How do I stop the pop-ups ?

Question

Level 1

2 points

How do I stop the pop-ups ?

I'm getting Pop Ads via Google Chrome / Safari / Firefox . I have iMac & I've never had pop up problems w/ Mac before, I've been using Mac for a few years. when I click a link, it redirects me to a pop up first. My settings on Chrome Safari and Firefox are set to "Do not allow any site to show pop-ups." However, they are still popping up. How do I stop the pop-ups ?

iMac, OS X Mountain Lion (10.8.5)

Posted on Nov 7, 2013 9:45 AM

Reply

Answer 1

Apr 11, 2017 10:38 PM in response to ika66

com.kaspersky.kext.klif (3.4.2a30)

com.kaspersky.nke (2.3.1a8)

com.sophos.kext.oas (9.6.51)

com.sophos.nke.swi (9.6.51)

com.sophos.webd

com.adobe.ARMDC.Communicator

com.sophos.scan

com.malwarebytes.HelperTool

com.sophos.common.servicemanager

Adobe_Genuine_Software_Integrity_Service

com.sophos.mcs

com.oracle.java.Helper-Tool

com.sophos.autoupdate

com.sophos.sxld

com.sophos.notification

com.microsoft.office.licensingV2.helper

com.adobe.fpsaud

com.adobe.ARMDC.SMJobBlessHelper

com.sophos.configuration

com.microsoft.autoupdate.helper

com.sophos.cleand

com.adobe.Acrobat.Pro.1108

com.openssh.ssh-agent

com.google.android.mtpagent.1644

com.sophos.uiserver

com.microsoft.Outlook.5268

org.jdownloader.launcher.1324

org.mozilla.firefox.5148

com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a2 3d420d

com.microsoft.autoupdate.fba.1280

com.oracle.java.Java-Updater

com.skype.skype.4524

/Library/Components:

/Library/Extensions:

ACS6x.kext

ATTOCelerityFC8.kext

ATTOExpressSASHBA2.kext

ATTOExpressSASRAID2.kext

ArcMSR.kext

CalDigitHDProDrv.kext

HighPointIOP.kext

HighPointRR.kext

PromiseSTEX.kext

SoftRAID.kext

SophosFileProtection.kext

SophosWebProtection.kext

klif.kext

klnke.kext

/Library/Frameworks:

AEProfiling.framework

AERegistration.framework

AudioMixEngine.framework

NyxAudioAnalysis.framework

PluginManager.framework

SAVI-pyexec.framework

SAVI.framework

SophosGenericsCommon.framework

SophosGenericsCore.framework

iTunesLibrary.framework

/Library/Input Methods:

/Library/Internet Plug-Ins:

AdobeAAMDetect.plugin

AdobePDFViewer.plugin

AdobePDFViewerNPAPI.plugin

Disabled Plug-Ins

Flash Player.plugin

JavaAppletPlugin.plugin

Quartz Composer.webplugin

flashplayer.xpt

/Library/Keyboard Layouts:

/Library/LaunchAgents:

com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a2 3d420d.plist

com.oracle.java.Java-Updater.plist

com.sophos.uiserver.plist

/Library/LaunchDaemons:

com.adobe.ARMDC.Communicator.plist

com.adobe.ARMDC.SMJobBlessHelper.plist

com.adobe.agsservice.plist

com.adobe.fpsaud.plist

com.malwarebytes.HelperTool.plist

com.microsoft.autoupdate.helper.plist

com.microsoft.office.licensingV2.helper.plist

com.oracle.java.Helper-Tool.plist

com.sophos.common.servicemanager.plist

/Library/PreferencePanes:

Flash Player.prefPane

JavaControlPanel.prefPane

/Library/PrivilegedHelperTools:

com.adobe.ARMDC.Communicator

com.adobe.ARMDC.SMJobBlessHelper

com.malwarebytes.HelperTool

com.microsoft.autoupdate.helper

com.microsoft.office.licensingV2.helper

/Library/QuickLook:

iBooksAuthor.qlgenerator

iWork.qlgenerator

/Library/QuickTime:

AppleIntermediateCodec.component

AppleMPEG2Codec.component

/Library/ScriptingAdditions:

/Library/Services:

KAVService.service

/Library/Spotlight:

Microsoft Office.mdimporter

iBooksAuthor.mdimporter

iWork.mdimporter

/Library/StartupItems:

/etc/mach_init.d:

/etc/mach_init_per_login_session.d:

/etc/mach_init_per_user.d:

Library/Address Book Plug-Ins:

SkypeABCaller.bundle

SkypeABChatter.bundle

SkypeABDialer.bundle

SkypeABSMS.bundle

Library/Fonts:

Library/Input Methods:

.localized

Library/Internet Plug-Ins:

Library/Keyboard:

en-dynamic.lm

Library/Keyboard Layouts:

Library/KeyboardServices:

TextReplacements.db

TextReplacements.db-shm

TextReplacements.db-wal

Library/LanguageModeling:

en-dynamic.lm

es-dynamic.lm

it-dynamic.lm

pt-dynamic.lm

Library/LaunchAgents:

com.google.keystone.agent.plist

Library/PreferencePanes:

Library/Services:

WinzipAdd.workflow

WinzipEmail.workflow

WinzipUnzip.workflow

Android File Transfer Agent

Reply

Answer 2

John Galt

Level 10

141,320 points

Nov 7, 2013 9:56 AM in response to ika66

Check Safari's Preferences menu > Extensions pane for any extensions that you do not recognize or want. Uninstall them with the Uninstall button.

Firefox has an equivalent function.

Reply

Answer 3

Klaus1

Level 9

52,749 points

Nov 7, 2013 11:06 AM in response to ika66

Download and install GlimmerBlocker.

Reply

Answer 4

Linc Davis

Level 10

209,547 points

Nov 7, 2013 12:01 PM in response to ika66

Please read this whole message before doing anything.

This procedure is a diagnostic test. It won’t solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.

Third-party system modifications are a common cause of usability problems. By a “system modification,” I mean software that affects the operation of other software — potentially for the worse. The following procedure will help identify which such modifications you've installed. Don’t be alarmed by the complexity of these instructions — they’re easy to carry out and won’t change anything on your Mac.

These steps are to be taken while booted in “normal” mode, not in safe mode. If you’re now running in safe mode, reboot as usual before continuing.

Below are instructions to enter some UNIX shell commands. The commands are harmless, but they must be entered exactly as given in order to work. If you have doubts about the safety of the procedure suggested here, search this site for other discussions in which it’s been followed without any report of ill effects.

Some of the commands will line-wrap or scroll in your browser, but each one is really just a single line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, and you can then copy it. The headings “Step 1” and so on are not part of the commands.

Note: If you have more than one user account, Step 2 must be taken as an administrator. Ordinarily that would be the user created automatically when you booted the system for the first time. The other steps should be taken as the user who has the problem, if different. Most personal Macs have only one user, and in that case this paragraph doesn’t apply.

Launch the Terminal application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.

When you launch Terminal, a text window will open with a line already in it, ending either in a dollar sign (“$”) or a percent sign (“%”). If you get the percent sign, enter “sh” and press return. You should then get a new line ending in a dollar sign.

Step 1

Triple-click anywhere in the line of text below on this page to select it:

kextstat -kl | awk '!/com\.apple/{printf "%s %s\n", $6, $7}' | open -ef

Copy the selected text to the Clipboard by pressing the key combination command-C. Then click anywhere in the Terminal window and paste (command-V). I've tested these instructions only with the Safari web browser. If you use another browser, you may have to press the return key after pasting. A TextEdit window will open with the output of the command. If the command produced no output, the window will be empty. Post the contents of the TextEdit window (not the Terminal window), if any — the text, please, not a screenshot. You can then close the TextEdit window. The title of the window doesn't matter, and you don't need to post that. No typing is involved in this step.

Step 2

Repeat with this line:

{ sudo launchctl list | sed 1d | awk '!/0x|com\.(apple|openssh|vix\.cron)|org\.(amav|apac|cups|isc|ntp|postf|x)/{print $3}'; echo; sudo defaults read com.apple.loginwindow LoginHook; echo; sudo crontab -l; } 2> /dev/null | open -ef

This time you'll be prompted for your login password, which you do have to type. Nothing will be displayed when you type it. Type it carefully and then press return. You may get a one-time warning to be careful. Heed that warning, but don't post it. If you see a message that your username "is not in the sudoers file," then you're not logged in as an administrator.

Note: If you don’t have a login password, you’ll need to set one before taking this step. If that’s not possible, skip to the next step.

Step 3

{ launchctl list | sed 1d | awk '!/0x|com\.apple|org\.(x|openbsd)/{print $3}'; echo; crontab -l 2> /dev/null; } | open -ef

Step 4

ls -A /e*/{cr,la,mach}* {,/}Lib*/{Ad,Compon,Ex,Fram,In,Keyb,La,Mail/Bu,P*P,Priv,Qu,Scripti,Servi,Spo,Sta}* L*/Fonts .la* 2> /dev/null | open -ef

Important: If you formerly synchronized with a MobileMe account, your me.com email address may appear in the output of the above command. If so, anonymize it before posting.

Step 5

osascript -e 'tell application "System Events" to get name of login items' | open -ef

Remember, steps 1-5 are all copy-and-paste — no typing, except your password. Also remember to post the output.

You can then quit Terminal.

Reply

Answer 5

Apr 10, 2014 7:31 AM in response to Linc Davis

Hey, I'm not OP but I was wondering if you could help me with a similar problem. I'm experiencing something similar with his and ad's appearing on Google Chrome & Firefox, despite the fact that I have AdBlock & all the proper things are checked for no ads in both browser. So I took your advice and got screenshots of all 5 steps, maybe you can help?

http://imgur.com/a/33bJy

Reply

Answer 6

Jun 20, 2014 4:37 AM in response to Linc Davis

Hi, I followed step 1 and this is what the TextEdit window produced

com.AmbrosiaSW.AudioSupport (4.1.2)

Reply

Answer 7

Eric Root

Level 10

684,057 points

Jun 20, 2014 9:36 AM in response to Community User

Given the age of the original post, you might want to consider starting a new discussion. You can link to this one.

Reply

Answer 8

J1008

Level 1

0 points

Jul 9, 2014 4:51 AM in response to ika66

Hi, First time adding feedback but I bought a new mac only 2 weeks ago and this has been so persistent. I found this tip on another page of Apple support. HERE'S THE PAGE: Re: ads pop up in Safari - how to stop

I downloaded the file and have had no pop ups since.

ADWARE REMOVAL TOOL

http://www.thesafemac.com/art

Reply

Answer 9

Jul 22, 2014 5:49 AM in response to Linc Davis

Hi, have exact same problem.

Following steps:

Step 1:

com.sophos.nke.swi (9.0.53)

com.sophos.kext.sav (9.0.53)

Reply

Answer 10

Jul 22, 2014 5:52 AM in response to Linc Davis

step 2:

com.vsearch.helper

com.sophos.webd

com.sophos.sxld

com.sophos.scan

com.sophos.notification

com.sophos.intercheck

com.sophos.configuration

com.sophos.autoupdate

com.adobe.fpsaud

Reply

Answer 11

Jul 22, 2014 5:53 AM in response to Linc Davis

Step 3:

com.google.Chrome.40864

com.vsearch.agent

com.sophos.uiserver

com.google.keystone.user.agent

Reply

Answer 12

Jul 22, 2014 5:54 AM in response to Linc Davis

step 4:

/Library/Components:

/Library/Extensions:

ATTOCelerityFC8.kext

ATTOExpressSASHBA2.kext

ATTOExpressSASRAID2.kext

ArcMSR.kext

CalDigitHDProDrv.kext

HighPointIOP.kext

HighPointRR.kext

PromiseSTEX.kext

SoftRAID.kext

SophosNetworkInterceptor.kext

SophosOnAccessInterceptor.kext

/Library/Frameworks:

AEProfiling.framework

AERegistration.framework

AudioMixEngine.framework

NyxAudioAnalysis.framework

PluginManager.framework

SAVI.framework

SUMScanKit.framework

iTunesLibrary.framework

/Library/Input Methods:

/Library/Internet Plug-Ins:

Default Browser.plugin

Flash Player.plugin

Quartz Composer.webplugin

QuickTime Plugin.plugin

flashplayer.xpt

nsIQTScriptablePlugin.xpt

/Library/Keyboard Layouts:

/Library/LaunchAgents:

com.sophos.uiserver.plist

com.vsearch.agent.plist

/Library/LaunchDaemons:

com.adobe.fpsaud.plist

com.gopro.stereomodestatus.plist

com.sophos.autoupdate.plist

com.sophos.configuration.plist

com.sophos.intercheck.plist

com.sophos.notification.plist

com.sophos.scan.plist

com.sophos.sxld.plist

com.sophos.webd.plist

com.vsearch.daemon.plist

com.vsearch.helper.plist

/Library/PreferencePanes:

Flash Player.prefPane

GoPro.prefPane

/Library/PrivilegedHelperTools:

/Library/QuickLook:

iBooksAuthor.qlgenerator

iWork.qlgenerator

/Library/QuickTime:

AppleIntermediateCodec.component

AppleMPEG2Codec.component

CFHDCompressor.component

CFHDDecompressor.component

/Library/ScriptingAdditions:

/Library/Spotlight:

Microsoft Office.mdimporter

iBooksAuthor.mdimporter

iWork.mdimporter

/Library/StartupItems:

/etc/mach_init.d:

/etc/mach_init_per_login_session.d:

/etc/mach_init_per_user.d:

Library/Fonts:

Library/Input Methods:

.localized

Library/Internet Plug-Ins:

Library/Keyboard Layouts:

Library/LaunchAgents:

com.google.keystone.agent.plist

Library/PreferencePanes:

Library/Services:

Reply

Answer 13

Jul 22, 2014 5:55 AM in response to Linc Davis

Step 5:

iTunesHelper

Reply

Answer 14

John Galt

Level 10

141,320 points

Jul 22, 2014 5:59 AM in response to Joelle308

Please start your own discussion: Writing an effective Apple Support Communities question

Reply

Answer 15

Aug 9, 2014 11:26 AM in response to Linc Davis

iTunesHelper, TuneupMyMac, Dropbox, Mail, Google Drive, Spotify, AdobeResourceSynchronizer

Reply