HANROB

Q: I just installed a Flashplayer uodate and now Safari uses Yahoo as the search engine even though the preference I selected is for Google.  How can I get rid of Yahoo?

I just installed a Flashplayer uodate and now Safari uses Yahoo as the search engine even though the preference I selected is for Google.  How can I get rid of Yahoo?

MacBook Pro, Mac OS X (10.7.3), Numbers 09

Posted on Jan 27, 2015 7:51 PM

Close

Q: I just installed a Flashplayer uodate and now Safari uses Yahoo as the search engine even though the preference I selected is for ... more

  • All replies
  • Helpful answers

  • by stedman1,

    stedman1 stedman1 Jan 27, 2015 7:52 PM in response to HANROB
    Level 9 (73,747 points)
    Apple Watch
    Jan 27, 2015 7:52 PM in response to HANROB

    Check the links below for options to remove the Adware.

     

    The Easy, safe, effective method:

    http://www.adwaremedic.com/index.php

     

    If you are comfortable doing manual file removals use the somewhat more difficult method:

    http://support.apple.com/en-us/HT203987

     

    Also read the articles below to be more prepared for the next time there is an issue on your computer.

    https://discussions.apple.com/docs/DOC-7471

    https://discussions.apple.com/docs/DOC-8071

  • by stedman1,

    stedman1 stedman1 Jan 27, 2015 7:53 PM in response to HANROB
    Level 9 (73,747 points)
    Apple Watch
    Jan 27, 2015 7:53 PM in response to HANROB

    After you've gotten rid of the AdWare junk, update the Flash player only from the Adobe site, never, ever from a link in a pop-up message.

  • by Linc Davis,

    Linc Davis Linc Davis Jan 27, 2015 9:33 PM in response to HANROB
    Level 10 (207,973 points)
    Applications
    Jan 27, 2015 9:33 PM in response to HANROB

    That wasn't a Flash update; it was malware. There is no need to download anything to solve this problem.

    If Safari crashes on launch and you don't have another web browser, you should be able to launch Safari by starting up in safe mode.

    You may have installed the "Genieo" or "InstallMac" ad-injection malware. Follow the instructions on this Apple Support page to remove it.

    Back up all data before making any changes.

    Besides the files listed in the linked support article, you may also need to remove this file in the same way:

    ~/Library/LaunchAgents/com.genieo.completer.ltvbit.plist

    If there are other items with a name that includes "Genieo" or "genieo" alongside any of those you find, remove them as well.

    One of the steps in the article is to remove malicious Safari extensions. Do the equivalent in the Chrome and Firefox browsers, if you use either of those.

    After removing the malware, remember to reset your home page in all the web browsers affected, if it was changed.

    If you don't find any of the files or extensions listed, or if removing them doesn't stop the ad injection, then you may have one of the other kinds of adware covered by the support article. Follow the rest of the instructions in the article.

    If you find Apple's instructions too hard to follow, ask for an alternative that doesn't require you to trust a black-box application without knowing what it does.

    Make sure you don't repeat the mistake that led you to install the malware. Chances are you got it from an Internet cesspit such as "Softonic" or "CNET Download." Never visit either of those sites again. You might also have downloaded it from an ad in a page on some other site. The ad would probably have included a large green button labeled "Download" or "Download Now" in white letters. The button is designed to confuse people who intend to download something else on the same page. If you ever download a file that isn't obviously what you expected, delete it immediately.

    In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere  should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.

    Still in System Preferences, open the App Store or Software Update pane and check the box marked

              Install system data files and security updates (OS X 10.10 or later)

    or

              Download updates automatically (OS X 10.9 or earlier)

    if it's not already checked.

  • by Tymama,

    Tymama Tymama Jul 18, 2016 11:52 PM in response to Linc Davis
    Level 1 (4 points)
    Jul 18, 2016 11:52 PM in response to Linc Davis

    Hi, I had a 2ndary user on my computer. I have no problem so far with the admin. user.  OS10.10.10.5

    my Safari, Finder, Sys Pref, every program crashes before opening.  bar at the top just keep blinking, no icons on desktop.  Force quit will not work - Finder etc will appear, and disappear in Force quite dialogue box.   tried ClamX & Malwarebytes. 

    I deleted the 2nd user, rebooted, and created another new 2nd user, and it still has same problems

     

    I didn't see Genieo  anywhere.

    where do i find " ~/Library/LaunchAgents/com.genieo.completer.ltvbit.plist"--  i looked in Library/LaunchAgents, but no genieo

  • by Eric Root,

    Eric Root Eric Root Jul 19, 2016 6:34 AM in response to Tymama
    Level 9 (71,450 points)
    iTunes
    Jul 19, 2016 6:34 AM in response to Tymama

    Go to Finder and select your user/home folder. With that Finder window as the front window, either select Finder/View/Show View options or go command - J.  When the View options opens, check ’Show Library Folder’. That should make your user library folder visible in your user/home folder.  Select Library.

  • by Tymama,

    Tymama Tymama Jul 19, 2016 9:52 AM in response to Eric Root
    Level 1 (4 points)
    Jul 19, 2016 9:52 AM in response to Eric Root

    thanks for the Finder tip, apparently I had gone to the correct Library, the only thing that i see is

    com.adobe.AAM.Updater-1.0.plist   and com.adobeARMCDHelper.cc24aef4a1b90ed[lots of letters].plist   ----that is dated july 11, 2016.   I am going to delete that newer 'adobe' and see what happens.

  • by Tymama,

    Tymama Tymama Jul 19, 2016 10:34 AM in response to Tymama
    Level 1 (4 points)
    Jul 19, 2016 10:34 AM in response to Tymama

    Tried deleting the com.adobeARMCDHelper in Library.  Rebooted, from admin. user, created 2ndary user.

     

    2ndary the top 'menu' area[no words in menu area]  is still blinking on/off black/blank.  no icons on desktop.  Now: can't open Finder, Safari, all apps in dock.  I'm going to delete 2ndary user again....   any other suggestions???  thanks!

  • by Eric Root,

    Eric Root Eric Root Jul 20, 2016 6:44 AM in response to Tymama
    Level 9 (71,450 points)
    iTunes
    Jul 20, 2016 6:44 AM in response to Tymama

    You might want to start your own post since this one is from last year. A new post would be much more visible. You can link to this one.


    Try running this program and then copy and paste the output in a new post. The program was created by Etresoft, a frequent contributor.  Please use copy and paste as screen shots can be hard to read. Click “Share Report” button in the toolbar, select “Copy to Clipboard” and then paste into a reply. This will show what is running on your computer. No personal information is shown.
      

    Etrecheck – System Information