MacKeeper can't be deleted!!!

If you (or someone using your computer) so much as clicks on an offer for MacKeeper, you are entering the gates of computer ****. "Lasciate ogne speranza, voi ch'intrate" or "Abandon all hope, ye who enter here."

After the offer was clicked on, (MacKeeper was never purchased or activated) my laptop (only 6 months old) began running slower and slower, and hotter and hotter. Safari started crashing and then Firefox was not responding. And then funny things began happening to my OS. Went to an Authorized Mac Service provider and *they* were not able to trash the program, because it infiltrates and imbeds itself in so many places. They called MacKeeper malware.

I've spent two days trying to find out how to remove it and get things back to a pre-MacKeeper state. Reinstalled my OS and all of the software updates and finally, after a search and destroy mission for anything with derivatives of com.zeobit.MacKeeper, I am back to a faster and cooler running computer.

Burn in Dante's Inferno forever MacKeeper!

MacKeeper Removal

Use the free Easy Finder and search for "zeobit" and MacKeeper and delete with extreme prejudice.

http://download.cnet.com/EasyFind/3000-2248_4-8707.html

I tried the MacKeeper trial then deleted it when strange things started to happen. Now Safari is not accessing many sites; I get the message from some sites to enable Java Script but it is already enabled in Safari. The Top Site website icons have also disappeared. If I use a proxy server I can see the first page of the sites not accessible directly with Safari. This is also the case with Firefox, Opera and Webkit. Tried to find MacKeeper in the activity monitor but the is no mention of this.

Would like to get Safari working again, any ideas?

Also my Desk top picture disappeared after installing MacKeeper.

Thank you

Backup your files first to a external drive via drag and drop methods and disconnect.

Hold c and boot off your 10.6 disk that came with the computer (or upgrade disk) and simply reinstall OS X from the second screen.

That should do it. Your files and third party programs should be pretty much left untouched, however a few that have OS level hooks may need a reinstalled.

I found that after trying MacKeeper that Safari and other browsers wouldn't access certain sites. So I used a proxy server and I could access the sites. Today I can access the sites again but there is an advertisement on the page for MacKeeper. If I access the same site through a proxy server the advert for MacKeeper is gone. Something strange is going on here.

Memoire wrote:

I tried the MacKeeper trial then deleted it when strange things started to happen.

How did you delete it? I heard that they recommend dragging the application to the trash which is supposed to launch the uninstaller process which asks you why you are removing it and then clears out the following files and directories:

In Application folder:

- /Applications/MacKeeper.app

In system Library:

- /Library/Application/Support/MacKeeper

- /Library/LaunchDaemons/com.zeobit.MacKeeper.AntiVirus

- /Library/LaunchDaemons/com.zeobit.MacKeeper.plugin.AntiTheft.daemon

In User Library:

- /Users/~/Library/Caches/com.zeobit.MacKeeper

- /Users/~/Library/LaunchAgents/com.zeobit.MacKeeper.Helper

- /Users/~/Library/LaunchAgents/com.zeobit.MacKeeper.plugin.Backup.agent

- /Users/~/Library/Preferences/com.zeobit.MacKeeper.Helper.plist

- /Users/~/Library/Preferences/com.zeobit.MacKeeper.plist

In Keychain Access utility: - all zeobit passwords

Today I can access the sites again but there is an advertisement on the page for MacKeeper. If I access the same site through a proxy server the advert for MacKeeper is gone. Something strange is going on here.

I can't explain why the proxy server would block the ad, but if it makes you feel any better, I've been seeing the MacKeeper banner on more and more pages and I never installed it.

Thank you for the reply MadMacs0.

As you said I dragged it to the trash and then the uninstall process started as you explained. I later did searches for MacKeeper and found some remaining files and deleted them too. Since your mail I went through you list and only found the Zoebit passwords in the keychain application, so I deleted that.

The thing that is concerning is the manipulation of Safari and other browsers; example; when I went to an online email program I used I found a MacKeeper advert in the advertising section of the page, when I changed the url from http to https the advert disappeared and reverted to a generic one the site usually has; same if I accessed the site using a proxy server the MAcKeeper adverts disappeared. So all the sites I couldn't access for about 1 day after using MAcKeeper now have adverts for MacKeeper. This makes me believe there is some program running in the background do this; which leads me to worry what else is going on, what monitoring of the my system is occurring.

Before I realised the issues I did log onto their remote access to try to solve the problems I was having, so perhaps at that time other elements were added. But all in all I am quite worried about the security issues and what has and is being compromised. Obviously I would like to get all elements of these programs deleted quickly.

The entire situation is quite concerning for the entire Mac community I believe.

peppespizzapie do you have an e-mail address to write to?

A lot of proxies have ad-blocking features on them. They probably blocked it.

The legitimate adverts for the page were there when I use a proxy server or https, but with http the MacKeeper adverts show up. Something extremely strange is going; these guys need to be isolated.

I just downloaded Mackeeper, and it ran automatically. It needs my password though. No thanks 😝

Have you noticed any unusual activity yet, especially with Safari? I have had continual security issues after downloading and running MacKeeper; then when I had trouble being stupid enough to accept a remote connection to resolve the issues. I found the uninstall leaves all the MacKeeper passwords in the keychain. Now I am wondering what else it left.

Download FindAnyFile (free) and search "Mackeeper" with admin permissions. It'll show EVERY file with that name in it. Destroy every file.

I have to do this with programs from bad companies like HP, Akamai, and Adobe's Acrobat, and it works perfectly.

Hi, I did this a few days ago, then later found the MacKeeper passwords in the Keychain and removed them too. The strange case of MacKeeper adverts being embedded into webpages when viewed in http but then disappearing when the same page is viewed in https or through a proxy server have me concerned. I am wondering what other names files that MacKeeper or there remote access programs has added that are not generically named.

Hi MadMacs0 regarding uninstall list.

When ever I visit a site using http://-------.com that has the MacKeeper advert hacked into it I get a cookie for zeobit.com when I use https://-----.com the zeobit cooking doesn't show up.

I am quite concern what is still in my system after the uninstall and the manual removal of other zoebit intusive elements.

Any ideas welcome.

Memoire wrote:

I am quite concern what is still in my system after the uninstall and the manual removal of other zoebit intusive elements.

Any ideas welcome.

I've been following your posts on this subject for several weeks now and have given it lots of thought, but haven't come up with anything.

I know that most sites just sign up with an ad company so they have little or no control over what ads are rotated through. Evidently MacKeeper is putting a ton of money into these ads as I am seeing them in a lot of places and have never installed the app. Next time I see one I'll have to try your https idea and see what happens.

I wouldn't be too concerned about cookies. They are pretty harmless unless you object to being tracked. I should think you could stop all the zeobit ones by choosing to accept cookies only from sites you visit.