14 Replies Latest reply: Dec 10, 2013 9:59 AM by Sasay
Sasay Level 1 Level 1 (10 points)

I have no idea what I downloaded that installed this thing on my MBP (currently running Snow Leopard), but about 3 days ago it showed up in my Chrome browser.

 

I have done everything found on every website and every suggestion that I've found here in the forums.

 

-I have tried changing my search default in Chrome. No good.

-I have downloaded a Geneio uninstaller recommended by Dr.Mac in another thread. No good.

-I have downloaded the uninstaller from the page Linc Davis keeps recommending in almost every thread on this topic. No good (and by the way, the uninstall info on that page, which keeps being recommended, doesn't work at all).

-I have followed precise directions for eliminating certain files through the sudo command as explained on thesafemac.com. No good.

-I have downloaded and run both Dr. Web and Intego virus software, both of which were described as having malware definitions for this thing. No good.

-I've searched the Libraries recommended in various threads by various people, where I found two files with "installmac" or "installmc" in the names, which I trashed. No good.

 

Thank you all for posting on this topic, but not one of these "solutions" has worked. What's left? How do I get rid of this thing?


MacBook Pro (17-inch 2.4 GHz), Mac OS X (10.7.4)
  • 1. Re: Need a real solution to InstallMac
    thomas_r. Level 7 Level 7 (27,960 points)

    I take it you have installed Genieo somehow, and your search engine has been changed to search.installmac.com? If so, unfortunately, there are no guaranteed removal instructions. Different versions of Genieo, created for different Genieo partners, may install different things in different places. I'm not familiar with the InstallMac variant of Genieo, never having encountered it before. So I can't say what might have been installed.

     

    I'd be curious to find out how it got installed on your computer. To date, the only way I've ever seen Genieo get installed is to manually run the installer. Do you recall running a Genieo installer? Did you install something else, perhaps downloaded from somewhere like Softonic, around the time the symptoms appeared?

  • 2. Re: Need a real solution to InstallMac
    Sasay Level 1 Level 1 (10 points)

    I think I finally figured it out. Ran a more complete scan on Intego (I thought the original scan was for malware, but apparently it wasn't) and it has pulled up several fonts which were downloaded a few days ago from fontforge (which I haven't had trouble with in the past, but I'll watch more closely from now on). There are 29 files that are infected, some of which have "Geneio" in the title now, even though I couldn't find anything with that title earlier, and while I can't figure out how to make Intego do anything with them, I should be able to find and delete them...at least, I'll give it a try.

  • 3. Re: Need a real solution to InstallMac
    Sasay Level 1 Level 1 (10 points)

    Unfortunately, that didn't solve the problem. Sigh. Well, at least I know where it is. (or think I know)

  • 4. Re: Need a real solution to InstallMac
    Genieo support Level 1 Level 1 (25 points)

    Hi SAsay,

     

    Please go to http://www.installmac.com/downloads/Uninstaller.dmg and run the application to revert all your browsers settings back to default

     

    If this did not work,

    Please go to your browser settings (cmd+,) and change the default homepage and search to match your decision manualy.

     

    See relevant instructions:

     

    Chrome:

    Home page:

    http://support.google.com/chrome/bin/answer.py?hl=en&answer=95421&topic=1735105& ctx=topic

    Search provider:

    https://support.google.com/chrome/answer/95426?hl=en&ref_topic=14676

     

    FF:

    Home page:

    https://support.mozilla.org/en-US/kb/How%20to%20set%20the%20home%20page

    Search provider:

    https://support.mozilla.org/en-US/kb/search-bar-easily-choose-your-search-engine

     

    Safari:

    Home page:

    http://browsers.about.com/od/safar1/ss/safarihomepage_3.htm

    Search provider:

    Please open your safari settings menu (CMD+,)

    Change the search provider to any other on the list

    Restart Safari

    Make a search to verify it was changed.

    Open your safari settings menu again,

    Change the search provider to the one you want

    Restart Safari

    Make a search to verify it was changed.

  • 5. Re: Need a real solution to InstallMac
    Sasay Level 1 Level 1 (10 points)

    Geneio support, I ran the "uninstaller", which apparently installed more things on to my computer, so I will not be trying that again. I went through the instructions for Chrome. I went through the instructions on the above poster's blog, which were more inclusive, as well as every OTHER option I could find. The search page is still on my browser. Whatever your company has dumped on my computer is still there, and nothing seems to eliminate it. I think that's pretty unethical.

  • 6. Re: Need a real solution to InstallMac
    Genieo support Level 1 Level 1 (25 points)

    Hi SAsay,

     

    If I understand you are having truble changing your search provider on Chrome.

    Please open your Chrome settings and follow the instructions in this movie

    http://screencast.com/t/Fkw8OOXuEty

    To change your startpage follow this movie

    http://screencast.com/t/TGMZxoEy

  • 7. Re: Need a real solution to InstallMac
    glndi Level 1 Level 1 (0 points)

    Could you please also provide instructions for removing this from Safari? Like SAsay, I have tried every suggestion I've found and nothing has worked.

     

    I also question the instructions Installmac provides because, afterall, they are they not the very malware I'm trying to remove?

  • 8. Re: Need a real solution to InstallMac
    Genieo support Level 1 Level 1 (25 points)

    Remove settings from Safari:

     

    Lets start with a computer restart just to be on a clean start.

    Open Safari

    Go to preferences (CMD + ,)

    Go to extensions and remove all extensions you do not know.

    Close preferences tab

    Make a search

    Open  preferences and change search provider to any other

    Make a search

    Open  preferences and change search provider to the one you like

    Make a search

    Restart computer

     

    If this does not work, please let me know where did it fail

  • 9. Re: Need a real solution to InstallMac
    andyBall_uk Level 7 Level 7 (20,320 points)

    Follow the steps posted by Linc Davis in this thread...

     

    Back up all data, then remove the "Genieo" spyware....

  • 10. Re: Need a real solution to InstallMac
    glndi Level 1 Level 1 (0 points)

    Just a followup on this: I tried everything I could find online and also tried to clear this with Sophos. Nothing worked. I ended up lugging my big iMac into the ever-trusty http://willytechshop.com and they too could not get it off. They ended up clearing my whole system.

     

    Nasty thing, that malware.

     

    Which leads to my next question: What virus protection do you recommend using for Macs?

  • 11. Re: Need a real solution to InstallMac
    Csound1 Level 8 Level 8 (35,445 points)

    glndi wrote:

     

    Just a followup on this: I tried everything I could find online and also tried to clear this with Sophos. Nothing worked. I ended up lugging my big iMac into the ever-trusty http://willytechshop.com and they too could not get it off. They ended up clearing my whole system.

     

    Nasty thing, that malware.

     

    Which leads to my next question: What virus protection do you recommend using for Macs?

    No antivirus software would protect you from Genio and similar junk.

     

    Read the dialog boxes when you install something, make sure that 'something else' is not included.

     

    Generally, don't install anything unless you KNOW how to remove it.

  • 12. Re: Need a real solution to InstallMac
    andyBall_uk Level 7 Level 7 (20,320 points)

    I don't recommend any.

     

    The instructions at How to replace Bing and get Google back...:    or Removal Guide : Genieo do normally take care of it - I can only think that the earlier link relied on Installmac's flawed uninstaller, which did not remove some component that wasn't included in the manual instructions. Either that, or a version not widely seen yet.

  • 13. Re: Need a real solution to InstallMac
    thomas_r. Level 7 Level 7 (27,960 points)

    Technically, Genieo is not malware. It is adware, and as such, most anti-virus apps don't detect it. Although deceptive means have been used frequently to get this thing downloaded, you still always have had to approve its installation within the installer at a minimum. Keeps them just on this side of legal.

     

    As for removal, I now have an Adware Removal Guide that will help you remove it:

     

    http://www.thesafemac.com/arg

  • 14. Re: Need a real solution to InstallMac
    Sasay Level 1 Level 1 (10 points)

    Thanks for staying on top of this thomas.r--I put your last post in as the "answer" to the question, even tho it took several weeks of your working with me on it to figure it all out. I appreciate the one-on-one help and hope that it made the post on your blog more complete. I can't remember what the very last thing was that we did to get rid of this, but I haven't seen hide nor hair of it in several months.

     

    The big deal, which I'm just going to add here, is being sure you really know where your downloads are coming from. I just got lazy about that. I do creative work, so I download a ton of free fonts for specialized projects. I now know that if a font comes with an "installer", I will pass it up--it's usually a Geneio front. No font ever needs an installer to work properly, especially on a Mac. The font book installs them automatically.

     

    Another tip is to read more at thesafemac.com about sites that allow adware/spyware into their downloads. If possible, never ever ever download something from a third party.