Pop-ups that won't go away no matter what

Hello, I am lookinf for a solution: my children went on a torrents dowload site. They downloaded some tv shows. I ended up with lots of pop-up windows everywhere and on some web pages there are highlighted words (in green) that are itself pop-up windows as I approach them. I have tried bit defender, Safari settings (blocking pop-ups) and nothing seems to work. Coud I get some help, please?

You installed the "DownLite" trojan, perhaps under a different name. Remove it as follows.
Malware is constantly changing to get around the defenses against it. The instructions in this comment are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
Back up all data.
Triple-click anywhere in the line below on this page to select it:
/Library/Application Support/VSearch
Right-click or control-click the line and select
Services ▹ Reveal in Finder (or just Reveal)
from the contextual menu.* A folder should open with an item named "VSearch" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
Repeat with each of these lines:
/Library/LaunchAgents/com.vsearch.agent.plist
/Library/LaunchDaemons/com.vsearch.daemon.plist
/Library/LaunchDaemons/com.vsearch.helper.plist
/Library/LaunchDaemons/Jack.plist
/Library/PrivilegedHelperTools/Jack
/System/Library/Frameworks/VSearch.framework
Some of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
Restart and empty the Trash. Don't try to empty the Trash until you have restarted.
From the Safari menu bar, select
Safari ▹ Preferences... ▹ Extensions
Uninstall any extensions you don't know you need, including any that have the word "Spigot" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
This trojan is distributed on illegal websites that traffic in pirated movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect much worse to happen in the future.
You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that the DownLite developer has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing, has not done so, even though it's aware of the problem. It must be said that this failure of oversight is inexcusable and has seriously compromised the value of Gatekeeper and the Developer ID program. You cannot rely on Gatekeeper alone to protect you from harmful software.
*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination  command-C. In the Finder, select
Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.

Similar Messages

  • Link scanner agent and loader agent pop ups that won't go away

    Link scanner agent and loader agent pop ups won't go away.  How do I get them to stop?

    the same thing has been happening to me for a while, it doesnt seem to affect anything but i would like to get rid of it, i feel like it might be a bug.

  • I NEED DESPERATE HELP! ADWARE THAT DOES NOT GO AWAY NO MATTER WHAT I TRY

    So I was downloading something to my computer and, of course, I got stuck with that Only Search thing and no matter what I try it DOES NOT GO AWAY. I tried turning off my extensions, I tried switching networks, I tried resetting safari. Deleting my history. Every. Single. Thing.
    And nothing works.
    Pleas please PLEASE someone help me with getting rid of this I HATE having an adware.

    There is no need to download anything to solve this problem.
    You may have installed the "VSearch" trojan. Remove it as follows.
    Malware is always changing to get around the defenses against it. These instructions are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
    Back up all data before proceeding.
    Step 1
    From the Safari menu bar, select
              Safari ▹ Preferences... ▹ Extensions
    Uninstall any extensions you don't know you need, including any that have the word "Spigot," "Trovi," or "Conduit" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
    Reset the home page and default search engine in all the browsers, if it was changed.
    Step 2
    Triple-click anywhere in the line below on this page to select it:
    /Library/LaunchAgents/com.vsearch.agent.plist
    Right-click or control-click the line and select
              Services ▹ Reveal in Finder (or just Reveal)
    from the contextual menu.* A folder should open with an item named "com.vsearch.agent.plist" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
    Repeat with each of these lines:
    /Library/LaunchDaemons/com.vsearch.daemon.plist
    /Library/LaunchDaemons/com.vsearch.helper.plist
    Restart the computer and empty the Trash. Then delete the following items in the same way:
    /Library/Application Support/VSearch
    /System/Library/Frameworks/VSearch.framework
    ~/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
    Some of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
    The problem may have started when you downloaded and ran an application called "MPlayerX." That's the name of a legitimate free movie player, but the name is also used fraudulently to distribute VSearch. If there is an item with that name in the Applications folder, delete it, and if you wish, replace it with the genuine article from mplayerx.org.
    This trojan is often found on illegal websites that traffic in pirated content such as movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow.
    You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that the Internet criminal behind VSearch has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing has not done so, even though it's aware of the problem. This failure of oversight has compromised both Gatekeeper and the Developer ID program. You can't rely on Gatekeeper alone to protect you from harmful software.
    *If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination  command-C. In the Finder, select
              Go ▹ Go to Folder...
    from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.

  • I have a pop up that won't go away!!!

    Let me preface this by saying I reset permissions on my mac after it was giving me some trouble about being able to write files to a external drive as well as my own hard drive (the reset fixed this). I did this by booting into repair boot and reseting permissions and ACL's. The only problem is after booting up I get a pop up login box saying : "networksetup is trying to modify the system network configuration. Type your password to allow this." <<<< this window will not go away no matter how many times I enter my password or hit canel. It goes away for a few seconds and comes right back. I just discovered that my vpn won't turn on either.
    PLEASE HELP!!!!
    <Edited by Host>

    Please read this whole message before doing anything.
    I've tested these instructions only with the Safari web browser. If you use another browser, they may not work as described.
    This procedure is a diagnostic test. It won’t solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.
    Third-party system modifications are a common cause of usability problems. By a “system modification,” I mean software that affects the operation of other software — potentially for the worse. The following procedure will help identify which such modifications you've installed. Don’t be alarmed by the complexity of these instructions — they’re easy to carry out and won’t change anything on your Mac. 
    These steps are to be taken while booted in “normal” mode, not in safe mode. If you’re now running in safe mode, reboot as usual before continuing. 
    Below are instructions to enter some UNIX shell commands. The commands are harmless, but they must be entered exactly as given in order to work. If you have doubts about the safety of the procedure suggested here, search this site for other discussions in which it’s been followed without any report of ill effects. 
    Some of the commands will line-wrap or scroll in your browser, but each one is really just a single line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, and you can then copy it. The headings “Step 1” and so on are not part of the commands. 
    Note: If you have more than one user account, Step 2 must be taken as an administrator. Ordinarily that would be the user created automatically when you booted the system for the first time. The other steps should be taken as the user who has the problem, if different. Most personal Macs have only one user, and in that case this paragraph doesn’t apply. 
    Launch the Terminal application in any of the following ways: 
    ☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.) 
    ☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens. 
    ☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid. 
    When you launch Terminal, a text window will open with a line already in it, ending either in a dollar sign (“$”) or a percent sign (“%”). If you get the percent sign, enter “sh” and press return. You should then get a new line ending in a dollar sign. 
    Step 1 
    Triple-click anywhere in the line of text below on this page to select it:
    kextstat -kl | awk '!/com\.apple/{printf "%s %s\n", $6, $7}' | open -ef 
    Copy the selected text to the Clipboard by pressing the key combination command-C. Then click anywhere in the Terminal window and paste (command-V). A TextEdit window will open with the output of the command. If the command produced no output, the window will be empty. Post the contents of the TextEdit window (not the Terminal window), if any — the text, please, not a screenshot. You can then close the TextEdit window. The title of the window doesn't matter, and you don't need to post that. No typing is involved in this step.
    Step 2 
    Repeat with this line:
    { sudo launchctl list | sed 1d | awk '!/0x|com\.(apple|openssh|vix\.cron)|org\.(amav|apac|cups|isc|ntp|postf|x)/{print $3}'; echo; sudo defaults read com.apple.loginwindow LoginHook; echo; sudo crontab -l; } 2> /dev/null | open -ef 
    This time you'll be prompted for your login password, which you do have to type. Nothing will be displayed when you type it. Type it carefully and then press return. You may get a one-time warning to be careful. Heed that warning, but don't post it. If you see a message that your username "is not in the sudoers file," then you're not logged in as an administrator. 
    Note: If you don’t have a login password, you’ll need to set one before taking this step. If that’s not possible, skip to the next step. 
    Step 3
    { launchctl list | sed 1d | awk '!/0x|com\.apple|org\.(x|openbsd)/{print $3}'; echo; crontab -l 2> /dev/null; } | open -ef 
    Step 4
    ls -A /e*/{cr,la,mach}* {,/}Lib*/{Ad,Compon,Ex,Fram,In,Keyb,La,Mail/Bu,P*P,Priv,Qu,Scripti,Servi,Spo,Sta}* L*/Fonts .la* 2> /dev/null | open -ef  
    Important: If you formerly synchronized with a MobileMe account, your me.com email address may appear in the output of the above command. If so, anonymize it before posting. 
    Step 5
    osascript -e 'tell application "System Events" to get name of login items' | open -ef 
    Remember, steps 1-5 are all copy-and-paste — no typing, except your password. Also remember to post the output. 
    You can then quit Terminal.

  • Safari pop up that won't go away

    Ok so just like the title says I have a safari pop up that wont go away. I restored my iPhone and it still wont work. I saw a post describing this problem on the computer communities but I can't find anything to do with this on the iPhone community. The post I was talking about is here Popup on Safari that will not go awayunknown

    I found the answer so I will link the post with the answer in case anyone stumbles on this with the same question just received online-apple-issue.com safari alert on iphone  5s.  to fix it please call support for apple 1 866 580 8458 immediately

  • Pop up that won't go away

    I have a popup that appears in add format telling me I need to update window viewer to continue. I don't believe it and suspect that it is a Trojan installer. I am using 25.0 and I have uninstalled the program and then reinstalled it. The popup only appears when I hit a link on a page. I am still attempting to figure if it is a select link but it does not appear so.

    hello, this sounds like a problem possibly caused by malware on your pc. please go to ''firefox > addons > extensions'' & remove any suspicious entries (toolbars, things that you have not installed intentionally, don't know what purpose they serve, etc). also go to the windows control panel / programs and remove all toolbars or potentially unwanted software from there and run a full scan of your system with the security software that you have in place and different other tools like the [http://www.malwarebytes.org/products/malwarebytes_free free version of malwarebytes] & [http://www.bleepingcomputer.com/download/adwcleaner/ adwcleaner].
    [[Remove a toolbar that has taken over your Firefox search or home page]]
    [[Troubleshoot Firefox issues caused by malware]]

  • Firefox (Linux) crashes as soon as it "starts" and the saved tabs won't go away no matter what, profilemanager doesn't work, only opens another firefox.

    My firefox on linux ubuntu 9.1 ALWAYS crashes on startup. But only on my regular logon (is it another Profile?), it says hrtimer_nanosleep on system monitor on the firefox_bin. It just did that one time and i can't get it to work. It crashes as soon as i start firefox with the tabs that were upp when it started crashing. Safe-mode is tested and did not work. I saw something about deleting / create new profile. but when i type in firefox -ProfileManager its only starts up another firefox that crashes. And i also saw that someone erased a file named secmod.db. I do NOT have this file. The whole firefox/mozilla files are all messed up in my system but where do i find the profile? It's all a mess this thing. and it's making me kinda pissed.

    If that does not work,
    Start '''[https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-using-safe-mode Firefox in Safe Mode]''' {web Link} by holding down the '''<Shift><br> ''(Mac Options)'' ''' key, and then starting Firefox. Is the problem still there?
    Start your '''Computer''' in safe mode with networking. Then start Firefox. Try '''Safe''' web sites.
    '''[http://encyclopedia2.thefreedictionary.com/Linux+Safe+Mode Starting The Computer In Safe Mode;<br>Free Online Encyclopedia]'''

  • I have a red "1" on my treasure hunt app icon and it won't go away no matter what I do...and it's driving me crazy!  How do I make it go away?!?  HELP!

    There are no messages or updates that I can find so I don't know what it wants me to do...but it's been there for like 3 days.

    Turn off Notifications for that app.  I would also ask the developer.

  • There are seveveral email messages that will not go away, no matter what i try?

    there are several messages that I cannot delete..they keep coming back over and over.

    there are several messages that I cannot delete..they keep coming back over and over.

  • There is a pop up on my safari that won't go away

    i have a pop up on my safari saying that I need to call a toll free number to contact apple support because there is some sort of security issue. I tried clicking ok and x but that doesn't work. I then checked here and have seen that people have the same problem however, all the answers were for Macs. Does anyone know how to get rid of it on an iPhone 6?

    Helpful Links Regarding Malware Problems
    If you are having an immediate problem with ads popping up see The Safe Mac » Adware Removal Guide, AdwareMedic, or Remove unwanted adware that displays pop-up ads and graphics on your Mac - Apple Support.
    Open Safari, select Preferences from the Safari menu. Click on Extensions icon in the toolbar. Disable all Extensions. If this stops your problem, then re-enable them one by one until the problem returns. Now remove that extension as it is causing the problem.
    The following comes from user stevejobsfan0123. I have made minor changes to adapt to this presentation.
    Fix Some Browser Pop-ups That Take Over Safari.
    Common pop-ups include a message saying the government has seized your computer and you must pay to have it released (often called "Moneypak"), or a phony message saying that your computer has been infected, and you need to call a tech support number (sometimes claiming to be Apple) to get it resolved. First, understand that these pop-ups are not caused by a virus and your computer has not been affected. This "hijack" is limited to your web browser. Also understand that these messages are scams, so do not pay any money, call the listed number, or provide any personal information. This article will outline the solution to dismiss the pop-up.
    Quit Safari
    Usually, these pop-ups will not go away by either clicking "OK" or "Cancel." Furthermore, several menus in the menu bar may become disabled and show in gray, including the option to quit Safari. You will likely have to force quit Safari. To do this, press Command + option + esc, select Safari, and press Force Quit.
    Relaunch Safari
    If you relaunch Safari, the page will reopen. To prevent this from happening, hold down the 'Shift' key while opening Safari. This will prevent windows from the last time Safari was running from reopening.
    This will not work in all cases. The shift key must be held at the right time, and in some cases, even if done correctly, the window reappears. In these circumstances, after force quitting Safari, turn off Wi-Fi or disconnect Ethernet, depending on how you connect to the Internet. Then relaunch Safari normally. It will try to reload the malicious webpage, but without a connection, it won't be able to. Navigate away from that page by entering a different URL, i.e. www.apple.com, and trying to load it. Now you can reconnect to the Internet, and the page you entered will appear rather than the malicious one.

  • Multiple ad pop ups that dont go away by enabling "pop up blocker"

    My browser opens with multiple ad pop ups that slow down my PC. Every site I've been to has said to go to tools, options, pop up blocker. The pop up blocker is on and has been on. It does not help.

    Sounds to me like malware on your computer, that you may not be aware of.
    You can try these free programs to scan for malware, which work with your existing antivirus software:
    * [http://www.microsoft.com/security/scanner/default.aspx Microsoft Safety Scanner]
    * [http://www.malwarebytes.org/products/malwarebytes_free/ MalwareBytes' Anti-Malware]
    * [http://support.kaspersky.com/faq/?qid=208283363 TDSSKiller - AntiRootkit Utility]
    * [http://www.surfright.nl/en/hitmanpro/ Hitman Pro]
    * [http://www.eset.com/us/online-scanner/ ESET Online Scanner]
    [http://windows.microsoft.com/MSE Microsoft Security Essentials] is a good permanent antivirus for Windows 7/Vista/XP if you don't already have one.
    Further information can be found in the [[Troubleshoot Firefox issues caused by malware]] article.
    Did this fix your problems? Please report back to us!

  • How do i get rid of the pop ups that are constantly popping up on my mac. Everytime i search for  anything on google an ad for mac keeper comes up and every time i access Netflix another stream of ads pop up... Do i have a virus HELPPPPPP

    How do i get rid of the pop ups that are constantly popping up on my mac. Everytime i search for  anything on google an ad for mac keeper comes up and every time i access Netflix another stream of ads pop up... Do i have a virus HELPPPPPP

    You may have installed the "VSearch" trojan, perhaps under a different name. Remove it as follows.
    Malware is constantly changing to get around the defenses against it. The instructions in this comment are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
    Back up all data before proceeding.
    Triple-click anywhere in the line below on this page to select it:
    /Library/LaunchAgents/com.vsearch.agent.plist
    Right-click or control-click the line and select
              Services ▹ Reveal in Finder (or just Reveal)
    from the contextual menu.* A folder should open with an item named "com.vsearch.agent.plist" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
    Repeat with each of these lines:
    /Library/LaunchDaemons/com.vsearch.daemon.plist
    /Library/LaunchDaemons/com.vsearch.helper.plist
    /Library/LaunchDaemons/Jack.plist
    Restart the computer and empty the Trash. Then delete the following items in the same way:
    /Library/Application Support/VSearch
    /Library/PrivilegedHelperTools/Jack
    /System/Library/Frameworks/VSearch.framework
    ~/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
    Some of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
    From the Safari menu bar, select
              Safari ▹ Preferences... ▹ Extensions
    Uninstall any extensions you don't know you need, including any that have the word "Spigot," "Trovi," or "Conduit" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
    Reset the home page and default search engine in all the browsers, if it was changed.
    This trojan is distributed on illegal websites that traffic in pirated content. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect much worse to happen in the future.
    You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that this Internet criminal has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing, has not done so, even though it's aware of the problem. This failure of oversight has compromised both Gatekeeper and the Developer ID program. You can't rely on Gatekeeper alone to protect you from harmful software.
    *If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination  command-C. In the Finder, select
              Go ▹ Go to Folder...
    from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.

  • How do I get rid of the pop ups that ask to store space on my computer

    How do I get rid of the pop ups that ask to store space on my computer?
    How do I get rid of the
    pop ups that ask to store space on my computer?

    Set it permanently with the Flash Player Settings Manager.

  • How to stop full page pop ups that bypass pop up blocking

    I am getting pop ups that cover 3/4 of my screen These pop ups can be for gaming sites or advertising tool boxes. all and anything can be popping up.It usually happens with my local newspaper in Australia but the sites are overseas. If I go to a gaming site like Slingo which is in the USA I realise I have to allow the pop ups as they help pay for the free games.Their pop up do not interfere with what you are doing whereas the ones I am getting most certainly do.My pop up blocker is turned on but these are getting past it somehow. It was so bad I had to resort to IE and I loathe IE.

    Hi,
    In System Preferences>Network, highlight or Show Internal Modem>PPP tab>PPP Options button... Prompt every xx minutes.

  • HT1527 when I try to download apps in my iphone , i get a spinning circle that won't go away and a icon that is gray and says "waiting". Any ideas how to solve?

    When I try to download apps in my iphone , I get a spinning circle that won't go away and a grey icon that says "waiting" .Any ideas how to fix the problem?

    First go into settings, Itunes and App store,  sign out and then sign in again! (This might not work)

Maybe you are looking for

  • Photoshop/illustrator transfer issues and error

    I've transferred my photoshop and illustrator from my old mac to another by using time machine, and I deregistered my old accounts on my old laptop to use it on my new set-up, but unfortunately I keep receiving 150:30 errors. I've tried scouring the

  • Please help me install Mountain Lion from my USB on my ERASED Macintosh HD partition.

    Hi, So my Macbook 7.1 (running macosx 10.6.8) was running really slow due to poor user maintenance. I decided that i should purchase Mountain Lion and install it over the 10.6.8 version. That worked but my computer turned SUPER SLOW. So i decided to

  • How to find last_query for oracle web form?

    I know that for standard forn we can navigate diagnostics-system-last_query How can we do it for web forms? Diagnostics menu contain only 5 items - Show log - Set trace lavel - Show Log on screen - Show pool monitor Thanks

  • EXP-00056: ORACLE error 4068 encountered

    Hi, I'm doing an export and it shows the following error EXP-00056: ORACLE error 4068 encountered ORA-04068: existing state of packages has been discarded ORA-04063: package body "XDB.DBMS_XDBUTIL_INT" has errors ORA-06508: PL/SQL: could not find pro

  • HR Administrator Business Package - Reports ( APB_LAUNCHPAD )

    Hi Experts , what are the customizing steps needed to get the Report Launchpad to work ! I set up the customizing entries in IMG/Personnel Management/Hr Administrative Services / hr Administrator / Store reports  . the role used is ASR ( Hr Admin ) ,