lintile91

Q: Please help with Malware issue!

I accidentally downloaded the malware offerz4u a few days ago and cannot figure out how to get rid of it. I get popups whenever I click on something or i'm on a shopping website. It's slowing down my internet.

 

I've tried looking through Safari extensions to uninstall it and it's not there. Same with my applications folder and my downloads folder. i've tried searching for many terms I read about on similar forums here and none of them show up on Finder. I've also tried looking through Activity Monitor as well and don't see anything suspicious (unless i'm missing it?)

 

I have tried following steps from Apple's instructions on how to remove Malware but it didn't change anything.

 

I DO NOT want to download any malware remover system.

I do not have the option called "Reset Safari"

 

Computer info:

OS X Yosemite Version 10.10.4

Safari Version 8.0.7

 

Is there anything I can try??

MacBook Pro, OS X Yosemite (10.10.4)

Posted on Aug 8, 2015 8:30 AM

Close

Q: Please help with Malware issue!

  • All replies
  • Helpful answers

  • by Barney-15E,

    Barney-15E Barney-15E Aug 8, 2015 8:32 AM in response to lintile91
    Level 9 (50,483 points)
    Mac OS X
    Aug 8, 2015 8:32 AM in response to lintile91
  • by Linc Davis,

    Linc Davis Linc Davis Aug 8, 2015 9:01 AM in response to lintile91
    Level 10 (208,000 points)
    Applications
    Aug 8, 2015 9:01 AM in response to lintile91

    I DO NOT want to download any malware remover system.

    That's the right attitude. Fortunately for you, there's no need. Some kinds of adware can be removed by following the instructions on the Apple Support page linked above. If those instructions don't work for you, see below.

    This easy procedure will detect any kind of adware that I know of. Deactivating it is a separate, and even easier, procedure that doesn't involve downloading anything.

    Some legitimate software is ad-supported and may display ads in its own windows or in a web browser while it's running. That's not malware and it may not show up.

    Step 1

    Please triple-click the line below on this page to select it, then copy the text to the Clipboard by pressing the key combination command-C:

    ~/Library/LaunchAgents

    In the Finder, select

              Go Go to Folder...

    from the menu bar and paste into the box that opens by pressing command-V. Press return. Either a folder named "LaunchAgents" will open, or you'll get a notice that the folder can't be found. If the folder isn't found, go to the next step.

    If the folder does open, press the key combination command-2 to select list view, if it's not already selected. There should be a column in the Finder window headed Date Modified. Click that heading twice to sort the contents by date with the newest at the top. If necessary, enlarge the window so that all of the contents are showing.

    Follow the instructions in this support article under the heading "Take a screenshot of a window." An image file with a name beginning in "Screen Shot" should be saved to the Desktop. Open the screenshot and make sure it's readable. If not, capture a smaller part of the screen showing only what needs to be shown.

    Start a reply to this message. Drag the image file into the editing window to upload it. You can also include text in the reply.

    Leave the folder open for now.

    Step 2

    Do as in Step 1 with this line:

    /Library/LaunchAgents

    The folder that may open will have the same name, but is not the same, as the one in Step 1. As in that step, the folder may not exist.

    Step 3

    Repeat with this line:

    /Library/LaunchDaemons

    This time the folder will be named "LaunchDaemons."

    Step 4

    Open the Safari preferences window and select the Extensions tab. If any extensions are listed, post a screenshot. If there are no extensions, or if you can't launch Safari, skip this step.

    Step 5

    If you use the Firefox or Chrome browser, open its extension list and do as in Step 4.

  • by Eric Root,

    Eric Root Eric Root Aug 8, 2015 10:45 AM in response to lintile91
    Level 9 (72,916 points)
    iTunes
    Aug 8, 2015 10:45 AM in response to lintile91

    Reset Safari has been replaced with Clear History and Website Data.

  • by weesye,

    weesye weesye Jan 31, 2016 1:24 PM in response to lintile91
    Level 1 (4 points)
    iPhone
    Jan 31, 2016 1:24 PM in response to lintile91

    The same thing happened to me a few days ago.  I use MacKeeper as my security/cleanup utility, so I ran an antivirus scan (which includes malware-adware) of my system and it located seven adware files and gave me the option of deleting them, which of course I did.  Problem solved instantly.  Whew.