ClamXav virus scan has found JS.Adware.Multiplug malware on my macbook air. How do I remove it?

I started getting wierd adds popping up on my browser and so I ran my virus scan. Turns our I have malware. Does anyone know how to remove this? I tried deleting the file but that doesnt work. it just reappears.

Posted on Jan 17, 2014 7:10 AM

Reply
19 replies

Jan 23, 2014 9:11 PM in response to henrus

henrus wrote:


It was in ~/Library/Caches/com.apple.Safari/Extensions.

That tells me that it was just a history file of a site the Extension was using.

I also removed the plugin after finding it so I don't recall the exact name, and can't find it in the Trash or anywhere else in the drive.

I take it you mean the extension and not a plugin then.

Jan 23, 2014 9:41 PM in response to henrus

henrus wrote:


Ok, Sophos found the following:


OSX/Geonei-A

Not much info on that one which was added on 17 Jan, but I have to wonder if they just scrambled the letters for "Genieo".

filename: modinstaller.dmg


Was in my downloads folder. My son plays minecraft and has been installing mods, so that might be a culprit.

I went looking for a file with that name and found several leads, but the only one I tried scans clean.

if it did install on the system, other than the dmg file, I can't find any trace of this running on the system.

See the Adware Removal Guide : Genieo and look for all the files on that list.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

ClamXav virus scan has found JS.Adware.Multiplug malware on my macbook air. How do I remove it?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.