SiglerGem
Level 1 (0 points)

Q: Help!!! Suspected Malware or Virus...I'm not sure...

A friend used my computer and went to putlocker.is to watch movies and downloaded "MplayerX" update supposedly.  He notified me and of course I freaked out.  After I got to the computer, I noticed all of these pop us were coming up through Safari and that had never happened before on an install. Especially a pop up saying your computer has a virus please download this to continue... Since last night and after a few attempts to do little things I though would work like clear browser history, remove recent downloads increase safari preferences to block pop ups, delete and empty trash (which are kind of lame I know but I am not tech savvy) I am still getting crazy pop ups.  Does this mean i have a virus, trojan, or malware?  (Are those even the same thing?) Is there anything I can do to fix this problem?   I can't afford for this to be an issue and I can't afford to take it Apple.  Please help.  I would never have let someone go to a website like that to watch movies but I didn't know he was going on a site like that.

MacBook Pro (13-inch Early 2011), OS X Yosemite (10.10.2), null

Posted on Feb 6, 2015 9:12 AM

Close
SiglerGem

Q: Help!!! Suspected Malware or Virus...I'm not sure...

  • All replies
  • Helpful answers

Previous Page 2

  • by SiglerGem,

    SiglerGem SiglerGem Feb 7, 2015 3:04 PM in response to stevejobsfan0123
    Level 1 (0 points)
    Feb 7, 2015 3:04 PM in response to stevejobsfan0123

    thanks!

  • by thomas_r.,

    thomas_r. thomas_r. Feb 7, 2015 3:08 PM in response to SiglerGem
    Level 7 (30,889 points)
    Mac OS X
    Feb 7, 2015 3:08 PM in response to SiglerGem

    SiglerGem wrote:

     

    I keep finding something in this folder ~/Library/LaunchAgents/com.webhelper.plist

     

    That is a part of a family of adware I call "Buca Apps" (because that was used as the developer name in some of the browser extensions that are part of this adware), which is also responsible for Flashmall ads. For manual removal instructions, see:

     

    http://www.thesafemac.com/arg-buca-apps/

     

    If that alone doesn't do the trick, you may have other adware as well. I've seen machines with as many as six different adware programs installed. For further manual removal instructions, see:

     

    http://www.thesafemac.com/arg

     

    (Fair disclosure: I may receive compensation from links to my sites, TheSafeMac.com and AdwareMedic.com, in the form of buttons allowing for donations. Donations are not required to use my site or software.)

  • by SiglerGem,

    SiglerGem SiglerGem Feb 7, 2015 3:30 PM in response to thomas_r.
    Level 1 (0 points)
    Feb 7, 2015 3:30 PM in response to thomas_r.

    Ok that's awesome! Looks like that worked.  Is there a way to isolate anything downloaded on that specific date and time?  I have figured out from the files I have deleted the time it happened.  The apple support link worked for majority of the adware but I still had adware on the notebook.  I am glad I found it.  This is awesome!  You ALL are awesome!

Previous Page 2