planeta4166

Q: How can I remove installmac virus from my Mac Pro

Hi everyone, every time I open Chrome the default page is installmac. This virus have been giving me internet connection problems and my computer is also slowing down.

 

Is there any way I can delete this virus?

 

 

Thanks.

Posted on Sep 23, 2013 5:35 AM

Close

Q: How can I remove installmac virus from my Mac Pro

  • All replies
  • Helpful answers

Previous Page 2 of 3 last Next
  • by Lorif70,

    Lorif70 Lorif70 Mar 18, 2014 6:40 PM in response to Lorif70
    Level 1 (0 points)
    Mar 18, 2014 6:40 PM in response to Lorif70

    Unfortunately I don't have the CleanMyMac app as I trashed it (not knowing I needed it to uninstall).  When I do a search for it nothing comes up.  Is there a way to wipe it without the app?

  • by Linc Davis,

    Linc Davis Linc Davis Mar 18, 2014 6:48 PM in response to Lorif70
    Level 10 (208,037 points)
    Applications
    Mar 18, 2014 6:48 PM in response to Lorif70

    Reinstall it, then remove it.

  • by Lorif70,

    Lorif70 Lorif70 Mar 18, 2014 7:10 PM in response to Linc Davis
    Level 1 (0 points)
    Mar 18, 2014 7:10 PM in response to Linc Davis

    WooHoo.  So far so good.  I installed it, uninstalled it and removed MacKeeper.  I also went into my Safari settings and uninstalled OmniSource (or something like that) under Extensions.  I never dowloaded it so never thought to look there as I don't use the 3rd party extensions (I turned it off for now), but it definitely mentioned InstallMac and Genieo as a search engine so not sure what took care of it, but it seems back to normal again.

    THANK YOU for your help.

  • by thomas_r.,

    thomas_r. thomas_r. Mar 19, 2014 3:46 AM in response to Lorif70
    Level 7 (30,944 points)
    Mac OS X
    Mar 19, 2014 3:46 AM in response to Lorif70

    I'm glad you got this sorted out. However, I do feel compelled to point something out, for your future safety:

     

    uninstalled OmniSource (or something like that) under Extensions.  I never dowloaded it so never thought to look there as I don't use the 3rd party extensions

     

    Omnibar is something you were instructed to remove by both my instructions (see step 5) and by Linc's latest instructions, which he posted on a different topic you were replying to. In the future, you need to read such instructions more carefully, especially when one set of instructions includes the following giant, red text:

     

    If you do not follow these directions exactly, you could cause your computer to freeze and to be unable to restart!

  • by Myrvete,

    Myrvete Myrvete May 27, 2014 1:04 PM in response to thomas_r.
    Level 1 (0 points)
    May 27, 2014 1:04 PM in response to thomas_r.

    Hi, I am having this same issue after I tryed to install an webplayer Update trick I got unexcpectadly from veehd.com movie site, three days ago. I performed the Linc Davis UNIX shell script in terminal and I got the info I am pasting below. Could you Linc Davishelp me finding out what is going wrong with  my Mac ? I did uninstall the unrecognized  Safari extensions, but when I run the UNIX shell script afterwords, I see in there the gophoto-it which is not in my safary' preferences extensions visible. It seems it is hidden somewhere. 

    Thank you,

     

    System Version: OS X 10.9.2 (13C64)

    Kernel Version: Darwin 13.1.0

    Boot Mode: Normal

     

    Model: iMac13,2

     

    RAM details

     

            BANK 0/DIMM0:

     

              Size: 8 GB

              Speed: 1600 MHz

              Status: OK

              Manufacturer: 0x802C

     

            BANK 1/DIMM0:

     

              Size: 8 GB

              Speed: 1600 MHz

              Status: OK

              Manufacturer: 0x802C

     

            BANK 0/DIMM1:

     

              Size: Empty

              Speed: Empty

              Status: Empty

              Manufacturer: Empty

     

            BANK 1/DIMM1:

     

              Size: Empty

              Speed: Empty

              Status: Empty

              Manufacturer: Empty

     

    USB

     

       OWC Mercury On-The-Go (Macpower Peripherals Ltd.)

     

    System diagnostics

     

       2014-05-27 alerterdaemon crash

       2014-05-27 alerterdaemon crash

       2014-05-27 alerterdaemon crash

       2014-05-27 alerterdaemon crash

       2014-05-27 alerterdaemon crash

       2014-05-27 alerterdaemon crash

       2014-05-27 alerterdaemon crash

       2014-05-27 alerterdaemon crash

       2014-05-27 alerterdaemon crash

       2014-05-27 alerterdaemon crash

     

    User diagnostics

     

       2014-05-23 com.apple.WebKit.WebContent crash

       2014-05-24 PluginProcess crash

       2014-05-24 Safari crash

       2014-05-25 PluginProcess crash

       2014-05-25 com.apple.WebKit.WebContent crash

     

    Kernel messages

     

       May 25 21:36:39   process PluginProcess[16060] caught causing excessive wakeups. Observed wakeups rate (per sec): 326; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 56375085

       May 25 23:36:30   process PluginProcess[16060] caught causing excessive wakeups. Observed wakeups rate (per sec): 248; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 58695478

       May 25 23:52:49   process PluginProcess[16060] caught causing excessive wakeups. Observed wakeups rate (per sec): 271; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 59024853

       May 26 00:47:17   process PluginProcess[16060] caught causing excessive wakeups. Observed wakeups rate (per sec): 664; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 60335457

       May 26 01:04:26   process PluginProcess[16060] caught causing excessive wakeups. Observed wakeups rate (per sec): 547; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 60913950

       May 26 02:00:02   process AAM Updates Noti[21832] caught causing excessive wakeups. Observed wakeups rate (per sec): 41360; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 45217

       May 26 02:12:54   process PluginProcess[16060] caught causing excessive wakeups. Observed wakeups rate (per sec): 570; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 63545179

       May 26 09:15:09   process PluginProcess[16060] caught causing excessive wakeups. Observed wakeups rate (per sec): 574; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 70165970

       May 26 13:19:02   process PluginProcess[23205] caught causing excessive wakeups. Observed wakeups rate (per sec): 166; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 105780

       May 26 19:42:17   process Google Chrome He[23807] caught causing excessive wakeups. Observed wakeups rate (per sec): 186; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 45006

       May 26 21:07:01   process PluginProcess[23205] caught causing excessive wakeups. Observed wakeups rate (per sec): 247; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 2601566

       May 26 22:49:34   process com.apple.WebKit[24087] thread 3975839 caught burning CPU! It used more than 50% CPU (Actual recent usage: 53%) over 180 seconds. thread lifetime cpu usage 90.187630 seconds, (79.481946 user, 10.705684 system) ledger info: balance: 90014306733 credit: 90014306733 debit: 0 limit: 90000000000 (50%) period: 180000000000 time since last refill (ns): 166887484615

       May 26 23:24:24   process PluginProcess[23205] caught causing excessive wakeups. Observed wakeups rate (per sec): 220; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 3743645

       May 26 23:28:20   process com.apple.WebKit[24222] thread 3992222 caught burning CPU! It used more than 50% CPU (Actual recent usage: 53%) over 180 seconds. thread lifetime cpu usage 90.329873 seconds, (80.981733 user, 9.348140 system) ledger info: balance: 90000913349 credit: 90000913349 debit: 0 limit: 90000000000 (50%) period: 180000000000 time since last refill (ns): 168050970299

       May 26 23:50:52   process Adobe Photoshop [24266] thread 4000227 caught burning CPU! It used more than 50% CPU (Actual recent usage: 65%) over 180 seconds. thread lifetime cpu usage 165.592464 seconds, (135.699999 user, 29.892465 system) ledger info: balance: 90001076182 credit: 163887164012 debit: 73886087830 limit: 90000000000 (50%) period: 180000000000 time since last refill (ns): 138224979711

       May 27 00:34:32   process PluginProcess[23205] caught causing excessive wakeups. Observed wakeups rate (per sec): 229; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 4809454

       May 27 02:04:04   process PluginProcess[23205] caught causing excessive wakeups. Observed wakeups rate (per sec): 385; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 6266306

       May 27 07:25:11   process PluginProcess[23205] caught causing excessive wakeups. Observed wakeups rate (per sec): 320; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 7801047

       May 27 07:43:11   process PluginProcess[23205] caught causing excessive wakeups. Observed wakeups rate (per sec): 449; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 8249005

       May 27 12:34:38   process PluginProcess[1294] caught causing excessive wakeups. Observed wakeups rate (per sec): 150; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 134432

       May 27 12:40:05   process PluginProcess[1294] caught causing excessive wakeups. Observed wakeups rate (per sec): 251; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 204251

       May 27 13:16:13   process PluginProcess[1294] caught causing excessive wakeups. Observed wakeups rate (per sec): 404; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 815335

       May 27 13:47:08   process Locum[2666] thread 85175 caught burning CPU! It used more than 50% CPU (Actual recent usage: 59%) over 180 seconds. thread lifetime cpu usage 336.466381 seconds, (2.057602 user, 334.408779 system) ledger info: balance: 90006833809 credit: 336306518493 debit: 246299684684 limit: 90000000000 (50%) period: 180000000000 time since last refill (ns): 151265996648

       May 27 13:50:12   process Finder[296] caught causing excessive wakeups. Observed wakeups rate (per sec): 275; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 109164

       May 27 14:19:52   process WindowServer[124] caught causing excessive wakeups. Observed wakeups rate (per sec): 155; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 438954

     

    Extrinsic daemons

     

       com.autodesk.backburner_server

       com.autodesk.backburner_manager

       com.vsearch.helper

       com.torch.update.agent

       com.quark.quarkupdate

       com.intego.BackupAssistant.daemon

       com.genieoinnovation.macextension.client

       com.autodesk.backburner_start

       com.adobe.SwitchBoard

       com.adobe.fpsaud

     

    Extrinsic agents

     

       com.github.norio-nomura.SIMBL-Agent

       com.vsearch.agent

       com.quark.quarkupdate.agent

       com.intego.backupassistant.agent

       com.hp.help.tocgenerator

       com.genieoinnovation.macextension

       com.divx.update.agent

       com.divx.dms.agent

       com.google.keystone.user.agent

       com.adobe.ARM.UUID

     

    launchd items

     

       /Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist

                 (com.adobe.AAM.Startup-1.0)

       /Library/LaunchAgents/com.divx.dms.agent.plist

                 (com.divx.dms.agent)

       /Library/LaunchAgents/com.divx.update.agent.plist

                 (com.divx.update.agent)

       /Library/LaunchAgents/com.hp.help.tocgenerator.plist

                 (com.hp.help.tocgenerator)

       /Library/LaunchAgents/com.intego.backupassistant.agent.plist

                 (com.intego.backupassistant.agent)

       /Library/LaunchAgents/com.quark.quarkupdate.agent.plist

                 (com.quark.quarkupdate.agent)

       /Library/LaunchAgents/com.vsearch.agent.plist

                 (com.vsearch.agent)

       /Library/LaunchDaemons/com.adobe.fpsaud.plist

                 (com.adobe.fpsaud)

       /Library/LaunchDaemons/com.adobe.SwitchBoard.plist

                 (com.adobe.SwitchBoard)

       /Library/LaunchDaemons/com.autodesk.backburner_manager.plist

                 (com.autodesk.backburner_manager)

       /Library/LaunchDaemons/com.autodesk.backburner_server.plist

                 (com.autodesk.backburner_server)

       /Library/LaunchDaemons/com.autodesk.backburner_start.plist

                 (com.autodesk.backburner_start)

       /Library/LaunchDaemons/com.intego.BackupAssistant.daemon.plist

                 (com.intego.BackupAssistant.daemon)

       /Library/LaunchDaemons/com.quark.quarkupdate.plist

                 (com.quark.quarkupdate)

       /Library/LaunchDaemons/com.torch.update.agent.plist

                 (com.torch.update.agent)

       /Library/LaunchDaemons/com.vsearch.daemon.plist

                 (com.vsearch.daemon)

       /Library/LaunchDaemons/com.vsearch.helper.plist

                 (com.vsearch.helper)

       Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist

                 (com.adobe.AAM.Scheduler-1.0)

       Library/LaunchAgents/com.adobe.ARM.UUID.plist

                 (com.adobe.ARM.UUID)

       Library/LaunchAgents/com.google.keystone.agent.plist

                 (com.google.keystone.user.agent)

     

    Startup items

     

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantAgent.app/Contents/_CodeSignature/CodeResources

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantAgent.app/Contents/CodeResources

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantAgent.app/Contents/Info.plist

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantAgent.app/Contents/MacOS/BackupAssistantAgent

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantAgent.app/Contents/Resources/Japanese.lproj/Localizabl e.strings

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantDaemon

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngine

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Resources/EqualsDefaultFilter. plist

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Resources/EqualsPathDefaultFil ter.plist

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Resources/Info.plist

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Resources/Japanese.lproj/Alert s.strings

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Resources/Japanese.lproj/Error s.strings

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Resources/Japanese.lproj/LaCie .strings

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Resources/Japanese.lproj/Local izable.strings

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Resources/Japanese.lproj/Scrip ts Verbs.strings

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Resources/Japanese.lproj/Valid ation.strings

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Resources/PBCloneSupport.sh

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/A/_CodeSignature/Code Resources

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/A/CodeResources

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/A/Resources/EqualsDef aultFilter.plist

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/A/Resources/EqualsPat hDefaultFilter.plist

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/A/Resources/Info.plis t

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/A/Resources/Japanese. lproj/Alerts.strings

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/A/Resources/Japanese. lproj/Errors.strings

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/A/Resources/Japanese. lproj/LaCie.strings

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/A/Resources/Japanese. lproj/Localizable.strings

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/A/Resources/Japanese. lproj/Scripts Verbs.strings

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/A/Resources/Japanese. lproj/Validation.strings

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/A/Resources/PBCloneSu pport.sh

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/Current/_CodeSignatur e/CodeResources

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/Current/CodeResources

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/Current/Resources/Equ alsDefaultFilter.plist

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/Current/Resources/Equ alsPathDefaultFilter.plist

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/Current/Resources/Inf o.plist

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/Current/Resources/Jap anese.lproj/Alerts.strings

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/Current/Resources/Jap anese.lproj/Errors.strings

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/Current/Resources/Jap anese.lproj/LaCie.strings

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/Current/Resources/Jap anese.lproj/Localizable.strings

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/Current/Resources/Jap anese.lproj/Scripts Verbs.strings

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/Current/Resources/Jap anese.lproj/Validation.strings

       /Library/StartupItems/Intego Backup Assistant/BackupAssistantEngineSupport.framework/Versions/Current/Resources/PBC loneSupport.sh

       /Library/StartupItems/Intego Backup Assistant/PowerManagerTool

       /Library/StartupItems/Intego Backup Assistant/uninstall.sh

       /Library/StartupItems/NkPtpEnumWT3/NkPtpEnumWT3

     

    Extrinsic loadable bundles

     

       /System/Library/Extensions/RoxioBluRaySupport.kext

                 (com.roxio.BluRaySupport)

       /Library/Audio/Plug-Ins/Components/Flip4Mac WMA Import.component

                 (net.telestream.wmv.import)

       /Library/Internet Plug-Ins/AdobePDFViewer.plugin

                 (com.adobe.acrobat.pdfviewer)

       /Library/Internet Plug-Ins/DivX Web Player.plugin

                 (com.divx.DivXWebPlayer)

       /Library/Internet Plug-Ins/Flash Player.plugin

                 (com.macromedia.Flash Player.plugin)

       /Library/Internet Plug-Ins/Flip4Mac WMV Plugin.plugin

                 (net.telestream.wmv.plugin)

       /Library/Internet Plug-Ins/JavaAppletPlugin.plugin

                 (com.apple.java.JavaAppletPlugin)

       /Library/Internet Plug-Ins/OVSHelper.plugin

                 (com.divx.OVSHelper)

       /Library/PreferencePanes/Flash Player.prefPane

                 (com.adobe.flashplayerpreferences)

       /Library/PreferencePanes/Flip4Mac WMV.prefPane

                 (net.telestream.wmv.prefpane)

       /Library/PreferencePanes/OSXFUSE.prefPane

                 (com.github.osxfuse.OSXFUSEPrefPane)

       /Library/PreferencePanes/QUPreferencePane.prefPane

                 (com.quark.QUPreferencePane)

       /Library/QuickTime/DivX Decoder.component

                 (com.DivXInc.DivXDecoder)

       /Library/QuickTime/DivX Encoder.component

                 (com.DivXInc.DivXCodec)

       /Library/QuickTime/Flip4Mac WMV Advanced.component

                 (net.telestream.wmv.advanced)

       /Library/QuickTime/Flip4Mac WMV Export.component

                 (net.telestream.wmv.export)

       /Library/QuickTime/Flip4Mac WMV Import.component

                 (net.telestream.wmv.import)

       /Library/QuickTime/Flix Flv.component

                 (com.wildform.flix.flv)

       /Library/QuickTime/Flix Swf.component

                 (com.wildform.flix.swf)

       /Library/QuickTime/MayaIFF.component

                 (com.yourcompany.MayaIFF)

       /Library/QuickTime/MXFImporter.component

                 (jp.co.panasonic.MXFImporter)

       /Library/ScriptingAdditions/Adobe Unit Types.osax

                 (No bundle ID)

       /Library/ScriptingAdditions/QXPScriptingAdditions.osax

                 (com.quark.QXPScriptingAdditions.Bundle)

       /Library/Spotlight/QuarkXPress.mdimporter

                 (com.quark.xpress.v6)

       Library/Address Book Plug-Ins/SkypeABDialer.bundle

                 (com.skype.skypeabdialer)

       Library/Address Book Plug-Ins/SkypeABSMS.bundle

                 (com.skype.skypeabsms)

       Library/Audio/Plug-Ins/Components/A52Codec.component

                 (com.shepmater.A52Codec)

       Library/Internet Plug-Ins/FuzeLaunchPlugin.bundle

                 (com.fuzemeeting.Plugin)

       Library/PreferencePanes/Perian.prefPane

                 (org.perian.PerianPane)

       Library/QuickTime/AC3MovieImport.component

                 (com.cod3r.ac3movieimport)

       Library/QuickTime/Perian.component

                 (org.perian.Perian)

       Library/ScriptingAdditions/EasySIMBL.osax

                 (com.github.norio-nomura.EasySIMBL.osax)

       Library/Services/ToastIt.service

                 (com.roxio.ToastItService)

     

    Extrinsic shared libraries

     

       /usr/lib/libgenkit.dylib

       /usr/lib/libgenkitsa.dylib

     

    Environment

     

       /usr/lib/libgenkit.dylib

     

    launchd.conf

     

       setenv DYLD_INSERT_LIBRARIES /usr/lib/libgenkit.dylib

     

    Global login items

     

       /Library/Printers/hp/hpio/HPEventHandler.app/

       /Library/Application Support/Hewlett-Packard/Customer Participation/HP Product Research.app/

     

    User login items

     

       iTunesHelper.app

       Dropbox.app

       VMware Fusion Start Menu.app

       Genieo.app

     

    Safari extensions

     

       Amazon Shopping Assistant

       Ebay Shopping Assistant

       gophoto-it

     

    Restricted user files: 430

     

    Desktop file count: 178

     

    Elapsed time (s): 115

  • by thomas_r.,

    thomas_r. thomas_r. May 27, 2014 2:18 PM in response to Myrvete
    Level 7 (30,944 points)
    Mac OS X
    May 27, 2014 2:18 PM in response to Myrvete

    You have the Genieo, Downlite, GoPhoto.it and Spigot adware installed. See my Adware Removal Guide for help removing them.

     

    (Fair disclosure: The Safe Mac is my site, and contains a Donate button, so I may receive compensation for providing links to The Safe Mac. Donations are not required.)

  • by Myrvete,

    Myrvete Myrvete May 27, 2014 7:45 PM in response to thomas_r.
    Level 1 (0 points)
    May 27, 2014 7:45 PM in response to thomas_r.

    Thank you thomas_r !

     

    In fact I followed the steps of the first message on How do I get rid of Genieo virus? :

     

    https://discussions.apple.com/message/25486076#25486076

     

    and it seems it has done the magic. Unless somthing will pop up later.

     

    Thanks to Linc Davis too !!

  • by Myrvete,

    Myrvete Myrvete May 27, 2014 8:34 PM in response to Myrvete
    Level 1 (0 points)
    May 27, 2014 8:34 PM in response to Myrvete

    Hi again,

    I guess I did send the previous message too early. After 3 hours of using my "clean" version of my computer, this Genio thing poped up again with messages on MacCleaning and some other advertisment... I think it is not as bad as it was but the virus is still here and I still need some help with this. Meanwhile I will try thomas_r link ( Adware Removal Guide )

    Thanks to any one with your helpful advices !!

  • by LibertyBay,

    LibertyBay LibertyBay May 28, 2014 8:12 PM in response to Linc Davis
    Level 1 (0 points)
    May 28, 2014 8:12 PM in response to Linc Davis

    System Version: Mac OS X 10.6.8 (10K549)

    Kernel Version: Darwin 10.8.0

    Boot Mode: Normal

     

     

    Model: iMac5,1

     

     

    Total RAM (GB): 2

     

     

    RAM details

     

     

            BANK 0/DIMM0:

     

     

              Size: 1 GB

              Speed: 667 MHz

              Status: OK

              Manufacturer: 0xCE00000000000000

     

     

            BANK 1/DIMM1:

     

     

              Size: 1 GB

              Speed: 667 MHz

              Status: OK

              Manufacturer: 0xCE00000000000000

     

     

    User diagnostics

     

     

       2014-05-21 com.google.Chrome crash

     

     

    Kernel messages

     

     

       Tue May 27   kernel[0]: (default pager): \[KERNEL\]: Switching ON Emergency paging segment

       Tue May 27   kernel[0]: (default pager): \[KERNEL\]: Recovered emergency paging segment

       Tue May 27   kernel[0]: (default pager): \[KERNEL\]: Switching ON Emergency paging segment

       Tue May 27   kernel[0]: (default pager): \[KERNEL\]: Failed to recover emergency paging segment

       Tue May 27   kernel[0]: (default pager): \[KERNEL\]: Failed to recover emergency paging segment

       Tue May 27   kernel[0]: (default pager): \[KERNEL\]: System is out of paging space.

       Tue May 27   kernel[0]: (default pager): \[KERNEL\]: Failed to recover emergency paging segment

       Tue May 27   kernel[0]: (default pager): \[KERNEL\]: System is out of paging space.

       Tue May 27   kernel[0]: (default pager): \[KERNEL\]: Failed to recover emergency paging segment

       Tue May 27   kernel[0]: (default pager): \[KERNEL\]: System is out of paging space.

       Tue May 27   kernel[0]: (default pager): \[KERNEL\]: Failed to recover emergency paging segment

       Tue May 27   kernel[0]: (default pager): \[KERNEL\]: Failed to recover emergency paging segment

       Tue May 27   kernel[0]: (default pager): \[KERNEL\]: System is out of paging space.

       Tue May 27   kernel[0]: (default pager): \[KERNEL\]: Failed to recover emergency paging segment

       Tue May 27   kernel[0]: (default pager): \[KERNEL\]: Failed to recover emergency paging segment

       Tue May 27   kernel[0]: (default pager): \[KERNEL\]: System is out of paging space.

       Tue May 27   kernel[0]: (default pager): \[KERNEL\]: Failed to recover emergency paging segment

       Tue May 27   kernel[0]: (default pager): \[KERNEL\]: System is out of paging space.

       Tue May 27   kernel[0]: (default pager): \[KERNEL\]: Failed to recover emergency paging segment

       Tue May 27   kernel[0]: (default pager): \[KERNEL\]: Recovered emergency paging segment

     

     

    Loaded extrinsic kernel extensions

     

     

       tech.Control Center.HID Driver (3.9.0)

       tech.Unifying.HID Driver (1.3.0)

       llels.kext.prl_hypervisor (4.0 3844.408728)

       llels.kext.prl_hid_hook (4.0 3844.408728)

       llels.kext.prl_usb_connect (4.0 3844.408728)

       llels.kext.prl_netbridge (4.0 3844.408728)

       llels.kext.prl_vnic (4.0 3844.408728)

     

     

    Extrinsic daemons

     

     

       com.parallels.vm.prl_naptd

       org.samba.smbd

       org.samba.nmbd

       edu.mit.Kerberos.krb5kdc

       edu.mit.Kerberos.kadmind

       com.parallels.desktop.launchdaemon

       com.adobe.versioncueCS4

     

     

    Extrinsic agents

     

     

       edu.mit.Kerberos.KerberosAgent

       com.wacom.pentablet

       com.parallels.desktop.client.launch

       com.Logitech.Control

       com.epson.eventmanager.agent

       com.epson.esua.launcher

       com.amazon.sendtokindle.launcher

       com.adobe.CS4ServiceManager

       com.google.keystone.user.agent

       com.akamai.single-user-client

       com.adobe.ARM.UUID

       com.adobe.ARM.UUID

       edu.mit.Kerberos.CCacheServer

     

     

    launchd items

     

     

       /Library/LaunchAgents/com.adobe.CS4ServiceManager.plist

                 (com.adobe.CS4ServiceManager)

       /Library/LaunchAgents/com.amazon.sendtokindle.launcher.plist

                 (com.amazon.sendtokindle.launcher)

       /Library/LaunchAgents/com.epson.esua.launcher.plist

                 (com.epson.esua.launcher)

       /Library/LaunchAgents/com.epson.eventmanager.agent.plist

                 (com.epson.eventmanager.agent)

       /Library/LaunchAgents/com.Logitech.Control Center.Daemon.plist

                 (com.Logitech.Control Center.Daemon)

       /Library/LaunchAgents/com.parallels.desktop.launch.plist

                 (com.parallels.desktop.client.launch)

       /Library/LaunchAgents/com.wacom.pentablet.plist

                 (com.wacom.pentablet)

       /Library/LaunchDaemons/com.adobe.versioncueCS4.plist

                 (com.adobe.versioncueCS4)

       /Library/LaunchDaemons/com.apple.third_party_32b_kext_logger.plist

                 (com.apple.third_party_32b_kext_logger)

       /Library/LaunchDaemons/com.parallels.desktop.launchdaemon.plist

                 (com.parallels.desktop.launchdaemon)

       Library/LaunchAgents/com.adobe.ARM.UUID.plist

                 (com.adobe.ARM.UUID)

       Library/LaunchAgents/com.adobe.ARM.UUID.plist

                 (com.adobe.ARM.UUID)

       Library/LaunchAgents/com.akamai.single-user-client.plist

                 (com.akamai.single-user-client)

       Library/LaunchAgents/com.apple.FolderActions.enabled.plist

                 (com.apple.FolderActions.enabled)

       Library/LaunchAgents/com.apple.FolderActions.folders.plist

                 (com.apple.FolderActions.folders)

       Library/LaunchAgents/com.google.keystone.agent.plist

                 (com.google.keystone.user.agent)

     

     

    Startup items

     

     

       /Library/StartupItems/AdobeVersionCueCS2/AdobeVersionCueCS2

       /Library/StartupItems/AdobeVersionCueCS2/StartupParameters.plist

       /Library/StartupItems/AdobeVersionCueCS2/VersionCueCS2Daemon

       /Library/StartupItems/ParallelsDesktopTransporter/llipd

       /Library/StartupItems/ParallelsDesktopTransporter/ParallelsTransporter

       /Library/StartupItems/ParallelsDesktopTransporter/StartupParameters.plist

     

     

    Extrinsic loadable bundles

     

     

       /System/Library/CoreServices/SecurityAgentPlugins/PKINITMechanism.bundle

                 (com.apple.PKINITMechanism)

       /System/Library/Extensions/AppleBluetoothMultitouch.kext

                 (com.apple.driver.AppleBluetoothMultitouch)

       /System/Library/Extensions/AppleIntelHDGraphics.kext

                 (com.apple.driver.AppleIntelHDGraphics)

       /System/Library/Extensions/AppleIntelHDGraphicsFB.kext

                 (com.apple.driver.AppleIntelHDGraphicsFB)

       /System/Library/Extensions/AppleIntelHDGraphicsGA.plugin

                 (com.apple.driver.AppleIntelHDGraphicsGA)

       /System/Library/Extensions/AppleIntelHDGraphicsGLDriver.bundle

                 (com.apple.driver.AppleIntelHDGraphicsGLDriver)

       /System/Library/Extensions/AppleIntelHDGraphicsVADriver.bundle

                 (com.apple.AppleIntelHDGraphicsVADriver)

       /System/Library/Extensions/AppleIntelSNBGraphicsFB.kext

                 (com.apple.driver.AppleIntelSNBGraphicsFB)

       /System/Library/Extensions/AppleIntelSNBVA.bundle

                 (com.apple.AppleIntelSNBFBVA)

       /System/Library/Extensions/AppleMCCSControl.kext

                 (com.apple.driver.AppleMCCSControl)

       /System/Library/Extensions/AppleMCP89RootPortPM.kext

                 (com.apple.driver.AppleMCP89RootPortPM)

       /System/Library/Extensions/AppleMultitouchDriver.kext

                 (com.apple.driver.AppleMultitouchDriver)

       /System/Library/Extensions/AppleSDXC.kext

                 (com.apple.driver.AppleSDXC)

       /System/Library/Extensions/AppleThunderboltDPAdapters.kext

                 (com.apple.driver.AppleThunderboltDPAdapters)

       /System/Library/Extensions/AppleThunderboltEDMService.kext

                 (com.apple.driver.AppleThunderboltEDMService)

       /System/Library/Extensions/AppleThunderboltNHI.kext

                 (com.apple.driver.AppleThunderboltNHI)

       /System/Library/Extensions/AppleThunderboltPCIAdapters.kext

                 (com.apple.driver.AppleThunderboltPCIAdapters)

       /System/Library/Extensions/AppleThunderboltUTDM.kext

                 (com.apple.iokit.AppleThunderboltUTDM)

       /System/Library/Extensions/ATI4500Controller.kext

                 (com.apple.kext.ATI4500Controller)

       /System/Library/Extensions/ATI4600Controller.kext

                 (com.apple.kext.ATI4600Controller)

       /System/Library/Extensions/ATI5000Controller.kext

                 (com.apple.kext.ATI5000Controller)

       /System/Library/Extensions/ATI6000Controller.kext

                 (com.apple.kext.ATI6000Controller)

       /System/Library/Extensions/ATIRadeonX3000.kext

                 (com.apple.ATIRadeonX3000)

       /System/Library/Extensions/ATIRadeonX3000GA.plugin

                 (com.apple.ATIRadeonX3000GA)

       /System/Library/Extensions/ATIRadeonX3000GLDriver.bundle

                 (com.apple.ATIRadeonX3000GLDriver)

       /System/Library/Extensions/ATIRadeonX3000VADriver.bundle

                 (com.apple.ATIRadeonX3000VADriver)

       /System/Library/Extensions/BJUSBMP.kext

                 (jp.co.canon.bj.kext.BJUSBMP)

       /System/Library/Extensions/exfat.kext

                 (com.apple.filesystems.exfat)

       /System/Library/Extensions/GeForceGLDriver.bundle

                 (com.apple.GeForceGLDriver)

       /System/Library/Extensions/IOThunderboltFamily.kext

                 (com.apple.iokit.IOThunderboltFamily)

       /System/Library/Extensions/LogitechHIDDevices.kext

                 (com.Logitech.Control Center.HID Driver)

       /System/Library/Extensions/LogitechUnifying.kext

                 (com.Logitech.Unifying.HID Driver)

       /System/Library/Extensions/Pen Tablet.kext

                 (com.wacom.kext.pentablet)

       /System/Library/Extensions/PromiseSTEX.kext

                 (com.promise.driver.stex)

       /System/Library/Extensions/TabletDriverCFPlugin.bundle

                 (No bundle ID)

       /Library/Audio/MIDI Drivers/EmagicUSBMIDIDriver.plugin

                 (info.emagic.driver.unitor)

       /Library/Extensions/LogitechHIDDevices.kext

                 (com.Logitech.Control Center.HID Driver)

       /Library/Extensions/LogitechUnifying.kext

                 (com.Logitech.Unifying.HID Driver)

       /Library/Internet Plug-Ins/AdobePDFViewer.plugin

                 (com.adobe.acrobat.pdfviewer)

       /Library/Internet Plug-Ins/eMusic.plugin

                 (com.emusic.plugins.emp.mac)

       /Library/Internet Plug-Ins/Flip4Mac WMV Plugin.plugin

                 (net.telestream.wmv.plugin)

       /Library/Internet Plug-Ins/Google Earth Web Plug-in.plugin

                 (com.Google.GoogleEarthPlugin.plugin)

       /Library/Internet Plug-Ins/iPhotoPhotocast.plugin

                 (com.apple.plugin.iPhotoPhotocast)

       /Library/Internet Plug-Ins/JavaAppletPlugin.plugin

                 (com.apple.java.JavaAppletPlugin)

       /Library/Internet Plug-Ins/OfficeLiveBrowserPlugin.plugin

                 (com.microsoft.officelive.browserplugin)

       /Library/Internet Plug-Ins/RealPlayer Plugin.plugin

                 (com.RealNetworks.RealPlayerPlugin)

       /Library/Internet Plug-Ins/Silverlight.plugin

                 (com.microsoft.SilverlightPlugin)

       /Library/Internet Plug-Ins/WacomNetscape.plugin

                 (com.wacom.tabletplugin)

       /Library/Internet Plug-Ins/WacomSafari.plugin

                 (com.wacom.safaritabletplugin)

       /Library/PreferencePanes/Flash Player.prefPane

                 (com.adobe.flashplayerpreferences)

       /Library/PreferencePanes/Flip4Mac WMV.prefPane

                 (net.telestream.wmv.prefpane)

       /Library/PreferencePanes/Logitech Control Center.prefPane

                 (com.Logitech.Control Center.Preference Pane)

       /Library/PreferencePanes/MacFUSE.prefPane

                 (com.google.MacFUSE)

       /Library/PreferencePanes/PenTablet.prefPane

                 (com.wacom.PenTabletSettingsPrefPane)

       /Library/QuickTime/AppleIntermediateCodec.component

                 (com.apple.AppleIntermediateCodec)

       /Library/QuickTime/AppleMPEG2Codec.component

                 (com.apple.AppleMPEG2Codec)

       /Library/QuickTime/CanonMJPEGAVI.component

                 (jp.co.canon.MJPEGAVIExporter)

       /Library/QuickTime/CanonText.component

                 (jp.co.canon.Text)

       /Library/QuickTime/Flip4Mac WMV Advanced.component

                 (net.telestream.wmv.advanced)

       /Library/QuickTime/Flip4Mac WMV Export.component

                 (net.telestream.wmv.export)

       /Library/QuickTime/Flip4Mac WMV Import.component

                 (net.telestream.wmv.import)

       /Library/ScriptingAdditions/Adobe Unit Types.osax

                 (No bundle ID)

       /Library/Spotlight/iMovie.mdimporter

                 (com.apple.iMovieMDImporter)

       /Library/Spotlight/iWeb.mdimporter

                 (com.apple.MDImporter.iWeb)

       /Library/Spotlight/Microsoft Entourage.mdimporter

                 (com.microsoft.entourageMDImporter)

       /Library/Spotlight/ParallelsMD.mdimporter

                 (com.parallels.mdimporter)

       Library/Address Book Plug-Ins/SkypeABDialer.bundle

                 (com.skype.skypeabdialer)

       Library/Address Book Plug-Ins/SkypeABSMS.bundle

                 (com.skype.skypeabsms)

       Library/PreferencePanes/AkamaiNetSession.prefPane

                 (com.yourcompany.AkamaiNetSession)

     

     

    Extrinsic shared libraries

     

     

       /usr/lib/libapr-1.0.3.8.dylib

       /usr/lib/libaprutil-1.0.3.9.dylib

       /usr/lib/libarchive.2.dylib

       /usr/lib/libbz2.1.0.dylib

       /usr/lib/libneon.27.dylib

       /usr/lib/libXplugin.1.dylib

     

     

    Application check

     

     

       com.autodesk.AutoCAD

     

     

    Global login items

     

     

       /Applications/Epson Software/Epson Low Ink Reminder.app/Contents/EpsonLowInkReminderAgent.app

     

     

    User login items

     

     

       iTunesHelper

       RealPlayer Downloader Agent

     

     

    Restricted user files: 152

     

     

    Font problems: 35

     

     

    Bad plists

     

     

       Library/Preferences/com.apple.iphotomosaic.plist

     

     

    Desktop file count: 32

     

     

    Elapsed time (s): 160

  • by Myrvete,

    Myrvete Myrvete May 28, 2014 8:20 PM in response to LibertyBay
    Level 1 (0 points)
    May 28, 2014 8:20 PM in response to LibertyBay

    Thank you again thomas_r !! I followed the your link  Adware Removal Guide  and it worked !!

  • by vietitali,

    vietitali vietitali Aug 18, 2014 1:32 PM in response to Linc Davis
    Level 1 (0 points)
    Aug 18, 2014 1:32 PM in response to Linc Davis

    THANK YOU A MILLION TIMES OVER!!!!

  • by vietitali,

    vietitali vietitali Aug 18, 2014 1:44 PM in response to Linc Davis
    Level 1 (0 points)
    Aug 18, 2014 1:44 PM in response to Linc Davis

    THANK YOU A MILLION TIMES OVER!!!!

     

    Linc Davis,

     

    I followed your instructions to the tee and it worked successfully on Safari.  Then I tried it on Google Chrome and get this:Screen Shot 2014-08-18 at 4.38.21 PM.png

    However, I still get the "search install" and bing when I search in the address bar on Google Chrome.  Safari is still fine.  FireFox is fine.

     

    What shall I do now?

     

    Thank you for your help!

  • by vietitali,

    vietitali vietitali Aug 18, 2014 2:15 PM in response to thomas_r.
    Level 1 (0 points)
    Aug 18, 2014 2:15 PM in response to thomas_r.

    I followed Linc's instructions and was able to be successful on Firefox and Safari, but not on Google Chrome.

     

    I went to your site and followed those instructions and was able to get rid of a few more, but I still get the installmac on Google Chrome.

     

    I went through each one of these.  I also uninstalled that Omnibar.

     

    Any other suggestions?

     

    /Applications/Genieo

    /Applications/InstallMac

    /Applications/Uninstall Genieo

    /Applications/Uninstall IM Completer.app

    ~/Library/Application Support/com.genieoinnovation.Installer/

    ~/Library/Application Support/Genieo/

    ~/Library/LaunchAgents/com.genieo.completer.download.plist

    ~/Library/LaunchAgents/com.genieo.completer.update.plist

    /Library/LaunchAgents/com.genieoinnovation.macextension.plist

    /Library/LaunchAgents/com.genieoinnovation.macextension.client.plist

    /Library/LaunchAgents/com.genieo.engine.plist

    /Library/LaunchAgents/com.genieo.completer.update.plist

    /Library/LaunchDaemons/com.genieoinnovation.macextension.client.plist

    /Library/PrivilegedHelperTools/com.genieoinnovation.macextension.client

    /usr/lib/libgenkit.dylib

    /usr/lib/libgenkitsa.dylib

    /usr/lib/libimckit.dylib

    /usr/lib/libimckitsa.dylib

  • by thomas_r.,

    thomas_r. thomas_r. Aug 18, 2014 2:30 PM in response to vietitali
    Level 7 (30,944 points)
    Mac OS X
    Aug 18, 2014 2:30 PM in response to vietitali

    What are you still seeing in Chrome? If it just loads an InstallMac or Bing page when Chrome loads, you have to change your home page in Chrome's settings.

  • by vietitali,

    vietitali vietitali Aug 18, 2014 2:38 PM in response to thomas_r.
    Level 1 (0 points)
    Aug 18, 2014 2:38 PM in response to thomas_r.

    It's not a "loading bing page when chrome loads" problem.  It's this (from my message above:)

     

    THANK YOU A MILLION TIMES OVER!!!!

     

    Linc Davis,

     

    I followed your instructions to the tee and it worked successfully on Safari.  Then I tried it on Google Chrome and; however, I still get the "search install" and bing when I search in the address bar on Google Chrome.  Safari is still fine.  FireFox is fine.

     

    What shall I do now?

     

    Thank you for your help!

Previous Page 2 of 3 last Next