Hi everyone, every time I open Chrome the default page is installmac. This virus have been giving me internet connection problems and my computer is also slowing down.
Is there any way I can delete this virus?
Thanks.
Reinstall it, then remove it.
WooHoo. So far so good. I installed it, uninstalled it and removed MacKeeper. I also went into my Safari settings and uninstalled OmniSource (or something like that) under Extensions. I never dowloaded it so never thought to look there as I don't use the 3rd party extensions (I turned it off for now), but it definitely mentioned InstallMac and Genieo as a search engine so not sure what took care of it, but it seems back to normal again.
THANK YOU for your help.
I'm glad you got this sorted out. However, I do feel compelled to point something out, for your future safety:
uninstalled OmniSource (or something like that) under Extensions. I never dowloaded it so never thought to look there as I don't use the 3rd party extensions
Omnibar is something you were instructed to remove by both my instructions (see step 5) and by Linc's latest instructions, which he posted on a different topic you were replying to. In the future, you need to read such instructions more carefully, especially when one set of instructions includes the following giant, red text:
If you do not follow these directions exactly, you could cause your computer to freeze and to be unable to restart!
Hi, I am having this same issue after I tryed to install an webplayer Update trick I got unexcpectadly from veehd.com movie site, three days ago. I performed the Linc Davis UNIX shell script in terminal and I got the info I am pasting below. Could you Linc Davishelp me finding out what is going wrong with my Mac ? I did uninstall the unrecognized Safari extensions, but when I run the UNIX shell script afterwords, I see in there the gophoto-it which is not in my safary' preferences extensions visible. It seems it is hidden somewhere.
Thank you,
System Version: OS X 10.9.2 (13C64)
Kernel Version: Darwin 13.1.0
Boot Mode: Normal
Model: iMac13,2
RAM details
BANK 0/DIMM0:
Size: 8 GB
Speed: 1600 MHz
Status: OK
Manufacturer: 0x802C
BANK 1/DIMM0:
Size: 8 GB
Speed: 1600 MHz
Status: OK
Manufacturer: 0x802C
BANK 0/DIMM1:
Size: Empty
Speed: Empty
Status: Empty
Manufacturer: Empty
BANK 1/DIMM1:
Size: Empty
Speed: Empty
Status: Empty
Manufacturer: Empty
USB
OWC Mercury On-The-Go (Macpower Peripherals Ltd.)
System diagnostics
2014-05-27 alerterdaemon crash
2014-05-27 alerterdaemon crash
2014-05-27 alerterdaemon crash
2014-05-27 alerterdaemon crash
2014-05-27 alerterdaemon crash
2014-05-27 alerterdaemon crash
2014-05-27 alerterdaemon crash
2014-05-27 alerterdaemon crash
2014-05-27 alerterdaemon crash
2014-05-27 alerterdaemon crash
User diagnostics
2014-05-23 com.apple.WebKit.WebContent crash
2014-05-24 PluginProcess crash
2014-05-24 Safari crash
2014-05-25 PluginProcess crash
2014-05-25 com.apple.WebKit.WebContent crash
Kernel messages
May 25 21:36:39 process PluginProcess[16060] caught causing excessive wakeups. Observed wakeups rate (per sec): 326; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 56375085
May 25 23:36:30 process PluginProcess[16060] caught causing excessive wakeups. Observed wakeups rate (per sec): 248; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 58695478
May 25 23:52:49 process PluginProcess[16060] caught causing excessive wakeups. Observed wakeups rate (per sec): 271; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 59024853
May 26 00:47:17 process PluginProcess[16060] caught causing excessive wakeups. Observed wakeups rate (per sec): 664; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 60335457
May 26 01:04:26 process PluginProcess[16060] caught causing excessive wakeups. Observed wakeups rate (per sec): 547; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 60913950
May 26 02:00:02 process AAM Updates Noti[21832] caught causing excessive wakeups. Observed wakeups rate (per sec): 41360; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 45217
May 26 02:12:54 process PluginProcess[16060] caught causing excessive wakeups. Observed wakeups rate (per sec): 570; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 63545179
May 26 09:15:09 process PluginProcess[16060] caught causing excessive wakeups. Observed wakeups rate (per sec): 574; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 70165970
May 26 13:19:02 process PluginProcess[23205] caught causing excessive wakeups. Observed wakeups rate (per sec): 166; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 105780
May 26 19:42:17 process Google Chrome He[23807] caught causing excessive wakeups. Observed wakeups rate (per sec): 186; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 45006
May 26 21:07:01 process PluginProcess[23205] caught causing excessive wakeups. Observed wakeups rate (per sec): 247; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 2601566
May 26 22:49:34 process com.apple.WebKit[24087] thread 3975839 caught burning CPU! It used more than 50% CPU (Actual recent usage: 53%) over 180 seconds. thread lifetime cpu usage 90.187630 seconds, (79.481946 user, 10.705684 system) ledger info: balance: 90014306733 credit: 90014306733 debit: 0 limit: 90000000000 (50%) period: 180000000000 time since last refill (ns): 166887484615
May 26 23:24:24 process PluginProcess[23205] caught causing excessive wakeups. Observed wakeups rate (per sec): 220; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 3743645
May 26 23:28:20 process com.apple.WebKit[24222] thread 3992222 caught burning CPU! It used more than 50% CPU (Actual recent usage: 53%) over 180 seconds. thread lifetime cpu usage 90.329873 seconds, (80.981733 user, 9.348140 system) ledger info: balance: 90000913349 credit: 90000913349 debit: 0 limit: 90000000000 (50%) period: 180000000000 time since last refill (ns): 168050970299
May 26 23:50:52 process Adobe Photoshop [24266] thread 4000227 caught burning CPU! It used more than 50% CPU (Actual recent usage: 65%) over 180 seconds. thread lifetime cpu usage 165.592464 seconds, (135.699999 user, 29.892465 system) ledger info: balance: 90001076182 credit: 163887164012 debit: 73886087830 limit: 90000000000 (50%) period: 180000000000 time since last refill (ns): 138224979711
May 27 00:34:32 process PluginProcess[23205] caught causing excessive wakeups. Observed wakeups rate (per sec): 229; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 4809454
May 27 02:04:04 process PluginProcess[23205] caught causing excessive wakeups. Observed wakeups rate (per sec): 385; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 6266306
May 27 07:25:11 process PluginProcess[23205] caught causing excessive wakeups. Observed wakeups rate (per sec): 320; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 7801047
May 27 07:43:11 process PluginProcess[23205] caught causing excessive wakeups. Observed wakeups rate (per sec): 449; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 8249005
May 27 12:34:38 process PluginProcess[1294] caught causing excessive wakeups. Observed wakeups rate (per sec): 150; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 134432
May 27 12:40:05 process PluginProcess[1294] caught causing excessive wakeups. Observed wakeups rate (per sec): 251; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 204251
May 27 13:16:13 process PluginProcess[1294] caught causing excessive wakeups. Observed wakeups rate (per sec): 404; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 815335
May 27 13:47:08 process Locum[2666] thread 85175 caught burning CPU! It used more than 50% CPU (Actual recent usage: 59%) over 180 seconds. thread lifetime cpu usage 336.466381 seconds, (2.057602 user, 334.408779 system) ledger info: balance: 90006833809 credit: 336306518493 debit: 246299684684 limit: 90000000000 (50%) period: 180000000000 time since last refill (ns): 151265996648
May 27 13:50:12 process Finder[296] caught causing excessive wakeups. Observed wakeups rate (per sec): 275; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 109164
May 27 14:19:52 process WindowServer[124] caught causing excessive wakeups. Observed wakeups rate (per sec): 155; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 438954
Extrinsic daemons
com.autodesk.backburner_server
com.autodesk.backburner_manager
com.vsearch.helper
com.torch.update.agent
com.quark.quarkupdate
com.intego.BackupAssistant.daemon
com.genieoinnovation.macextension.client
com.autodesk.backburner_start
com.adobe.SwitchBoard
com.adobe.fpsaud
Extrinsic agents
com.github.norio-nomura.SIMBL-Agent
com.vsearch.agent
com.quark.quarkupdate.agent
com.intego.backupassistant.agent
com.hp.help.tocgenerator
com.genieoinnovation.macextension
com.divx.update.agent
com.divx.dms.agent
com.google.keystone.user.agent
com.adobe.ARM.UUID
launchd items
/Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist
(com.adobe.AAM.Startup-1.0)
/Library/LaunchAgents/com.divx.dms.agent.plist
(com.divx.dms.agent)
/Library/LaunchAgents/com.divx.update.agent.plist
(com.divx.update.agent)
/Library/LaunchAgents/com.hp.help.tocgenerator.plist
(com.hp.help.tocgenerator)
/Library/LaunchAgents/com.intego.backupassistant.agent.plist
(com.intego.backupassistant.agent)
/Library/LaunchAgents/com.quark.quarkupdate.agent.plist
(com.quark.quarkupdate.agent)
/Library/LaunchAgents/com.vsearch.agent.plist
(com.vsearch.agent)
/Library/LaunchDaemons/com.adobe.fpsaud.plist
(com.adobe.fpsaud)
/Library/LaunchDaemons/com.adobe.SwitchBoard.plist
(com.adobe.SwitchBoard)
/Library/LaunchDaemons/com.autodesk.backburner_manager.plist
(com.autodesk.backburner_manager)
/Library/LaunchDaemons/com.autodesk.backburner_server.plist
(com.autodesk.backburner_server)
/Library/LaunchDaemons/com.autodesk.backburner_start.plist
(com.autodesk.backburner_start)
/Library/LaunchDaemons/com.intego.BackupAssistant.daemon.plist
(com.intego.BackupAssistant.daemon)
/Library/LaunchDaemons/com.quark.quarkupdate.plist
(com.quark.quarkupdate)
/Library/LaunchDaemons/com.torch.update.agent.plist
(com.torch.update.agent)
/Library/LaunchDaemons/com.vsearch.daemon.plist
(com.vsearch.daemon)
/Library/LaunchDaemons/com.vsearch.helper.plist
(com.vsearch.helper)
Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist
(com.adobe.AAM.Scheduler-1.0)
Library/LaunchAgents/com.adobe.ARM.UUID.plist
(com.adobe.ARM.UUID)
Library/LaunchAgents/com.google.keystone.agent.plist
(com.google.keystone.user.agent)
Startup items
/Library/StartupItems/Intego Backup Assistant/BackupAssistantAgent.app/Contents/_CodeSignature/CodeResources
/Library/StartupItems/Intego Backup Assistant/BackupAssistantAgent.app/Contents/CodeResources
/Library/StartupItems/Intego Backup Assistant/BackupAssistantAgent.app/Contents/Info.plist
/Library/StartupItems/Intego Backup Assistant/BackupAssistantAgent.app/Contents/MacOS/BackupAssistantAgent
/Library/StartupItems/Intego Backup Assistant/BackupAssistantAgent.app/Contents/Resources/Japanese.lproj/Localizabl e.strings
/Library/StartupItems/Intego Backup Assistant/BackupAssistantDaemon
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngine
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Resources/EqualsDefaultFilter. plist
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Resources/EqualsPathDefaultFil ter.plist
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Resources/Info.plist
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Resources/Japanese.lproj/Alert s.strings
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Resources/Japanese.lproj/Error s.strings
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Resources/Japanese.lproj/LaCie .strings
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Resources/Japanese.lproj/Local izable.strings
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Resources/Japanese.lproj/Scrip ts Verbs.strings
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Resources/Japanese.lproj/Valid ation.strings
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Resources/PBCloneSupport.sh
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/A/_CodeSignature/Code Resources
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/A/CodeResources
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/A/Resources/EqualsDef aultFilter.plist
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/A/Resources/EqualsPat hDefaultFilter.plist
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/A/Resources/Info.plis t
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/A/Resources/Japanese. lproj/Alerts.strings
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/A/Resources/Japanese. lproj/Errors.strings
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/A/Resources/Japanese. lproj/LaCie.strings
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/A/Resources/Japanese. lproj/Localizable.strings
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/A/Resources/Japanese. lproj/Scripts Verbs.strings
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/A/Resources/Japanese. lproj/Validation.strings
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/A/Resources/PBCloneSu pport.sh
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/Current/_CodeSignatur e/CodeResources
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/Current/CodeResources
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/Current/Resources/Equ alsDefaultFilter.plist
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/Current/Resources/Equ alsPathDefaultFilter.plist
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/Current/Resources/Inf o.plist
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/Current/Resources/Jap anese.lproj/Alerts.strings
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/Current/Resources/Jap anese.lproj/Errors.strings
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/Current/Resources/Jap anese.lproj/LaCie.strings
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/Current/Resources/Jap anese.lproj/Localizable.strings
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/Current/Resources/Jap anese.lproj/Scripts Verbs.strings
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/Current/Resources/Jap anese.lproj/Validation.strings
/Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/Current/Resources/PBC loneSupport.sh
/Library/StartupItems/Intego Backup Assistant/PowerManagerTool
/Library/StartupItems/Intego Backup Assistant/uninstall.sh
/Library/StartupItems/NkPtpEnumWT3/NkPtpEnumWT3
Extrinsic loadable bundles
/System/Library/Extensions/RoxioBluRaySupport.kext
(com.roxio.BluRaySupport)
/Library/Audio/Plug-Ins/Components/Flip4Mac WMA Import.component
(net.telestream.wmv.import)
/Library/Internet Plug-Ins/AdobePDFViewer.plugin
(com.adobe.acrobat.pdfviewer)
/Library/Internet Plug-Ins/DivX Web Player.plugin
(com.divx.DivXWebPlayer)
/Library/Internet Plug-Ins/Flash Player.plugin
(com.macromedia.Flash Player.plugin)
/Library/Internet Plug-Ins/Flip4Mac WMV Plugin.plugin
(net.telestream.wmv.plugin)
/Library/Internet Plug-Ins/JavaAppletPlugin.plugin
(com.apple.java.JavaAppletPlugin)
/Library/Internet Plug-Ins/OVSHelper.plugin
(com.divx.OVSHelper)
/Library/PreferencePanes/Flash Player.prefPane
(com.adobe.flashplayerpreferences)
/Library/PreferencePanes/Flip4Mac WMV.prefPane
(net.telestream.wmv.prefpane)
/Library/PreferencePanes/OSXFUSE.prefPane
(com.github.osxfuse.OSXFUSEPrefPane)
/Library/PreferencePanes/QUPreferencePane.prefPane
(com.quark.QUPreferencePane)
/Library/QuickTime/DivX Decoder.component
(com.DivXInc.DivXDecoder)
/Library/QuickTime/DivX Encoder.component
(com.DivXInc.DivXCodec)
/Library/QuickTime/Flip4Mac WMV Advanced.component
(net.telestream.wmv.advanced)
/Library/QuickTime/Flip4Mac WMV Export.component
(net.telestream.wmv.export)
/Library/QuickTime/Flip4Mac WMV Import.component
(net.telestream.wmv.import)
/Library/QuickTime/Flix Flv.component
(com.wildform.flix.flv)
/Library/QuickTime/Flix Swf.component
(com.wildform.flix.swf)
/Library/QuickTime/MayaIFF.component
(com.yourcompany.MayaIFF)
/Library/QuickTime/MXFImporter.component
(jp.co.panasonic.MXFImporter)
/Library/ScriptingAdditions/Adobe Unit Types.osax
(No bundle ID)
/Library/ScriptingAdditions/QXPScriptingAdditions.osax
(com.quark.QXPScriptingAdditions.Bundle)
/Library/Spotlight/QuarkXPress.mdimporter
(com.quark.xpress.v6)
Library/Address Book Plug-Ins/SkypeABDialer.bundle
(com.skype.skypeabdialer)
Library/Address Book Plug-Ins/SkypeABSMS.bundle
(com.skype.skypeabsms)
Library/Audio/Plug-Ins/Components/A52Codec.component
(com.shepmater.A52Codec)
Library/Internet Plug-Ins/FuzeLaunchPlugin.bundle
(com.fuzemeeting.Plugin)
Library/PreferencePanes/Perian.prefPane
(org.perian.PerianPane)
Library/QuickTime/AC3MovieImport.component
(com.cod3r.ac3movieimport)
Library/QuickTime/Perian.component
(org.perian.Perian)
Library/ScriptingAdditions/EasySIMBL.osax
(com.github.norio-nomura.EasySIMBL.osax)
Library/Services/ToastIt.service
(com.roxio.ToastItService)
Extrinsic shared libraries
/usr/lib/libgenkit.dylib
/usr/lib/libgenkitsa.dylib
Environment
/usr/lib/libgenkit.dylib
launchd.conf
setenv DYLD_INSERT_LIBRARIES /usr/lib/libgenkit.dylib
Global login items
/Library/Printers/hp/hpio/HPEventHandler.app/
/Library/Application Support/Hewlett-Packard/Customer Participation/HP Product Research.app/
User login items
iTunesHelper.app
Dropbox.app
VMware Fusion Start Menu.app
Genieo.app
Safari extensions
Amazon Shopping Assistant
Ebay Shopping Assistant
gophoto-it
Restricted user files: 430
Desktop file count: 178
Elapsed time (s): 115
You have the Genieo, Downlite, GoPhoto.it and Spigot adware installed. See my Adware Removal Guide for help removing them.
(Fair disclosure: The Safe Mac is my site, and contains a Donate button, so I may receive compensation for providing links to The Safe Mac. Donations are not required.)
Thank you thomas_r !
In fact I followed the steps of the first message on How do I get rid of Genieo virus? :
https://discussions.apple.com/thread/6093702?answerId=25486076022#25486076022
and it seems it has done the magic. Unless somthing will pop up later.
Thanks to Linc Davis too !!
Hi again,
I guess I did send the previous message too early. After 3 hours of using my "clean" version of my computer, this Genio thing poped up again with messages on MacCleaning and some other advertisment... I think it is not as bad as it was but the virus is still here and I still need some help with this. Meanwhile I will try thomas_r link ( Adware Removal Guide )
Thanks to any one with your helpful advices !!
System Version: Mac OS X 10.6.8 (10K549)
Kernel Version: Darwin 10.8.0
Boot Mode: Normal
Model: iMac5,1
Total RAM (GB): 2
RAM details
BANK 0/DIMM0:
Size: 1 GB
Speed: 667 MHz
Status: OK
Manufacturer: 0xCE00000000000000
BANK 1/DIMM1:
Size: 1 GB
Speed: 667 MHz
Status: OK
Manufacturer: 0xCE00000000000000
User diagnostics
2014-05-21 com.google.Chrome crash
Kernel messages
Tue May 27 kernel[0]: (default pager): \[KERNEL\]: Switching ON Emergency paging segment
Tue May 27 kernel[0]: (default pager): \[KERNEL\]: Recovered emergency paging segment
Tue May 27 kernel[0]: (default pager): \[KERNEL\]: Switching ON Emergency paging segment
Tue May 27 kernel[0]: (default pager): \[KERNEL\]: Failed to recover emergency paging segment
Tue May 27 kernel[0]: (default pager): \[KERNEL\]: Failed to recover emergency paging segment
Tue May 27 kernel[0]: (default pager): \[KERNEL\]: System is out of paging space.
Tue May 27 kernel[0]: (default pager): \[KERNEL\]: Failed to recover emergency paging segment
Tue May 27 kernel[0]: (default pager): \[KERNEL\]: System is out of paging space.
Tue May 27 kernel[0]: (default pager): \[KERNEL\]: Failed to recover emergency paging segment
Tue May 27 kernel[0]: (default pager): \[KERNEL\]: System is out of paging space.
Tue May 27 kernel[0]: (default pager): \[KERNEL\]: Failed to recover emergency paging segment
Tue May 27 kernel[0]: (default pager): \[KERNEL\]: Failed to recover emergency paging segment
Tue May 27 kernel[0]: (default pager): \[KERNEL\]: System is out of paging space.
Tue May 27 kernel[0]: (default pager): \[KERNEL\]: Failed to recover emergency paging segment
Tue May 27 kernel[0]: (default pager): \[KERNEL\]: Failed to recover emergency paging segment
Tue May 27 kernel[0]: (default pager): \[KERNEL\]: System is out of paging space.
Tue May 27 kernel[0]: (default pager): \[KERNEL\]: Failed to recover emergency paging segment
Tue May 27 kernel[0]: (default pager): \[KERNEL\]: System is out of paging space.
Tue May 27 kernel[0]: (default pager): \[KERNEL\]: Failed to recover emergency paging segment
Tue May 27 kernel[0]: (default pager): \[KERNEL\]: Recovered emergency paging segment
Loaded extrinsic kernel extensions
tech.Control Center.HID Driver (3.9.0)
tech.Unifying.HID Driver (1.3.0)
llels.kext.prl_hypervisor (4.0 3844.408728)
llels.kext.prl_hid_hook (4.0 3844.408728)
llels.kext.prl_usb_connect (4.0 3844.408728)
llels.kext.prl_netbridge (4.0 3844.408728)
llels.kext.prl_vnic (4.0 3844.408728)
Extrinsic daemons
com.parallels.vm.prl_naptd
org.samba.smbd
org.samba.nmbd
edu.mit.Kerberos.krb5kdc
edu.mit.Kerberos.kadmind
com.parallels.desktop.launchdaemon
com.adobe.versioncueCS4
Extrinsic agents
edu.mit.Kerberos.KerberosAgent
com.wacom.pentablet
com.parallels.desktop.client.launch
com.Logitech.Control
com.epson.eventmanager.agent
com.epson.esua.launcher
com.amazon.sendtokindle.launcher
com.adobe.CS4ServiceManager
com.google.keystone.user.agent
com.akamai.single-user-client
com.adobe.ARM.UUID
com.adobe.ARM.UUID
edu.mit.Kerberos.CCacheServer
launchd items
/Library/LaunchAgents/com.adobe.CS4ServiceManager.plist
(com.adobe.CS4ServiceManager)
/Library/LaunchAgents/com.amazon.sendtokindle.launcher.plist
(com.amazon.sendtokindle.launcher)
/Library/LaunchAgents/com.epson.esua.launcher.plist
(com.epson.esua.launcher)
/Library/LaunchAgents/com.epson.eventmanager.agent.plist
(com.epson.eventmanager.agent)
/Library/LaunchAgents/com.Logitech.Control Center.Daemon.plist
(com.Logitech.Control Center.Daemon)
/Library/LaunchAgents/com.parallels.desktop.launch.plist
(com.parallels.desktop.client.launch)
/Library/LaunchAgents/com.wacom.pentablet.plist
(com.wacom.pentablet)
/Library/LaunchDaemons/com.adobe.versioncueCS4.plist
(com.adobe.versioncueCS4)
/Library/LaunchDaemons/com.apple.third_party_32b_kext_logger.plist
(com.apple.third_party_32b_kext_logger)
/Library/LaunchDaemons/com.parallels.desktop.launchdaemon.plist
(com.parallels.desktop.launchdaemon)
Library/LaunchAgents/com.adobe.ARM.UUID.plist
(com.adobe.ARM.UUID)
Library/LaunchAgents/com.adobe.ARM.UUID.plist
(com.adobe.ARM.UUID)
Library/LaunchAgents/com.akamai.single-user-client.plist
(com.akamai.single-user-client)
Library/LaunchAgents/com.apple.FolderActions.enabled.plist
(com.apple.FolderActions.enabled)
Library/LaunchAgents/com.apple.FolderActions.folders.plist
(com.apple.FolderActions.folders)
Library/LaunchAgents/com.google.keystone.agent.plist
(com.google.keystone.user.agent)
Startup items
/Library/StartupItems/AdobeVersionCueCS2/AdobeVersionCueCS2
/Library/StartupItems/AdobeVersionCueCS2/StartupParameters.plist
/Library/StartupItems/AdobeVersionCueCS2/VersionCueCS2Daemon
/Library/StartupItems/ParallelsDesktopTransporter/llipd
/Library/StartupItems/ParallelsDesktopTransporter/ParallelsTransporter
/Library/StartupItems/ParallelsDesktopTransporter/StartupParameters.plist
Extrinsic loadable bundles
/System/Library/CoreServices/SecurityAgentPlugins/PKINITMechanism.bundle
(com.apple.PKINITMechanism)
/System/Library/Extensions/AppleBluetoothMultitouch.kext
(com.apple.driver.AppleBluetoothMultitouch)
/System/Library/Extensions/AppleIntelHDGraphics.kext
(com.apple.driver.AppleIntelHDGraphics)
/System/Library/Extensions/AppleIntelHDGraphicsFB.kext
(com.apple.driver.AppleIntelHDGraphicsFB)
/System/Library/Extensions/AppleIntelHDGraphicsGA.plugin
(com.apple.driver.AppleIntelHDGraphicsGA)
/System/Library/Extensions/AppleIntelHDGraphicsGLDriver.bundle
(com.apple.driver.AppleIntelHDGraphicsGLDriver)
/System/Library/Extensions/AppleIntelHDGraphicsVADriver.bundle
(com.apple.AppleIntelHDGraphicsVADriver)
/System/Library/Extensions/AppleIntelSNBGraphicsFB.kext
(com.apple.driver.AppleIntelSNBGraphicsFB)
/System/Library/Extensions/AppleIntelSNBVA.bundle
(com.apple.AppleIntelSNBFBVA)
/System/Library/Extensions/AppleMCCSControl.kext
(com.apple.driver.AppleMCCSControl)
/System/Library/Extensions/AppleMCP89RootPortPM.kext
(com.apple.driver.AppleMCP89RootPortPM)
/System/Library/Extensions/AppleMultitouchDriver.kext
(com.apple.driver.AppleMultitouchDriver)
/System/Library/Extensions/AppleSDXC.kext
(com.apple.driver.AppleSDXC)
/System/Library/Extensions/AppleThunderboltDPAdapters.kext
(com.apple.driver.AppleThunderboltDPAdapters)
/System/Library/Extensions/AppleThunderboltEDMService.kext
(com.apple.driver.AppleThunderboltEDMService)
/System/Library/Extensions/AppleThunderboltNHI.kext
(com.apple.driver.AppleThunderboltNHI)
/System/Library/Extensions/AppleThunderboltPCIAdapters.kext
(com.apple.driver.AppleThunderboltPCIAdapters)
/System/Library/Extensions/AppleThunderboltUTDM.kext
(com.apple.iokit.AppleThunderboltUTDM)
/System/Library/Extensions/ATI4500Controller.kext
(com.apple.kext.ATI4500Controller)
/System/Library/Extensions/ATI4600Controller.kext
(com.apple.kext.ATI4600Controller)
/System/Library/Extensions/ATI5000Controller.kext
(com.apple.kext.ATI5000Controller)
/System/Library/Extensions/ATI6000Controller.kext
(com.apple.kext.ATI6000Controller)
/System/Library/Extensions/ATIRadeonX3000.kext
(com.apple.ATIRadeonX3000)
/System/Library/Extensions/ATIRadeonX3000GA.plugin
(com.apple.ATIRadeonX3000GA)
/System/Library/Extensions/ATIRadeonX3000GLDriver.bundle
(com.apple.ATIRadeonX3000GLDriver)
/System/Library/Extensions/ATIRadeonX3000VADriver.bundle
(com.apple.ATIRadeonX3000VADriver)
/System/Library/Extensions/BJUSBMP.kext
(jp.co.canon.bj.kext.BJUSBMP)
/System/Library/Extensions/exfat.kext
(com.apple.filesystems.exfat)
/System/Library/Extensions/GeForceGLDriver.bundle
(com.apple.GeForceGLDriver)
/System/Library/Extensions/IOThunderboltFamily.kext
(com.apple.iokit.IOThunderboltFamily)
/System/Library/Extensions/LogitechHIDDevices.kext
(com.Logitech.Control Center.HID Driver)
/System/Library/Extensions/LogitechUnifying.kext
(com.Logitech.Unifying.HID Driver)
/System/Library/Extensions/Pen Tablet.kext
(com.wacom.kext.pentablet)
/System/Library/Extensions/PromiseSTEX.kext
(com.promise.driver.stex)
/System/Library/Extensions/TabletDriverCFPlugin.bundle
(No bundle ID)
/Library/Audio/MIDI Drivers/EmagicUSBMIDIDriver.plugin
(info.emagic.driver.unitor)
/Library/Extensions/LogitechHIDDevices.kext
(com.Logitech.Control Center.HID Driver)
/Library/Extensions/LogitechUnifying.kext
(com.Logitech.Unifying.HID Driver)
/Library/Internet Plug-Ins/AdobePDFViewer.plugin
(com.adobe.acrobat.pdfviewer)
/Library/Internet Plug-Ins/eMusic.plugin
(com.emusic.plugins.emp.mac)
/Library/Internet Plug-Ins/Flip4Mac WMV Plugin.plugin
(net.telestream.wmv.plugin)
/Library/Internet Plug-Ins/Google Earth Web Plug-in.plugin
(com.Google.GoogleEarthPlugin.plugin)
/Library/Internet Plug-Ins/iPhotoPhotocast.plugin
(com.apple.plugin.iPhotoPhotocast)
/Library/Internet Plug-Ins/JavaAppletPlugin.plugin
(com.apple.java.JavaAppletPlugin)
/Library/Internet Plug-Ins/OfficeLiveBrowserPlugin.plugin
(com.microsoft.officelive.browserplugin)
/Library/Internet Plug-Ins/RealPlayer Plugin.plugin
(com.RealNetworks.RealPlayerPlugin)
/Library/Internet Plug-Ins/Silverlight.plugin
(com.microsoft.SilverlightPlugin)
/Library/Internet Plug-Ins/WacomNetscape.plugin
(com.wacom.tabletplugin)
/Library/Internet Plug-Ins/WacomSafari.plugin
(com.wacom.safaritabletplugin)
/Library/PreferencePanes/Flash Player.prefPane
(com.adobe.flashplayerpreferences)
/Library/PreferencePanes/Flip4Mac WMV.prefPane
(net.telestream.wmv.prefpane)
/Library/PreferencePanes/Logitech Control Center.prefPane
(com.Logitech.Control Center.Preference Pane)
/Library/PreferencePanes/MacFUSE.prefPane
(com.google.MacFUSE)
/Library/PreferencePanes/PenTablet.prefPane
(com.wacom.PenTabletSettingsPrefPane)
/Library/QuickTime/AppleIntermediateCodec.component
(com.apple.AppleIntermediateCodec)
/Library/QuickTime/AppleMPEG2Codec.component
(com.apple.AppleMPEG2Codec)
/Library/QuickTime/CanonMJPEGAVI.component
(jp.co.canon.MJPEGAVIExporter)
/Library/QuickTime/CanonText.component
(jp.co.canon.Text)
/Library/QuickTime/Flip4Mac WMV Advanced.component
(net.telestream.wmv.advanced)
/Library/QuickTime/Flip4Mac WMV Export.component
(net.telestream.wmv.export)
/Library/QuickTime/Flip4Mac WMV Import.component
(net.telestream.wmv.import)
/Library/ScriptingAdditions/Adobe Unit Types.osax
(No bundle ID)
/Library/Spotlight/iMovie.mdimporter
(com.apple.iMovieMDImporter)
/Library/Spotlight/iWeb.mdimporter
(com.apple.MDImporter.iWeb)
/Library/Spotlight/Microsoft Entourage.mdimporter
(com.microsoft.entourageMDImporter)
/Library/Spotlight/ParallelsMD.mdimporter
(com.parallels.mdimporter)
Library/Address Book Plug-Ins/SkypeABDialer.bundle
(com.skype.skypeabdialer)
Library/Address Book Plug-Ins/SkypeABSMS.bundle
(com.skype.skypeabsms)
Library/PreferencePanes/AkamaiNetSession.prefPane
(com.yourcompany.AkamaiNetSession)
Extrinsic shared libraries
/usr/lib/libapr-1.0.3.8.dylib
/usr/lib/libaprutil-1.0.3.9.dylib
/usr/lib/libarchive.2.dylib
/usr/lib/libbz2.1.0.dylib
/usr/lib/libneon.27.dylib
/usr/lib/libXplugin.1.dylib
Application check
com.autodesk.AutoCAD
Global login items
/Applications/Epson Software/Epson Low Ink Reminder.app/Contents/EpsonLowInkReminderAgent.app
User login items
iTunesHelper
RealPlayer Downloader Agent
Restricted user files: 152
Font problems: 35
Bad plists
Library/Preferences/com.apple.iphotomosaic.plist
Desktop file count: 32
Elapsed time (s): 160
Thank you again thomas_r !! I followed the your link Adware Removal Guide and it worked !!
THANK YOU A MILLION TIMES OVER!!!! 🙂
THANK YOU A MILLION TIMES OVER!!!!
Linc Davis,
I followed your instructions to the tee and it worked successfully on Safari. Then I tried it on Google Chrome and get this:
However, I still get the "search install" and bing when I search in the address bar on Google Chrome. Safari is still fine. FireFox is fine.
What shall I do now?
Thank you for your help!
I followed Linc's instructions and was able to be successful on Firefox and Safari, but not on Google Chrome.
I went to your site and followed those instructions and was able to get rid of a few more, but I still get the installmac on Google Chrome.
I went through each one of these. I also uninstalled that Omnibar.
Any other suggestions?
/Applications/Genieo
/Applications/InstallMac
/Applications/Uninstall Genieo
/Applications/Uninstall IM Completer.app
~/Library/Application Support/com.genieoinnovation.Installer/
~/Library/Application Support/Genieo/
~/Library/LaunchAgents/com.genieo.completer.download.plist
~/Library/LaunchAgents/com.genieo.completer.update.plist
/Library/LaunchAgents/com.genieoinnovation.macextension.plist
/Library/LaunchAgents/com.genieoinnovation.macextension.client.plist
/Library/LaunchAgents/com.genieo.engine.plist
/Library/LaunchAgents/com.genieo.completer.update.plist
/Library/LaunchDaemons/com.genieoinnovation.macextension.client.plist
/Library/PrivilegedHelperTools/com.genieoinnovation.macextension.client
/usr/lib/libgenkit.dylib
/usr/lib/libgenkitsa.dylib
/usr/lib/libimckit.dylib
/usr/lib/libimckitsa.dylib
What are you still seeing in Chrome? If it just loads an InstallMac or Bing page when Chrome loads, you have to change your home page in Chrome's settings.
It's not a "loading bing page when chrome loads" problem. It's this (from my message above:)
THANK YOU A MILLION TIMES OVER!!!!
Linc Davis,
I followed your instructions to the tee and it worked successfully on Safari. Then I tried it on Google Chrome and; however, I still get the "search install" and bing when I search in the address bar on Google Chrome. Safari is still fine. FireFox is fine.
What shall I do now?
Thank you for your help!
vietitali wrote:
I still get the "search install" and bing when I search in the address bar on Google Chrome.
I'm not sure I understand that. You can't have two different search engines selected at once. What exactly are you seeing? A screenshot would help.
Make a screenshot by following the directions here:
http://support.apple.com/kb/HT5775
Be sure no sensitive personal information is displayed. To add that image to a post here, click the camera icon in the post editor toolbar.
How can I remove installmac virus from my Mac Pro
