Anon4876

Level 1 (2 points)

Q: How to remove Adware?

Recently i've downloaded something and now I have all this adware on safari. Pop up ads and Certain words are highlited that when clicked go to ads for surveys and stuff etc. I've tried everything but i cant get rid of the highlighted text. Does anyone know how to fix this?

MacBook Pro

Posted on Mar 5, 2014 2:06 AM

I have this question too

Solved

Level 10 (207,963 points)

Applications

A:

You installed the "DownLite" trojan, perhaps under a different name. Remove it as follows.

Back up all data.

Triple-click anywhere in the line below on this page to select it:

/Library/Application Support/VSearch

Right-click or control-click the line and select

Services ▹ Reveal in Finder (or just Reveal)

from the contextual menu.* A folder should open with an item named "VSearch" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.

Repeat with each of these lines:

/Library/LaunchAgents/com.vsearch.agent.plist
/Library/LaunchDaemons/com.vsearch.daemon.plist
/Library/LaunchDaemons/com.vsearch.helper.plist
/Library/LaunchDaemons/Jack.plist
/Library/PrivilegedHelperTools/Jack
/System/Library/Frameworks/VSearch.framework

After moving all the files, restart the computer and empty the Trash.

From the Safari menu bar, select

Safari ▹ Preferences... ▹ Extensions

Uninstall any extensions you don't know you need, including any that have the word "Spigot" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.

This trojan is distributed on illegal websites that traffic in pirated movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect much worse to happen in the future.

*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select

Go ▹ Go to Folder...

from the menu bar, paste into the box that opens (command-V). You won't see what you pasted because a line break is included. Press return.

Posted on Mar 6, 2014 9:56 PM

Q: How to remove Adware?

All replies

Helpful answers

first Page 3 of 14 last

by thomas_r.,

thomas_r. May 13, 2014 9:59 AM in response to emo3113
Level 7 (30,919 points)

Mac OS X

May 13, 2014 9:59 AM in response to emo3113

You have the GoPhoto.it adware installed. You'll find removal instructions in my Adware Removal Guide.

(Fair disclosure: The Safe Mac is my site, and contains a Donate button, so I may receive compensation for providing links to The Safe Mac. Donations are not required.)
Reply options

Link to this post

by emo3113,

emo3113 May 13, 2014 12:24 PM in response to thomas_r.
Level 1 (0 points)

May 13, 2014 12:24 PM in response to thomas_r.

That was it. Thank you. Great site BTW.
Reply options

Link to this post

by Harley.L,

Harley.L May 17, 2014 1:22 AM in response to thomas_r.
Level 1 (0 points)

May 17, 2014 1:22 AM in response to thomas_r.

Thank you so much thomas_r. I had the same problem, i quickly went to youe web page and downloaded the adware remover. I had Downlite, and it was removed within matter of seconds. Never been this easy!
Reply options

Link to this post

by vivekj3,

vivekj3 May 18, 2014 11:56 AM in response to Anon4876
Level 1 (0 points)

May 18, 2014 11:56 AM in response to Anon4876

Hi Linc Davis

My problen is a little different. All my internet engines (Safari, Chrome and Firefox) are showing this message. It doesnt let me open any website including gmail. Such irritation it is! Please help me to get rid of this.
Thanks in advance!
Reply options

Link to this post

by thomas_r.,

thomas_r. May 18, 2014 12:20 PM in response to vivekj3
Level 7 (30,919 points)

Mac OS X

May 18, 2014 12:20 PM in response to vivekj3

That is probably a hacked wireless router. See:

How to manage a hacked wireless router

(Fair disclosure: The Safe Mac is my site, and contains a Donate button, so I may receive compensation for providing links to The Safe Mac. Donations are not required.)
Reply options

Link to this post

by dirghatamas,

dirghatamas May 20, 2014 10:43 AM in response to Linc Davis
Level 1 (0 points)

May 20, 2014 10:43 AM in response to Linc Davis

Thank you very much! This solved my problem with adware (mainly coming as mackeeper!)
Reply options

Link to this post

by vivekj3,

vivekj3 May 20, 2014 10:50 AM in response to thomas_r.
Level 1 (0 points)

May 20, 2014 10:50 AM in response to thomas_r.

Thanks a lot Thomas_r! This solved my problem. It was from the router and the service provider had to reset it from its end and now its working fine.

Cheers!
Reply options

Link to this post

by aliamer,

aliamer May 30, 2014 7:17 AM in response to Anon4876
Level 1 (0 points)

May 30, 2014 7:17 AM in response to Anon4876

thank you indeed - it has fixed my problem.
Reply options

Link to this post

by UKBradTheissen,

UKBradTheissen May 31, 2014 12:46 PM in response to Anon4876
Level 1 (0 points)

May 31, 2014 12:46 PM in response to Anon4876

Thank You, it worked.
Reply options

Link to this post

by EditThis,

EditThis Jun 2, 2014 1:08 PM in response to Anon4876
Level 1 (45 points)

Jun 2, 2014 1:08 PM in response to Anon4876

I'm having this exact same problem in Safari. Have followed the directions here from Linc Davis. Was able to find and remove the vsearch files, but not the ones with the word "jack" in them (listed above).

NOTE: I don't appear to get this problem in Safari, which I've had to switch to. Then again, I never use Safari unless Firefox isn't working for a specific task.

Here are the results from the diagnostic Linc suggested above. Any help would be greatly appreciated. I can already see I've got the Genie adware still running, though I've tried several times to get rid of it.

Boot Mode: Normal

Model: MacBookPro9,1

System diagnostics

   2014-05-28 Creative Cloud Helper spin
   2014-05-28 Creative Cloud spin
   2014-05-28 Install spin
   2014-05-28 systemstats spin
   2014-05-30 plugin-container spin
   2014-06-02 firefox spin
   2014-06-02 firefox spin
   2014-06-02 plugin-container spin
   2014-06-02 plugin-container spin
   2014-06-02 plugin-container spin

User diagnostics

   2014-05-13 com.google.Chrome crash

Kernel messages

   May 28 10:54:47   process systemstats[85019] thread 10852593 caught burning CPU! It used more than 50% CPU (Actual recent usage: 58%) over 180 seconds. thread lifetime cpu usage 90.019103 seconds, (86.637119 user, 3.381984 system) ledger info: balance: 90000802036 credit: 90000802036 debit: 0 limit: 90000000000 (50%) period: 180000000000 time since last refill (ns): 154341355076
   May 30 16:05:45   process systemstats[97094] thread 11330186 caught burning CPU! It used more than 50% CPU (Actual recent usage: 82%) over 180 seconds. thread lifetime cpu usage 90.018846 seconds, (87.596639 user, 2.422207 system) ledger info: balance: 90001076891 credit: 90001076891 debit: 0 limit: 90000000000 (50%) period: 180000000000 time since last refill (ns): 109114249564
   May 31 00:00:15   PM notification timeout (pid 85609, Creative Cloud)
   May 31 00:00:15   PM notification timeout (pid 85624, Adobe CEF Helper)
   May 31 00:00:15   PM notification timeout (pid 85625, Adobe CEF Helper)
   Jun 1 17:16:36   Sound assertion - Command/Response TIMED OUT and ( kRequestStateMatch == fCodecRequest->state = 2 ), fCodecRequest->command->codec: 0xffffff801b11f800, fCodecRequest->command->verb: 0x17FF00, fPoweredDown: 0, fAppleGraphicsControllerPoweredOn: 1
   Jun 1 17:16:36   Sound assertion in AppleHDAController at line 5539
   Jun 1 17:16:36   Sound assertion in AppleHDAController at line 5540
   Jun 1 17:16:36   Sound assertion in IOHDACodecDevice at line 144
   Jun 1 17:16:36   Sound assertion in AppleHDAFunctionGroup at line 1225
   Jun 1 17:16:36   Sound assertion in AppleHDAFunctionGroup at line 1155
   Jun 1 20:28:25   wl0: Roamed or switched channel, reason #8, bssid 00:1a:30:8e:21:40
   Jun 1 20:32:45   PM notification timeout (pid 85609, Creative Cloud)
   Jun 1 20:32:45   PM notification timeout (pid 85624, Adobe CEF Helper)
   Jun 1 20:32:45   PM notification timeout (pid 85625, Adobe CEF Helper)
   Jun 2 10:00:01   process firefox[1025] thread 11465348 caught burning CPU! It used more than 50% CPU (Actual recent usage: 60%) over 180 seconds. thread lifetime cpu usage 943.172855 seconds, (888.971331 user, 54.201524 system) ledger info: balance: 90007612234 credit: 893313727271 debit: 803306115037 limit: 90000000000 (50%) period: 180000000000 time since last refill (ns): 149681628534

Loaded extrinsic kernel extensions

   com.paceap.kext.pacesupport.snowleopard (5.9.1)

Extrinsic daemons

   com.paceap.pacesupport
   com.teamviewer.service
   com.paceap.eden.licensed
   com.genieoinnovation.macextension.client
   com.blackmagic-design.streaming.server
   com.blackmagic-design.desktopvideo.helper
   com.blackmagic-design.desktopvideo.DeckLinkHardwareXPCService
   com.avid.interplay.editortranscodestatus
   com.avid.interplay.editorbroker
   com.avid.AMCUninstaller
   com.adobe.fpsaud

Extrinsic agents

   com.c-command.SpamSieve.LaunchAgent
   com.adobe.PDApp.AAMUpdatesNotifier.57232.UUID
   com.teamviewer.desktop
   com.teamviewer.teamviewer
   com.robohippo.HippoConnectAgent
   com.hp.messagecenter.launcher
   com.hp.help.tocgenerator
   com.genieoinnovation.macextension
   com.divx.update.agent
   com.divx.dms.agent
   com.blackmagic-design.DesktopVideoFirmwareUpdater
   com.avid.transcodeserviceworker
   com.avid.interplay.editortranscode
   com.avid.interplay.dmfservice
   com.avid.aviddmfsupportsvc
   com.avid.backgroundservicesmanager
   com.adobe.AdobeCreativeCloud
   com.zeobit.MacKeeper.Helper
   com.spotify.webhelper
   com.plexapp.helper
   com.google.keystone.user.agent

launchd items

   /Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist
             (com.adobe.AAM.Startup-1.0)
   /Library/LaunchAgents/com.adobe.AdobeCreativeCloud.plist
             (com.adobe.AdobeCreativeCloud)
   /Library/LaunchAgents/com.avid.backgroundservicesmanager.plist
             (com.avid.backgroundservicesmanager)
   /Library/LaunchAgents/com.avid.dmfsupportsvc.plist
             (com.avid.aviddmfsupportsvc)
   /Library/LaunchAgents/com.avid.interplay.dmfservice.plist
             (com.avid.interplay.dmfservice)
   /Library/LaunchAgents/com.avid.interplay.editortranscode.plist
             (com.avid.interplay.editortranscode)
   /Library/LaunchAgents/com.avid.transcodeserviceworker.plist
             (com.avid.transcodeserviceworker)
   /Library/LaunchAgents/com.blackmagic-design.DesktopVideoFirmwareUpdater.plist
             (com.blackmagic-design.DesktopVideoFirmwareUpdater)
   /Library/LaunchAgents/com.divx.dms.agent.plist
             (com.divx.dms.agent)
   /Library/LaunchAgents/com.divx.update.agent.plist
             (com.divx.update.agent)
   /Library/LaunchAgents/com.hp.help.tocgenerator.plist
             (com.hp.help.tocgenerator)
   /Library/LaunchAgents/com.hp.messagecenter.launcher.plist
             (com.hp.messagecenter.launcher)
   /Library/LaunchAgents/com.robohippo.HippoConnectAgent.plist
             (com.robohippo.HippoConnectAgent)
   /Library/LaunchAgents/com.teamviewer.teamviewer.plist
             (com.teamviewer.teamviewer)
   /Library/LaunchAgents/com.teamviewer.teamviewer_desktop.plist
             (com.teamviewer.desktop)
   /Library/LaunchDaemons/com.adobe.fpsaud.plist
             (com.adobe.fpsaud)
   /Library/LaunchDaemons/com.apple.aelwriter.plist
             (com.apple.aelwriter)
   /Library/LaunchDaemons/com.apple.qmaster.qmasterd.plist
             (com.apple.qmaster.qmasterd)
   /Library/LaunchDaemons/com.avid.AMCUninstaller.plist
             (com.avid.AMCUninstaller)
   /Library/LaunchDaemons/com.avid.interplay.editorbroker.plist
             (com.avid.interplay.editorbroker)
   /Library/LaunchDaemons/com.avid.interplay.editortranscodestatus.plist
             (com.avid.interplay.editortranscodestatus)
   /Library/LaunchDaemons/com.blackmagic-design.desktopvideo.XPCService.plist
             (com.blackmagic-design.desktopvideo.DeckLinkHardwareXPCService)
   /Library/LaunchDaemons/com.blackmagic-design.DesktopVideoHelper.plist
             (com.blackmagic-design.desktopvideo.helper)
   /Library/LaunchDaemons/com.blackmagic-design.streaming.BMDStreamingServer.plist
             (com.blackmagic-design.streaming.server)
   /Library/LaunchDaemons/com.paceap.eden.licensed.plist
             (com.paceap.eden.licensed)
   /Library/LaunchDaemons/com.robohippo.HippoConnectDaemon.plist
             (com.robohippo.HippoConnectDaemon)
   /Library/LaunchDaemons/com.teamviewer.teamviewer_service.plist
             (com.teamviewer.service)
   /Library/LaunchDaemons/PACESupport.plist
             (com.paceap.pacesupport)
   Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist
             (com.adobe.AAM.Scheduler-1.0)
   Library/LaunchAgents/com.apple.SafariBookmarksSyncer.plist
             (com.apple.Safari)
   Library/LaunchAgents/com.c-command.SpamSieve.LaunchAgent.plist
             (com.c-command.SpamSieve.LaunchAgent)
   Library/LaunchAgents/com.google.keystone.agent.plist
             (com.google.keystone.user.agent)
   Library/LaunchAgents/com.plexapp.helper.plist
             (com.plexapp.helper)
   Library/LaunchAgents/com.spotify.webhelper.plist
             (com.spotify.webhelper)
   Library/LaunchAgents/com.zeobit.MacKeeper.Helper.plist
             (com.zeobit.MacKeeper.Helper)

Startup items

   /Library/StartupItems/FaspBuffers/FaspBuffers
   /Library/StartupItems/FaspBuffers/StartupParameters.plist
   /Library/StartupItems/HP IO/HP IO
   /Library/StartupItems/HP IO/Resources/English.lproj/Localizable.strings
   /Library/StartupItems/PACESupport/PACESupport
   /Library/StartupItems/PACESupport/Resources/PACESupport.plist
   /Library/StartupItems/PACESupport/StartupParameters.plist
   /Library/StartupItems/SATARaid5Daemon/SATARaid5Daemon
   /Library/StartupItems/SATARaid5Daemon/StartupParameters.plist
   /Library/StartupItems/Tablet/StartupParameters.plist
   /Library/StartupItems/Tablet/Tablet
   /Library/StartupItems/Tablet/TabletDriver.app/Contents/Info.plist
   /Library/StartupItems/Tablet/TabletDriver.app/Contents/MacOS/TabletDriver
   /Library/StartupItems/Tablet/TabletDriver.app/Contents/Resources/ApplicationDef aults.plist
   /Library/StartupItems/Tablet/TabletDriver.app/Contents/Resources/ko.lproj/Local izable.strings
   /Library/StartupItems/Tablet/TabletDriver.app/Contents/Resources/zh_CN.lproj/Lo calizable.strings
   /Library/StartupItems/Tablet/TabletDriver.app/Contents/Resources/zh_TW.lproj/Lo calizable.strings
   /Library/StartupItems/Tablet/TabletDriverRelauncher

Extrinsic loadable bundles

   /System/Library/Extensions/ATTOExpressRAID_Enabler.kext
             (com.ATTO.driver.ATTOExpressRAID_Enabler)
   /System/Library/Extensions/ATTORAID_OS10.kext
             (com.ATTO.driver.ATTORAID_OS10)
   /System/Library/Extensions/Avid_SCSI.kext
             (com.avid.driver.Avid_SCSI)
   /System/Library/Extensions/Avid_SCSI_RBC.kext
             (com.avid.driver.Avid_SCSI_RBC)
   /System/Library/Extensions/AvidDX.kext
             (com.Avid.driver.AvidDX)
   /System/Library/Extensions/Belcarra.USBLAN_netpart.kext
             (com.Belcarra.iokit.USBLAN_netpart)
   /System/Library/Extensions/Belcarra.USBLAN_usbpart.kext
             (com.Belcarra.iokit.USBLAN_usbpart)
   /System/Library/Extensions/Blackmagic_Multibridge_Driver.kext
             (com.blackmagic-design.desktopvideo.multibridge.iokit.driver)
   /System/Library/Extensions/DeckLink_Driver.kext
             (com.blackmagic-design.desktopvideo.iokit.driver)
   /System/Library/Extensions/DeckLinkFrameBufferDriver.kext
             (com.blackmagic-design.desktopvideo.iokit.framebufferdriver)
   /System/Library/Extensions/DeckLinkHD_Driver.kext
             (com.blackmagic-design.desktopvideo.iokit.decklinkhddriver)
   /System/Library/Extensions/DigiDal.kext
             (com.digidesign.iokit.DigiDal)
   /System/Library/Extensions/PACESupportFamily.kext
             (com.paceap.kext.pacesupport.master)
   /System/Library/Extensions/RemoteControl.USBLAN_usbpart.kext
             (com.RemoteControl.USBLAN.usbpart)
   /System/Library/Extensions/RNBOClassicNotSeizeDriver.kext
             (com.rnbo.iokit.RNBOClassicNotSeizeDriver)
   /System/Library/Extensions/Sentinel.kext
             (com.SafeNet.driver.Sentinel)
   /System/Library/Extensions/SiliconImage3132r5.kext
             (com.SiliconImage.driver.Si3132r5)
   /System/Library/Extensions/SteerMouse.kext
             (jp.plentycom.driver.SteerMouse)
   /System/Library/Extensions/TabletDriverCFPlugin.bundle
             (No bundle ID)
   /Library/Audio/Plug-Ins/Components/iZInsightAUHook.component
             (com.izotope.audioplugins.AU.Insight)
   /Library/Audio/Plug-Ins/Components/iZMeterTapAUHook.component
             (com.izotope.audioplugins.AU.Meter Tap)
   /Library/Audio/Plug-Ins/VST/iZotope Insight.vst
             (com.izotope.audioplugins.VST.Insight)
   /Library/Audio/Plug-Ins/VST/iZotope Meter Tap.vst
             (com.izotope.audioplugins.VST.Meter Tap)
   /Library/Audio/Plug-Ins/VST3/iZotope Insight.vst3
             (com.izotope.audioplugins.VST.Insight)
   /Library/Audio/Plug-Ins/VST3/iZotope Meter Tap.vst3
             (com.izotope.audioplugins.VST.Meter Tap)
   /Library/Internet Plug-Ins/AdobeAAMDetect.plugin
             (com.AdobeAAMDetectLib.AdobeAAMDetect)
   /Library/Internet Plug-Ins/Aspera Web.plugin
             (com.aspera.AsperaWeb)
   /Library/Internet Plug-Ins/Aspera Web.webplugin
             (com.asperasoft.AsperaWeb)
   /Library/Internet Plug-Ins/Disabled Plug-Ins/Windows Media Plugin
             (com.microsoft.WMP.defaultplugin)
   /Library/Internet Plug-Ins/DivX Web Player.plugin
             (com.divx.DivXPlusWebPlayer)
   /Library/Internet Plug-Ins/DRM Plugin.bundle
             (com.microsoft.DRMPlugin)
   /Library/Internet Plug-Ins/Flip4Mac WMV Plugin.plugin
             (net.telestream.wmv.plugin)
   /Library/Internet Plug-Ins/Flip4Mac WMV Plugin.webplugin
             (net.telestream.wmv.webplugin)
   /Library/Internet Plug-Ins/JavaAppletPlugin.plugin
             (com.oracle.java.JavaAppletPlugin)
   /Library/Internet Plug-Ins/OfficeLiveBrowserPlugin.plugin
             (com.microsoft.officelive.browserplugin)
   /Library/Internet Plug-Ins/OVSHelper.plugin
             (com.divx.OVSHelper)
   /Library/Internet Plug-Ins/Silverlight.plugin
             (com.microsoft.SilverlightPlugin)
   /Library/PreferencePanes/DesktopVideoPrefsPanel.prefPane
             (com.blackmagic-design.desktopvideo.prefspanel)
   /Library/PreferencePanes/Flash Player.prefPane
             (com.adobe.flashplayerpreferences)
   /Library/PreferencePanes/Flip4Mac WMV.prefPane
             (net.telestream.wmv.prefpane)
   /Library/PreferencePanes/SteerMouse.prefPane
             (jp.plentycom.prefpane.SteerMouse)
   /Library/PreferencePanes/Wacom Tablet.prefPane
             (com.wacom.settingsPrefPane)
   /Library/QuickTime/AvidAV1xCodec.component
             (com.avid.qtcodecs.AvidAV1xCodec)
   /Library/QuickTime/AvidAVd1Codec.component
             (com.avid.qtcodecs.AvidAVd1Codec)
   /Library/QuickTime/AvidAVDJCodec.component
             (com.avid.qtcodecs.AvidAVDJCodec)
   /Library/QuickTime/AvidAVdnCodec.component
             (com.avid.qtcodecs.AvidAVdnCodec)
   /Library/QuickTime/AvidAVdvCodec.component
             (com.avid.qtcodecs.AvidAVdvCodec)
   /Library/QuickTime/AvidAVinCodec.component
             (com.avid.qtcodecs.AvidAVinCodec)
   /Library/QuickTime/AvidAVj2Codec.component
             (com.avid.qtcodecs.AvidAVj2Codec)
   /Library/QuickTime/AvidAVmpCodec.component
             (com.avid.qtcodecs.AvidAVmpCodec)
   /Library/QuickTime/AvidAVpkCodec.component
             (com.avid.qtcodecs.AvidAVpkCodec)
   /Library/QuickTime/AvidAVrpCodec.component
             (com.avid.qtcodecs.AvidAVrpCodec)
   /Library/QuickTime/AvidAVUICodec.component
             (com.avid.qtcodecs.AvidAVUICodec)
   /Library/QuickTime/Blackmagic Codec.component
             (com.blackmagic-design.BlackmagicCodec)
   /Library/QuickTime/DivX Decoder.component
             (com.DivXInc.DivXDecoder)
   /Library/QuickTime/DivX Encoder.component
             (com.DivXInc.DivXCodec)
   /Library/ScriptingAdditions/Adobe Unit Types.osax
             (No bundle ID)
   /Library/ScriptingAdditions/HightailOSAX.osax
             (com.hightail.HightailOSAX)
   /Library/Spotlight/GBSpotlightImporter.mdimporter
             (com.apple.garageband.spotlightimporter)
   /Library/Spotlight/iMovie.mdimporter
             (com.apple.iMovieMDImporter)
   Library/Address Book Plug-Ins/SkypeABDialer.bundle
             (com.skype.skypeabdialer)
   Library/Address Book Plug-Ins/SkypeABSMS.bundle
             (com.skype.skypeabsms)
   Library/Internet Plug-Ins/Move-Media-Player.plugin
             (com.movenetworks.movemediaplayer.plugin)
   Library/Mail/Bundles/SpamSieve.mailbundle
             (com.c-command.spamsieve.mailplugin)
   Library/Mail/Bundles (Disabled 1)/SpamSieve.mailbundle
             (com.c-command.spamsieve.mailplugin)
   Library/Mail/Bundles (Disabled 2)/SpamSieve.mailbundle
             (com.c-command.spamsieve.mailplugin)

Extrinsic shared libraries

   /usr/lib/libgenkit.dylib
   /usr/lib/libgutenprint.2.0.3.dylib

DNS (not from DHCP): 8.8.8.8

Netmask: 255.255.240.0

Login hook

   /Library/Application Support/Blackmagic Design/Blackmagic DeckLink/DeckLinkLoginItem.sh

Application check

   com.google.GoogleDrive

Restricted user files: 164

Font problems: 44

Bad plists

   Library/Preferences/ByHost/.GlobalPreferences.001f5bf48181.plist
   Library/Preferences/ByHost/com.apple.DotMacNotifications.001f5bf48181.plist
   Library/Preferences/ByHost/com.apple.FinalCutPro.PreferredEffects.001f5bf48181. plist
   Library/Preferences/ByHost/com.apple.ImageCaptureExtension2.001f5bf48181.plist
   Library/Preferences/ByHost/com.apple.iTunes.001f5bf48181.plist
   Library/Preferences/ByHost/com.apple.iWork.001f5bf48181.plist
   Library/Preferences/ByHost/com.apple.iWork.Keynote.001f5bf48181.plist
   Library/Preferences/ByHost/com.apple.iWork.Numbers.001f5bf48181.plist
   Library/Preferences/ByHost/com.apple.iWork.Pages.001f5bf48181.plist
   Library/Preferences/ByHost/com.apple.MIDI.001f5bf48181.plist
   Library/Preferences/ByHost/com.apple.PrefPane.Network.001f5bf48181.plist
   Library/Preferences/ByHost/com.apple.print.Cache.001f5bf48181.plist
   Library/Preferences/ByHost/com.apple.screensaver.001f5bf48181.plist
   Library/Preferences/ByHost/com.apple.screensaver.slideshow.001f5bf48181.plist
   Library/Preferences/ByHost/com.apple.SoftwareUpdate.001f5bf48181.plist
   Library/Preferences/ByHost/com.apple.systemuiserver.001f5bf48181.plist
   Library/Preferences/com.apple.iphotomosaic.plist
   Library/Preferences/com.bundgmbh.generalnew.plist
   Library/Preferences/com.diomgenic.seismogram.plist

Elapsed time (s): 269
Reply options

Link to this post

by Bamaloo26,

Bamaloo26 Jun 2, 2014 3:41 PM in response to Anon4876
Level 1 (0 points)

Jun 2, 2014 3:41 PM in response to Anon4876

I am having a similar problem, but it must be a different extension because running the checks found nothing. I also have no extensions listed (looked at the awesome adware site), but probably deleted them a while back when this started happening. I continue to get popups in Safari and nothing has resolved the issue thus far. If any of these look funny please let me know!

Extrinsic daemons

com.seagate.TBDecorator.plist
com.microsoft.office.licensing.helper
   com.adobe.fpsaud

Extrinsic agents

com.microsoft.SyncServicesAgent
com.google.keystone.user.agent
   com.adobe.ARM.UUID

launchd items

/Library/LaunchDaemons/com.adobe.fpsaud.plist
            (com.adobe.fpsaud)
/Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist
            (com.microsoft.office.licensing.helper)
Library/LaunchAgents/com.adobe.ARM.UUID.plist
            (com.adobe.ARM.UUID)
Library/LaunchAgents/com.google.keystone.agent.plist
            (com.google.keystone.user.agent)
Library/LaunchAgents/com.microsoft.LaunchAgent.SyncServicesAgent.plist
            (com.microsoft.SyncServicesAgent)

Extrinsic loadable bundles

/System/Library/Extensions/Seagate Storage Driver.kext
            (com.seagate.driver.PowSecDriverCore)
   /Library/Internet Plug-Ins/AdobePDFViewer.plugin
            (com.adobe.acrobat.pdfviewer)
   /Library/Internet Plug-Ins/AdobePDFViewerNPAPI.plugin
            (com.adobe.acrobat.pdfviewerNPAPI)
   /Library/Internet Plug-Ins/CouponPrinter-FireFox_v2.plugin
            (com.coupons.plugin.mozilla-plugin)
   /Library/Internet Plug-Ins/CouponPrinter-Safari.webplugin
            (com.coupons.plugin.safari-plugin)
   /Library/Internet Plug-Ins/Flash Player.plugin
            (com.macromedia.Flash Player.plugin)
   /Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin
            (com.microsoft.sharepoint.browserplugin)
   /Library/Internet Plug-Ins/SharePointWebKitPlugin.webplugin
            (com.microsoft.sharepoint.webkitplugin)
/Library/PreferencePanes/Flash Player.prefPane
            (com.adobe.flashplayerpreferences)
/Library/PreferencePanes/NTFSforMacOSX.prefPane
            (com.paragon-software.filesystems.ntfs.prefpanel)
   Library/Internet Plug-Ins/Picasa.plugin
            (com.google.PicasaPlugin)
Library/Services/Attach to new message in outlook.workflow
            (No bundle ID)
Reply options

Link to this post

by thomas_r.,

thomas_r. Jun 2, 2014 6:22 PM in response to EditThis
Level 7 (30,919 points)

Mac OS X

Jun 2, 2014 6:22 PM in response to EditThis

You have the Genieo adware installed. See my Adware Removal Guide for removal instructions.

You also have MacKeeper installed. This is a garbage app that is currently the subject of two separate class-action lawsuits alleging fraud. Uninstall it.

(Fair disclosure: The Safe Mac is my site, and contains a Donate button, so I may receive compensation for providing links to The Safe Mac. Donations are not required.)
Reply options

Link to this post

by mhannan,

mhannan Jun 8, 2014 12:10 PM in response to Anon4876
Level 1 (0 points)

Jun 8, 2014 12:10 PM in response to Anon4876

Thanks to everyone who has contributed to this. Just solved some of the problems I was having.
Reply options

Link to this post

by lululiana,

lululiana Jun 8, 2014 5:29 PM in response to Linc Davis
Level 1 (0 points)

Jun 8, 2014 5:29 PM in response to Linc Davis

thanks so much Linc! the above fixed my mac!
Reply options

Link to this post

by Fakhr Fakhry,

Fakhr Fakhry Jun 14, 2014 3:08 PM in response to Linc Davis
Level 1 (0 points)

Jun 14, 2014 3:08 PM in response to Linc Davis

Thx.
had the same problem it is solved now
Reply options

Link to this post

first Page 3 of 14 last