Recently i've downloaded something and now I have all this adware on safari. Pop up ads and Certain words are highlited that when clicked go to ads for surveys and stuff etc. I've tried everything but i cant get rid of the highlighted text. Does anyone know how to fix this?
MacBook Pro
Hi Linc Davis,
How can I remove adwar from my mac?
Thank you
Boot Mode: Normal
Model: MacBookAir7,2
System diagnostics
2017-01-09 ReportCrash crash
2017-01-09 ReportCrash crash
2017-01-09 mtmd crash
2017-01-09 mtmd crash
User diagnostics
2017-01-04 Google Chrome crash
Total CPU usage: user %, system %
CPU usage by process "Google Chrome He" with UID 501: 9.8%
Extrinsic daemons
com.cisco.anyconnect.vpnagentd
com.adobe.ARMDC.Communicator
com.microsoft.autoupdate.helpertool
/Library/qgozdnbhmjbs/qgozdnbhmjbs
/Library/interdiffusiveness/interdiffusiveness
com.oracle.java.Helper-Tool
com.microsoft.office.licensingV2.helper
/Library/afqhjespixdz/afqhjespixdz
com.adobe.ARMDC.SMJobBlessHelper
/Library/PGFtxYww/PGFtxYww.app/Contents/MacOS/PGFtxYww
com.examsoft.softest.service
Extrinsic agents
com.examsoft.softest
com.citrix.ServiceRecords
com.openssh.ssh-agent
com.cisco.anyconnect.gui
com.citrix.ReceiverHelper
com.rosettastone.rosettastonedaemon
com.adobe.ARMDCHelper.UUID
com.citrix.AuthManager_Mac
com.oracle.java.Java-Updater
com.wepa.watchPSdirectory
com.spotify.webhelper
launchd items
/Library/LaunchAgents/com.adobe.ARMDCHelper.UUID.plist
(com.adobe.ARMDCHelper.UUID)
/Library/LaunchAgents/com.cisco.anyconnect.gui.plist
(com.cisco.anyconnect.gui)
/Library/LaunchAgents/com.citrix.AuthManager_Mac.plist
(com.citrix.AuthManager_Mac)
/Library/LaunchAgents/com.citrix.ReceiverHelper.plist
(com.citrix.ReceiverHelper)
/Library/LaunchAgents/com.citrix.ServiceRecords.plist
(com.citrix.ServiceRecords)
/Library/LaunchAgents/com.examsoft.softest.plist
(com.examsoft.softest)
/Library/LaunchAgents/com.oracle.java.Java-Updater.plist
(com.oracle.java.Java-Updater)
/Library/LaunchAgents/com.rosettastone.rosettastonedaemon.plist
(com.rosettastone.rosettastonedaemon)
/Library/LaunchAgents/com.wepa.watchPSdirectory.plist
(com.wepa.watchPSdirectory)
/Library/LaunchDaemons/com.adobe.ARMDC.Communicator.plist
(com.adobe.ARMDC.Communicator)
/Library/LaunchDaemons/com.adobe.ARMDC.SMJobBlessHelper.plist
(com.adobe.ARMDC.SMJobBlessHelper)
/Library/LaunchDaemons/com.apple.dandan.plist
(com.apple.dandan)
/Library/LaunchDaemons/com.apple.nalen.plist
(com.apple.nalen)
/Library/LaunchDaemons/com.cisco.anyconnect.vpnagentd.plist
(com.cisco.anyconnect.vpnagentd)
/Library/LaunchDaemons/com.examsoft.softest.service.plist
(com.examsoft.softest.service)
/Library/LaunchDaemons/com.microsoft.autoupdate.helpertool.plist
(com.microsoft.autoupdate.helpertool)
/Library/LaunchDaemons/com.microsoft.office.licensingV2.helper.plist
(com.microsoft.office.licensingV2.helper)
/Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist
(com.oracle.java.Helper-Tool)
Library/LaunchAgents/com.spotify.webhelper.plist
(com.spotify.webhelper)
Extrinsic loadable bundles
/Library/Internet Plug-Ins/AdobePDFViewer.plugin
(com.adobe.acrobat.pdfviewer)
/Library/Internet Plug-Ins/AdobePDFViewerNPAPI.plugin
(com.adobe.acrobat.pdfviewerNPAPI)
/Library/Internet Plug-Ins/CitrixICAClientPlugIn.plugin
(com.citrix.citrixicaclientplugIn)
/Library/Internet Plug-Ins/JavaAppletPlugin.plugin
(com.oracle.java.JavaAppletPlugin)
/Library/PreferencePanes/JavaControlPanel.prefPane
(com.oracle.java.JavaControlPanel)
Library/Address Book Plug-Ins/SkypeABCaller.bundle
(com.skype.SkypeABCaller)
Library/Address Book Plug-Ins/SkypeABChatter.bundle
(com.skype.SkypeABChatter)
Library/Address Book Plug-Ins/SkypeABDialer.bundle
(com.skype.SkypeABDialer)
Library/Address Book Plug-Ins/SkypeABSMS.bundle
(com.skype.SkypeABSMS)
hosts format: ASCII text
User login items
iTunesHelper
Dropbox
CCAAgent
Google Chrome
Restricted user files: 4007
Desktop file count: 25
Keychains file count: 10
Elapsed time (s): 145
I get these results:
Boot Mode: Normal
Model: MacBookPro11,2
USB
Elements 10B8 (Western Digital Technologies, Inc.)
User diagnostics
2017-01-29 osx-intel crash
2017-01-29 osx-intel crash
2017-01-29 osx-intel crash
2017-01-29 osx-intel crash
2017-01-29 osx-intel crash
2017-01-29 osx-intel crash
Total CPU usage: user %, system %
CPU usage by process "backupd" with UID 0: 10.3%
Loaded extrinsic kernel extensions
com.senstic.driver.PocketCamDevice (1.0.0) UUID
com.senstic.driver.PocketAudioDevice (1.2) UUID
Extrinsic daemons
com.microsoft.office.licensing.helper
com.adobe.fpsaud
Extrinsic agents
com.bittorrent.uTorrent
com.openssh.ssh-agent
com.google.keystone.user.agent
launchd items
/Library/LaunchDaemons/com.adobe.fpsaud.plist
(com.adobe.fpsaud)
/Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist
(com.microsoft.office.licensing.helper)
Library/LaunchAgents/com.bittorrent.uTorrent.plist
(com.bittorrent.uTorrent)
Library/LaunchAgents/com.google.keystone.agent.plist
(com.google.keystone.user.agent)
Extrinsic loadable bundles
/System/Library/Extensions/EPSONUSBPrintClass.kext
(com.epson.print.kext.USBPrintClass)
/System/Library/Extensions/PocketAudioDevice.kext
(com.senstic.driver.PocketAudioDevice)
/Library/Extensions/EPSONUSBPrintClass.kext
(com.epson.print.kext.USBPrintClass)
/Library/Extensions/IOVideoPocketCam.kext
(com.senstic.driver.PocketCamDevice)
/Library/Internet Plug-Ins/Flash Player.plugin
(com.macromedia.Flash Player.plugin)
/Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin
(com.microsoft.sharepoint.browserplugin)
/Library/Internet Plug-Ins/SharePointWebKitPlugin.webplugin
(com.microsoft.sharepoint.webkitplugin)
/Library/PreferencePanes/Flash Player.prefPane
(com.adobe.flashplayerpreferences)
/Library/QuickTime/PocketCam.component
(com.senstic.pocketcam)
Library/Address Book Plug-Ins/SkypeABCaller.bundle
(com.skype.SkypeABCaller)
Library/Address Book Plug-Ins/SkypeABChatter.bundle
(com.skype.SkypeABChatter)
Library/Address Book Plug-Ins/SkypeABDialer.bundle
(com.skype.SkypeABDialer)
Library/Address Book Plug-Ins/SkypeABSMS.bundle
(com.skype.SkypeABSMS)
DNS (from DHCP): 128.199.198.127
hosts format: ASCII text
User login items
iTunesHelper
Dropbox
Google Chrome
Restricted user files: 86
Keychains file count: 10
Elapsed time (s): 99
Download this program which was written by Thomas Reed, a long time poster. The program will do the work for you which makes it easy.
Malwarebytes Anti-Malware for Mac 10.8 and later
What should I do if Malwarebytes Anti-Malware for Mac didn't solve my problem?
Boot Mode: Normal
Model: MacBookAir7,1
Battery cycles: 797
System load advisory
combined level = Bad
- user level = OK
- battery level = Bad
- thermal level = Great
System diagnostics
2017-03-17 sudo crash
2017-03-17 sudo crash
2017-03-17 sudo crash
2017-03-17 sudo crash
2017-03-17 sudo crash
2017-03-17 sudo crash
2017-04-04 mds_stores crash
2017-04-04 mds_stores crash
2017-04-12 node crash
2017-04-13 Microsoft PowerPoint hang
User diagnostics
2017-04-14 node crash
2017-04-14 node crash
2017-04-14 node crash
2017-04-14 node crash
2017-04-14 node crash
2017-04-14 node crash
2017-04-14 node crash
2017-04-14 node crash
2017-04-14 node crash
2017-04-14 node crash
Total CPU usage: user %, system %
CPU usage by process "osascript" with UID 0: 14.3%
Extrinsic daemons
me.hide.osxhelper
net.tunnelblick.tunnelblick.tunnelblickd
com.adobe.adobeupdatedaemon
/Library/BALBtbRR/BALBtbRR.app/Contents/MacOS/BALBtbRR
com.tunnelbear.mac.tbeard
/Library/Hopi/KKIwrBUA/RivNGJZj/loathful-volage
com.microsoft.office.licensing.helper
Adobe_Genuine_Software_Integrity_Service
/Library/jqsxychajhnr/jqsxychajhnr
/Library/coguzpaurftu/coguzpaurftu
com.microsoft.office.licensingV2.helper
/Library/haptophorous/haptophorous
com.adobe.SwitchBoard
/Library/vqfcahpvcpsf/vqfcahpvcpsf
com.adobe.fpsaud
com.spotflux.Spotflux.tun
Extrinsic agents
com.shazam.mac.ShazamHelper
com.adobe.acc.AdobeDesktopService.3236.UUID
com.sourcekp.protect.user.update
com.pcv.hlpramcn
com.adobe.AdobeCreativeCloud
com.bittorrent.uTorrent
com.openssh.ssh-agent
com.techyutils.ummhlpr
com.adobe.CS5ServiceManager
com.adscleaner.hlpradc
net.tunnelblick.tunnelblick.LaunchAtLogin
com.google.keystone.user.agent
com.tunnelbear.mac.tbeara
com.spigot.ApplicationManager
launchd items
/Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist
(com.adobe.AAM.Startup-1.0)
/Library/LaunchAgents/com.adobe.AdobeCreativeCloud.plist
(com.adobe.AdobeCreativeCloud)
/Library/LaunchAgents/com.adobe.CS5ServiceManager.plist
(com.adobe.CS5ServiceManager)
/Library/LaunchDaemons/com.adobe.adobeupdatedaemon.plist
(com.adobe.adobeupdatedaemon)
/Library/LaunchDaemons/com.adobe.agsservice.plist
(Adobe_Genuine_Software_Integrity_Service)
/Library/LaunchDaemons/com.adobe.fpsaud.plist
(com.adobe.fpsaud)
/Library/LaunchDaemons/com.adobe.SwitchBoard.plist
(com.adobe.SwitchBoard)
/Library/LaunchDaemons/com.apple.builing.plist
(com.apple.builing)
/Library/LaunchDaemons/com.apple.cereng.plist
(com.apple.cereng)
/Library/LaunchDaemons/com.apple.schiwarkin.plist
(com.apple.schiwarkin)
/Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist
(com.microsoft.office.licensing.helper)
/Library/LaunchDaemons/com.microsoft.office.licensingV2.helper.plist
(com.microsoft.office.licensingV2.helper)
/Library/LaunchDaemons/com.tunnelbear.mac.tbeard.plist
(com.tunnelbear.mac.tbeard)
/Library/LaunchDaemons/me.hide.osxhelper.plist
(me.hide.osxhelper)
/Library/LaunchDaemons/net.tunnelblick.tunnelblick.tunnelblickd.plist
(net.tunnelblick.tunnelblick.tunnelblickd)
Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist
(com.adobe.AAM.Scheduler-1.0)
Library/LaunchAgents/com.adscleaner.hlpradc.plist
(com.adscleaner.hlpradc)
Library/LaunchAgents/com.bittorrent.uTorrent.plist
(com.bittorrent.uTorrent)
Library/LaunchAgents/com.google.keystone.agent.plist
(com.google.keystone.user.agent)
Library/LaunchAgents/com.pcv.hlpramcn.plist
(com.pcv.hlpramcn)
Library/LaunchAgents/com.sourcekp.protect.update.plist
(com.sourcekp.protect.user.update)
Library/LaunchAgents/com.spigot.ApplicationManager.plist
(com.spigot.ApplicationManager)
Library/LaunchAgents/com.techyutils.ummhlpr.plist
(com.techyutils.ummhlpr)
Library/LaunchAgents/com.tunnelbear.mac.tbeara.plist
(com.tunnelbear.mac.tbeara)
Library/LaunchAgents/net.tunnelblick.tunnelblick.LaunchAtLogin.plist
(net.tunnelblick.tunnelblick.LaunchAtLogin)
Extrinsic loadable bundles
/Library/Internet Plug-Ins/Flash Player.plugin
(com.macromedia.Flash Player.plugin)
/Library/Internet Plug-Ins/JavaAppletPlugin.plugin
(com.apple.java.JavaAppletPlugin)
/Library/PreferencePanes/Flash Player.prefPane
(com.adobe.flashplayerpreferences)
/Library/ScriptingAdditions/Adobe Unit Types.osax
(No bundle ID)
Library/Address Book Plug-Ins/SkypeABCaller.bundle
(com.skype.SkypeABCaller)
Library/Address Book Plug-Ins/SkypeABChatter.bundle
(com.skype.SkypeABChatter)
Library/Address Book Plug-Ins/SkypeABDialer.bundle
(com.skype.SkypeABDialer)
Library/Address Book Plug-Ins/SkypeABSMS.bundle
(com.skype.SkypeABSMS)
Library/Internet Plug-Ins/Folx3Plugin.plugin
(com.eltima.Folx3.plugin)
Netmask: 255.255.255.240
hosts
95.211.101.203 free-nl.hide.me
hosts format: ASCII text
Application check
com.google.GoogleDrive
User login items
hide.me VPN
iTunesHelper
uTorrent
Google Drive
WDDriveUtilityHelper
WDSecurityHelper
Spotflux
Advanced Mac Cleaner
Mac Ads Cleaner
Unpollute My Mac
Restricted user files: 125
Desktop file count: 40
Keychains file count: 12
Elapsed time (s): 85
Boot Mode: Normal
Model: MacBookAir7,2
User diagnostics
2017-04-17 cloudd crash
Total CPU usage: user %, system %
CPU usage by process "notifyd" with UID 0: 2.7%
Extrinsic daemons
/Library/dnftwfeoknqg/dnftwfeoknqg
/Library/bacillicidal/bacillicidal
/Library/sqvatoxvdmcs/sqvatoxvdmcs
com.google.keystone.daemon
com.microsoft.office.licensingV2.helper
/Library/fHhpPccx/fHhpPccx.app/Contents/MacOS/fHhpPccx
com.yelab.AdwareRemovalHelper
Extrinsic agents
/Library/spined/kZrwlQRM/aJzMABGl/gigmanhood
com.openssh.ssh-agent
com.google.keystone.system.agent
com.yelab.AdwareRemovalLoginItem
launchd items
/Library/LaunchAgents/com.google.keystone.agent.plist
(com.google.keystone.system.agent)
/Library/LaunchDaemons/com.apple.athechyer.plist
(com.apple.athechyer)
/Library/LaunchDaemons/com.apple.tasard.plist
(com.apple.tasard)
/Library/LaunchDaemons/com.google.keystone.daemon.plist
(com.google.keystone.daemon)
/Library/LaunchDaemons/com.microsoft.office.licensingV2.helper.plist
(com.microsoft.office.licensingV2.helper)
/Library/LaunchDaemons/com.yelab.AdwareRemovalHelper.plist
(com.yelab.AdwareRemovalHelper)
hosts format: ASCII text
User login items
iTunesHelper
Android File Transfer Agent
BitTorrent
Restricted user files: 63
Elapsed time (s): 57
1. Use Malwarebytes Anti-Malware for Mac to remove adware/malware.
https://www.malwarebytes.org/antimalware/mac/
Download, install , open, and run it by clicking “Scan” button to remove adware.
Once done, quit Malwarebytes Anti-Malware.
2. Click the “Next Steps” button in the “MalwareBytes anti-malware for Mac” window for additional instructions.
Boot Mode: Normal
Model: iMac13,2
RAM details
BANK 0/DIMM0:
Size: 8 GB
Speed: 1600 MHz
Status: OK
Manufacturer: 0x0198
BANK 1/DIMM0:
Size: 8 GB
Speed: 1600 MHz
Status: OK
Manufacturer: 0x0198
BANK 0/DIMM1:
Size: Empty
Speed: Empty
Status: Empty
Manufacturer: Empty
BANK 1/DIMM1:
Size: Empty
Speed: Empty
Status: Empty
Manufacturer: Empty
System diagnostics
2017-06-14 mtmd crash
2017-06-14 mtmd crash
2017-06-14 mtmd crash
2017-06-14 mtmd crash
2017-06-14 spindump crash
2017-06-15 spindump crash
2017-06-15 spindump crash
2017-06-15 spindump crash
2017-06-19 spindump crash
2017-06-19 spindump crash
User diagnostics
2017-06-06 WineBottler crash
2017-06-06 WineBottler crash
2017-06-06 WineBottler crash
2017-06-06 WineBottler crash
2017-06-06 WineBottler crash
2017-06-06 WineBottler crash
2017-06-06 ntlm_auth crash
2017-06-08 MTMediaImporter crash
2017-06-09 Wine crash
2017-06-09 WineBottler crash
Total CPU usage: user %, system %
CPU usage by process "ps" with UID 501: 100,0%
Loaded extrinsic kernel extensions
com.dvdfab.kext.fabio (1) no UUID
com.nvidia.CUDA (1.1.0) UUID
Extrinsic daemons
/Library/pqrdnysncwqm/pqrdnysncwqm
com.adobe.adobeupdatedaemon
com.malwarebytes.HelperTool
com.nvidia.cuda.launcher
com.microsoft.office.licensing.helper
Adobe_Genuine_Software_Integrity_Service
com.oracle.java.Helper-Tool
com.adobe.fpsaud
com.microsoft.autoupdate.helper
Extrinsic agents
/Library/violmaker/violmaker
com.openssh.ssh-agent
com.adobe.ARM.UUID
/var/root/Library/Aphidiinae/Aphidiinae
com.oracle.java.Java-Updater
com.nvidia.CUDASoftwareUpdate
com.google.keystone.user.agent
com.dropbox.DropboxMacUpdate.agent
launchd items
/Library/LaunchAgents/com.nvidia.CUDASoftwareUpdate.plist
(com.nvidia.CUDASoftwareUpdate)
/Library/LaunchAgents/com.oracle.java.Java-Updater.plist
(com.oracle.java.Java-Updater)
/Library/LaunchDaemons/com.adobe.adobeupdatedaemon.plist
(com.adobe.adobeupdatedaemon)
/Library/LaunchDaemons/com.adobe.agsservice.plist
(Adobe_Genuine_Software_Integrity_Service)
/Library/LaunchDaemons/com.adobe.fpsaud.plist
(com.adobe.fpsaud)
/Library/LaunchDaemons/com.apple.aelwriter.plist
(com.apple.aelwriter)
/Library/LaunchDaemons/com.apple.qmaster.qmasterd.plist
(com.apple.qmaster.qmasterd)
/Library/LaunchDaemons/com.apple.therkkin.plist
(com.apple.therkkin)
/Library/LaunchDaemons/com.malwarebytes.HelperTool.plist
(com.malwarebytes.HelperTool)
/Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist
(com.microsoft.office.licensing.helper)
/Library/LaunchDaemons/com.nvidia.cuda.launcher.plist
(com.nvidia.cuda.launcher)
/Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist
(com.oracle.java.Helper-Tool)
Library/LaunchAgents/com.adobe.ARM.UUID.plist
(com.adobe.ARM.UUID)
Library/LaunchAgents/com.Aphidiinae.plist
(/var/root/Library/Aphidiinae/Aphidiinae)
Library/LaunchAgents/com.dropbox.DropboxMacUpdate.agent.plist
(com.dropbox.DropboxMacUpdate.agent)
Library/LaunchAgents/com.epicycle.plist
(/Library/violmaker/violmaker)
Library/LaunchAgents/com.google.keystone.agent.plist
(com.google.keystone.user.agent)
Library/LaunchAgents/com.toupet.plist
(/var/root/Library/Aphidiinae/Aphidiinae)
Library/LaunchAgents/com.violmaker.plist
(/Library/violmaker/violmaker)
Extrinsic loadable bundles
/System/Library/Extensions/CUDA.kext
(com.nvidia.CUDA)
/System/Library/Extensions/fabio.kext
(com.dvdfab.kext.fabio)
/System/Library/Extensions/JMicronATA.kext
(com.jmicron.JMicronATA)
/Library/Audio/Plug-Ins/HAL/DVCPROHDAudio.plugin
(com.apple.DVCPROHDAudio)
/Library/Extensions/hp_io_enabler_compound.kext
(com.hp.kext.io.enabler.compound)
/Library/Internet Plug-Ins/Flash Player.plugin
(com.macromedia.Flash Player.plugin)
/Library/Internet Plug-Ins/JavaAppletPlugin.plugin
(com.oracle.java.JavaAppletPlugin)
/Library/Internet Plug-Ins/MeetingJoinPlugin.plugin
(com.microsoft.communicator.meetingjoinplugin)
/Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin
(com.microsoft.sharepoint.browserplugin)
/Library/Internet Plug-Ins/SharePointWebKitPlugin.webplugin
(com.microsoft.sharepoint.webkitplugin)
/Library/Internet Plug-Ins/Silverlight.plugin
(com.microsoft.SilverlightPlugin)
/Library/PreferencePanes/CUDA Preferences.prefPane
(com.nvidia.CUDAPref)
/Library/PreferencePanes/Flash Player.prefPane
(com.adobe.flashplayerpreferences)
/Library/PreferencePanes/JavaControlPanel.prefPane
(com.oracle.java.JavaControlPanel)
/Library/QuickTime/DesktopVideoOut.component
(com.apple.DesktopVideoOut)
/Library/QuickTime/DVCPROHDMuxer.component
(com.apple.DVCPROHDMuxer)
/Library/QuickTime/DVCPROHDVideoDigitizer.component
(com.apple.DVCPROHDVideoDigitizer)
/Library/QuickTime/DVCPROHDVideoOutput.component
(com.apple.DVCPROHDVideoOutput)
/Library/QuickTime/DVCPROHDVideoOutputClock.component
(com.apple.DVCPROHDVideoOutputClock)
/Library/QuickTime/DVCPROHDVideoOutputCodec.component
(com.apple.DVCPROHDVideoOutputCodec)
/Library/QuickTime/iChatTheaterPreview.component
(com.apple.FinalCutPro.iChatTheaterPreview)
/Library/QuickTime/LiveType.component
(com.apple.LiveType.component)
/Library/QuickTime/Motion.component
(com.apple.motion.component)
/Library/ScriptingAdditions/Adobe Unit Types.osax
(No bundle ID)
DNS (from DHCP): 130.225.200.3
Netmask: 255.255.252.0
hosts format: ASCII text
User login items
iTunesHelper
Dropbox
DVDAuthorizeHelper
iScrobbler(1.2)
Wondershare Helper Compact
Qfinder Pro
Safari extensions
Wondershare Video Converter for Mac
com
Adblock Plus
org
Restricted user files: 137130
Keychains file count: 14
Elapsed time (s): 149
You have a very bad adware infection.
I notice that you have Malwarebytes installed. It should remove that. If you haven't done a scan with Malwarebytes recently, do so now.
If you have done a scan recently and it wasn't detected, let me know.
Results:
Boot Mode: Normal
Model: MacBookPro11,3
Battery cycles: 459
System load advisory
combined level = Bad
- user level = OK
- battery level = Bad
- thermal level = Great
System diagnostics
2017-06-12 launchservicesd crash
2017-06-22 VLC hang
Total CPU usage: user %, system %
CPU usage by process "notifyd" with UID 0: 3.2%
Extrinsic daemons
me.hide.osxhelper
com.malwarebytes.HelperTool
com.microsoft.office.licensing.helper
com.google.keystone.daemon
com.oracle.java.Helper-Tool
com.microsoft.office.licensingV2.helper
com.rockysandstudio.WUHelper
com.adobe.SwitchBoard
com.adobe.fpsaud
Extrinsic agents
com.nero.HSMMonitor
com.visionobjects.BambooScribe.login
com.Wondershare.TunesGoWatchDemo
com.adobe.PDApp.AAMUpdatesNotifier.1364.UUID
com.bittorrent.uTorrent
com.openssh.ssh-agent
com.adobe.ARM.UUID
com.google.keystone.system.agent
/Library/coactively-milker/GVXUlogc/BJcwYceg/narthecal_Chamos
/Library/Nimrodic/Nimrodic
com.adobe.CS5ServiceManager
com.divx.agent.postinstall
com.oracle.java.Java-Updater
com.spotify.webhelper
com.dropbox.DropboxMacUpdate.agent
com.wacom.pentablet
com.seagate.SeagateStorageGauge.plist
launchd items
/Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist
(com.adobe.AAM.Startup-1.0)
/Library/LaunchAgents/com.adobe.CS5ServiceManager.plist
(com.adobe.CS5ServiceManager)
/Library/LaunchAgents/com.google.keystone.agent.plist
(com.google.keystone.system.agent)
/Library/LaunchAgents/com.oracle.java.Java-Updater.plist
(com.oracle.java.Java-Updater)
/Library/LaunchAgents/com.seagate.SeagateStorageGauge.plist
(com.seagate.SeagateStorageGauge.plist)
/Library/LaunchAgents/com.wacom.pentablet.plist
(com.wacom.pentablet)
/Library/LaunchDaemons/com.adobe.fpsaud.plist
(com.adobe.fpsaud)
/Library/LaunchDaemons/com.adobe.SwitchBoard.plist
(com.adobe.SwitchBoard)
/Library/LaunchDaemons/com.google.keystone.daemon.plist
(com.google.keystone.daemon)
/Library/LaunchDaemons/com.malwarebytes.HelperTool.plist
(com.malwarebytes.HelperTool)
/Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist
(com.microsoft.office.licensing.helper)
/Library/LaunchDaemons/com.microsoft.office.licensingV2.helper.plist
(com.microsoft.office.licensingV2.helper)
/Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist
(com.oracle.java.Helper-Tool)
/Library/LaunchDaemons/com.rockysandstudio.WUHelper.plist
(com.rockysandstudio.WUHelper)
/Library/LaunchDaemons/me.hide.osxhelper.plist
(me.hide.osxhelper)
Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist
(com.adobe.AAM.Scheduler-1.0)
Library/LaunchAgents/com.adobe.ARM.UUID.plist
(com.adobe.ARM.UUID)
Library/LaunchAgents/com.bittorrent.uTorrent.plist
(com.bittorrent.uTorrent)
Library/LaunchAgents/com.divx.agent.postinstall.plist
(com.divx.agent.postinstall)
Library/LaunchAgents/com.dropbox.DropboxMacUpdate.agent.plist
(com.dropbox.DropboxMacUpdate.agent)
Library/LaunchAgents/com.nero.HSMMonitor.plist
(com.nero.HSMMonitor)
Library/LaunchAgents/com.Nimrodic.plist
(/Library/Nimrodic/Nimrodic)
Library/LaunchAgents/com.spotify.webhelper.plist
(com.spotify.webhelper)
Library/LaunchAgents/com.visionobjects.BambooScribe.login.plist
(com.visionobjects.BambooScribe.login)
Library/LaunchAgents/com.Wondershare.TunesGoWatchDemo.plist
(com.Wondershare.TunesGoWatchDemo)
Library/LaunchAgents/jp.co.canon.Inkjet_Extended_Survey_Agent.plist
(jp.co.canon.Inkjet_Extended_Survey_Agent)
Extrinsic loadable bundles
/System/Library/Extensions/BJUSBLoad.kext
(jp.co.canon.bj.print.BJUSBLoad)
/System/Library/Extensions/EPSONUSBPrintClass.kext
(com.epson.print.kext.USBPrintClass)
/System/Library/Extensions/JMicronATA.kext
(com.jmicron.JMicronATA)
/System/Library/Extensions/Pen Tablet.kext
(com.wacom.kext.pentablet)
/System/Library/Extensions/Seagate Storage Driver.kext
(com.seagate.driver.PowSecDriverCore)
/System/Library/Extensions/TabletDriverCFPlugin.bundle
(No bundle ID)
/System/Library/Extensions/Thomson.USBLAN_usbpart.kext
(net.Thomson.iokit.USBLAN_usbpart)
/Library/Audio/Plug-Ins/Components/Flip4Mac WMA Import.component
(net.telestream.wmv.import)
/Library/Components/BambooScribeTSC.component
(com.visionobjects.BambooScribe.TSC)
/Library/Extensions/BJUSBLoad.kext
(jp.co.canon.bj.print.BJUSBLoad)
/Library/Internet Plug-Ins/AdobePDFViewer.plugin
(com.adobe.acrobat.pdfviewer)
/Library/Internet Plug-Ins/AdobePDFViewerNPAPI.plugin
(com.adobe.acrobat.pdfviewerNPAPI)
/Library/Internet Plug-Ins/DivXBrowserPlugin.plugin
(com.divx.DivXBrowserPlugin)
/Library/Internet Plug-Ins/Flash Player.plugin
(com.macromedia.Flash Player.plugin)
/Library/Internet Plug-Ins/Flip4Mac WMV Plugin.plugin
(net.telestream.wmv.plugin)
/Library/Internet Plug-Ins/iPhotoPhotocast.plugin
(com.apple.plugin.iPhotoPhotocast)
/Library/Internet Plug-Ins/JavaAppletPlugin.plugin
(com.oracle.java.JavaAppletPlugin)
/Library/Internet Plug-Ins/npContributeMac.bundle
(com.adobe.npContributeMacBundle)
/Library/Internet Plug-Ins/OVSHelper.plugin
(com.divx.OVSHelper)
/Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin
(com.microsoft.sharepoint.browserplugin)
/Library/Internet Plug-Ins/SharePointWebKitPlugin.webplugin
(com.microsoft.sharepoint.webkitplugin)
/Library/Internet Plug-Ins/Silverlight.plugin
(com.microsoft.SilverlightPlugin)
/Library/Internet Plug-Ins/WacomNetscape.plugin
(com.wacom.tabletplugin)
/Library/Internet Plug-Ins/WacomTabletPlugin.plugin
(com.WacomTabletPluginLib.WacomTabletPlugin)
/Library/PreferencePanes/DivX.prefPane
(com.divx.divxprefs)
/Library/PreferencePanes/Flash Player.prefPane
(com.adobe.flashplayerpreferences)
/Library/PreferencePanes/Flip4Mac WMV.prefPane
(net.telestream.wmv.prefpane)
/Library/PreferencePanes/JavaControlPanel.prefPane
(com.oracle.java.JavaControlPanel)
/Library/QuickTime/Flip4Mac WMV Advanced.component
(net.telestream.wmv.advanced)
/Library/QuickTime/Flip4Mac WMV Export.component
(net.telestream.wmv.export)
/Library/QuickTime/Flip4Mac WMV Import.component
(net.telestream.wmv.import)
/Library/QuickTime/SoundboothScoreCodec.component
(com.adobe.SoundboothScoreAudioCodec)
/Library/ScriptingAdditions/Adobe Unit Types.osax
(No bundle ID)
/Library/Spotlight/GBSpotlightImporter.mdimporter
(com.apple.garageband.spotlightimporter)
Library/Address Book Plug-Ins/SkypeABCaller.bundle
(com.skype.SkypeABCaller)
Library/Address Book Plug-Ins/SkypeABChatter.bundle
(com.skype.SkypeABChatter)
Library/Address Book Plug-Ins/SkypeABDialer.bundle
(com.skype.SkypeABDialer)
Library/Address Book Plug-Ins/SkypeABSMS.bundle
(com.skype.SkypeABSMS)
Library/Audio/Plug-Ins/Components/A52Codec.component
(com.shepmater.A52Codec)
Library/PreferencePanes/Perian.prefPane
(org.perian.PerianPane)
Library/QuickTime/AC3MovieImport.component
(com.cod3r.ac3movieimport)
Library/QuickTime/Perian.component
(org.perian.Perian)
DNS (from DHCP): 2001:8003:4b80:8a00::1
Profiles: 1
hosts
127.0.0.1 activate.adobe.com
127.0.0.1 practivate.adobe.com
127.0.0.1 ereg.adobe.com
127.0.0.1 activate.wip3.adobe.com
127.0.0.1 wip3.adobe.com
127.0.0.1 3dns-3.adobe.com
127.0.0.1 3dns-2.adobe.com
127.0.0.1 adobe-dns.adobe.com
127.0.0.1 adobe-dns-2.adobe.com
127.0.0.1 adobe-dns-3.adobe.com
127.0.0.1 ereg.wip3.adobe.com
127.0.0.1 activate-sea.adobe.com
127.0.0.1 wwis-dubc1-vip60.adobe.com
127.0.0.1 activate-sjc0.adobe.com
127.0.0.1 hl2rcv.adobe.com
95.211.101.196 free-nl.hide.me
hosts format: ASCII text
Global login items
/Library/Application Support/Wacom/BambooCore.app
User login items
hide.me VPN
GrowlHelperApp
Skype
iTunesHelper
CrossOver CD Helper
Dropbox
Spotify
Canon IJ Network Scanner Selector EX
Restricted user files: 37
Keychains file count: 10
Elapsed time (s): 83
I have adware. testing revealed the following:
Extrinsic agents
com.pcv.hlpramcn
com.skype.skype.shareagent
com.adobe.ARM.UUID
com.adscleaner.hlpradc
com.dropbox.DropboxMacUpdate.agent
I am particularly concerned about #1 (hlpramcn) and #4 (ads cleaner).
Do I need to be worried about Skype, adobe and dropbox?
I've seen conflicting info about malware removal software. What to do?
I would really appreciate any advice.
thanks, Mouse
As far as adware is concerned, no, you do not need to worry about the Adobe, Skype or Dropbox agents. The others need to go, but you also need to find the associated files that go with them. The agents are just for persistence, they're not the ones actually driving your browser to the adware.
In order to remove the adware properly, you can try my utility DetectX. There is no requirement to pay to use it.
Disclaimer: this post contains a link to my website from which I may derive some form of compensation.
Boot Mode: Normal
Model: MacBookPro11,2
System diagnostics
2017-07-31 softwareupdated crash
2017-07-31 softwareupdated crash
2017-07-31 softwareupdated crash
2017-07-31 softwareupdated crash
2017-07-31 softwareupdated crash
2017-07-31 softwareupdated crash
2017-07-31 softwareupdated crash
2017-07-31 softwareupdated crash
2017-07-31 softwareupdated crash
2017-07-31 softwareupdated crash
User diagnostics
2017-07-09 com.apple.WebKit.WebContent crash
2017-07-17 com.apple.WebKit.WebContent crash
2017-08-07 java crash
Total CPU usage: user %, system %
CPU usage by process "notifyd" with UID 0: 4.0%
Extrinsic daemons
com.adobe.adobeupdatedaemon
com.microsoft.office.licensing.helper
Adobe_Genuine_Software_Integrity_Service
com.ea.origin.ESHelper
com.adobe.fpsaud
com.microsoft.autoupdate.helper
Extrinsic agents
com.WebTools.oiuqw343sQ9a
com.hyperlync.verizon.backupAssistantPlus.vCastBackupSchedulerapp.pkg
com.My-Soft-Update.agent
com.pcv.hlpramcn
com.adobe.AdobeCreativeCloud
com.openssh.ssh-agent
com.jdibackup.JustCloud.autostart
com.jdibackup.JustCloud.notify
com.WebTools.oiuqw343sQ9a.helpd
com.adobe.acc.AdobeDesktopService.1376.UUID
com.spotify.webhelper
com.google.keystone.user.agent
launchd items
/Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist
(com.adobe.AAM.Startup-1.0)
/Library/LaunchAgents/com.adobe.AdobeCreativeCloud.plist
(com.adobe.AdobeCreativeCloud)
/Library/LaunchAgents/com.WebTools.oiuqw343sQ9a.helpd.plist
(com.WebTools.oiuqw343sQ9a.helpd)
/Library/LaunchAgents/com.WebTools.oiuqw343sQ9a.plist
(com.WebTools.oiuqw343sQ9a)
/Library/LaunchDaemons/com.adobe.adobeupdatedaemon.plist
(com.adobe.adobeupdatedaemon)
/Library/LaunchDaemons/com.adobe.agsservice.plist
(Adobe_Genuine_Software_Integrity_Service)
/Library/LaunchDaemons/com.adobe.fpsaud.plist
(com.adobe.fpsaud)
/Library/LaunchDaemons/com.ea.origin.ESHelper.plist
(com.ea.origin.ESHelper)
/Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist
(com.microsoft.office.licensing.helper)
Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist
(com.adobe.AAM.Scheduler-1.0)
Library/LaunchAgents/com.google.keystone.agent.plist
(com.google.keystone.user.agent)
Library/LaunchAgents/com.Hyperlync.HubManager.plist
(com.hyperlync.verizon.backupAssistantPlus.vCastBackupSchedulerapp.pkg)
Library/LaunchAgents/com.jdibackup.JustCloud.autostart.plist
(com.jdibackup.JustCloud.autostart)
Library/LaunchAgents/com.jdibackup.JustCloud.notify.plist
(com.jdibackup.JustCloud.notify)
Library/LaunchAgents/com.My-Soft-Update.agent.plist
(com.My-Soft-Update.agent)
Library/LaunchAgents/com.pcv.hlpramcn.plist
(com.pcv.hlpramcn)
Library/LaunchAgents/com.spotify.webhelper.plist
(com.spotify.webhelper)
Library/LaunchAgents/com.WebTools.oiuqw343sQ9a.helpd.plist
(com.WebTools.oiuqw343sQ9a.helpd)
Library/LaunchAgents/com.WebTools.oiuqw343sQ9a.plist
(com.WebTools.oiuqw343sQ9a)
Extrinsic loadable bundles
/System/Library/Extensions/hp_Deskjet_io_enabler.kext
(com.hp.print.hpio.Deskjet.kext)
/System/Library/Extensions/hp_fax_io.kext
(com.hp.kext.hp-fax-io)
/System/Library/Extensions/hp_Inkjet8_io_enabler.kext
(com.hp.print.hpio.inkjet8.kext)
/System/Library/Extensions/hp_Inkjet9_io_enabler.kext
(com.hp.print.hpio.Inkjet9.kext)
/System/Library/Extensions/JMicronATA.kext
(com.jmicron.JMicronATA)
/Library/Audio/Plug-Ins/Components/A52Codec.component
(com.shepmater.A52Codec)
/Library/Extensions/hp_io_enabler_compound.kext
(com.hp.kext.io.enabler.compound)
/Library/Internet Plug-Ins/AdobeAAMDetect.plugin
(com.AdobeAAMDetectLib.AdobeAAMDetect)
/Library/Internet Plug-Ins/DirectorShockwave.plugin
(com.adobe.director.shockwave.pluginshim)
/Library/Internet Plug-Ins/Flash Player.plugin
(com.macromedia.Flash Player.plugin)
/Library/Internet Plug-Ins/JavaAppletPlugin.plugin
(com.apple.java.JavaAppletPlugin)
/Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin
(com.microsoft.sharepoint.browserplugin)
/Library/Internet Plug-Ins/SharePointWebKitPlugin.webplugin
(com.microsoft.sharepoint.webkitplugin)
/Library/Internet Plug-Ins/Silverlight.plugin
(com.microsoft.SilverlightPlugin)
/Library/PreferencePanes/Flash Player.prefPane
(com.adobe.flashplayerpreferences)
/Library/QuickTime/AC3MovieImport.component
(com.cod3r.ac3movieimport)
/Library/QuickTime/Perian.component
(org.perian.Perian)
/Library/ScriptingAdditions/Adobe Unit Types.osax
(No bundle ID)
hosts format: ASCII text
Application check
com.google.GoogleDrive
User login items
iTunesHelper
Google Drive
Advanced Mac Cleaner
Spotify
Safari extensions
The New York Times
com
1-ClickWeather
com
WOT
com
Restricted user files: 90
Keychains file count: 11
Elapsed time (s): 97
You have a bunch of adware installed. Start by removing all of these and rebooting:
~/Library/LaunchAgents/com.jdibackup.JustCloud.autostart.plist
~/Library/LaunchAgents/com.jdibackup.JustCloud.notify.plist
~/Library/LaunchAgents/com.My-Soft-Update.agent.plist
~/Library/LaunchAgents/com.pcv.hlpramcn.plist
/Library/LaunchDaemons/com.My-Soft-Update.agent.plist
However, those are just the persistent agents. If the problem returns, use my utility DetectX or a similar tool to find the source.
Disclaimer: this post contains a link to my website from which I may derive some form of compensation, finanical or otherwise.
Boot Mode: Normal
Model: iMac5,1
Total RAM (GB): 1
RAM details
BANK 0/DIMM0:
Size: 512 MB
Speed: 667 MHz
Status: OK
Manufacturer: 0xCE00000000000000
BANK 1/DIMM1:
Size: 512 MB
Speed: 667 MHz
Status: OK
Manufacturer: 0xCE00000000000000
USB
Microsoft 5-Button Mouse with IntelliEye(TM) (Microsoft Corporation)
System diagnostics
2017-08-08 seamonkey spin
Kernel messages
Thu Aug 10 kernel[0]: (default pager): \[KERNEL\]: Switching ON Emergency paging segment
Thu Aug 10 kernel[0]: (default pager): \[KERNEL\]: Recovered emergency paging segment
Fri Aug 11 kernel[0]: (default pager): \[KERNEL\]: Switching ON Emergency paging segment
Fri Aug 11 kernel[0]: (default pager): \[KERNEL\]: Recovered emergency paging segment
Mon Aug 14 kernel[0]: (default pager): \[KERNEL\]: Switching ON Emergency paging segment
Mon Aug 14 kernel[0]: (default pager): \[KERNEL\]: Recovered emergency paging segment
Tue Aug 15 kernel[0]: (default pager): \[KERNEL\]: Switching ON Emergency paging segment
Tue Aug 15 kernel[0]: (default pager): \[KERNEL\]: Recovered emergency paging segment
Tue Aug 15 kernel[0]: (default pager): \[KERNEL\]: Switching ON Emergency paging segment
Tue Aug 15 kernel[0]: (default pager): \[KERNEL\]: Recovered emergency paging segment
Wed Aug 16 kernel[0]: (default pager): \[KERNEL\]: Switching ON Emergency paging segment
Wed Aug 16 kernel[0]: (default pager): \[KERNEL\]: Recovered emergency paging segment
Extrinsic daemons
edu.mit.Kerberos.krb5kdc
edu.mit.Kerberos.kadmind
com.seagate.TBDecorator.plist
com.google.keystone.daemon
com.adobe.fpsaud
Extrinsic agents
com.hp.devicemonitor
edu.mit.Kerberos.KerberosAgent
com.hp.productresearch
com.hp.messagecenter.launcher
com.google.keystone.system.agent
Smokyashan.update
pronto.update
pronto.notification
com.nchsoftware.wavepad.schedule.LikeSurvey
com.adobe.ARM.UUID
com.adobe.ARM.UUID
Arcahol.update
Arcahol.download
Arcahol.disable
Arcahol.ltvbit
Arcahol.AppRemoval
edu.mit.Kerberos.CCacheServer
launchd items
/Library/LaunchAgents/com.google.keystone.agent.plist
(com.google.keystone.system.agent)
/Library/LaunchAgents/com.hp.messagecenter.launcher.plist
(com.hp.messagecenter.launcher)
/Library/LaunchAgents/com.hp.productresearch.plist
(com.hp.productresearch)
/Library/LaunchDaemons/com.adobe.fpsaud.plist
(com.adobe.fpsaud)
/Library/LaunchDaemons/com.google.keystone.daemon.plist
(com.google.keystone.daemon)
Library/LaunchAgents/Arcahol.AppVemoral.plist
(Arcahol.AppRemoval)
Library/LaunchAgents/Arcahol.btvlit.plist
(Arcahol.ltvbit)
Library/LaunchAgents/Arcahol.disable.plist
(Arcahol.disable)
Library/LaunchAgents/Arcahol.dolnwoad.plist
(Arcahol.download)
Library/LaunchAgents/Arcahol.uadpte.plist
(Arcahol.update)
Library/LaunchAgents/com.adobe.ARM.UUID.plist
(com.adobe.ARM.UUID)
Library/LaunchAgents/com.adobe.ARM.UUID.plist
(com.adobe.ARM.UUID)
Library/LaunchAgents/com.apple.FolderActions.enabled.plist
(com.apple.FolderActions.enabled)
Library/LaunchAgents/com.apple.FolderActions.folders.plist
(com.apple.FolderActions.folders)
Library/LaunchAgents/com.nchsoftware.wavepad.schedule.LikeSurvey.plist
(com.nchsoftware.wavepad.schedule.LikeSurvey)
Library/LaunchAgents/pronto.notification.plist
(pronto.notification)
Library/LaunchAgents/pronto.update.plist
(pronto.update)
Library/LaunchAgents/Smokyashan.update.plist
(Smokyashan.update)
Startup items
/Library/StartupItems/Parallels/Parallels
/Library/StartupItems/Parallels/pvsnatd
Extrinsic loadable bundles
/System/Library/Extensions/Seagate Storage Driver.kext
(com.seagate.driver.PowSecDriverCore)
/System/Library/Extensions/SeagateFirmwareUpdaterDriver.kext
(com.Seagate.ScsiType00)
/Library/Internet Plug-Ins/AdobePDFViewer.plugin
(com.adobe.acrobat.pdfviewer)
/Library/Internet Plug-Ins/AdobePDFViewerNPAPI.plugin
(com.adobe.acrobat.pdfviewerNPAPI)
/Library/Internet Plug-Ins/CANONiMAGEGATEWAYDL.plugin
(jp.Canon.cig.npdownload)
/Library/Internet Plug-Ins/CANONiMAGEGATEWAYLI.plugin
(jp.Canon.cig.nplogin)
/Library/Internet Plug-Ins/CouponPrinter-FireFox.plugin
(com.couponstar.application/couponstar-printer-plugin)
/Library/Internet Plug-Ins/CouponPrinter-Safari.webplugin
(com.couponstar.application/couponstar-printer-plugin)
/Library/Internet Plug-Ins/Flip4Mac WMV Plugin.plugin
(net.telestream.wmv.plugin)
/Library/Internet Plug-Ins/Flip4Mac WMV Plugin.webplugin
(net.telestream.wmv.webplugin)
/Library/Internet Plug-Ins/iPhotoPhotocast.plugin
(com.apple.plugin.iPhotoPhotocast)
/Library/Internet Plug-Ins/JavaAppletPlugin.plugin
(com.apple.java.JavaAppletPlugin)
/Library/Internet Plug-Ins/RL Secure Plug-In Layer.plugin
(com.rocketlife.securepluginlayer)
/Library/Internet Plug-Ins/Silverlight.plugin
(com.microsoft.SilverlightPlugin)
/Library/PreferencePanes/DashboardPreferences.prefPane
(com.seagate.dashboard.preferences)
/Library/PreferencePanes/Flash Player.prefPane
(com.adobe.flashplayerpreferences)
/Library/PreferencePanes/Flip4Mac WMV.prefPane
(net.telestream.wmv.prefpane)
/Library/QuickTime/CanonMJPEGAVI.component
(jp.co.canon.MJPEGAVIExporter)
/Library/QuickTime/CanonMJPEGAVIDec.component
(jp.co.canon.CanonMJPEGAVIDec)
/Library/QuickTime/CanonMPEG4ASF.component
(jp.co.canon.MPEG4ASF)
/Library/QuickTime/CanonMPEG4ASFExporter.component
(jp.co.canon.MPEG4ASFExporter)
/Library/QuickTime/CanonText.component
(jp.co.canon.Text)
/Library/QuickTime/Flip4Mac WMV Advanced.component
(net.telestream.wmv.advanced)
/Library/QuickTime/Flip4Mac WMV Export.component
(net.telestream.wmv.export)
/Library/QuickTime/Flip4Mac WMV Import.component
(net.telestream.wmv.import)
/Library/ScriptingAdditions/Adobe Unit Types.osax
(No bundle ID)
/Library/Spotlight/iMovie.mdimporter
(com.apple.iMovieMDImporter)
/Library/Spotlight/iWeb.mdimporter
(com.apple.MDImporter.iWeb)
Library/Internet Plug-Ins/ContentManager.plugin
(com.rocketlife.ContentMan.bundle)
Library/Internet Plug-Ins/RocketEngine.plugin
(com.rocketlife.RocketEngine.bundle)
Library/Internet Plug-Ins/UploadManager.plugin
(com.rocketlife.RLPNUpload.bundle)
Proxies
AppleProxyConfigurationSelected : 2
ProxyAutoDiscoveryEnable : 0
User login items
iTunesHelper.app
System Events.app
EPSON Scanner Monitor.app
AdobeResourceSynchronizer.app
Restricted user files: 3921
Desktop file count: 47
Elapsed time (s): 356
What ads you see?
Can you post a screenshot?
Hopefully you will find a solution here.
Adware removal guide
http://www.thesafemac.com/arg/
Taking pictures of the screen.
http://support.apple.com/kb/HT5775
Best.
How to remove Adware?
