10 Replies Latest reply: Sep 16, 2013 8:09 PM by OHornbak
OHornbak Level 1 Level 1 (0 points)

Okay, so just so everyone knows, if i sound like im PO i am...alot, so if it sounds like im angrey i am...alot.

 

So this is what is going on. Apperntly something downloaded to my computer and i dont know what, but when ever i open up Safari everything is all good, and happy go lucky. but then when i go into the search bar an type in something (keeping in mind that my deflut search engine IS set to "http://www.google.com". it will automatically redirect my search to bing, now in between this switching of search engines another URL pops up saying "http://search.installmac.com" and then it takes me to big. and for the life of me i CAN NOT figure out how to go and delete or manage my search enegin so that is is only google. (i.e when i type "All Time Low Band" into the google search/URL bar it will take me right to google with a list of searches... an answer is DESPERATELY needed, cause im about to completey reset my computer, become of how bad my OCD is. so please get back to me ASAP

  • Carolyn Samit Level 10 Level 10 (95,985 points)

    Fron your Safari menu bar click Safari > Preferences then select the Extensions tab.

     

    Turn that off, quit and relaunch Safari to test.

     

     

    And back to Safari > Preferences. This time select the General tab.

     

    Select Google from the Default search engine pop up menu.

  • OHornbak Level 1 Level 1 (0 points)

    Screen Shot 2013-09-12 at 3.52.58 PM.pngso it should look like this?

  • OHornbak Level 1 Level 1 (0 points)

    if so, it still isnt working :/

  • Carolyn Samit Level 10 Level 10 (95,985 points)

    Did you try turning off extensions as I suggested first?

  • Linc Davis Level 10 Level 10 (159,245 points)

    You installed spyware.

     

    Please read this whole message before doing anything.
      
    This procedure is a diagnostic test. It won’t solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.
       
    Third-party system modifications are a common cause of usability problems. By a “system modification,” I mean software that affects the operation of other software — potentially for the worse. The following procedure will help identify which such modifications you've installed. Don’t be alarmed by the complexity of these instructions — they’re easy to carry out and won’t change anything on your Mac.

     

    These steps are to be taken while booted in “normal” mode, not in safe mode. If you’re now running in safe mode, reboot as usual before continuing.

     

    Below are instructions to enter some UNIX shell commands. The commands are harmless, but they must be entered exactly as given in order to work. If you have doubts about the safety of the procedure suggested here, search this site for other discussions in which it’s been followed without any report of ill effects.

     

    Some of the commands will line-wrap or scroll in your browser, but each one is really just a single line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, and you can then copy it. The headings “Step 1” and so on are not part of the commands.

     

    Note: If you have more than one user account, Step 2 must be taken as an administrator. Ordinarily that would be the user created automatically when you booted the system for the first time. The other steps should be taken as the user who has the problem, if different. Most personal Macs have only one user, and in that case this paragraph doesn’t apply.

     

    Launch the Terminal application in any of the following ways:

     

    ☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

     

    ☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

     

    ☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.

     

    When you launch Terminal, a text window will open with a line already in it, ending either in a dollar sign (“$”) or a percent sign (“%”). If you get the percent sign, enter “sh” and press return. You should then get a new line ending in a dollar sign.

     

    Step 1

     

    Triple-click the line of text below on this page to select it:
    kextstat -kl | awk '!/com\.apple/{printf "%s %s\n", $6, $7}' | open -ef
     
    Copy the selected text to the Clipboard by pressing the key combination command-C. Then click anywhere in the Terminal window and paste (command-V). A TextEdit window will open with the output of the command. If the command produced no output, the window will be empty. Post the contents of the TextEdit window (not the Terminal window), if any — the text, please, not a screenshot. You can then close the TextEdit window. The title of the window doesn't matter, and you don't need to post that. No typing is involved in this step.
        
    Step 2

     

    Repeat with this line:
    { sudo launchctl list | sed 1d | awk '!/0x|com\.(apple|openssh|vix\.cron)|org\.(amav|apac|cups|isc|ntp|postf|x)/{print $3}'; echo; sudo defaults read com.apple.loginwindow LoginHook; echo; sudo crontab -l; } 2> /dev/null | open -ef
     
    This time you'll be prompted for your login password, which you do have to type. Nothing will be displayed when you type it. Type it carefully and then press return. You may get a one-time warning to be careful. Heed that warning, but don't post it. If you see a message that your username "is not in the sudoers file," then you're not logged in as an administrator.

     

    Note: If you don’t have a login password, you’ll need to set one before taking this step. If that’s not possible, skip to the next step.

     

    Step 3
    { launchctl list | sed 1d | awk '!/0x|com\.apple|org\.(x|openbsd)/{print $3}'; echo; crontab -l 2> /dev/null; } | open -ef
     
    Step 4
    ls -A /e*/{cr,la,mach}* {,/}Lib*/{Ad,Compon,Ex,Fram,In,Keyb,La,Mail/Bu,P*P,Priv,Qu,Scripti,Servi,Spo,Sta}* L*/Fonts .la* 2> /dev/null | open -ef
      
    Important: If you formerly synchronized with a MobileMe account, your me.com email address may appear in the output of the above command. If so, anonymize it before posting.

     

    Step 5
    osascript -e 'tell application "System Events" to get name of login items' | open -ef
     
    Remember, steps 1-5 are all copy-and-paste — no typing, except your password. Also remember to post the output.

     

    You can then quit Terminal.

  • OHornbak Level 1 Level 1 (0 points)

    From Step 1:

     

    ---> Nothing was in the text edit like predicted

     

     

    Step 2:

     

    com.genieoinnovation.macextension.client

    com.adobe.fpsaud

     

     

     

    Step 3:

     

    com.google.Chrome.framework.service_process/Users/oliviahornbaker/Library/Applic ation_Support/Google/Chrome

    com.google.keystone.user.agent

    com.genieoinnovation.macextension

    com.wacom.pentablet

    Reader

    com.rosettastone.rosettastonedaemon

    com.mspot.aria

    com.facebook.videochat.oliviahornbaker.updater

    com.divx.agent.postinstall

    com.akamai.single-user-client

    com.adobe.AAM.Scheduler-1.0

     

     

    Step 4:

     

    /etc/launchd.conf

     

     

    /Library/Components:

     

     

    /Library/Extensions:

     

     

    /Library/Frameworks:

    AEProfiling.framework

    AERegistration.framework

    Adobe AIR.framework

    AudioMixEngine.framework

    DivX Toolkit.framework

    GenieoExtra.framework

    HPDeviceModel.framework

    HPPml.framework

    HPServicesInterface.framework

    HPSmartPrint.framework

    HPSmartX.framework

    NyxAudioAnalysis.framework

    PluginManager.framework

    TSLicense.framework

    iTunesLibrary.framework

     

     

    /Library/Input Methods:

     

     

    /Library/Internet Plug-Ins:

    DivXBrowserPlugin.plugin

    Flash Player.plugin

    Flip4Mac WMV Plugin.plugin

    JavaAppletPlugin.plugin

    OVSHelper.plugin

    OfficeLiveBrowserPlugin.plugin

    Quartz Composer.webplugin

    QuickTime Plugin.plugin

    Silverlight.plugin

    ebldetect.bundle

    flashplayer.xpt

    iPhotoPhotocast.plugin

    nsIQTScriptablePlugin.xpt

     

     

    /Library/Keyboard Layouts:

     

     

    /Library/LaunchAgents:

    com.adobe.AAM.Updater-1.0.plist

    com.genieoinnovation.macextension.plist

    com.rosettastone.rosettastonedaemon.plist

    com.sony.ReaderLibrary.ReaderLibraryLauncher.plist

    com.sony.ReaderLibrary.RunReaderLibrary.plist

    com.wacom.pentablet.plist

     

     

    /Library/LaunchDaemons:

    com.adobe.SwitchBoard.plist

    com.adobe.fpsaud.plist

    com.genieoinnovation.macextension.client.plist

     

     

    /Library/PreferencePanes:

    DivX.prefPane

    Flash Player.prefPane

    Flip4Mac WMV.prefPane

    PenTablet.prefPane

     

     

    /Library/PrivilegedHelperTools:

    com.genieoinnovation.macextension.client

     

     

    /Library/QuickLook:

    GBQLGenerator.qlgenerator

    iBooksAuthor.qlgenerator

    iWork.qlgenerator

     

     

    /Library/QuickTime:

    AppleIntermediateCodec.component

    AppleMPEG2Codec.component

    DivX Decoder.component

    DivX Encoder.component

    Flip4Mac WMV Advanced.component

    Flip4Mac WMV Export.component

    Flip4Mac WMV Import.component

     

     

    /Library/ScriptingAdditions:

    Adobe Unit Types.osax

     

     

    /Library/Spotlight:

    ExpressionMediaCatalogImporter.mdimporter

    GBSpotlightImporter.mdimporter

    Microsoft Office.mdimporter

    iBooksAuthor.mdimporter

    iWeb.mdimporter

    iWork.mdimporter

     

     

    /Library/StartupItems:

    HP IO

    HP Trap Monitor

     

     

    /etc/mach_init.d:

     

     

    /etc/mach_init_per_login_session.d:

     

     

    /etc/mach_init_per_user.d:

    com.adobe.SwitchBoard.monitor.plist

     

     

    Library/Address Book Plug-Ins:

    SkypeABDialer.bundle

    SkypeABSMS.bundle

     

     

    Library/Fonts:

    AlphabitsSquared.ttf

    AnonymousClippings.ttf

    AppleGaramond-Bold.ttf

    AppleGaramond-BoldItalic.ttf

    AppleGaramond-Italic.ttf

    AppleGaramond-Light.ttf

    AppleGaramond-LightItalic.ttf

    AppleGaramond.ttf

    Dutch & Harley.ttf

    Espacio.ttf

    Everyday_Ghost.ttf

    FantasticPete3.03.ttf

    Fishfingers Light.ttf

    Fishfingers.ttf

    MARCS___.ttf

    Marcsc___.ttf

    Mermaid Swash Caps.ttf

    Mermaid1001.ttf

    OldNewspaperTypes.ttf

    The Outsiders.ttf

    True Lies.ttf

    VarsityPlaybook-DEMO.ttf

    WHAT SOUND POUNDS.otf

    cityscape font.ttf

    mustache.ttf

    varsity_regular.ttf

     

     

    Library/Input Methods:

    .localized

     

     

    Library/Internet Plug-Ins:

    FacebookVideoCalling.bundle

    fbplugin_1_0_1.plugin

     

     

    Library/Keyboard Layouts:

     

     

    Library/LaunchAgents:

    com.adobe.AAM.Updater-1.0.plist

    com.akamai.single-user-client.plist

    com.apple.AddressBook.ScheduledSync.PHXCardDAVSource.61CFB4EC-4068-4FBD-B3BC-1E6 D3DBE1634.plist

    com.apple.FolderActions.enabled.plist

    com.apple.FolderActions.folders.plist

    com.divx.agent.postinstall.plist

    com.facebook.videochat.oliviahornbaker.plist

    com.google.keystone.agent.plist

    com.mspot.aria.plist

     

     

    Library/PreferencePanes:

    AkamaiNetSession.prefPane

    mSpotPrefs.prefPane

     

     

    Step 5:

     

    Mail, SpeechSynthesisServer, iTunesHelper, EEventManager, WDSecurityHelper, Dropbox, EEventManager, HP Scheduler, HPEventHandler

  • Linc Davis Level 10 Level 10 (159,245 points)

    Back up all data, then remove the "Genieo" spyware by following the instructions on this page. If you still have problems after that, repeat Step 4 (only) and post the output.

  • OHornbak Level 1 Level 1 (0 points)

    it didnt work, at all

     

    this is what the output it....

     

    /Library/Components:

     

     

    /Library/Extensions:

     

     

    /Library/Frameworks:

    AEProfiling.framework

    AERegistration.framework

    Adobe AIR.framework

    AudioMixEngine.framework

    DivX Toolkit.framework

    GenieoExtra.framework

    HPDeviceModel.framework

    HPPml.framework

    HPServicesInterface.framework

    HPSmartPrint.framework

    HPSmartX.framework

    NyxAudioAnalysis.framework

    PluginManager.framework

    TSLicense.framework

    iTunesLibrary.framework

     

     

    /Library/Input Methods:

     

     

    /Library/Internet Plug-Ins:

    DivXBrowserPlugin.plugin

    Flash Player.plugin

    Flip4Mac WMV Plugin.plugin

    JavaAppletPlugin.plugin

    OVSHelper.plugin

    OfficeLiveBrowserPlugin.plugin

    Quartz Composer.webplugin

    QuickTime Plugin.plugin

    Silverlight.plugin

    ebldetect.bundle

    flashplayer.xpt

    iPhotoPhotocast.plugin

    nsIQTScriptablePlugin.xpt

     

     

    /Library/Keyboard Layouts:

     

     

    /Library/LaunchAgents:

    com.adobe.AAM.Updater-1.0.plist

    com.genieoinnovation.macextension.plist

    com.rosettastone.rosettastonedaemon.plist

    com.sony.ReaderLibrary.ReaderLibraryLauncher.plist

    com.sony.ReaderLibrary.RunReaderLibrary.plist

    com.wacom.pentablet.plist

     

     

    /Library/LaunchDaemons:

    com.adobe.SwitchBoard.plist

    com.adobe.fpsaud.plist

    com.genieoinnovation.macextension.client.plist

     

     

    /Library/PreferencePanes:

    DivX.prefPane

    Flash Player.prefPane

    Flip4Mac WMV.prefPane

    PenTablet.prefPane

     

     

    /Library/PrivilegedHelperTools:

    com.genieoinnovation.macextension.client

     

     

    /Library/QuickLook:

    GBQLGenerator.qlgenerator

    iBooksAuthor.qlgenerator

    iWork.qlgenerator

     

     

    /Library/QuickTime:

    AppleIntermediateCodec.component

    AppleMPEG2Codec.component

    DivX Decoder.component

    DivX Encoder.component

    Flip4Mac WMV Advanced.component

    Flip4Mac WMV Export.component

    Flip4Mac WMV Import.component

     

     

    /Library/ScriptingAdditions:

    Adobe Unit Types.osax

     

     

    /Library/Spotlight:

    ExpressionMediaCatalogImporter.mdimporter

    GBSpotlightImporter.mdimporter

    Microsoft Office.mdimporter

    iBooksAuthor.mdimporter

    iWeb.mdimporter

    iWork.mdimporter

     

     

    /Library/StartupItems:

    HP IO

    HP Trap Monitor

     

     

    /etc/mach_init.d:

     

     

    /etc/mach_init_per_login_session.d:

     

     

    /etc/mach_init_per_user.d:

    com.adobe.SwitchBoard.monitor.plist

     

     

    Library/Address Book Plug-Ins:

    SkypeABDialer.bundle

    SkypeABSMS.bundle

     

     

    Library/Fonts:

    AlphabitsSquared.ttf

    AnonymousClippings.ttf

    AppleGaramond-Bold.ttf

    AppleGaramond-BoldItalic.ttf

    AppleGaramond-Italic.ttf

    AppleGaramond-Light.ttf

    AppleGaramond-LightItalic.ttf

    AppleGaramond.ttf

    Dutch & Harley.ttf

    Espacio.ttf

    Everyday_Ghost.ttf

    FantasticPete3.03.ttf

    Fishfingers Light.ttf

    Fishfingers.ttf

    MARCS___.ttf

    Marcsc___.ttf

    Mermaid Swash Caps.ttf

    Mermaid1001.ttf

    OldNewspaperTypes.ttf

    The Outsiders.ttf

    True Lies.ttf

    VarsityPlaybook-DEMO.ttf

    WHAT SOUND POUNDS.otf

    cityscape font.ttf

    mustache.ttf

    varsity_regular.ttf

     

     

    Library/Input Methods:

    .localized

     

     

    Library/Internet Plug-Ins:

    FacebookVideoCalling.bundle

    fbplugin_1_0_1.plugin

     

     

    Library/Keyboard Layouts:

     

     

    Library/LaunchAgents:

    com.adobe.AAM.Updater-1.0.plist

    com.akamai.single-user-client.plist

    com.apple.AddressBook.ScheduledSync.PHXCardDAVSource.61CFB4EC-4068-4FBD-B3BC-1E6 D3DBE1634.plist

    com.apple.FolderActions.enabled.plist

    com.apple.FolderActions.folders.plist

    com.divx.agent.postinstall.plist

    com.facebook.videochat.oliviahornbaker.plist

    com.google.keystone.agent.plist

    com.mspot.aria.plist

     

     

    Library/PreferencePanes:

    AkamaiNetSession.prefPane

    mSpotPrefs.prefPane

  • Linc Davis Level 10 Level 10 (159,245 points)

    Back up all data.

    Triple-click anywhere in the line below on this page to select it:

    /Library/Frameworks/GenieoExtra.framework

    Right-click or control-click the line and select

     

    Services Reveal

    from the contextual menu.* A folder should open with an item selected. Move the selected item to the Trash. You may be prompted for your administrator password.

    Repeat with each of these lines:

    /Library/LaunchAgents/com.genieoinnovation.macextension.plist

    /Library/LaunchDaemons/com.genieoinnovation.macextension.client.plist

    /Library/PrivilegedHelperTools/com.genieoinnovation.macextension.client

    Then reboot.

    From the Safari menu bar, select

            

    Safari Preferences Extensions

         

    Uninstall any extension you don't recognize. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.

    *If you don't see the contextual menu item, copy the selected text to the Clipboard (command-C). In the Finder, select

    Go Go to Folder...

    from the menu bar, paste into the box that opens (command-V). You won't see what you pasted because a line break is included. Press return.

  • OHornbak Level 1 Level 1 (0 points)

    Thank you sooo soo so much!!! its finally back to normal!!!