You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

MacKeeper/Zerobit Pop Up ad Problem

Can someone PLEASE tell me how to stop these MacKeeper/Zerobit pops from happening on my computer?

I've never used MacKeeper nor do I plan to ever use it now that this ad keeps popping up unwanted. What happens is I get this Mac "recommends" box that I have to click "Ok" for or completely quit Safari in order to get rid of it. Then there is this stupid ad for MacKeeper sitting there. I can seem to find anyway to get rid of it. Anyone else have this problem? Thanks.

17 inch MBP 2.66 ghz, 15 inch MBP, 21 inch iMac, Mac OS X (10.6.6)

Posted on Mar 17, 2011 3:57 PM

Reply
Question marked as Top-ranking reply

Posted on Mar 17, 2011 4:15 PM

It's a horrible little application without an uninstall utility ...

Make sure you remove all items on this list:

Applications/MacKeeper.app

In the System Library:
- /Library/Application Support/MacKeeper
- /Library/LaunchDaemons/com.zeobit.MacKeeper.plugin.AntiTheft.daemon
- /Library/LaunchDaemons/com.zeobit.MacKeeper.AntiVirus

In your User Library:
- /Users/yourname/Library/Preference/com.zeobit.MacKeeper.Helper.plist
- /Users/yourname/Library/LaunchAgents/com.zeobit.MacKeeper.Helper
- /Users/yourname/Library/Caches/com.zeobit.MacKeeper
- /Users/yourname/Library/LaunchAgents/com.zeobit.MacKeeper.plugin.Backup.agent
- /Users/yourname/Library/Preferences/com.zeobit.MacKeeper.plist

If you get an error message that an item is in use and can't be moved/deleted open Activity Monitor and find the process and Force Quit then delete it.

User uploaded file
248 replies

Nov 20, 2011 8:36 AM in response to LIZ BUCHER

It sounds to me like you are confusing normal web-based pop-up ads that are displayed by certain sites with the pop-ups that MacKeeper displays after it has been installed. These are not the same. There is nothing you can do about ads on the web other than block them with software, and (preferably) boycotting the site that displays them, if you can figure out which one that is. (Often, I get pop-unders that sneak past Safari's pop-up blocker, and those are hard to ID as you don't typically find them until much later.)

Nov 20, 2011 9:24 AM in response to LIZ BUCHER

Please read this whole message before doing anything.


This procedure is a diagnostic test. It won’t solve your problem. Don’t be disappointed when you find nothing has changed after you complete it.


Third-party system modifications are a common cause of usability problems. By a “system modification,” I mean software that affects the operation of other software -- potentially for the worse. The following procedure will help identify which such modifications you've installed. Don’t be alarmed by the complexity of these instructions -- they’re easy to carry out and won’t change anything on your Mac.


These steps are to be taken while booted in “normal” mode, not in safe mode. If you’re now running in safe mode, reboot as usual before continuing.


Below are four lines of text in monospaced type, which are actually shell commands -- little programs. They’re harmless, but they must be used exactly as given in order to work.


First and most important, don’t run these commands until you have verified that they’re legitimate. Never execute shell commands from an untrusted source without knowing what they do, or at least that they don’t do anything harmful. I’ve posted these same commands, with minor variations, many times on this site. You should be able to find other discussions in which they were used without ill effects. Do that before proceeding.


Some of the commands will probably line-wrap in your browser, but each one is really just a single long line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, and you can then either copy or drag it. The headings “Step 1” and so on are not part of the commands.


To begin, launch the Terminal application; e.g., by entering the first few letters of its name in a Spotlight search.


Step 1


Copy or drag -- do not type -- the line below into the Terminal window, then press return:


kextstat -kl | awk ' !/apple/ { print $6 $7 } '


Post the lines of output (if any) that appear below what you just entered (the text, please, not a screenshot.)


Step 2


Repeat with this line:


sudo launchctl list | sed 1d | awk ' !/0x|apple|com\.vix|edu\.|org\./ { print $3 } '


This time, you'll be prompted for your login password, which won't be displayed when you type it. You may get a one-time warning not to screw up. You don't need to post the warning.


Step 3


launchctl list | sed 1d | awk ' !/0x|apple|edu\.|org\./ { print $3 } '


Step 4

ls -1A {,/}Library/{Ad,Compon,Ex,Fram,In,La,Mail/Bu,P*P,Priv,Qu,Scripti,Servi,Sta}* 2> /dev/null


Important: If you synchronize with a MobileMe account, your me.com email address will appear in the output of the above command. Change it to something like “user@me.com” before posting.


Remember, this is all drag-and-drop or copy-and-paste, whichever you prefer -- no typing, except your password.


You can then quit Terminal.

Nov 21, 2011 3:22 PM in response to Browknee

forever hounded by mackeeper pop up add windows? i installed AdBlock (a safari extension) and now i am mackeeper pop up free 🙂

my joy of surfing the internet without some dweeb in a beard (nothing against beards mind you!) suggesting i install some crappy software is back. it's my computer if i want to install crappy software i will, but i don't want to be hounded about it night and day! oh yeah...sorry for the lack of capitalisation in the text, i just couldn't be bothered with the shift key...

Dec 15, 2011 11:42 PM in response to Browknee

I signed on to this forum for help with this problem.


I have a MacBook running 10.5.7, using Safari and Chrome and Opera.


It's not a Pop UP, but a Pop UNDER, coming without notice. The only way I knew something was amiss was my cooling fan roaring to life.


I scanned for Zeobit and came up empty.


After scouring this thread, I went to Safari -> Preferences -> Security and realized my cookies were set to "Always". I have changed it to "Only from sites I visit". I think clicked on "Show Cookies" and at the bottom were two cookies for Zeobit. Deleted.


I've also gone to http://glimmerblocker.org/ to download the GlimmerBlocker app and will be trying that out.


I also noticed my AdBlock was disabled, so I re-enabled and then put in a filter specifically to block zeobit and mackeeper.


I've owned this laptop for 5 years and have never had any real ad/spyware problem except for this pop-under.


Hopefully these steps will rid me of the problem. I hope this helps some of you out.

Dec 22, 2011 6:37 PM in response to Browknee

I just wrote this letter to the CEO of Zeobit. I never write letters.



Slava,


I downloaded and used MacKeeper a few days ago to see if I could salvage a hard drive. Other programs I tried located, reviewed and identified all the files on my computer. My external drive for some reason wouldn't mount no matter what I did. For some reason, MacKeeper couldn't even find the hard drive at all. No icon, title, nothing even after calling your support line. I went with your product because of the other included features and the price. But because it wouldn't find my hard drive I ultimately went with something else. When I threw the application in the trash I thought I was fine. But I wasn't.


I am writing you regarding your popup that says something to the effect of "protect your computer click here etc." I have been getting this message consistently for the past 5 days or so on my desktop when I turn my computer on. I clicked the "pop up blocker" button on the alert. It still came back. I even called your company's technical support that dispatched me to another country it seemed. Still, they couldn't help me. Finally, I googled how to remove it, and found this https://discussions.apple.com/thread/2786697?start=0&tstart=0 I removed no less than 5 separate files in 3 different locations. A general file search for the terms "zeobit" and "mackeeper" revealed nothing. Whomever scripted this knew what they were doing because all the files I removed had one or both of those terms.


To make a long story short, the failure to provide a complete and adequate uninstall program with your application bugs the **** out me and I'm sure many others. On top of that, to have a popup related to a program I threw away already is ridiculous. It's a pop-up to "buy" the program disguised as an alert. Seriously? That's sneaky. That's nothing more than a graphic to manipulate people who don't know better like possibly the elderly and newer computer users to give in and buy MacKeeper. Seeing as Zeobit produce and sell other programs, I assume you have similar manipulations on those programs as well.


Great products no matter what they are don't need manipulation of any kind to stay on the top of their game. Strong products are out in the open and solid from the ground up and persuade people to buy from quality alone. That builds a reputation that sells itself eventually. Mackeeper at first appears to be a great product with a nice interface. But this backdoor "virus" as some people have called it makes me rethink your whole company philosophy. It seems you are allowing some of your potential customers to be misled into buying your product because they see a fake virus alert. And, I'm sure I am not the only one who feels this way.


In my career, it's helpful for my clients and the companies I work with to recommend them products I use and stand behind. I cannot recommend MacKeeper or other Zeobit products for obvious reasons.


People don't forget great things. And if you intend to grow this company into something great it must be solid from the ground up in every aspect. The popup, unsearchable terms and manipulation is not solid by any means.


I hope you respond so I know that there is a human being at the other end of this email. And I hope you someday find a way to move away from this petty method of last resort to increase your bottom line through misleading some people and frustrating others like myself



Thanks for your time


Nick

Dec 24, 2011 5:56 PM in response to Browknee

Don't know if you still need an answer but I was able to get rid of the pop-ups by quickly hitting the stop button on the right side of the address bar as soon as I opened Safari. It stopped the website from loading before the pop-up opened. I next clicked on one of the websites I have in my bookmark bar, I stopped that website before it downloaded as well. Once I was succesfully off the spam sites and onto a website I recognized, I opened my safari preferences and deleted all my cookies, cleared my cache, etc. Hope this helps. Screw MacKeeper!!

MacKeeper/Zerobit Pop Up ad Problem

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.