vikaspell

Q: Malware/adware removal instructions needed

Os : 10.11.3

 

Symptoms : popup on chrome (wonderlandads)

 

I did search on google and found popups to wonderlandads is adware/malware.

 

I have scanned my system with Avast / avira and malware bytes . It did not find anything

 

I checked the extension and did not find any suspicious extension( only lastpass extenstion is there )

 

I reset the browser , cleared the history and cache, checked the default search and default page all seems to be correct.

 

The popup is getting very irritating.

How can i identify and remove this adware.

I assume there is some legitimate software that has the adware bundled but i dont know which one.

 

Please help

 

Vik

MacBook Pro with Retina display, OS X Yosemite (10.10.5)

Posted on Jan 30, 2016 1:53 AM

Close

Q: Malware/adware removal instructions needed

  • All replies
  • Helpful answers

  • by db24401,

    db24401 db24401 Jan 30, 2016 2:11 AM in response to vikaspell
    Level 3 (884 points)
    Desktops
    Jan 30, 2016 2:11 AM in response to vikaspell

    <edit : removed my post>

  • by vikaspell,

    vikaspell vikaspell Jan 30, 2016 2:07 AM in response to db24401
    Level 1 (4 points)
    iPhone
    Jan 30, 2016 2:07 AM in response to db24401

    I have already used this and it found nothing

     

    Vik

  • by Raicya,

    Raicya Raicya Jan 30, 2016 5:30 AM in response to vikaspell
    Level 3 (913 points)
    iPad
    Jan 30, 2016 5:30 AM in response to vikaspell
  • by Eric Root,

    Eric Root Eric Root Jan 30, 2016 10:55 AM in response to vikaspell
    Level 9 (72,916 points)
    iTunes
    Jan 30, 2016 10:55 AM in response to vikaspell
  • by vikaspell,

    vikaspell vikaspell Jan 31, 2016 2:12 AM in response to Eric Root
    Level 1 (4 points)
    iPhone
    Jan 31, 2016 2:12 AM in response to Eric Root

    Dear Eric,

     

    Thanks for your reply.

    However your link gives suggestion for windows PC i am running a mac. Version 10.11.3(el capitan)

     

    As suggested in the link I have already run the Mac version of malwarebyts anti malware ( which did not find any threats)

     

    Second was the adwcleaner ( which is not available for mac) so i am left helpless

    Third was Avast browser cleanup( which is not available for mac) again i am left helpless.

     

    Please advice what can i do?

     

    Vik

  • by thomas_r.,

    thomas_r. thomas_r. Jan 31, 2016 2:33 AM in response to vikaspell
    Level 7 (30,929 points)
    Mac OS X
    Jan 31, 2016 2:33 AM in response to vikaspell

    Vik,

     

    Choose Contact Support from the Help menu in Malwarebytes Anti-Malware for Mac. That will put you in touch with our support techs, who can help you whether this is a new piece of adware we aren't yet aware of or a problem not related to adware.

     

    Thomas Reed

    Director of Mac Offerings, Malwarebytes

  • by Linc Davis,

    Linc Davis Linc Davis Jan 31, 2016 10:44 AM in response to vikaspell
    Level 10 (208,000 points)
    Applications
    Jan 31, 2016 10:44 AM in response to vikaspell

    First, never use any kind of "anti-virus" or "anti-malware" software on a Mac. That's how you cause problems, not how you solve them.


    If Safari is not affected, you may have installed a malicious Chrome extension such as "Adblock Super" or "News Ticker Remover." Remove all extensions you don't know you need. If in doubt, remove all of them.

  • by vikaspell,

    vikaspell vikaspell Feb 1, 2016 4:00 AM in response to Linc Davis
    Level 1 (4 points)
    iPhone
    Feb 1, 2016 4:00 AM in response to Linc Davis

    hello thomas

     

    I am in touch with a "thomas R" on the support team. Is that you? I am actually awaiting his reply hopefully soon.

     

    Hello Linc,

     

    For a commoner like us we are left with no option but to resort to "anti-virus and anti-malware" to get rid of the infection. i agree most of the times we end up putting in more malware thru these software however i have tried to use recognised software in the above field which did not actually come to a permanent solution till now.

     

    As for your suggestion of checking the extension I have already done that the only extension i have was a few google drive , google sheet . extension which i removed and i have just left the lastpass extension.

     

    The problem however still persists.

     

    In the last few days of trying to get myself free from malware in have been going into the launch agents and launch daemons and startup areas and found that there are many application which i deleted long back which still exist.

    i have deleted those launchs.

     

     

    thanks

    vik

  • by Linc Davis,Solvedanswer

    Linc Davis Linc Davis Feb 1, 2016 6:45 AM in response to vikaspell
    Level 10 (208,000 points)
    Applications
    Feb 1, 2016 6:45 AM in response to vikaspell

    we are left with no option but to resort to "anti-virus and anti-malware" to get rid of the infection

    That's what the "anti-malware" industry wants you to think, but it's not true, and as you've already found, the products of that industry don't protect you. They will never protect you. Windows and Android users, who are trained to believe that they must use anti-malware products, are infested with malware. I am an active Internet user, I've never used any anti-malware product, and I've never been infected with malware. That's because I rely on myself, not on others, for protection. Anyone can do the same, with the same results.


    Please create a new Chrome user profile. Note that Chrome can sync your account settings between devices, so if you enable that feature, malicious profile data can spread from one to another in a virus-like way.

  • by vikaspell,

    vikaspell vikaspell Feb 1, 2016 1:47 PM in response to Linc Davis
    Level 1 (4 points)
    iPhone
    Feb 1, 2016 1:47 PM in response to Linc Davis

    Dear Linc Davis,

     

    Your solution makes a lot of sense now that i see it i removed chrome and the only thing i did after reinstalling chrome was to sign in in my id to get my bookmarks back and the popups started again.

     

    As per your suggestion i have created a new user  which does not sync. and so far the popups are not there.

    i ran to my other mac and removed the user from there too .. it also had the popups from wonderland ads.

    third removed the user rom the chrome in iphone i did not need it there anyways.

     

    I will continue to use it for some time to make sure the popups dont show up..

     

    But just in case i want to use the syncing of the bookmarks ( actually i dont need the bookmarks synced its just that they were easily backup and restored if needed).

     

    Is there a way i can delete the user data stored with google and start afresh on the same user id?

     

    Vik

  • by Linc Davis,

    Linc Davis Linc Davis Feb 1, 2016 2:56 PM in response to vikaspell
    Level 10 (208,000 points)
    Applications
    Feb 1, 2016 2:56 PM in response to vikaspell

    I don't use Chrome and I can't give you specific instructions, but there should be a way to export only your bookmarks to a file. Do that, then reset your profile according to the Google procedure linked earlier. Import the bookmarks.

  • by vikaspell,

    vikaspell vikaspell Feb 1, 2016 3:24 PM in response to Linc Davis
    Level 1 (4 points)
    iPhone
    Feb 1, 2016 3:24 PM in response to Linc Davis

    Dear Mr davis,

     

    I would like to thank you for your help.

    I think the problem has been resolved.:)

     

    Vik