Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

mac os x virus: genio

January 18, 2013 I was hit with a Genio virus application that somehow got onto my Mac OS X 10.6.8 (MBP)

and installed itself into my login startup list.

This virus (we have to call it that as I did not ask for nor authorize it) must have been attached to

something else, though I am unsure how they did this. As a computer scientist and programmer,

I am extremely aware of downloading and running strange applications.

Perhaps the did this through a javascript snippet from a news organization?

It took me a good twenty minutes of concerted work to locate and remove all of the virus applications.

It even appeared that they had an Uninstall app, but I did not trust it. So I removed all I could find,

and proceeded with a few find(1) based searches of the disk to make very sure.

My listing here is done for two reasons: (1) to document that genio is

sending out virus (look up who to complain -- part of it is "orlaith.potter" --

this forum won't let me list it)

and (2) to ask the community for guidance in protecting

my Mac from further Genio (and other similar) intrusions.

I was able to remove the virus application from the /Applications folder, kill all the

Genio processes, and remove the startup commands they added in my login startup area.

However, any comments would be very appreciated.

Regards from me and my laptop.

--jpb

Posted on Jan 19, 2013 6:56 AM

Best reply

Linc Davis

Level 10

209,547 points

Posted on Jan 19, 2013 10:33 AM

Genieo is spyware/adware, but not a "virus" in the true sense and not malware, strictly speaking. At some point you clicked through a notification of some kind to install it. It's deceptive, but if you read the fine print, the user agreement tells you what it does.

View in context

65 replies

thomas_r.

Level 7

31,989 points

Feb 28, 2014 11:48 AM in response to eugen53

The uninstaller will not remove everything. In some cases, in fact, it will actually install components if they weren't already there!

If the uninstaller is still running and won't quit, force it to quit. (Press command-option-esc and force quit it using the window that opens.) Then delete all components of the software according to the directions in my Adware Removal Guide.

Edit: didn't see your follow-up before posting that....

andyBall_uk

Level 7

20,516 points

Feb 28, 2014 1:59 PM in response to thomas_r.

A little off-topic : to show that it can be difficult to find reliable & unbiased removal instructions...

note the ad on the right, in case it doesn't jump out.

thomas_r.

Level 7

31,989 points

Feb 28, 2014 2:24 PM in response to andyBall_uk

😁

Mar 1, 2014 9:20 AM in response to eugen53

I had success in stopping the GENIO installation long enough to erase it, when I saw it was trying to download GOPHOTOIT, which made no sense since I was downloading

Teu_application, WHICH IS A torrent fetcher.

BUT, when I tried to close it, it said no, it refused. I looked at the 'About this software', and found a rather arrogant message saying; "Nobody designed it, Nobody maintains it" etc, and the grammer was bad.

I FORCED CLOSED it, and at thet point, interestingly enough, my CLEAN APP came online, and asked if it wanted me to cpen it!

I tossed it in the trash, and erased it. Hopefully, I got the sucker. I hate these clowns.

Lion OS, older Macbook, Firefox

Mar 4, 2014 8:24 AM in response to firstbasesoftware

I was downloading new extensions for safari through the preferences tab and among one of the safari tabs that opened for one of the extensions was a large green download buttom, at first I assumed that it was for the extension I intended to install, it was not it was for genio, as a popup tab. Originally I got it while trying to download softphone software for a company I work with in California for a telecommuting position, the software was at their requirement for work. Ultimately there was better software available in the app store once again reconfirming my position to only download from the app store.

Mar 6, 2014 12:38 PM in response to firstbasesoftware

My mac running 10.6.8 couldn't fire up MS Office. I discovered the Genio app and deleted it and everything works fine now. Genio on my mac came from a web site offering Gimp imaging sofware and perported to be a web browser.

Mar 18, 2014 4:40 PM in response to mattphotos

In the screenshot andyBall posted above, the big green download button (which is actually a Google ad) is in this case over on the right where you expect ads. There are many websites now putting Google ads in the middle of content and where this green download button appears on pages which genuinely offer software for download, it's really confusing, the actual download link that you're after is usually smaller. I know it says that the button is an advertisement for Genio, but that's in tiny grey writing and is so obviously designed to trick people, I'm surprised Google are allowing it.

Apr 15, 2014 7:28 PM in response to shieladixon

Just picked it up from trying to download AppCleaner. See screenshot below. . . .

I'm usually really cautious but wasn't paying attention and this one got me. I didn't even realize it until I had started the install process . . . I then cancelled the install and it asked me if I was sure I wanted to quit. I said yes and it finished the install anyway. I think I got rid of all the files and everything seems to be normal. . . . for now.

Seriously people, how about you use your talents for something that can benefit the world?

thomas_r.

Level 7

31,989 points

Apr 16, 2014 2:59 AM in response to Tyler Berry

You shouldn't be using AppCleaner anyway... or any similar apps. See:

How to uninstall software

(Fair disclosure: The Safe Mac is my site, and contains a Donate button, so I may receive compensation for providing links to The Safe Mac. Donations are not required.)

humorzo

Level 1

19 points

Apr 21, 2014 6:39 PM in response to Tyler Berry

No, you didn't. I've been using AppCleaner for several years - and downloaded it several times just now to see what came down. Only that.

Have also downloaded and used LiteIcon from them.

AppCleaner has a high rating on MacUpdate. Used in combination with EasyFind you should be able to locate and trash all Genio files. If not sure what they're named, you can sort by date in EasyFind, which will also search for invisible files, and many other features--and fast!!

To be fair, The Safe Mac has a lot of good advice.

But hey, what the heck is anybody doing trying to install something that they do not recognize/know what it is, hello?

Apr 21, 2014 7:22 PM in response to humorzo

Sorry, I wasn't clear - I didn't say I got it from Appcleaner, I said I got it from trying to download Appcleaner. I was in a rush to download it and thought I was, the big green button lured me in . . . I instantly realized the download links were on the right but by then it was too late. I've been using Appcleaner for years and though it's not the "proper" way to remove unwanted items (as thomas_r points out) it's an awesome little utility.

mansiid

Level 1

0 points

Jun 4, 2014 3:16 AM in response to firstbasesoftware

Hi Guys!

It is very simple.

Go to Safari > Preferences > Extension > Search engine option shows Geneio > Select 'Default' option in the search engine

There you go!!!!

thomas_r.

Level 7

31,989 points

Jun 4, 2014 3:36 AM in response to mansiid

It is very simple.

No, actually, it is not. Your suggestion will do absolutely nothing to solve the Genieo problem, and will leave ALL the Genieo adware still active and running in the background. Please see one of the more recent posts on this topic, which offer working solutions, such as:

Re: mac os x virus: genio

Jun 4, 2014 9:08 AM in response to thomas_r.

If you been invaded by Trojans and Malware, you need to look at this product; TinkerTool. Also for anyone who does a large amount of large file transfers, or has a lot of applications for a lot of interests, I can also recommend what might be the best tool product availale for Mac. This is a dynamic repair and yes, that dirty word, cleaning package:

TinkerToolSystem2.0

www.bresink.com

A five round free real do-the-job- evaluation and an easy price of $20 to buy. This not only tells you what is wrong, but why, and how it got that way, and what it will do to fix it, and then do it, showing the results. I was amazed what it found and fixed. This particular Macbook is older and on Lion, but it runs now like new.

sorry thomas r, but you can't knock success

thomas_r.

Level 7

31,989 points

Jun 4, 2014 10:05 AM in response to GullyGypsum

TinkerTool is not anti-virus software nor does it have any capability to remove adware. It absolutely will not do anything to help you get rid of a Genieo infection. I'm puzzled as to why you bring that up here.

mac os x virus: genio