program detects different malware.<br />
Make sure that you update each program to get the latest version of their databases before doing a scan.
*http://www.malwarebytes.org/mbam.php - Malwarebytes' Anti-Malware
*http://www.superantispyware.com/ - SuperAntispyware
*http://www.microsoft.com/security/scanner/en-us/default.aspx - Microsoft Safety Scanner
*http://www.microsoft.com/windows/products/winfamily/defender/default.mspx - Windows Defender: Home Page
*http://www.safer-networking.org/en/index.html - Spybot Search & Destroy
You can also do a check for a rootkit infection with TDSSKiller.
*http://support.kaspersky.com/viruses/solutions?qid=208280684
See also:
*"Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked -
Hi,
I think my macbook pro may have a virus? now I'm on safari, it is very slow and ads pop up on every web-page and now I'm even getting windows popping up as well! In safari when there is writing, some things are underlined and are in green which then connects to an ad. This is very annoying, I have tried downloading ad blockers and my anti virus software isn't picking anything up... Help!It appears you inadvertently installed adware. To learn about the implications of doing so, how to avoid it, and for one possible solution read How to install adware
Scroll to the bottom to read the recovery procedure but I recommend you read everything to understand how this occurred, and how to avoid future recurrences.
I recommend do not use any third party "anti-virus" software and uninstall whatever product you are using. None are beneficial, and all are a completely useless defense against this particular annoyance. -
Pop ups and ads everywhere on mac air- virus?
Hi,
It's been about six months now that the problem has started. Everytime I click on something when browsing the internet another tab will open that usually is a link to mackeeper, random pics of naked ladies, dating sites with half naked women on them etc. It's really embarrassing and frustrating to have to continuously close these pop ups. The problem is worse when using google chrome and not so bad when using firefox. The mac has also become super slow- sites take forever to load and even typing is an issue because it lags a lot, in fact EVERYTHING lags. I'm not tech savy so would like some easy to follow help!!!!There is no need to download anything to solve this problem. You may have installed a variant of the "VSearch" ad-injection malware.
Triple-click the line below on this page to select it, then copy the text to the Clipboard by pressing the key combination command-C:
/Library/LaunchDaemons
In the Finder, select
Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.
A folder named "LaunchDaemons" may open. Look inside it for a file with a name of the form
com.something.daemon.plist
Here something is a variable word, which can be different in each case. It could be "cloud," "dot," "highway," "submarine," "trusteddownloads," or pretty much anything else.
There may also be a file named
com.something.helper.plist
in the same folder.
If you find files with names that fit the above description, post what you have for "something." -
I have a mac pro book version 10.10 that is running on the sluggish side. I can hardly use the internet because every time I click on a link or details about a product all the pop ups that make it impossible to surf the net. I am afraid to take any steps on my own because I am not quite that tech savvy. What can I do? I didn't think these kinds of things happened with a mac.
I have a mac pro book version 10.10 that is running on the sluggish side. I can hardly use the internet because every time I click on a link or details about a product all the pop ups that make it impossible to surf the net. I am afraid to take any steps on my own because I am not quite that tech savvy. What can I do? I didn't think these kinds of things happened with a mac.
-
A ton of pop ups and ads???
I bought a macbook air about a month ago and recently it has been having a ton of pop up windows every time I click on something and annoying ads that look like spam.
First, be careful what you click on when browsing. Careless clicking on links is usually what causes these to happen or installing some extensions in your browser. If you have any extensions installed disable all of them to see it if helps. If it does, then enable one at a time until the ads begin. Then remove that extension.
Helpful Links Regarding Malware Protection
If you are having an immediate problem with ads popping up see The Safe Mac » Adware Removal Guide and The Safe Mac » Adware Removal Tool.
An excellent link to read is Tom Reed's Mac Malware Guide.
Also, visit The XLab FAQs and read Detecting and avoiding malware and spyware.
See these Apple articles:
Mac OS X Snow Leopard and malware detection
OS X Lion- Protect your Mac from malware
OS X Mountain Lion- Protect your Mac from malware
OS X Mavericks- Protect your Mac from malware
About file quarantine in OS X
If you require anti-virus protection Thomas Reed recommends using ClamXAV. (Thank you to Thomas Reed for this recommendation.)
From user Joe Bailey comes this equally useful advice:
The facts are:
1. There is no anti-malware software that can detect 100% of the malware out there.
2. There is no anti-malware that can detect anything targeting the Mac because there
is no Mac malware in the wild, and therefore, no "signatures" to detect.
3. The very best way to prevent the most attacks is for you as the user to be aware that
the most successful malware attacks rely on very sophisticated social engineering
techniques preying on human avarice, ****, and fear.
4. Internet popups saying the FBI, NSA, Microsoft, your ISP has detected malware on
your computer is intended to entice you to install their malware thinking it is a
protection against malware.
5. Some of the anti-malware products on the market are worse than the malware
from which they purport to protect you.
6. Be cautious where you go on the internet.
7. Only download anything from sites you know are safe.
8. Avoid links you receive in email, always be suspicious even if you get something
you think is from a friend, but you were not expecting.
9. If there is any question in your mind, then assume it is malware. -
How do i get rid of annoying pop ups and ads from offerswizard
every time I open a page or site.. the moment my mouse lingers near a link..an ad will pop up, when i open a tab, it comes with a turned corner..a few squares..etc which start adverts...i have tried everything but it keeps coming back.
any clue on how to be free from Offers Wizard and Delta-homes.com???Hello ravihpark, sometimes a problem with Firefox may be a result of malware installed on your computer, that you may not be aware of.
You can try these free programs to scan for malware, which work with your existing antivirus software and, please, try with all programs because each one detects different kind of malware:
* [http://www.microsoft.com/security/scanner/default.aspx Microsoft Safety Scanner]
* [http://www.malwarebytes.org/products/malwarebytes_free/ MalwareBytes' Anti-Malware]
* [http://support.kaspersky.com/viruses/disinfection/5350 Anti-Rootkit Utility - TDSSKiller]
* [http://general-changelog-team.fr/en/downloads/viewdownload/20-outils-de-xplode/2-adwcleaner AdwCleaner] (for more info, see this [http://www.bleepingcomputer.com/download/adwcleaner/ alternate AdwCleaner download page])
* [http://www.surfright.nl/en/hitmanpro/ Hitman Pro]
* [http://www.eset.com/us/online-scanner/ ESET Online Scanner]
[http://windows.microsoft.com/MSE Microsoft Security Essentials] is a good permanent antivirus for Windows 7/Vista/XP if you don't already have one.
Further information can be found in the [[Troubleshoot Firefox issues caused by malware]] article.
see also : http://malwaretips.com/blogs/delta-homes-removal/
thank you -
i get pop ups and ads and i am tired of it, and "Do these suggestions help" over and over again is not helping.
Start Firefox in <u>[[Safe Mode|Safe Mode]]</u> to check if one of the extensions (Firefox/Firefox/Tools > Add-ons > Extensions) or if hardware acceleration is causing the problem (switch to the DEFAULT theme: Firefox/Firefox/Tools > Add-ons > Appearance).
*Do NOT click the Reset button on the Safe Mode start window.
*https://support.mozilla.org/kb/Safe+Mode
*https://support.mozilla.org/kb/Troubleshooting+extensions+and+themes -
I am having trouble with a lot of pop ups and causing websites and screens to roll slowly, firewall is on, how do i prevent this
You installed adware along with something else.
You can either follow Apple's manual instructions for removing it, or use the free automated tool, AdwareMedic. -
I am getting pop-ups, and web pages are opening with "special offers." My yahoo mail has advertising covering the mail messages. This is new. What do I do?
Sometimes a problem with Firefox may be a result of malware installed on your computer, that you may not be aware of.
SCAN WITH ALL PROGRAMS.
* [http://www.microsoft.com/security/scanner/default.aspx Microsoft Safety Scanner]
* [http://www.malwarebytes.org/products/malwarebytes_free/ MalwareBytes' Anti-Malware]
* [http://support.kaspersky.com/faq/?qid=208283363 TDSSKiller - AntiRootkit Utility]
* [http://www.surfright.nl/en/hitmanpro/ Hitman Pro]
* [http://www.eset.com/us/online-scanner/ ESET Online Scanner]
[http://windows.microsoft.com/MSE Microsoft Security Essentials] is a good permanent antivirus for Windows 7/Vista/XP if you don't already have one.
Further information can be found in the [[Troubleshoot Firefox issues caused by malware]] article.
Did this fix your problems? Please report back to us! -
Pop-ups and new tabs opening when I try to browse
Hello
I'm having trouble with pop-ups and new tabs for 'Mackeeper' among others, launching themselves in Safari on my MacBook Air. This has only just started after having the laptop for 3 months.
Operating system: OS X 10.9.4 (13E28)
Speed: 1.4 GHz Intel Core i5
Storage capacity: 4 GB 1600 MHz DDR3
I have tried troubleshooting by looking in 'Extensions' but there's nothing to remove. I've also tried Forum Member Linc Davis' advice, but unfortunately that's not working either.
I've tried all of the suggestions below, but nothing's working. It is driving me bonkers, so if anyone can help I would be most grateful.
Thank you
Jess
Linc DavisJul 10, 2014 8:22 AM Re: ANNOYING MACKEEPER TABS AND POPUP ADS
Re: ANNOYING MACKEEPER TABS AND POPUP ADSin response to chickashnaz
You installed the "DownLite" trojan, perhaps under a different name. Remove it as follows.
Malware is constantly changing to get around the defenses against it. The instructions in this comment are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
Back up all data.
Triple-click anywhere in the line below on this page to select it:
/Library/LaunchAgents/com.vsearch.agent.plist
Right-click or control-click the line and select
Services ▹ Reveal in Finder (or just Reveal)
from the contextual menu.* A folder should open with an item named "VSearch" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
Repeat with each of these lines:
/Library/LaunchDaemons/com.vsearch.daemon.plist
/Library/LaunchDaemons/com.vsearch.helper.plist
/Library/LaunchDaemons/Jack.plist
Restart the computer and empty the Trash. Then delete the following items in the same way:
/Library/Application Support/VSearch
/Library/PrivilegedHelperTools/Jack
/System/Library/Frameworks/VSearch.framework
Some of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
From the Safari menu bar, select
Safari ▹ Preferences... ▹ Extensions
Uninstall any extensions you don't know you need, including any that have the word "Spigot" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
This trojan is distributed on illegal websites that traffic in pirated movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect much worse to happen in the future.
You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that the DownLite developer has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing, has not done so, even though it's aware of the problem. This failure of oversight is inexcusable and has compromised both Gatekeeper and the Developer ID program. You can't rely on Gatekeeper alone to protect you from harmful software.
*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select
Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.Click here and follow the instructions, or if there’s a type of adware not covered by them on the computer, these ones. If you're willing to use a tool to remove it(you don't need to, but may find it easier), you can instead run Adware Medic; this link is a direct download.
(122872) -
Specific details; p/n: GS066PA#ABG, 4 GBytes DDR2 RAM, OS Windows 7 (6.1) Ultimate Edition 64-bit Service Pack 1 (Build 7601) DirectX 11.0. LED's were working but during one of the windows automatic updates they stopped working. I don't know which update. Now I get little pop-ups "CAPS LOCK: ON" etc (black text on white background). If I rename bttray.exe to bttray1.exe and restart the laptop, that kills the pop-ups in the bottom RH corner of the screen but it does not restore the operation of my blue indicator LED's. Can anyone help please?
Hi @haggis1 ,
I saw your post regarding the problems with the pop-ups and LED lights not working after a Windows Update. Most likely there was a problem with the update when it was installed. This Microsoft Support link will show you how to uninstall an update. Try uninstalling the most recent updates and the restart the notebook and see if the LEDs start working again.
If that fixes the issue then there is another section in that link entitled: I remove an update but it gets automatically installed. That will show you how to hide an update.
Please click “Accept as Solution ” if you feel my post solved your issue.
Click the “Kudos Thumbs Up" on the right to say “Thanks” for helping!
Thank you,
BHK6
I work on behalf of HP
Maybe you are looking for
-
Where can I find the download link for Adobe Acrobat 8.1.0 Standard?
I do not need Adobe Acrobat 8 Pro. Can anyone point me in the right direction for Adobe Acrobat 8.1.0 standard? Thank you
-
Using controls to change range of multiple graphs
Hello... I have two questions: I have a VI with ten graphs created from a ASCII file loaded by read spreadsheet function. The first graphs shows the points 1 until 200 of X axis, the second graph the points 201 until 400 of X axis, the third graphs t
-
How do i keep my RAW files from turing to jpeg files when exporting them to My Passport?
I am an amature photographer and take all my pitures in RAW form (highest quality and more editing capability). I was given a My Passport for Mac external harddrive to transfer all my files to to open more space on my mac book. When importing my RAW
-
Has anyone else encountered a situation where images suddenly gone missing?
i've had files suddenly gone missing on me several times. i was so sure that this might be a bug but now i think it's user error. at least my error. a few times i wanted to delete one image and then found that several other images disappeared on me.
-
When resize window, the picture will disappear
my code is : G11_G3(int x, int y, int w, int h) { super("G11_G3"); this.setBounds(x, y, w, h); this.setDefaultCloseOperation(JFrame.EXIT_ON_CLOSE); this.setVisible(true); content=this.getContentPane(); MouseInputLis