Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Safari Interference

Problem: [iMac 27" Mohave 10.14.6]

In Safari I successfully log in to my insurance site to file a claim, go to Manage My Account, which comes up momentarily (and stays up) but is covered up by my former homepage yahoo.com, and renders

inaccessibility to a claim form.

A.) Steps taken to resolve which were successful:

  1. Safemode
  2. Firefox browser

B.) Steps taken which were unsuccessful:

  1. Deleted histroy
  2. Deleted most cookies
  3. Reset homepage to different one
  4. Reset SMC
  5. Updated Apple software

Hesitant to delete Yahoo account as I will loose all settings and emails. And, problem seems to be only related to Safari.

Help would be appreciated.

Keith




Posted on Jul 23, 2019 7:59 AM

Reply
Question marked as Best reply

Posted on Jul 25, 2019 7:32 AM

You have adware installed. 


Run EtreCheck again.


In the Sidebar, click the Security button.


 Locate  and remove entries under  Adware and Unsigned files.


 Click the “Remove” button.


 Try downloading this program which was written by Thomas R, a long time poster. The program will search for malware/adware. The program will do the work for you which makes it easy. It may be necessary to run more than one scan. After running the scans, restart the computer.


Malwarebytes Anti-Malware for Mac      10.10 and later


Malwarebytes uninstall

Similar questions

8 replies
Question marked as Best reply

Jul 25, 2019 7:32 AM in response to casey-c

You have adware installed. 


Run EtreCheck again.


In the Sidebar, click the Security button.


 Locate  and remove entries under  Adware and Unsigned files.


 Click the “Remove” button.


 Try downloading this program which was written by Thomas R, a long time poster. The program will search for malware/adware. The program will do the work for you which makes it easy. It may be necessary to run more than one scan. After running the scans, restart the computer.


Malwarebytes Anti-Malware for Mac      10.10 and later


Malwarebytes uninstall

Jul 23, 2019 9:40 AM in response to casey-c


If it works in the Safe Mode, try running this program when booted normally and then copy and paste the output in a reply. The program was created by Etresoft, a frequent contributor.  Please use copy and paste as screen shots can be hard to read. Click “Share Report” button in the toolbar, select “Copy to Clipboard” and then paste into a reply. This will show what is running on your computer. No personal information is shown. If the log won’t post, try posting it in Pastebin and provide a link in a reply. After pasting the report in a PasteBin page, go to the top of the page, and copy the address in the URL bar. Paste that in a new reply.        Pastebin


Etrecheck – System Information



Jul 23, 2019 12:45 PM in response to Eric Root

Eric Root

I am having trouble -- after clicking "Share Report" only thing I see is "Copy". No "Copy to Clipboard" & no "Paste".

Anyway it appears I have an adware issue.

I did click "Copy" and then clicked "Pastebin." That is where the report seems to have gone.

Is this any use to you?

If so, how does one delete this adware?

Keith

Jul 25, 2019 7:26 AM in response to Eric Root

Eric Root:

Here is the relevant part of the report:

Adware:

Launchd: ~/Library/LaunchAgents/com.MyMacUpdater.agent.plist

Executable: /usr/bin/sudo ~/Applications/MyMacUpdater/MyMacUpdater -guid 35973549478465426 -source zp-1907 -url http://request.macmymacupdater.com/macCheckForUpdates/ -brand MyMacUpdater -current_version 1000

Reason: Adware name match

Launchd: ~/Library/LaunchAgents/com.ArtemisResults.plist

Executable: ~/Library/Application Support/com.ArtemisResults/ArtemisResults r

Reason: Adware pattern match

Launchd: /Library/LaunchDaemons/com.ArtemisResultsDaemon.plist

Executable: /Library/Application Support/com.ArtemisResultsDaemon/ArtemisResults r

Reason: Adware pattern match


Unsigned Files:

Launchd: /Library/LaunchAgents/com.MyCouponsmart.agent.plist

Executable: /Applications/MyCouponsmart/MyCouponsmart

Details: Domain name invalid - possibly adware


Launchd: /Library/LaunchAgents/com.mmsprot.agent.plist

Executable: ~/Library/Application Support/.MMSPROT/MMSPROT

Details: Domain name invalid - possibly adware


32-bit Applications:

One 32-bit app


System Launch Agents:

[Not Loaded] 15 Apple tasks

[Loaded] 187 Apple tasks

[Running] 98 Apple tasks


System Launch Daemons:

[Not Loaded] 38 Apple tasks

[Loaded] 190 Apple tasks

[Running] 107 Apple tasks


I also copied the first paragraph of the full report:

EtreCheck version: 5.3.2 (5034)

Report generated: 2019-07-25 08:50:58

Download EtreCheck from https://etrecheck.com

Runtime: 1:19

Performance: Excellent

Sandbox: Enabled

Full drive access: Disabled


Full report was copied to pastebin a few minutes ago.

I could not do as you described, i.e. copy the URL -- it was pastedbin.com.

What else can I do to help?

Keith

Safari Interference

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.