Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

ClamXav virus scan has found JS.Adware.Multiplug malware on my macbook air. How do I remove it?

I started getting wierd adds popping up on my browser and so I ran my virus scan. Turns our I have malware. Does anyone know how to remove this? I tried deleting the file but that doesnt work. it just reappears.

Posted on Jan 17, 2014 7:10 AM

Reply
19 replies

Jan 23, 2014 9:11 PM in response to henrus

henrus wrote:


It was in ~/Library/Caches/com.apple.Safari/Extensions.

That tells me that it was just a history file of a site the Extension was using.

I also removed the plugin after finding it so I don't recall the exact name, and can't find it in the Trash or anywhere else in the drive.

I take it you mean the extension and not a plugin then.

Jan 23, 2014 9:41 PM in response to henrus

henrus wrote:


Ok, Sophos found the following:


OSX/Geonei-A

Not much info on that one which was added on 17 Jan, but I have to wonder if they just scrambled the letters for "Genieo".

filename: modinstaller.dmg


Was in my downloads folder. My son plays minecraft and has been installing mods, so that might be a culprit.

I went looking for a file with that name and found several leads, but the only one I tried scans clean.

if it did install on the system, other than the dmg file, I can't find any trace of this running on the system.

See the Adware Removal Guide : Genieo and look for all the files on that list.

ClamXav virus scan has found JS.Adware.Multiplug malware on my macbook air. How do I remove it?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.