Q: how to get rid of pop ups flash mall

I have been trying dilligently for over a week now to remove these horrible ad pop ups and banners after running my Mac Pro for about 5 years with zero invasive problems.  Incidental to exploring the MacKeeper application I got nailed big time.by flash mall which was riding on the MacKeeper.  Now I see why everyone is staying away from that MacKeeper Ap. 

Thank you so much Linc.  Followed your instructions and it appears I am now back to a nice clean machine.  Lessons learned; do not go looking for greener grass unless you watch what you are stepping into.

Thank you it worked

The advertisements are still popping up! I've done step 1 and 2, but i couldn't open steps 3 and 4 to delete and move to trash! Help!

thanks to link davis  my trojan is gone 1  many thanks

Thanks Linc, your solution was money. Much appreciated!

This completely worked!!!  Thank you!

Awesome, Thanks Linc!!

There was also an application file called WebTools.app that had to be removed.  The installer disguised itself as a flash player update when trying to watch NHL playoffs on line.

You are the man! 

Thank you!

Start time: 22:24:28 05/04/15

Revision: 1166

Model Identifier: MacBookPro11,3

System Version: OS X 10.9.5 (13F1077)

Kernel Version: Darwin 13.4.0

Time since boot: 14 minutes

USB

   USB Receiver (Logitech Inc.)

Log

   May  4 22:20:26 com.spotify.webhelper: Throttling respawn: Will start in 9 seconds

   May  4 22:20:36 com.spotify.webhelper: Throttling respawn: Will start in 9 seconds

   May  4 22:20:46 com.spotify.webhelper: Throttling respawn: Will start in 9 seconds

   May  4 22:20:56 com.spotify.webhelper: Throttling respawn: Will start in 9 seconds

   May  4 22:21:06 com.spotify.webhelper: Throttling respawn: Will start in 9 seconds

   May  4 22:21:16 com.spotify.webhelper: Throttling respawn: Will start in 9 seconds

   May  4 22:21:26 com.spotify.webhelper: Throttling respawn: Will start in 9 seconds

   May  4 22:21:36 com.spotify.webhelper: Throttling respawn: Will start in 9 seconds

   May  4 22:21:46 com.spotify.webhelper: Throttling respawn: Will start in 9 seconds

   May  4 22:21:56 com.spotify.webhelper: Throttling respawn: Will start in 9 seconds

   May  4 22:22:06 com.spotify.webhelper: Throttling respawn: Will start in 9 seconds

   May  4 22:22:17 com.spotify.webhelper: Throttling respawn: Will start in 9 seconds

   May  4 22:22:27 com.spotify.webhelper: Throttling respawn: Will start in 9 seconds

   May  4 22:22:37 com.spotify.webhelper: Throttling respawn: Will start in 9 seconds

   May  4 22:22:47 com.spotify.webhelper: Throttling respawn: Will start in 9 seconds

   May  4 22:22:57 com.spotify.webhelper: Throttling respawn: Will start in 9 seconds

   May  4 22:23:07 com.spotify.webhelper: Throttling respawn: Will start in 9 seconds

   May  4 22:23:17 com.spotify.webhelper: Throttling respawn: Will start in 9 seconds

   May  4 22:23:27 com.spotify.webhelper: Throttling respawn: Will start in 9 seconds

   May  4 22:23:37 com.spotify.webhelper: Throttling respawn: Will start in 9 seconds

   May  4 22:23:47 com.spotify.webhelper: Throttling respawn: Will start in 9 seconds

   May  4 22:23:57 com.spotify.webhelper: Throttling respawn: Will start in 9 seconds

   May  4 22:24:07 com.spotify.webhelper: Throttling respawn: Will start in 9 seconds

   May  4 22:24:17 com.spotify.webhelper: Throttling respawn: Will start in 9 seconds

   May  4 22:24:27 com.spotify.webhelper: Throttling respawn: Will start in 9 seconds

Daemons

   com.adobe.fpsaud

   com.apple.launchd.peruser.0

   - status: -

   com.apple.launchd.peruser.55

   com.apple.launchd.peruser.89

   - status: -

   com.apple.launchd.peruser.92

   com.v.helper

   - status: -

Agents

   com.adobe.AdobeCreativeCloud

   - status: -

   com.apple.AirPortBaseStationAgent

   com.apple.mrt.uiagent

   - status: 255

   com.apple.photostream-agent

   - status: -

   com.spotify.webhelper

   com.v.agent

   - status: -

Applications

   /Applications/Adobe Dreamweaver CC 2014.1/Adobe Dreamweaver CC 2014.1.app

   - com.adobe.dreamweaver-15.1

   /Applications/Adobe Illustrator CC 2014/Adobe Illustrator.app

   - com.adobe.illustrator

   /Applications/Adobe Illustrator CC 2014/Scripting.localized/Sample Scripts.localized/AppleScript.localized/Analyze Documents.localized/Analyze Documents.app

   - N/A

   /Applications/Adobe Illustrator CC 2014/Scripting.localized/Sample Scripts.localized/AppleScript.localized/Calendar.localized/Make Calendar.app

   - N/A

   /Applications/Adobe Illustrator CC 2014/Scripting.localized/Sample Scripts.localized/AppleScript.localized/Contact Sheet Demo.localized/Contact Sheets.app

   - N/A

   /Applications/Adobe Illustrator CC 2014/Scripting.localized/Sample Scripts.localized/AppleScript.localized/Export Flash Animation.localized/Export Flash Animation.app

   - N/A

   /Applications/Adobe Illustrator CC 2014/Scripting.localized/Sample Scripts.localized/AppleScript.localized/Web Gallery.localized/Web Gallery.app

   - N/A

   /Applications/Adobe InDesign CC 2014/Adobe InDesign CC 2014.app

   - com.adobe.InDesign

   /Applications/Adobe Photoshop CC 2014/Adobe Photoshop CC 2014.app

   - com.adobe.Photoshop

   /Applications/Adobe Photoshop Lightroom 5.app

   - com.adobe.Lightroom5

   /Applications/Adobe/Adobe Content Viewer.app

   - com.adobe.dmp.contentviewer

   /Applications/DPS App Builder.app

   - com.adobe.ViewerBuilder

   /Applications/Fetch.app

   - com.fetchsoftworks.Fetch

   /Applications/Firefox.app

   - org.mozilla.firefox

   /Applications/Garmin Express.app

   - com.garmin.renu.client

   /Applications/Google Chrome.app

   - com.google.Chrome

   /Applications/InstallMac/Reset Search.app

   - com.tabatoo.InstallerT

   /Applications/NetExtender.app

   - N/A

   /Applications/Spotify.app

   - com.spotify.client

   /Applications/Sublime Text 2.app

   - com.sublimetext.2

   /Applications/Utilities/Adobe AIR Application Installer.app

   - com.adobe.air.ApplicationInstaller

   /Applications/Utilities/Adobe AIR Uninstaller.app

   - com.adobe.air.Installer

   /Applications/Utilities/Adobe Application Manager/D6/Setup.app

   - com.adobe.Installers.Redirector

   /Applications/Utilities/Adobe Application Manager/DECore/DE5/resources/uninstall/Uninstall Product.app

   - N/A

   /Applications/Utilities/Adobe Application Manager/DECore/DE6/resources/uninstall/Uninstall Product.app

   - N/A

   /Applications/Utilities/Adobe Application Manager/DECore/Setup.app

   - com.adobe.Installers.Setup

   /Applications/Utilities/Adobe Application Manager/DWA/Setup.app

   - com.adobe.Installers.Redirector

   /Applications/Utilities/Adobe Application Manager/IPC/AdobeIPCBroker.app

   - com.adobe.AdobeIPCBroker

   /Applications/Utilities/Adobe Application Manager/LWA/AAM Registration Notifier.app

   - com.adobe.PDApp.AAMRegistrationNotifier

   /Applications/Utilities/Adobe Application Manager/LWA/adobe_licutil.app

   - com.adobe.adobe_licutil

   /Applications/Utilities/Adobe Application Manager/P6/AAM Registration Notifier.app

   - com.adobe.AAMRegistrationNotifier

   /Applications/Utilities/Adobe Application Manager/P6/adobe_licutil.app

   - com.adobe.adobe_licutil

   /Applications/Utilities/Adobe Application Manager/P7/AAM Registration Notifier.app

   - com.adobe.AAMRegistrationNotifier

   /Applications/Utilities/Adobe Application Manager/P7/adobe_licutil.app

   - com.adobe.adobe_licutil

   /Applications/Utilities/Adobe Application Manager/UWA/AAM Updates Notifier.app

   - com.adobe.PDApp.AAMUpdatesNotifier

   /Applications/Utilities/Adobe Application Manager/UWA/LogTransport2.app

   - com.adobe.headlights.LogTransport2App

   /Applications/Utilities/Adobe Application Manager/core/AAMLauncherUtil.app

   - adobe.AAMLauncherUtil

   /Applications/Utilities/Adobe Application Manager/core/Adobe Application Manager.app

   - com.adobe.PDApp

   /Applications/Utilities/Adobe Creative Cloud/ACC/Creative Cloud.app

   - com.adobe.acc.AdobeCreativeCloud

   /Applications/Utilities/Adobe Creative Cloud/CoreSync/Core Sync.app

   - com.adobe.accmac

   /Applications/Utilities/Adobe Creative Cloud/CoreSyncExtension/ACCFinderBundleLoader_32.app

   - Adobe.ACCFinderBundleLoader-32

   /Applications/Utilities/Adobe Creative Cloud/CoreSyncExtension/ACCFinderBundleLoader_64.app

   - Adobe.ACCFinderBundleLoader-64

   /Applications/Utilities/Adobe Creative Cloud/HEX/Adobe CEF Helper EH.app

   - com.adobe.acc.HEXHelper.EH

   /Applications/Utilities/Adobe Creative Cloud/HEX/Adobe CEF Helper NP.app

   - com.adobe.acc.HEXHelper.NP

   /Applications/Utilities/Adobe Creative Cloud/HEX/Adobe CEF Helper.app

   - com.adobe.acc.HEXHelper

   /Applications/Utilities/Adobe Creative Cloud/Utils/Creative Cloud Installer.app

   - com.adobe.Install

   /Applications/Utilities/Adobe Creative Cloud/Utils/Creative Cloud Uninstaller.app

   - com.adobe.ACCC.Uninstaller

   /Applications/Utilities/Adobe Creative Cloud/Utils/CreativeCloud(URIHandler).app

   - com.adobe.CreativeCloud-URIHandler-

   /Applications/Utilities/Adobe Flash Player Install Manager.app

   - com.adobe.flashplayer.installmanager

   /Applications/ZipCloud.app

   - com.jdibackup.ZipCloud

   /Applications/mediaDownloader.app

   - com.yourcompany.mediaDownloader

   /Library/Application Support/Adobe/InDesign/Version 10.0/AdobeInDesign10AppBase/JFS/Adobe InDesign CC 2014.app

   - N/A

   /Library/Application Support/Adobe/InDesign/Version 10.0/AdobeInDesign10AppBase/MFS/Adobe InDesign CC 2014.app

   - N/A

   /Library/Application Support/Adobe/InDesign/Version 10.0/AdobeInDesign10AppBase/RFS/Adobe InDesign CC 2014.app

   - N/A

   /Library/Application Support/Adobe/Installers/AdobeDigitalPublishingCC2014/Contentviewer/Adobe AIR Installer.app

   - com.adobe.air.Installer

   /Library/Application Support/Adobe/Installers/AdobeDigitalPublishingCC2014/Contentviewer/Install Adobe Content Viewer.app

   - com.adobe.dmp.contentviewer.installer

   /Library/Application Support/Adobe/Installers/AdobeDigitalPublishingCC2014/Contentviewer/Install DPS App Builder.app

   - com.adobe.ViewerBuilder.installer

   /Library/Application Support/Adobe/Installers/AdobeInDesign10AppBase/ExtraFiles/INSTALLDIR_EXE/Adobe InDesign CC 2014.app

   - N/A

   /Library/Application Support/Adobe/Uninstall/{UUID}.app

   - N/A

   /Library/Application Support/Adobe/Uninstall/{UUID}.app

   - N/A

   /Library/Application Support/Adobe/Uninstall/{UUID}/{UUID}.app

   - N/A

   /Library/Application Support/Adobe/Uninstall/{UUID}.app

   - N/A

   /Library/Application Support/Microsoft/Silverlight/OutOfBrowser/SLLauncher.app

   - com.microsoft.silverlight.sllauncher

   /Library/Application Support/Script Editor/Templates/Cocoa-AppleScript Applet.app

   - com.apple.ScriptEditor.id.cocoa-applet-template

   /Library/Application Support/Script Editor/Templates/Droplets/Droplet with Settable Properties.app

   - com.apple.ScriptEditor.id.droplet-with-settable-properties-template

   /Library/Application Support/Script Editor/Templates/Droplets/Recursive File Processing Droplet.app

   - com.apple.ScriptEditor.id.file-processing-droplet-template

   /Library/Application Support/Script Editor/Templates/Droplets/Recursive Image File Processing Droplet.app

   - com.apple.ScriptEditor.id.image-file-processing-droplet-template

   /Library/Application Support/d8ba1edd95d56d02/Agent/agent.app

   - com.someproduct.agent

   /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Adobe AIR Application Installer.app

   - com.adobe.air.ApplicationInstaller

   /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/Adobe AIR Updater.app

   - com.adobe.air.Installer

   /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/Template.app

   - com.adobe.air.Template

   /Users/USER/Downloads/Install Spotify.app

   - com.spotify.danstaller

   /Users/USER/Downloads/p3plcpnl0474.prod.phx3.secureserver.net Secure WebDisk.app

   - N/A

   /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/Default aohghmighlieiainnegkcijnfilokake.app

   - com.google.Chrome.app.Default-aohghmighlieiainnegkcijnfilokake-internal

   /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_apdfllckaahabafndbhieahigkjlhalf/Default apdfllckaahabafndbhieahigkjlhalf.app

   - com.google.Chrome.app.Default-apdfllckaahabafndbhieahigkjlhalf-internal

   /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_bfbameneiokkgbdmiekhjnmfkcnldhhm/Default bfbameneiokkgbdmiekhjnmfkcnldhhm.app

   - com.google.Chrome.app.Default-bfbameneiokkgbdmiekhjnmfkcnldhhm-internal

   /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_blpcfgokakmgnkcojhhkbfbldkacnbeo/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app

   - com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo-internal

   /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_coobgpohoikkiipiblmjeljniedjpjpf/Default coobgpohoikkiipiblmjeljniedjpjpf.app

   - com.google.Chrome.app.Default-coobgpohoikkiipiblmjeljniedjpjpf-internal

   /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_gpdjojdkbbmdfjfahjcgigfpmkopogic/Default gpdjojdkbbmdfjfahjcgigfpmkopogic.app

   - com.google.Chrome.app.Default-gpdjojdkbbmdfjfahjcgigfpmkopogic-internal

   /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_homgcnaoacgigpkkljjjekpignblkeae/Default homgcnaoacgigpkkljjjekpignblkeae.app

   - com.google.Chrome.app.Default-homgcnaoacgigpkkljjjekpignblkeae-internal

   /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_lneaknkopdijkpnocmklfnjbeapigfbh/Default lneaknkopdijkpnocmklfnjbeapigfbh.app

   - com.google.Chrome.app.Default-lneaknkopdijkpnocmklfnjbeapigfbh-internal

   /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_nmmhkkegccagdldgiimedpiccmgmieda/Default nmmhkkegccagdldgiimedpiccmgmieda.app

   - com.google.Chrome.app.Default-nmmhkkegccagdldgiimedpiccmgmieda-internal

   /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_ohcpnigalekghcmgcdcenkpelffpdolg/Default ohcpnigalekghcmgcdcenkpelffpdolg.app

   - com.google.Chrome.app.Default-ohcpnigalekghcmgcdcenkpelffpdolg-internal

   /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_piaagpfopkmnmddehfppblapllldicbl/Default piaagpfopkmnmddehfppblapllldicbl.app

   - com.google.Chrome.app.Default-piaagpfopkmnmddehfppblapllldicbl-internal

   /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_pjkljhegncpnkpknbcohdijeoejaedia/Default pjkljhegncpnkpknbcohdijeoejaedia.app

   - com.google.Chrome.app.Default-pjkljhegncpnkpknbcohdijeoejaedia-internal

   /Users/USER/Library/Application Support/IM.Installer/Completer.app

   - com.tabatoo.InstallerT

Frameworks

   /Library/Frameworks/Adobe AIR.framework

   - com.adobe.AIR

   /System/Library/Frameworks/v.framework

   - N/A

PrefPane

   /Library/PreferencePanes/Flash Player.prefPane

   - com.adobe.flashplayerpreferences

Bundles

   /Library/Application Support/Adobe/APE/3.4/adbeapecore.framework/Versions/A/Libraries/Flash Player.plugin

   - com.macromedia.FlashPlayer-10.4-10.5.plugin

   /Library/Application Support/Adobe/Plug-Ins/CC/File Formats/Camera Raw.plugin

   - com.adobe.CameraRaw

   /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/AdobeCP15.plugin

   - com.adobe.adobecp

   /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/Flash Player.plugin

   - com.macromedia.FlashPlayer-10.6.plugin

   /Library/Internet Plug-Ins/AdobeAAMDetect.plugin

   - com.AdobeAAMDetectLib.AdobeAAMDetect

   /Library/Internet Plug-Ins/Flash Player.plugin

   - com.macromedia.Flash

   /Library/Internet Plug-Ins/Silverlight.plugin

   - com.microsoft.SilverlightPlugin

   /Users/USER/Library/Address Book Plug-Ins/SkypeABDialer.bundle

   - com.skype.skypeabdialer

   /Users/USER/Library/Address Book Plug-Ins/SkypeABSMS.bundle

   - com.skype.skypeabsms

   /Users/USER/Library/Application Support/Google/Chrome/PepperFlash/12.0.0.70/PepperFlashPlayer.plugin

   - com.macromedia.PepperFlashPlayer.pepper

dylibs

   /Applications/Adobe InDesign CC 2014/Plug-Ins/Dictionaries/LILO/Linguistics/UserDictionaryMigrationTool/Framewo rks/ICUConverter.framework/Versions/4.0/libicucnv.40.0.dylib

   /Applications/Adobe InDesign CC 2014/Plug-Ins/Dictionaries/LILO/Linguistics/UserDictionaryMigrationTool/Framewo rks/ICUData.framework/Versions/4.0/libicudata.40.0.dylib

   /Applications/Adobe InDesign CC 2014/Plug-Ins/Dictionaries/LILO/Linguistics/UserDictionaryMigrationTool/Framewo rks/ICUInternationalization.framework/Versions/4.0/libicui18n.40.0.dylib

   /Applications/Adobe InDesign CC 2014/Plug-Ins/Dictionaries/LILO/Linguistics/UserDictionaryMigrationTool/Framewo rks/ICUUnicode.framework/Versions/4.0/libicuuc.40.0.dylib

   /Applications/Utilities/Adobe Application Manager/D6/D6Native.dylib

   /Applications/Utilities/Adobe Application Manager/DECore/ARKSelector.dylib

   /Applications/Utilities/Adobe Application Manager/DECore/DE5/Setup.dylib

   /Applications/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/ARKCmdCaps.dylib

   /Applications/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/ARKCmdFS.dylib

   /Applications/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/ARKEngine.dylib

   /Applications/Utilities/Adobe Application Manager/DECore/DE5/resources/libraries/AdobePIM.dylib

   /Applications/Utilities/Adobe Application Manager/DECore/DE6/Setup.dylib

   /Applications/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/ARKCmdCaps.dylib

   /Applications/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/ARKCmdFS.dylib

   /Applications/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/ARKEngine.dylib

   /Applications/Utilities/Adobe Application Manager/DECore/DE6/resources/libraries/AdobePIM.dylib

   /Applications/Utilities/Adobe Application Manager/DWA/DWANative.dylib

   /Applications/Utilities/Adobe Application Manager/LWA/PWANative.dylib

   /Applications/Utilities/Adobe Application Manager/LWA/adobe_caps.dylib

   /Applications/Utilities/Adobe Application Manager/LWA/adobe_oobelib.dylib

   /Applications/Utilities/Adobe Application Manager/LWA/adobe_upgrade.dylib

   /Applications/Utilities/Adobe Application Manager/P6/IMSLib.dylib

   /Applications/Utilities/Adobe Application Manager/P6/P6Native.dylib

   /Applications/Utilities/Adobe Application Manager/P6/VulcanBridge.dylib

   /Applications/Utilities/Adobe Application Manager/P6/VulcanMessage.dylib

   /Applications/Utilities/Adobe Application Manager/P6/adobe_oobelib.dylib

   /Applications/Utilities/Adobe Application Manager/P6/adobe_upgrade.dylib

   /Applications/Utilities/Adobe Application Manager/P6/axlib.dylib

   /Applications/Utilities/Adobe Application Manager/P7/IMSLib.dylib

   /Applications/Utilities/Adobe Application Manager/P7/P7Native.dylib

   /Applications/Utilities/Adobe Application Manager/P7/VulcanBridge.dylib

   /Applications/Utilities/Adobe Application Manager/P7/VulcanMessage4.dylib

   /Applications/Utilities/Adobe Application Manager/P7/VulcanMessage5.dylib

   /Applications/Utilities/Adobe Application Manager/P7/adobe_oobelib.dylib

   /Applications/Utilities/Adobe Application Manager/P7/adobe_upgrade.dylib

   /Applications/Utilities/Adobe Application Manager/P7/axlibv7.dylib

   /Applications/Utilities/Adobe Application Manager/UWA/UWANative.dylib

   /Applications/Utilities/Adobe Application Manager/core/AdobePIM.dylib

   /Applications/Utilities/Adobe Application Manager/core/switcher/CCM_UI.dylib

   /Applications/Utilities/Adobe Application Manager/core/switcher/DWA_UI.dylib

   /Applications/Utilities/Adobe Application Manager/core/switcher/LWA_UI.dylib

   /Applications/Utilities/Adobe Creative Cloud/ACC/C3ContainerBL.dylib

   /Applications/Utilities/Adobe Creative Cloud/AppsPanel/AppsPanelIL.dylib

   /Applications/Utilities/Adobe Creative Cloud/AssetsPanel/AssetsPanelBL.dylib

   /Applications/Utilities/Adobe Creative Cloud/BehancePanel/BehancePanelBL.dylib

   /Applications/Utilities/Adobe Creative Cloud/CEF/Chromium Embedded Framework.framework/Libraries/libcef.dylib

   /Applications/Utilities/Adobe Creative Cloud/CEF/libplugin_carbon_interpose.dylib

   /Applications/Utilities/Adobe Creative Cloud/CoreExt/ANSClient.dylib

   /Applications/Utilities/Adobe Creative Cloud/CoreExt/Analytics.dylib

   /Applications/Utilities/Adobe Creative Cloud/CoreExt/C3Prefs.dylib

   /Applications/Utilities/Adobe Creative Cloud/CoreExt/CmdCntr.dylib

   /Applications/Utilities/Adobe Creative Cloud/CoreExt/LocManager.dylib

   /Applications/Utilities/Adobe Creative Cloud/CoreExt/NotificationManager.dylib

   /Applications/Utilities/Adobe Creative Cloud/CoreExt/VulcanMessage5.dylib

   /Applications/Utilities/Adobe Creative Cloud/CoreExt/VulcanWrapper.dylib

   /Applications/Utilities/Adobe Creative Cloud/CoreSyncPlugins/ExchangePlugin/ExManCoreLib/Contents/Frameworks/libExManC oreLibCoreSync64.dylib

   /Applications/Utilities/Adobe Creative Cloud/ElevationManager/ElevationManager.dylib

   /Applications/Utilities/Adobe Creative Cloud/HEX/HEX.dylib

   /Applications/Utilities/Adobe Creative Cloud/HomePanel/HomePanelBL.dylib

   /Applications/Utilities/Adobe Creative Cloud/MarketPanel/MarketPanelBL.dylib

   /Applications/Utilities/Adobe Creative Cloud/NEX/NEX.dylib

   /Applications/Utilities/Adobe Creative Cloud/NEX/NEXUILibrary.dylib

   /Applications/Utilities/Adobe Creative Cloud/Utils/AdobePIM.dylib

   /Applications/Utilities/Adobe Creative Cloud/core/NXGCore.dylib

   /Library/Application Support/Adobe/APE/3.4/adbeapecore.framework/Versions/A/Libraries/WebKit.dylib

   /Library/Application Support/Adobe/Installers/AdobeDigitalPublishingCC2014/CustomHooks.dylib

   /Library/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/WebKit.dylib

   /System/Library/Frameworks/v.framework/Versions/A/Libraries/libLoader.dylib

   /Users/USER/Library/Application Support/Firefox/Profiles/qj1iqrxa.default/gmp-gmpopenh264/1.1/libgmpopenh264.dy lib

   /Users/USER/Library/Application Support/Google/Chrome/WidevineCDM/1.4.7.796/_platform_specific/mac_x64/libwidev inecdm.dylib

Contents of /Library/LaunchAgents/com.d8ba1edd95d56d02.agent.plist

   - mod date: May  2 21:21:51 2015

   - checksum: 2718072168

   <?xml version="1.0" encoding="UTF-8"?>

   <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

   <plist version="1.0">

   <dict>

    <key>Label</key>

    <string>com.v.agent</string>

    <key>OnDemand</key>

    <false/>

    <key>ProgramArguments</key>

    <array>

    <string>/Library/Application Support/d8ba1edd95d56d02/Agent/agent.app/Contents/MacOS/agent</string>

    </array>

    <key>RunAtLoad</key>

    <true/>

    <key>KeepAlive</key>

    <true/>

    <key>LimitLoadToSessionType</key>

    <string>Aqua</string>

    <key>ThrottleInterval</key>

    <integer>10</integer>

   </dict>

   </plist>

Contents of /Library/LaunchDaemons/com.d8ba1edd95d56d02.daemon.plist

   - mod date: May  2 21:21:51 2015

   - checksum: 3589846207

   <?xml version="1.0" encoding="UTF-8"?>

   <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

   <plist version="1.0">

   <dict>

    <key>Disabled</key>

           <true/>

    <key>Label</key>

    <string>com.v.daemon</string>

    <key>OnDemand</key>

    <true/>

    <key>ProgramArguments</key>

           <array>

                   <string>/Library/Application Support/d8ba1edd95d56d02/Agent/agent.app/Contents/MacOS/agent</string>

    <string>-update</string>

           </array>

    <key>KeepAlive</key>

    <true/>

    <key>RunAtLoad</key>

    <true/>

    <key>ThrottleInterval</key>

    <integer>10</integer>

   </dict>

   </plist>

Contents of /Library/LaunchDaemons/com.d8ba1edd95d56d02.helper.plist

   - mod date: May  2 21:21:51 2015

   - checksum: 2323123929

   <?xml version="1.0" encoding="UTF-8"?>

   <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

   <plist version="1.0">

   <dict>

    <key>Label</key>

    <string>com.v.helper</string>

    <key>OnDemand</key>

    <true/>

    <key>ProgramArguments</key>

           <array>

                   <string>/Library/Application Support/d8ba1edd95d56d02/Agent/agent.app/Contents/MacOS/agent</string>

    <string>-helper</string>

           </array>

    <key>KeepAlive</key>

    <true/>

    <key>RunAtLoad</key>

    <true/>

    <key>ThrottleInterval</key>

    <integer>10</integer>

   </dict>

   </plist>

Font issues: 6

DNS: 209.18.47.61 (static)

Listeners

   kdc: kerberos

   launchd: afpovertcp

   launchd: microsoft-ds

   launchd: ssh

User login items

   Garmin Express Service

   - /Applications/Garmin Express.app/Contents/Library/LoginItems/Garmin Express Service.app

   iTunesHelper

   - /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app

   TuneupMyMac

   - missing value

   Spotify

   - /Applications/Spotify.app

Safari extensions

   GoldenBoy

   - com.gold.safari

   Omnibar

   - com.genieo.safari

   serfsearch

   - com.serfsearch.safariext

Restricted files: 612

Elapsed time (sec): 179

You have some adware installed. See my Adware Removal Guide for help getting rid of it.

You also have a Safari extension called "serfsearch" that I suspect may be adware, but have never confirmed that. If that's not something you recognize, can you contact me privately? (See the "contact me" links at the bottom of any of the pages in my Adware Removal Guide.) Thanks!

(Fair disclosure: I may receive compensation from links to my sites, TheSafeMac.com and AdwareMedic.com.)

THANK YOU SOO MUCH!!!

Linc Davis, thank you!

Genius.

I tried but on my Finder it doesn't say that "

~/Library/LaunchAgents

"

is found... there is nothing in there but I am still getting the ads

Start time: 10:07:43 05/17/15

Revision: 1166

Model Identifier: MacBookPro11,1

System Version: OS X 10.10.3 (14D136)

Kernel Version: Darwin 14.3.0

Time since boot: 4 minutes

FileVault: On

Diagnostic reports

   2015-05-07 sharingd crash

Log

   May 17 08:34:57 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   May 17 08:34:57 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   May 17 08:34:57 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   May 17 08:34:57 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   May 17 08:34:57 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   May 17 08:34:57 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   May 17 08:34:57 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   May 17 08:34:57 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   May 17 08:34:57 com.apple.iTunesHelper.18208: Service exited with abnormal code: 1

   May 17 08:34:58 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   May 17 08:34:58 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   May 17 08:34:58 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   May 17 08:34:58 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   May 17 08:34:58 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   May 17 08:34:58 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   May 17 08:34:58 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   May 17 08:34:58 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   May 17 08:34:58 [SendRawHCICommand] ### ERROR: EnqueueRequestForController failed (err=e00002d8)

   May 17 08:35:54 SATA WARNING: IDENTIFY DEVICE checksum not implemented.

   May 17 08:36:03 com.webtools.update.0.0.0.9.agent: Service setup event to handle failure and will not launch until it fires.

   May 17 08:44:29 process com.apple.WebKit[425] caught causing excessive wakeups. Observed wakeups rate (per sec): 161; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 45006

   May 17 08:46:03 com.webtools.update.0.0.0.9.agent: Interval spawn of service failed: 139: Service cannot presently execute

   May 17 09:49:03 com.mackeeper.MacKeeper.Helper: Service setup event to handle failure and will not launch until it fires.

   May 17 09:55:08 SATA WARNING: IDENTIFY DEVICE checksum not implemented.

   May 17 10:04:09 SATA WARNING: IDENTIFY DEVICE checksum not implemented.

Daemons

   com.apple.installer.osmessagetracing

Agents

   com.apple.AirPortBaseStationAgent

   com.apple.Finder

   - status: -15

   com.synology.SynoSIMBL

   com.synology.SynoSIMBL_RefreshFinder

Extensions

   /Library/Extensions/HoRNDIS.kext

   - com.joshuawise.kexts.HoRNDIS

   /System/Library/Extensions/HoRNDIS.kext

   - com.joshuawise.kexts.HoRNDIS

   /System/Library/Extensions/JMicronATA.kext

   - com.jmicron.JMicronATA

Applications

   /Applications/AppCleaner.app

   - com.freemacsoft.AppCleaner

   /Applications/AppCleaner.app/Contents/Library/LoginItems/AppCleaner Helper.app

   - com.freemacsoft.AppCleaner-Helper

   /Applications/FlowSync.app

   - fi.polar.FlowSync

   /Applications/Google Chrome.app

   - com.google.Chrome

   /Applications/MacScan 2/MacScan Scheduler.app

   - N/A

   /Applications/MacScan 2/MacScan.app

   - com.securemac.MacScan

   /Applications/Synology Assistant.app

   - com.yourcompany.DSAssistant

   /Applications/Synology Photo Station Uploader.app

   - com.synology.PhotoStationUploader

   /Applications/VLC.app

   - org.videolan.vlc

   /Library/Application Support/Script Editor/Templates/Cocoa-AppleScript Applet.app

   - com.apple.ScriptEditor.id.cocoa-applet-template

   /Library/Application Support/Script Editor/Templates/Droplets/Droplet with Settable Properties.app

   - com.apple.ScriptEditor.id.droplet-with-settable-properties-template

   /Library/Application Support/Script Editor/Templates/Droplets/Recursive File Processing Droplet.app

   - com.apple.ScriptEditor.id.file-processing-droplet-template

   /Library/Application Support/Script Editor/Templates/Droplets/Recursive Image File Processing Droplet.app

   - com.apple.ScriptEditor.id.image-file-processing-droplet-template

   /Library/Image Capture/Devices/Canon IJScanner2.app

   - jp.co.canon.ijscanner2.scanner.ica

   /Library/Image Capture/Devices/Canon IJScanner4.app

   - jp.co.canon.ij.ica.scanner4

   /Library/Image Capture/Devices/EPSON Scanner.app

   - com.epson.scanner.ica

   /Library/Image Capture/Devices/HP Scanner 3.app

   - com.hp.scanModule3

   /Library/Printers/hp/Fax/fax.backend

   - com.hp.fax

   /Library/Printers/hp/Fax/rastertofax.filter

   - com.hp.rastertofax

   /Library/Printers/hp/Utilities/HP Utility.app

   - com.hp.printerutility

   /Library/Printers/hp/Utilities/HP Utility.app/Contents/Applications/HP Event Status.app

   - com.hp.event.status.handler.generic

   /Library/Printers/hp/Utilities/HP Utility.app/Contents/Applications/LegacyScanEventHandler.app

   - com.hp.scan.button.handler.legacy

   /Library/Printers/hp/Utilities/HP Utility.app/Contents/Library/LoginItems/HP Device Monitor.app

   - com.hp.devicemonitor

   /Library/Printers/hp/Utilities/HP Utility.app/Contents/Library/LoginItems/HP Device Monitor.app/Contents/Library/LoginItems/HP Device Monitor.app

   - com.hp.devicemonitor

   /Library/Printers/hp/Utilities/Handlers/ScanEventHandler.app

   - com.hp.scan.button.handler.generic

   /Library/Printers/hp/cups/filters/pdftopdf.filter

   - com.hp.print.cups.filter.pdftopdf

   /Users/USER/Applications/Chrome Apps.localized/Default apdfllckaahabafndbhieahigkjlhalf.app

   - com.google.Chrome.app.Default-apdfllckaahabafndbhieahigkjlhalf

   /Users/USER/Applications/Chrome Apps.localized/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app

   - com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo

   /Users/USER/Applications/Chrome Apps.localized/Default pjkljhegncpnkpknbcohdijeoejaedia.app

   - com.google.Chrome.app.Default-pjkljhegncpnkpknbcohdijeoejaedia

   /Users/USER/Applications/flashmall.app

   - com.flashmall.AppHelper

   /Users/USER/Library/Application Support/CitrixOnline/CitrixOnlineLauncher.app

   - com.citrixonline.mac.WebDeploymentApp

   /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_aohghmighlieiainnegkcijnfilokake/Default aohghmighlieiainnegkcijnfilokake.app

   - com.google.Chrome.app.Default-aohghmighlieiainnegkcijnfilokake-internal

   /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_apdfllckaahabafndbhieahigkjlhalf/Default apdfllckaahabafndbhieahigkjlhalf.app

   - com.google.Chrome.app.Default-apdfllckaahabafndbhieahigkjlhalf-internal

   /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_blpcfgokakmgnkcojhhkbfbldkacnbeo/Default blpcfgokakmgnkcojhhkbfbldkacnbeo.app

   - com.google.Chrome.app.Default-blpcfgokakmgnkcojhhkbfbldkacnbeo-internal

   /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_coobgpohoikkiipiblmjeljniedjpjpf/Default coobgpohoikkiipiblmjeljniedjpjpf.app

   - com.google.Chrome.app.Default-coobgpohoikkiipiblmjeljniedjpjpf-internal

   /Users/USER/Library/Application Support/Google/Chrome/Default/Web Applications/_crx_pjkljhegncpnkpknbcohdijeoejaedia/Default pjkljhegncpnkpknbcohdijeoejaedia.app

   - com.google.Chrome.app.Default-pjkljhegncpnkpknbcohdijeoejaedia-internal

   /Users/USER/Library/Application Support/IM.Installer/Completer.app

   - com.tabatoo.InstallerT

Frameworks

   /Library/Frameworks/EWSMac.framework

   - com.eSellerate.EWSMac67108872

   /Users/USER/Library/Frameworks/EWSMac.framework

   - com.eSellerate.EWSMac67108868

PrefPane

   - N/A

Bundles

   /Library/Printers/Canon/IJScanner/Plugins/ag07_09.plugin

   - jp.co.canon.scangear.ag07.09

   /Library/Printers/Canon/IJScanner/Plugins/ag08_09.plugin

   - jp.co.canon.scangear.ag08.09

   /Library/Printers/Canon/IJScanner/Plugins/cijsdl_bjnp.plugin

   - jp.co.canon.ij.scangear.cijsdl.bjnp

   /Library/Printers/Canon/IJScanner/Plugins/cijsdl_iom.plugin

   - jp.co.canon.ij.scangear.cijsdl.iom

   /Library/Printers/Canon/IJScanner/Plugins/cijsdl_lld.plugin

   - jp.co.canon.ij.scangear.cijsdl.lld

   /Library/Printers/Canon/IJScanner/Plugins/cijsds_ag.plugin

   - jp.co.canon.ij.scangear.cijsds.ag

   /Library/Printers/Canon/IJScanner/Plugins/cijsds_ijfsh.plugin

   - jp.co.canon.ij.scangear.cijsds.ijfsh

   /Library/Printers/Canon/IJScanner/Plugins/cijsds_mldv0.plugin

   - jp.co.canon.ij.scangear.cijsds.mldv0

   /Library/Printers/Canon/IJScanner/Plugins/cijsds_os106.plugin

   - jp.co.canon.ij.scangear.cijsds.os106

   /Library/Printers/Canon/IJScanner/Plugins/cijsds_racs2.plugin

   - jp.co.canon.ij.scangear.cijsds.racs2

   /Library/Printers/Canon/IJScanner/Plugins/cijsds_rotate.plugin

   - jp.co.canon.ij.scangear.cijsds.rotate

   /Library/Printers/Canon/IJScanner/Plugins/cijsds_smac.plugin

   - jp.co.canon.ij.scangear.cijsds.smac

   /Library/Printers/Canon/IJScanner/Plugins/cijsds_zoom.plugin

   - jp.co.canon.ij.scangear.cijsds.zoom

   /Library/Printers/Canon/IJScanner/Plugins/cncl09_09.plugin

   - jp.co.canon.scangear.lld09.09

   /Library/Printers/Canon/IJScanner/Plugins/cnq2413_09.plugin

   - jp.co.canon.scanner.cnq2413.09

   /Library/Printers/Canon/IJScanner/Plugins/cnq2414_09.plugin

   - jp.co.canon.scanner.cnq2414.09

   /Library/Printers/Canon/IJScanner/Plugins/cnq4807_09.plugin

   - jp.co.canon.scanner.cnq4807.09

   /Library/Printers/Canon/IJScanner/Plugins/cnq4808_09.plugin

   - jp.co.canon.scanner.cnq4808.09

   /Library/Printers/Canon/IJScanner/Plugins/cnq4809_09.plugin

   - jp.co.canon.scanner.cnq4809.09

   /Library/Printers/Canon/IJScanner/Plugins/cnq9601_09.plugin

   - jp.co.canon.scanner.cnq9601.09

   /Library/Printers/Canon/IJScanner/Plugins/ijfshlib_09.plugin

   - jp.co.canon.scangear.ijfshlib.09

   /Library/Printers/Canon/IJScanner/Plugins/mld07_09.plugin

   - jp.co.canon.scangear.mld07.09

   /Library/Printers/Canon/IJScanner/Plugins/mld08_09.plugin

   - jp.co.canon.scangear.mld08.09

   /Library/Printers/Canon/IJScanner/Plugins/mld09_09.plugin

   - jp.co.canon.scangear.mld09.09

   /Library/Printers/Canon/IJScanner/Plugins/mld9601_09.plugin

   - jp.co.canon.scangear.mld9601.09

   /Library/Printers/Canon/IJScanner/Plugins/sfusb_09.plugin

   - jp.co.canon.sf.scanner.sfusb.09

   /Library/Printers/Canon/IJScanner/Plugins/sgusb_09.plugin

   - jp.co.canon.scangear.usb.09

   /Library/Printers/Canon/IJScanner/Plugins/smac_09.plugin

   - jp.co.canon.scangear.smac.09

   /Library/Printers/Canon/IJScanner/Plugins/zoom_09.plugin

   - jp.co.canon.scangear.zoom.09

   /Users/USER/Library/Internet Plug-Ins/CitrixOnlineWebDeploymentPlugin.plugin

   - com.citrixonline.mac.WebDeploymentPlugin

dylibs

   /Users/USER/Library/Application Support/Google/Chrome/WidevineCDM/1.4.7.796/_platform_specific/mac_x64/libwidev inecdm.dylib

Contents of /Library/LaunchAgents/com.synology.SynoSIMBL.plist

   - mod date: Sep 28 12:28:36 2014

   - checksum: 4073692875

   <?xml version="1.0" encoding="UTF-8"?>

   <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

   <plist version="1.0">

   <dict>

    <key>Label</key>

    <string>com.synology.SynoSIMBL</string>

    <key>Program</key>

    <string>/Library/ScriptingAdditions/SynoCxtMenuSIMBL.osax/Contents/Resources/Sy noCxtMenuSIMBL Agent.app/Contents/MacOS/SynoCxtMenuSIMBL Agent</string>

    <key>RunAtLoad</key>

    <false/>

    <key>OnDemand</key>

    <false/>

   </dict>

   </plist>

Contents of /Library/LaunchAgents/com.synology.SynoSIMBL_RefreshFinder.plist

   - mod date: Sep 28 12:28:36 2014

   - checksum: 2954061226

   <?xml version="1.0" encoding="UTF-8"?>

   <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

   <plist version="1.0">

   <dict>

    <key>Label</key>

    <string>com.synology.SynoSIMBL_RefreshFinder</string>

    <key>ProgramArguments</key>

    <array>

    <string>/usr/bin/killall</string>

    <string>Finder</string>

    </array>

    <key>RunAtLoad</key>

    <true/>

    <key>OnDemand</key>

    <true/>

   </dict>

   </plist>

Contents of /System/Library/LaunchDaemons/org.apache.httpd.plist

   - mod date: Apr 12 12:40:14 2015

   - checksum: 3012644940

   <?xml version="1.0" encoding="UTF-8"?>

   <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

   <plist version="1.0">

   <dict>

    <key>Disabled</key>

    <true/>

    <key>Label</key>

    <string>org.apache.httpd</string>

    <key>EnvironmentVariables</key>

    <dict>

    <key>XPC_SERVICES_UNAVAILABLE</key>

    <string>1</string>

    </dict>

    <key>ProgramArguments</key>

    <array>

    <string>/usr/sbin/httpd-wrapper</string>

    <string>-D</string>

    <string>FOREGROUND</string>

    </array>

    <key>OnDemand</key>

    <false/>

   </dict>

   </plist>

User crontab

   0 10 * * 2,6 /Applications/MacScan\ 2/MacScan.app/Contents/MacOS/MacScan -autoscan YES -autoquit YES

User login items

   iTunesHelper

   - /Applications/iTunes.app/Contents/MacOS/iTunesHelper.app

   Google Chrome

   - /Applications/Google Chrome.app

Safari extensions

   GoldenBoy

   - com.gold.safari

iCloud errors

   Finder: 2

   cloudd: 6

Restricted files: 68

Lockfiles: 2

Elapsed time (sec): 251