Genieo and betafish?

The article you linked is pure horse excrement.

It is trying to scare you into not using tools to remove the malware created by the author of that article.

If you believe you have installed Adware, use EtreCheck to see if you did and help you remove it.

The first thing you listed is the Sandbox for some ad blocker you installed.

JSON is JavaScript Object Notation. It is a way to pass objects around between software components. Many apps will use JSON even if not using JavaScript.

The way content blockers work in Safari is they are an application that sits in the Applications folder. When you disable them in Safari, that doesn't delete the app. I don't know how Edge or Chrome manages theirs.

Also, things like the sandbox won't get deleted when you remove the application.

Betafish is the company that produces Adblock.

The site you linked is lying to you about finding something as it is trying to con you into installing their malware in order to "help" you remove what it lied to you about.

R_55a wrote:

I did a scan of my hard drive for OSX.Genieo.   According to https://sites.google.com/site/howtotellifyourmacishacked/is-etrecheck-malware, this document is supposed to be malware.  

My search function found only one document in my hard drive with the word “Genieo.”   That document is here:

Library>Group Containers>3KKZV48AQD.com.betafish.adblock-mac>Assets>ThirdParty>easylist_content_blocker_v2.json.

Another website reports that "json" is something in Windows.

Does anyone recognize any of these terms?   I am not sure what any of these documents do.

That web site isn't saying anything about the contents of your hard drive.

It is trying to claim that EtreCheck itself is malware because one time in 2014 I accidentally had used the string "genieo" inside the app, as part of its adware detection and removal logic. I did use that string. And that was enough for a few Virus Total "antivirus engines" to detect it and flag EtreCheck as malware.

Generally, that site is just gibberish written by one of my internet stalkers. Of course, I have asked both VirusTotal and Google to remove this blatantly false and libellous information, and they refused. Don't believe what you see on the internet.

As Malwarebytes is endorsed by many users on this group here is some trusted information.

https://blog.malwarebytes.com/detections/osx-genieo/