To remove the "InstallMac" spyware, start by following the instructions on this page. Back up all data before making any changes. The instructions may not remove the spyware completely.
Back up all data, then remove the "Genieo" spyware by following the instructions on this page.
Some versions of the spyware may not be completely removed by those instructions. If you still have problems, do as follows.
Triple-click anywhere in the line below on this page to select it:
/Library/Frameworks/GenieoExtra.framework
Right-click or
control
-click the line and select
Services ▹ Reveal
from the contextual menu.* A folder should open with an item selected. Move the selected item to the Trash. You may be prompted for your administrator password.
Repeat with each of these lines:
/Library/LaunchAgents/com.genieo.engine.plist
/Library/LaunchAgents/com.genieoinnovation.macextension.plist
/Library/LaunchDaemons/com.genieoinnovation.macextension.client.plist
/Library/PrivilegedHelperTools/com.genieoinnovation.macextension.client
Then reboot. Note: Some of these items may be absent, in which case you'll get a message that the file doesn't exist.
From the Safari menu bar, select
Safari ▹ Preferences ▹ Extensions
Uninstall any extension you don't recognize. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select
Go ▹ Go to Folder...
from the menu bar, paste into the box that opens (command-V). You won't see what you pasted because a line break is included. Press return.
