Malware Coupon Cabin is hiding on 2009 iMac.

IMac v. 10.11.6, 2.66 GHz Intel, 8 GB 1067 MHz DDR3


My daughter got sucked into downloading Coupon Cabin. I don’t have the energy to pursue non-solutions like:

Go to Extensions and click and drag to trash—“You haven’t downloaded any Extensions yet.” etc.

Posted on Apr 9, 2024 12:01 PM

Reply
2 replies

Apr 11, 2024 7:27 AM in response to lcreel

It's not malware. It's legitimate (though marginally useful) software that was intentionally installed by your daughter.


Their main site is here. When you click on the Add to Safari button, it opens the App Store to install the main app. As soon as that download is complete, it asks you to allow an extension to be added to Safari.


You can't expect to wave a magic wand to get rid of this app. You're going to have to do some manual work. Fortunately, it's easy.


1) Open Safari and then open its preferences. Click on the Extensions tab.



Uncheck the box at the left, then click the extension's Uninstall button to the right.


2) That will jump you right to the Applications folder and highlight the main app. Put CouponCabin in the trash.


3) Empty the trash. Done.




If you really want to get rid of everything, then continue on to remove what will now be dead items.


1) In your user account Library/Containers folder, put the folder CouponCabin Sidekick in the trash.


2) In your user account Library/GroupContainers folder, put the folder WMZWU4Q2GQ.com.couponcabin.couponcabinsidekick in the trash.


3) In your user account Library/Application Scripts folder, put these two items in the trash.


com.couponcabin.couponcabin-sidekick.extension

WMZWU4Q2GQ.com.couponcabin.couponcabinsidekick


4) Empty the trash.

Apr 10, 2024 10:56 AM in response to lcreel

Are you running any VPN, Anti-Virus, or Cleaning apps?


We need to see what all is running, a report from this will not display any personal info...

Using EtreCheck - Apple Community


EtreCheck is a FREE simple little diagnostic tool to display the important details of your system configuration and allow you to copy that information to the Clipboard. It is meant to be used with Apple Support Communities to help people help you with your Mac. It will not display any personal info.

https://www.etrecheck.com/


Thanks for Old Toad’s etrecheck instructions…

Slow iMac 2017 - Apple Community


Use the Note tool on the bottom of this editor's toolbar, as shown in the image, to copy and paste the output from EtreCheck. In a Reply before you click post, look for this to add longer texts...


Earlier versions of etrecheck...


https://macdownload.informer.com/etrecheck/versions/


This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Malware Coupon Cabin is hiding on 2009 iMac.

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.