Remove adware/malware?
I appear to have downloaded some very annoying adware. I'm desperate to get rid of it and need some help. It seems to be associated with www.appround.us and I can find lots of online info about this adware attacking Windows users, but nothing about Macs. It adds annoying "buttons" and load bars to the screen of both Safari and Chrome. It opens random pop-ups (even if blocker is on) and it turns random words on websites I visit into unwanted links. The messages that come up are always about updating a "Video Performer" or some other bogus software. I have tried resetting Safari and called Apple Care, but I've had no success so far. Apple Care recommend I run a virus software so I tried Dr. Web...no luck either. Sample screenshots below. Anyone able to help?
iPentax wrote:
The best advice is to Download & Install AVG
That is most definitely NOT the best advice.
First, the problem in this case was adware called Downlite (aka VSearch). I am not aware of any variant of Downlite that is detected by AVG. So AVG would be absolutely worthless at solving a problem caused by this particular adware, and probably wouldn't be much use with any other adware either.
As for actual malware, note that when I tested it in January, AVG only detected 61% of the malware samples that I threw at it. See:
Mac anti-virus testing 2014
(Fair disclosure: The Safe Mac is my site, and contains a Donate button, so I may receive compensation for providing links to The Safe Mac. Donations are not required.)
Similar Messages
-
I'm currently using OSX 10.6.8, 2.4GHz Intel Core 2 Duo Processor, 2 GB 667 MHz DDR2 SDRAM Memory. I am not able to upgrade the operating system, and the computer still has 67 GB of memory on the harddrive. I don't use it for anything very intense, mostly internet browsing. I was at a hotel over the weekend and connected to their free wifi. Once back home, two days later, I started receiving pop ups in Chrome. The first was MediaDownloader, so I assume that is the culprit. The second pop up to occur was Trojanalert. I looked through some online community forums and was pointed towards downloading and running AdwareMedic. My operating system does not support this program. Next I read up on how to examine libraries and extensions to find the issue. I'm not well versed in this, but I followed the directions and did not find any malicious looking extensions or items in the libraries. Before looking for the "thing" to remove, I backed up my computer as recommended.
I have never, to my knowledge, had a virus on this computer. I have never experienced pop ups, and I very rarely download any program, especially not software included with other programs.
Could someone recommend a virus/adware/malware utility that will find and remove this issue or provide me with a detailed set of instructions on how to find the issue and then correct it? Are there free online scans or removal tools that are trusted and could help? Also, if I should be posting this somewhere else, please let me know. I have not used this community tool much at all. Thank you in advance for any assistance.First, thanks for the quick response. This is the website that I looked at and was trying to follow. There are no extensions listed in my Safari, and the only two in Chrome are: Google Docs and Java for Browsing. In Firefox the only extension is Garmin Communicator 4.1.0.
To the best of my novice ability I followed the directions to look at the libraries and have not found malicious things there either. As I cannot upgrade to 10.7, is there anything else I'm missing? Again, I've tried my best to locate the cause, but I'm new to looking at files and paths. Nothing jumps out as abnormal or as something listed on thesafemac.com/arg . -
What is the best adware & malware removal tool?
What is the best adware & malware removal tool?
1. Click here. This link is a direct download.
2. For other types of malware, it varies.
(124629) -
My Mac is very slow and applications take a long time to load, especially Safari and iTunes. Please help. I have run the Etrecheck report and these are results.
Thanks Pat
EtreCheck version: 2.1.5 (108)
Report generated 4 January 2015 14:29:26 GMT
Click the [Support] links for help with non-Apple products.
Click the [Details] links for more information about that line.
Click the [Adware] links for help removing adware.
Hardware Information: ℹ️
iMac (21.5-inch, Mid 2011) (Verified)
iMac - model: iMac12,1
1 2.7 GHz Intel Core i5 CPU: 4-core
4 GB RAM Upgradeable
BANK 0/DIMM0
2 GB DDR3 1333 MHz ok
BANK 1/DIMM0
2 GB DDR3 1333 MHz ok
BANK 0/DIMM1
empty empty empty empty
BANK 1/DIMM1
empty empty empty empty
Bluetooth: Old - Handoff/Airdrop2 not supported
Wireless: en1: 802.11 a/b/g/n
Video Information: ℹ️
AMD Radeon HD 6770M - VRAM: 512 MB
iMac 1920 x 1080
System Software: ℹ️
OS X 10.10.1 (14B25) - Uptime: 0:32:50
Disk Information: ℹ️
ST31000528AS disk0 : (1 TB)
EFI (disk0s1) <not mounted> : 210 MB
Macintosh HD (disk0s2) / : 999.35 GB (717.51 GB free)
Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB
OPTIARC DVD RW AD-5690H
USB Information: ℹ️
Apple Inc. FaceTime HD Camera (Built-in)
Seagate Expansion Desk 2 TB
EFI (disk1s1) <not mounted> : 210 MB
Seagate Expansion Drive (disk1s2) /Volumes/Seagate Expansion Drive : 2.00 TB (1.66 TB free)
Apple Inc. BRCM2046 Hub
Apple Inc. Bluetooth USB Host Controller
Apple Inc. iPhone
Apple Internal Memory Card Reader
Apple Computer, Inc. IR Receiver
Thunderbolt Information: ℹ️
Apple Inc. thunderbolt_bus
Gatekeeper: ℹ️
Mac App Store and identified developers
Kernel Extensions: ℹ️
/Library/Application Support/Avast/components/fileshield/unsigned
[loaded] com.avast.AvastFileShield (2.1.0 - SDK 10.9) [Support]
/Library/Application Support/Avast/components/proxy/unsigned
[loaded] com.avast.PacketForwarder (2.0 - SDK 10.9) [Support]
Problem System Launch Agents: ℹ️
[failed] com.apple.syncservices.SyncServer.plist
Launch Agents: ℹ️
[loaded] com.avast.userinit.plist [Support]
[running] com.epson.Epson_Low_Ink_Reminder.launcher.plist [Support]
[loaded] com.epson.esua.launcher.plist [Support]
[running] com.epson.eventmanager.agent.plist [Support]
[loaded] com.oracle.java.Java-Updater.plist [Support]
[running] com.trusteer.rapport.rapportd.plist [Support]
Launch Daemons: ℹ️
[loaded] com.adobe.fpsaud.plist [Support]
[loaded] com.avast.init.plist [Support]
[loaded] com.avast.uninstall.plist [Support]
[failed] com.avast.update.plist [Support]
[loaded] com.microsoft.office.licensing.helper.plist [Support]
[loaded] com.oracle.java.Helper-Tool.plist [Support]
[running] com.trusteer.rooks.rooksd.plist [Support]
User Launch Agents: ℹ️
[loaded] com.adobe.ARM.[...].plist [Support]
[invalid?] com.avast.home.userinit.plist [Support]
[running] com.microsoft.LaunchAgent.SyncServicesAgent.plist [Support]
User Login Items: ℹ️
iTunesHelper ApplicationHidden (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)
Internet Plug-ins: ℹ️
FlashPlayer-10.6: Version: 16.0.0.235 - SDK 10.6 [Support]
Default Browser: Version: 600 - SDK 10.10
AdobePDFViewerNPAPI: Version: 11.0.07 - SDK 10.6 [Support]
AdobePDFViewer: Version: 11.0.07 - SDK 10.6 [Support]
DivXBrowserPlugin: Version: 2.2 [Support]
Flash Player: Version: 16.0.0.235 - SDK 10.6 [Support]
OVSHelper: Version: 1.1 [Support]
QuickTime Plugin: Version: 7.7.3
JavaAppletPlugin: Version: Java 8 Update 25 Check version
Safari Extensions: ℹ️
wrc [Installed]
3rd Party Preference Panes: ℹ️
DivX [Support]
Flash Player [Support]
Flip4Mac WMV [Support]
GoToMyPC Preferences [Support]
Java [Support]
Trusteer Endpoint Protection [Support]
Time Machine: ℹ️
Skip System Files: NO
Auto backup: YES
Volumes being backed up:
Macintosh HD: Disk size: 999.35 GB Disk used: 281.84 GB
Destinations:
Seagate Expansion Drive [Local]
Total size: 2.00 TB
Total number of backups: 78
Oldest backup: 2013-07-28 18:09:06 +0000
Last backup: 2015-01-04 14:29:38 +0000
Size of backup disk: Adequate
Backup size 2.00 TB > (Disk used 281.84 GB X 3)
Top Processes by CPU: ℹ️
2% WindowServer
1% mds
0% fontd
0% mds_stores
0% com.avast.daemon
Top Processes by Memory: ℹ️
120 MB Safari
112 MB com.avast.daemon
94 MB com.apple.WebKit.WebContent
56 MB spindump
52 MB mds_stores
Virtual Memory Information: ℹ️
479 MB Free RAM
1.56 GB Active RAM
1.11 GB Inactive RAM
904 MB Wired RAM
5.37 GB Page-ins
75 MB Page-outs
Diagnostics Information: ℹ️
Jan 4, 2015, 01:57:18 PM Self test - passed
Standard users cannot read /Library/Logs/DiagnosticReports.
Run as an administrator account to see more information.patbythesea wrote:
Can I assume that with my Mac I do not need any additional virus protection software? If I do, what should I use?
See my Mac Malware Guide for help on protecting yourself from malware. You generally don't need anti-virus software.
(Fair disclosure: I may receive compensation from links to my sites, TheSafeMac.com and AdwareMedic.com, in the form of buttons allowing for donations. Donations are not required to use my site or software.) -
How to remove virus, malware from mac?
please help i used an website that later that had phishing activity and virus , today my friends said they received emails with files on it
HOW DO I REMOVE THIS VIRUSES FROM MY COMPUTER ????
PLEASE HELPHelpful Links Regarding Malware Problems
If you are having an immediate problem with ads popping up see The Safe Mac » Adware Removal Guide, remove adware that displays pop-up ads and graphics on your Mac, and AdwareMedic. If you require anti-virus protection Thomas Reed recommends using ClamXAV. (Thank you to Thomas Reed for this recommendation.) You might consider adding this Safari extensions: Adblock Plus 1.8.9.
Open Safari, select Preferences from the Safari menu. Click on Extensions icon in the toolbar. Disable all Extensions. If this stops your problem, then re-enable them one by one until the problem returns. Now remove that extension as it is causing the problem.
The following comes from user stevejobsfan0123. I have made minor changes to adapt to this presentation.
Fix Some Browser Pop-ups That Take Over Safari.
Common pop-ups include a message saying the government has seized your computer and you must pay to have it released (often called "Moneypak"), or a phony message saying that your computer has been infected, and you need to call a tech support number (sometimes claiming to be Apple) to get it resolved. First, understand that these pop-ups are not caused by a virus and your computer has not been affected. This "hijack" is limited to your web browser. Also understand that these messages are scams, so do not pay any money, call the listed number, or provide any personal information. This article will outline the solution to dismiss the pop-up.
Quit Safari
Usually, these pop-ups will not go away by either clicking "OK" or "Cancel." Furthermore, several menus in the menu bar may become disabled and show in gray, including the option to quit Safari. You will likely have to force quit Safari. To do this, press Command + option + esc, select Safari, and press Force Quit.
Relaunch Safari
If you relaunch Safari, the page will reopen. To prevent this from happening, hold down the 'Shift' key while opening Safari. This will prevent windows from the last time Safari was running from reopening.
This will not work in all cases. The shift key must be held at the right time, and in some cases, even if done correctly, the window reappears. In these circumstances, after force quitting Safari, turn off Wi-Fi or disconnect Ethernet, depending on how you connect to the Internet. Then relaunch Safari normally. It will try to reload the malicious webpage, but without a connection, it won't be able to. Navigate away from that page by entering a different URL, i.e. www.apple.com, and trying to load it. Now you can reconnect to the Internet, and the page you entered will appear rather than the malicious one. -
For those whose safari always crashes - remove adware
Save the lengthy stack trace.
When browser crashes, it often means that the data or plugin that safari try to load cause the failure. Think safari as a container who tries to accommodate plug-in or extensions such as adobe flash player.
So the very first thing to check is what cause the crash: to do this try
1) download a tool called etrecheck http://www.etresoft.com/etrecheck this tool will check hardware as well as launch deamon(that starts a program) and warn you something that need to be fixed. Too often we have download some poorly written adware or malware which tries to access unaccessible memory in safari - when the crash immediately happen.
2) remove the bad extension or data and reboot. there is a great tool that removes adware http://www.adwaremedic.com/index.php , it removes malware such genieo which is often the cause.
3) don t reinstall Yosemite
Hope this helpsPer what Heath said in another thread, I guess there is a possibility this might break again...but it's currently working for me right now
"+*Heath Said:*+
Okay so the previous post was prior, and at that time The Safari Browser was working and I was able to actually modify my preferences and surf. The past three days the browser has been broken again.
So I am guessing that the fix is still on its way... Still the same WebKit.dll file as reported before...:( "
--------------- -
Having trouble getting rid of popup adware/malware, primarily in Safari. TuneUpMyMac and MacKeeper persistently open new windows when I navigate to any number of sites. I have never downloaded or registered for their software, so I suspect this is a trojan. How do I get rid of?
Mac users often ask whether they should install "anti-virus" software. The answer usually given on ASC is "no." The answer is right, but it may give the wrong impression that there is no threat from what are loosely called "viruses." There is a threat, and you need to educate yourself about it.
1. This is a comment on what you should—and should not—do to protect yourself from malicious software ("malware") that circulates on the Internet and gets onto a computer as an unintended consequence of the user's actions. It does not apply to software, such as keystroke loggers, that may be installed deliberately by an intruder who has hands-on access to the computer, or who has been able to log in to it remotely. That threat is in a different category, and there's no easy way to defend against it.
The comment is long because the issue is complex. The key points are in sections 5, 6, and 10.
OS X now implements three layers of built-in protection specifically against malware, not counting runtime protections such as execute disable, sandboxing, system library randomization, and address space layout randomization that may also guard against other kinds of exploits.
2. All versions of OS X since 10.6.7 have been able to detect known Mac malware in downloaded files, and to block insecure web plugins. This feature is transparent to the user. Internally Apple calls it "XProtect."
The malware recognition database used by XProtect is automatically updated; however, you shouldn't rely on it, because the attackers are always at least a day ahead of the defenders.
The following caveats apply to XProtect:
☞ It can be bypassed by some third-party networking software, such as BitTorrent clients and Java applets.
☞ It only applies to software downloaded from the network. Software installed from a CD or other media is not checked.
As new versions of OS X are released, it's not clear whether Apple will indefinitely continue to maintain the XProtect database of older versions such as 10.6. The security of obsolete system versions may eventually be degraded. Security updates to the code of obsolete systems will stop being released at some point, and that may leave them open to other kinds of attack besides malware.
3. Starting with OS X 10.7.5, there has been a second layer of built-in malware protection, designated "Gatekeeper" by Apple. By default, applications and Installer packages downloaded from the network will only run if they're digitally signed by a developer with a certificate issued by Apple. Software certified in this way hasn't necessarily been tested by Apple, but you can be reasonably sure that it hasn't been modified by anyone other than the developer. His identity is known to Apple, so he could be held legally responsible if he distributed malware. That may not mean much if the developer lives in a country with a weak legal system (see below.)
Gatekeeper doesn't depend on a database of known malware. It has, however, the same limitations as XProtect, and in addition the following:
☞ It can easily be disabled or overridden by the user.
☞ A malware attacker could get control of a code-signing certificate under false pretenses, or could simply ignore the consequences of distributing codesigned malware.
☞ An App Store developer could find a way to bypass Apple's oversight, or the oversight could fail due to human error.
Apple has so far failed to revoke the codesigning certificates of some known abusers, thereby diluting the value of Gatekeeper and the Developer ID program. These failures don't involve App Store products, however.
For the reasons given, App Store products, and—to a lesser extent—other applications recognized by Gatekeeper as signed, are safer than others, but they can't be considered absolutely safe. "Sandboxed" applications may prompt for access to private data, such as your contacts, or for access to the network. Think before granting that access. Sandbox security is based on user input. Never click through any request for authorization without thinking.
4. Starting with OS X 10.8.3, a third layer of protection has been added: a "Malware Removal Tool" (MRT). MRT runs automatically in the background when you update the OS. It checks for, and removes, malware that may have evaded the other protections via a Java exploit (see below.) MRT also runs when you install or update the Apple-supplied Java runtime (but not the Oracle runtime.) Like XProtect, MRT is effective against known threats, but not against unknown ones. It notifies you if it finds malware, but otherwise there's no user interface to MRT.
5. The built-in security features of OS X reduce the risk of malware attack, but they are not, and never will be, complete protection. Malware is foremost a problem of human behavior, and no technological fix alone is going to solve it. Trusting software to protect you will only make you more vulnerable.
The best defense is always going to be your own intelligence. With the possible exception of Java exploits, all known malware circulating on the Internet that affects a fully-updated installation of OS X 10.6 or later takes the form of so-called "Trojan horses," which can only have an effect if the victim is duped into running them. The threat therefore amounts to a battle of wits between you and Internet criminals. If you're better informed than they think you are, you'll win. That means, in practice, that you always stay within a safe harbor of computing practices. How do you know when you're leaving the safe harbor? Below are some warning signs of danger.
Software from an untrustworthy source
☞ Software with a corporate brand, such as Adobe Flash Player, doesn't come directly from the developer’s website. Do not trust an alert from any website to update Flash, or your browser, or any other software. A genuine alert that Flash is outdated and blocked is shown on this support page. Follow the instructions on the support page in that case. Otherwise, assume that the alert is fake and someone is trying to scam you into installing malware. If you see such alerts on more than one website, ask for instructions.
☞ Software of any kind is distributed via BitTorrent, or Usenet, or on a website that also distributes pirated music or movies.
☞ Rogue websites such as Softonic, Soft32, and CNET Download distribute free applications that have been packaged in a superfluous "installer."
☞ The software is advertised by means of spam or intrusive web ads. Any ad, on any site, that includes a direct link to a download should be ignored.
Software that is plainly illegal or does something illegal
☞ High-priced commercial software such as Photoshop is "cracked" or "free."
☞ An application helps you to infringe copyright, for instance by circumventing the copy protection on commercial software, or saving streamed media for reuse without permission. All "YouTube downloaders" are in this category, though not all are necessarily malicious.
Conditional or unsolicited offers from strangers
☞ A telephone caller or a web page tells you that you have a “virus” and offers to help you remove it. (Some reputable websites did legitimately warn visitors who were infected with the "DNSChanger" malware. That exception to this rule no longer applies.)
☞ A web site offers free content such as video or music, but to use it you must install a “codec,” “plug-in,” "player," "downloader," "extractor," or “certificate” that comes from that same site, or an unknown one.
☞ You win a prize in a contest you never entered.
☞ Someone on a message board such as this one is eager to help you, but only if you download an application of his choosing.
☞ A "FREE WI-FI !!!" network advertises itself in a public place such as an airport, but is not provided by the management.
☞ Anything online that you would expect to pay for is "free."
Unexpected events
☞ A file is downloaded automatically when you visit a web page, with no other action on your part. Delete any such file without opening it.
☞ You open what you think is a document and get an alert that it's "an application downloaded from the Internet." Click Cancel and delete the file. Even if you don't get the alert, you should still delete any file that isn't what you expected it to be.
☞ An application does something you don't expect, such as asking for permission to access your contacts, your location, or the Internet for no obvious reason.
☞ Software is attached to email that you didn't request, even if it comes (or seems to come) from someone you trust.
I don't say that leaving the safe harbor just once will necessarily result in disaster, but making a habit of it will weaken your defenses against malware attack. Any of the above scenarios should, at the very least, make you uncomfortable.
6. Java on the Web (not to be confused with JavaScript, to which it's not related, despite the similarity of the names) is a weak point in the security of any system. Java is, among other things, a platform for running complex applications in a web page, on the client. That was always a bad idea, and Java's developers have proven themselves incapable of implementing it without also creating a portal for malware to enter. Past Java exploits are the closest thing there has ever been to a Windows-style virus affecting OS X. Merely loading a page with malicious Java content could be harmful.
Fortunately, client-side Java on the Web is obsolete and mostly extinct. Only a few outmoded sites still use it. Try to hasten the process of extinction by avoiding those sites, if you have a choice. Forget about playing games or other non-essential uses of Java.
Java is not included in OS X 10.7 and later. Discrete Java installers are distributed by Apple and by Oracle (the developer of Java.) Don't use either one unless you need it. Most people don't. If Java is installed, disable it—not JavaScript—in your browsers.
Regardless of version, experience has shown that Java on the Web can't be trusted. If you must use a Java applet for a task on a specific site, enable Java only for that site in Safari. Never enable Java for a public website that carries third-party advertising. Use it only on well-known, login-protected, secure websites without ads. In Safari 6 or later, you'll see a padlock icon in the address bar when visiting a secure site.
Stay within the safe harbor, and you’ll be as safe from malware as you can practically be. The rest of this comment concerns what you should not do to protect yourself.
7. Never install any commercial "anti-virus" (AV) or "Internet security" products for the Mac, as they are all worse than useless. If you need to be able to detect Windows malware in your files, use one of the free security apps in the Mac App Store—nothing else.
Why shouldn't you use commercial AV products?
☞ To recognize malware, the software depends on a database of known threats, which is always at least a day out of date. This technique is a proven failure, as a major AV software vendor has admitted. Most attacks are "zero-day"—that is, previously unknown. Recognition-based AV does not defend against such attacks, and the enterprise IT industry is coming to the realization that traditional AV software is worthless.
☞ Its design is predicated on the nonexistent threat that malware may be injected at any time, anywhere in the file system. Malware is downloaded from the network; it doesn't materialize from nowhere. In order to meet that nonexistent threat, commercial AV software modifies or duplicates low-level functions of the operating system, which is a waste of resources and a common cause of instability, bugs, and poor performance.
☞ By modifying the operating system, the software may also create weaknesses that could be exploited by malware attackers.
☞ Most importantly, a false sense of security is dangerous.
8. An AV product from the App Store, such as "ClamXav," has the same drawback as the commercial suites of being always out of date, but it does not inject low-level code into the operating system. That doesn't mean it's entirely harmless. It may report email messages that have "phishing" links in the body, or Windows malware in attachments, as infected files, and offer to delete or move them. Doing so will corrupt the Mail database. The messages should be deleted from within the Mail application.
An AV app is not needed, and cannot be relied upon, for protection against OS X malware. It's useful, if at all, only for detecting Windows malware, and even for that use it's not really effective, because new Windows malware is emerging much faster than OS X malware.
Windows malware can't harm you directly (unless, of course, you use Windows.) Just don't pass it on to anyone else. A malicious attachment in email is usually easy to recognize by the name alone. An actual example:
London Terror Moovie.avi [124 spaces] Checked By Norton Antivirus.exe
You don't need software to tell you that's a Windows trojan. Software may be able to tell you which trojan it is, but who cares? In practice, there's no reason to use recognition software unless an organizational policy requires it. Windows malware is so widespread that you should assume it's in every email attachment until proven otherwise. Nevertheless, ClamXav or a similar product from the App Store may serve a purpose if it satisfies an ill-informed network administrator who says you must run some kind of AV application. It's free and it won't handicap the system.
The ClamXav developer won't try to "upsell" you to a paid version of the product. Other developers may do that. Don't be upsold. For one thing, you should not pay to protect Windows users from the consequences of their choice of computing platform. For another, a paid upgrade from a free app will probably have all the disadvantages mentioned in section 7.
9. It seems to be a common belief that the built-in Application Firewall acts as a barrier to infection, or prevents malware from functioning. It does neither. It blocks inbound connections to certain network services you're running, such as file sharing. It's disabled by default and you should leave it that way if you're behind a router on a private home or office network. Activate it only when you're on an untrusted network, for instance a public Wi-Fi hotspot, where you don't want to provide services. Disable any services you don't use in the Sharing preference pane. All are disabled by default.
10. As a Mac user, you don't have to live in fear that your computer may be infected every time you install software, read email, or visit a web page. But neither can you assume that you will always be safe from exploitation, no matter what you do. Navigating the Internet is like walking the streets of a big city. It's as safe or as dangerous as you choose to make it. The greatest harm done by security software is precisely its selling point: it makes people feel safe. They may then feel safe enough to take risks from which the software doesn't protect them. Nothing can lessen the need for safe computing practices. -
Need help to remove adware downloader_setup_mac.dmg!
Help!! Some how it seems that I have downloaded adware / malware.
I Need help to remove downloader_setup_mac.dmg ( I believe this is the culprit)
I have downloaded TSM adware removal and it has not helped. Please can someone help?!EDIT - simple editor ha a problem formatting the QUOTES - ÇÇÇ
hkrntobe wrote:
Help!! Some how it seems that I have downloaded adware / malware.
[1] I Need help to remove downloader_setup_mac.dmg ( I believe this is the culprit)
[2] I have downloaded TSM adware removal and it has not helped. Please can someone help?!
seventy one wrote:
If you don't find an answer in TSM, I seem to recall Thomas has previously asked that people [3] write directly to him if their Adware problem is not covered.
greg sahli wrote:
[4] Any file that is a .dmg (disk image) can usually be deleted by dragging to the trash.
I had assumed that the Disk Image was somehow persistent, part of your AdWare / MalWare problem and you were having trouble Trashing it [see #4]
This may indicate that this is not part of any AW/MW - won't know til we try Trashing it
great advice - get all the facts first
more great advice, see below
If this is a mounted Disk Image, it should be easy to check, here's an example of the typical way of "Ejecting" Disk Image and trashing its associated .DMG in the Finder
Click the " > " button next to the DI to Eject / Unmount it
Drag the .DMG file to the Trash or type CMD + delete
Verify that the .DMG is in fact in the Trash > Empty the Trash by your favorite method
If there is an error at this point, take a screenshot and insert it here -
Recommendations on adware/malware software?
My old MacBook (Tennessee Jed is 10 now and STILL kickin) got nailed by a nasty TH about four years ago and I had to give it the NAV, no spoonful of sugar to wash that one down, about $100 and gajillion of ARE YOU SURE YOU WANT TO DO THIS??? for the rest of forever (gag me).
Anyone have any recommendations on something a little sweeter for my MacBook Air? I'm on a supercalifragilisticexpialidocious budget, so inexpensive to free would be good. I'm not a luddite, by any means, but I spend a lot of time blogging and job hunting, and way less time looking for software.
Basically what I'm saying is, if anyone has researched stuff and has a reliable answer for this thing I'm asking, that can be supported by multiple users, thumbs up, and please send my way!Excellent help here > The Safe Mac » Adware Removal Guide
Download and run the AdMedic adware / malware removal tool here > AdwareMedic
Easy and only takes a minute or two. -
remove adware on Mac
Helpful Links Regarding Malware Problems
If you are having an immediate problem with ads popping up see The Safe Mac » Adware Removal Guide and The Safe Mac » Adware Removal Tool.
Open Safari, select Preferences from the Safari menu. Click on Extensions icon in the toolbar. Disable all Extensions. If this stops your problem, then re-enable them one by one until the problem returns. Now remove that extension as it is causing the problem.
An excellent link to read is Tom Reed's Mac Malware Guide.
Also, visit The XLab FAQs and read Detecting and avoiding malware and spyware.
See these Apple articles:
Mac OS X Snow Leopard and malware detection
OS X Lion- Protect your Mac from malware
OS X Mountain Lion- Protect your Mac from malware
OS X Mavericks- Protect your Mac from malware
About file quarantine in OS X
If you require anti-virus protection Thomas Reed recommends using ClamXAV. (Thank you to Thomas Reed for this recommendation.)
From user Joe Bailey comes this equally useful advice:
The facts are:
1. There is no anti-malware software that can detect 100% of the malware out there.
2. There is no anti-malware that can detect everything targeting the Mac.
3. The very best way to prevent the most attacks is for you as the user to be aware that
the most successful malware attacks rely on very sophisticated social engineering
techniques preying on human avarice, ****, and fear.
4. Internet popups saying the FBI, NSA, Microsoft, your ISP has detected malware on
your computer is intended to entice you to install their malware thinking it is a
protection against malware.
5. Some of the anti-malware products on the market are worse than the malware
from which they purport to protect you.
6. Be cautious where you go on the internet.
7. Only download anything from sites you know are safe.
8. Avoid links you receive in email, always be suspicious even if you get something
you think is from a friend, but you were not expecting.
9. If there is any question in your mind, then assume it is malware. -
How do I remove adware from my MAC OS X
Can someone help me remove adware from my MAC OS X (10.6.8)? This started a few days ago and is not only super annoying, but it seems to be suddenly slowing down my browser.
Written by Thomas Reed, a long time poster and the ‘expert’ on malware.
Malware Guide – Adware – 10.6 and under -
Tried to sign in on my Facebook account and it would not let me as it says my computer/device is infected with malware and I must remove the malware before I can continue...So how do I do that on an iPad? I was just signed in to FB an hour earlier on here and had no message then. Can someone help me figure this out please. I had no idea the iPad could also get malware....Thanks!
What you may have got was an ad, that tells you you have malware, when in fact when you either click on the ad or try to X out of the ad, that's when it installs the malware on your computer. It's a trick. If it's indeed like that, that's when it's good for the iPad, since it can't get the junk they're trying to push out.
-
3000 J 115 with the well-documented "MS Remove Tool" Malware
I have a 3000 J 115 with the well-documented "MS Remove Tool" Malware attack, which just hit as I was beginning to do taxes on this thing! Microsoft recovery routines (the REAL MS Remove Tool, and MS Defender) will not run--the virus won't allow it. I have instructions from spyware-experts.com to go into Safe Mode and (I guess), the system registry to remove the virus. However, I can't get F8 to work and get me into Safe Mode. It just ignores it and boots up. The condition of the desktop is very bad--slow to do anything, can get online but it takes forever, can't open up files (with the idea of doing a backup). I have had this thing for 3 years and do not recall ever creating a factory-setting backup disk which could be used to restore the system. The manual (online) has nothing that I can find on getting into Safe Mode. Now what do I do?
Moderator note; subject editedHi Dave,
My security will not allow me to go to spyware-experts.com to review the instructions that you received. That is probably because of its WOT rating: http://www.mywot.com/en/scorecard/spyware-experts.com
You will need to stop the malware from running before you can fix anything. It might be a good idea to give this removal guide a try:
http://www.bleepingcomputer.com/virus-removal/remove-ms-removal-tool
Bleeping Computer is a respected site with a good rating. If you are unable to proceed on your own, they have trained experts available who will work with you one-on-one to remove the malware. Instructions for doing that are included in the guide. They may have a wait of a few days, so if you prefer to post on another forum for one-on-one help sooner, the forums listed on the side of the page here use trained volunteer analysts: http://hjt-data.trendmicro.com/hjt/analyzethis/index.php
** Note: If you have installed AVG, malware scanners may not run if you need help from a forum that uses specialized tools. .
Please let us know if we can be of further help.
ThinkPad: T530 / X1 Gen 2 / Helix - Yoga: Tablet 2 Pro (Win) / Yoga 3 Pro
If you find a post helpful and it answers your question, please click the "Accept As Solution" button.
Lenovo Advocate ~ I am not employed by Lenovo or Microsoft. I am a volunteer.
Microsoft MVP - Consumer Security
SpywareHammer -
How do I remove adware using Mavericks
How do I remove adware from my MAcbook Pro with Mavericks
Define adware and what, exactly, you want to remove.
Barry -
Why does apple not remove the malware Genieo
Why does apple not remove the malware Genieo - it takes over the Safari browser even with extensions turned off - firefox works fine but the malware is still alive and kicking on my mac. Should I just uninstall safari and hope the malware is not doing more damage in the background?
Hi Sickof --
Apple has never had anything to do with Genio. It is sneakily installed with other apps you think would be helpful. It is very sickening, IMHO.
Here's a thread here -- It's long, I know, but it's got great information for you.
https://discussions.apple.com/thread/4497906?start=0&tstart=0
Keep reading. It's worth it.
Maybe you are looking for
-
How to connect a pc via Ethernet to an Airport Extreme
For about a year I have had an Airport Extreme running my iBook laptop on wifi and the iMac on Ethernet. I also have an IBM Thinkpad (T/P) running Windows 2000 which I wanted to connect via Ethernet cable to the AE and get on the internet to use vari
-
Error : java.util.MissingResourceException
Hi Friends, I had developed one web dynpro application by using Internationalization - I18N of WebDynPro (Java) Application (Blog) but I got one error that is <b>java.util.MissingResourceException: Can't find bundle for base name com.sap.example.lang
-
How do I reinstall MS Word on MacPro. WORD keeps causing my computer to freeze.
How do I reinstall Microsoft WORD on my MacPro. (WORD keeps causing my computer to freeze.)
-
My mum can't access her account. It says its locked and asked for her security questions, but she can't remember what they are. How do we access her account?
-
SQL multiple selects in one report?
Hello, I'm having a problem selecting from the following table (let's call it the dpt_user_role) to be able to create a custom report, The table looks like the following: Dpt_id User_id User_is_manager 1 1001 N 1 1002 Y 1 1003 N 2 1001 Y 2 1005 N 2 1