You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

How to remove Adware?

Recently i've downloaded something and now I have all this adware on safari. Pop up ads and Certain words are highlited that when clicked go to ads for surveys and stuff etc. I've tried everything but i cant get rid of the highlighted text. Does anyone know how to fix this?

MacBook Pro

Posted on Mar 5, 2014 2:06 AM

Reply
214 replies

Jun 2, 2014 1:08 PM in response to Anon4876

I'm having this exact same problem in Safari. Have followed the directions here from Linc Davis. Was able to find and remove the vsearch files, but not the ones with the word "jack" in them (listed above).


NOTE: I don't appear to get this problem in Safari, which I've had to switch to. Then again, I never use Safari unless Firefox isn't working for a specific task.


Here are the results from the diagnostic Linc suggested above. Any help would be greatly appreciated. I can already see I've got the Genie adware still running, though I've tried several times to get rid of it.


Boot Mode: Normal



Model: MacBookPro9,1



System diagnostics



2014-05-28 Creative Cloud Helper spin

2014-05-28 Creative Cloud spin

2014-05-28 Install spin

2014-05-28 systemstats spin

2014-05-30 plugin-container spin

2014-06-02 firefox spin

2014-06-02 firefox spin

2014-06-02 plugin-container spin

2014-06-02 plugin-container spin

2014-06-02 plugin-container spin



User diagnostics



2014-05-13 com.google.Chrome crash



Kernel messages



May 28 10:54:47 process systemstats[85019] thread 10852593 caught burning CPU! It used more than 50% CPU (Actual recent usage: 58%) over 180 seconds. thread lifetime cpu usage 90.019103 seconds, (86.637119 user, 3.381984 system) ledger info: balance: 90000802036 credit: 90000802036 debit: 0 limit: 90000000000 (50%) period: 180000000000 time since last refill (ns): 154341355076

May 30 16:05:45 process systemstats[97094] thread 11330186 caught burning CPU! It used more than 50% CPU (Actual recent usage: 82%) over 180 seconds. thread lifetime cpu usage 90.018846 seconds, (87.596639 user, 2.422207 system) ledger info: balance: 90001076891 credit: 90001076891 debit: 0 limit: 90000000000 (50%) period: 180000000000 time since last refill (ns): 109114249564

May 31 00:00:15 PM notification timeout (pid 85609, Creative Cloud)

May 31 00:00:15 PM notification timeout (pid 85624, Adobe CEF Helper)

May 31 00:00:15 PM notification timeout (pid 85625, Adobe CEF Helper)

Jun 1 17:16:36 Sound assertion - Command/Response TIMED OUT and ( kRequestStateMatch == fCodecRequest->state = 2 ), fCodecRequest->command->codec: 0xffffff801b11f800, fCodecRequest->command->verb: 0x17FF00, fPoweredDown: 0, fAppleGraphicsControllerPoweredOn: 1

Jun 1 17:16:36 Sound assertion in AppleHDAController at line 5539

Jun 1 17:16:36 Sound assertion in AppleHDAController at line 5540

Jun 1 17:16:36 Sound assertion in IOHDACodecDevice at line 144

Jun 1 17:16:36 Sound assertion in AppleHDAFunctionGroup at line 1225

Jun 1 17:16:36 Sound assertion in AppleHDAFunctionGroup at line 1155

Jun 1 20:28:25 wl0: Roamed or switched channel, reason #8, bssid 00:1a:30:8e:21:40

Jun 1 20:32:45 PM notification timeout (pid 85609, Creative Cloud)

Jun 1 20:32:45 PM notification timeout (pid 85624, Adobe CEF Helper)

Jun 1 20:32:45 PM notification timeout (pid 85625, Adobe CEF Helper)

Jun 2 10:00:01 process firefox[1025] thread 11465348 caught burning CPU! It used more than 50% CPU (Actual recent usage: 60%) over 180 seconds. thread lifetime cpu usage 943.172855 seconds, (888.971331 user, 54.201524 system) ledger info: balance: 90007612234 credit: 893313727271 debit: 803306115037 limit: 90000000000 (50%) period: 180000000000 time since last refill (ns): 149681628534



Loaded extrinsic kernel extensions



com.paceap.kext.pacesupport.snowleopard (5.9.1)



Extrinsic daemons



com.paceap.pacesupport

com.teamviewer.service

com.paceap.eden.licensed

com.genieoinnovation.macextension.client

com.blackmagic-design.streaming.server

com.blackmagic-design.desktopvideo.helper

com.blackmagic-design.desktopvideo.DeckLinkHardwareXPCService

com.avid.interplay.editortranscodestatus

com.avid.interplay.editorbroker

com.avid.AMCUninstaller

com.adobe.fpsaud



Extrinsic agents



com.c-command.SpamSieve.LaunchAgent

com.adobe.PDApp.AAMUpdatesNotifier.57232.UUID

com.teamviewer.desktop

com.teamviewer.teamviewer

com.robohippo.HippoConnectAgent

com.hp.messagecenter.launcher

com.hp.help.tocgenerator

com.genieoinnovation.macextension

com.divx.update.agent

com.divx.dms.agent

com.blackmagic-design.DesktopVideoFirmwareUpdater

com.avid.transcodeserviceworker

com.avid.interplay.editortranscode

com.avid.interplay.dmfservice

com.avid.aviddmfsupportsvc

com.avid.backgroundservicesmanager

com.adobe.AdobeCreativeCloud

com.zeobit.MacKeeper.Helper

com.spotify.webhelper

com.plexapp.helper

com.google.keystone.user.agent



launchd items



/Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist

(com.adobe.AAM.Startup-1.0)

/Library/LaunchAgents/com.adobe.AdobeCreativeCloud.plist

(com.adobe.AdobeCreativeCloud)

/Library/LaunchAgents/com.avid.backgroundservicesmanager.plist

(com.avid.backgroundservicesmanager)

/Library/LaunchAgents/com.avid.dmfsupportsvc.plist

(com.avid.aviddmfsupportsvc)

/Library/LaunchAgents/com.avid.interplay.dmfservice.plist

(com.avid.interplay.dmfservice)

/Library/LaunchAgents/com.avid.interplay.editortranscode.plist

(com.avid.interplay.editortranscode)

/Library/LaunchAgents/com.avid.transcodeserviceworker.plist

(com.avid.transcodeserviceworker)

/Library/LaunchAgents/com.blackmagic-design.DesktopVideoFirmwareUpdater.plist

(com.blackmagic-design.DesktopVideoFirmwareUpdater)

/Library/LaunchAgents/com.divx.dms.agent.plist

(com.divx.dms.agent)

/Library/LaunchAgents/com.divx.update.agent.plist

(com.divx.update.agent)

/Library/LaunchAgents/com.hp.help.tocgenerator.plist

(com.hp.help.tocgenerator)

/Library/LaunchAgents/com.hp.messagecenter.launcher.plist

(com.hp.messagecenter.launcher)

/Library/LaunchAgents/com.robohippo.HippoConnectAgent.plist

(com.robohippo.HippoConnectAgent)

/Library/LaunchAgents/com.teamviewer.teamviewer.plist

(com.teamviewer.teamviewer)

/Library/LaunchAgents/com.teamviewer.teamviewer_desktop.plist

(com.teamviewer.desktop)

/Library/LaunchDaemons/com.adobe.fpsaud.plist

(com.adobe.fpsaud)

/Library/LaunchDaemons/com.apple.aelwriter.plist

(com.apple.aelwriter)

/Library/LaunchDaemons/com.apple.qmaster.qmasterd.plist

(com.apple.qmaster.qmasterd)

/Library/LaunchDaemons/com.avid.AMCUninstaller.plist

(com.avid.AMCUninstaller)

/Library/LaunchDaemons/com.avid.interplay.editorbroker.plist

(com.avid.interplay.editorbroker)

/Library/LaunchDaemons/com.avid.interplay.editortranscodestatus.plist

(com.avid.interplay.editortranscodestatus)

/Library/LaunchDaemons/com.blackmagic-design.desktopvideo.XPCService.plist

(com.blackmagic-design.desktopvideo.DeckLinkHardwareXPCService)

/Library/LaunchDaemons/com.blackmagic-design.DesktopVideoHelper.plist

(com.blackmagic-design.desktopvideo.helper)

/Library/LaunchDaemons/com.blackmagic-design.streaming.BMDStreamingServer.plist

(com.blackmagic-design.streaming.server)

/Library/LaunchDaemons/com.paceap.eden.licensed.plist

(com.paceap.eden.licensed)

/Library/LaunchDaemons/com.robohippo.HippoConnectDaemon.plist

(com.robohippo.HippoConnectDaemon)

/Library/LaunchDaemons/com.teamviewer.teamviewer_service.plist

(com.teamviewer.service)

/Library/LaunchDaemons/PACESupport.plist

(com.paceap.pacesupport)

Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist

(com.adobe.AAM.Scheduler-1.0)

Library/LaunchAgents/com.apple.SafariBookmarksSyncer.plist

(com.apple.Safari)

Library/LaunchAgents/com.c-command.SpamSieve.LaunchAgent.plist

(com.c-command.SpamSieve.LaunchAgent)

Library/LaunchAgents/com.google.keystone.agent.plist

(com.google.keystone.user.agent)

Library/LaunchAgents/com.plexapp.helper.plist

(com.plexapp.helper)

Library/LaunchAgents/com.spotify.webhelper.plist

(com.spotify.webhelper)

Library/LaunchAgents/com.zeobit.MacKeeper.Helper.plist

(com.zeobit.MacKeeper.Helper)



Startup items



/Library/StartupItems/FaspBuffers/FaspBuffers

/Library/StartupItems/FaspBuffers/StartupParameters.plist

/Library/StartupItems/HP IO/HP IO

/Library/StartupItems/HP IO/Resources/English.lproj/Localizable.strings

/Library/StartupItems/PACESupport/PACESupport

/Library/StartupItems/PACESupport/Resources/PACESupport.plist

/Library/StartupItems/PACESupport/StartupParameters.plist

/Library/StartupItems/SATARaid5Daemon/SATARaid5Daemon

/Library/StartupItems/SATARaid5Daemon/StartupParameters.plist

/Library/StartupItems/Tablet/StartupParameters.plist

/Library/StartupItems/Tablet/Tablet

/Library/StartupItems/Tablet/TabletDriver.app/Contents/Info.plist

/Library/StartupItems/Tablet/TabletDriver.app/Contents/MacOS/TabletDriver

/Library/StartupItems/Tablet/TabletDriver.app/Contents/Resources/ApplicationDef aults.plist

/Library/StartupItems/Tablet/TabletDriver.app/Contents/Resources/ko.lproj/Local izable.strings

/Library/StartupItems/Tablet/TabletDriver.app/Contents/Resources/zh_CN.lproj/Lo calizable.strings

/Library/StartupItems/Tablet/TabletDriver.app/Contents/Resources/zh_TW.lproj/Lo calizable.strings

/Library/StartupItems/Tablet/TabletDriverRelauncher



Extrinsic loadable bundles



/System/Library/Extensions/ATTOExpressRAID_Enabler.kext

(com.ATTO.driver.ATTOExpressRAID_Enabler)

/System/Library/Extensions/ATTORAID_OS10.kext

(com.ATTO.driver.ATTORAID_OS10)

/System/Library/Extensions/Avid_SCSI.kext

(com.avid.driver.Avid_SCSI)

/System/Library/Extensions/Avid_SCSI_RBC.kext

(com.avid.driver.Avid_SCSI_RBC)

/System/Library/Extensions/AvidDX.kext

(com.Avid.driver.AvidDX)

/System/Library/Extensions/Belcarra.USBLAN_netpart.kext

(com.Belcarra.iokit.USBLAN_netpart)

/System/Library/Extensions/Belcarra.USBLAN_usbpart.kext

(com.Belcarra.iokit.USBLAN_usbpart)

/System/Library/Extensions/Blackmagic_Multibridge_Driver.kext

(com.blackmagic-design.desktopvideo.multibridge.iokit.driver)

/System/Library/Extensions/DeckLink_Driver.kext

(com.blackmagic-design.desktopvideo.iokit.driver)

/System/Library/Extensions/DeckLinkFrameBufferDriver.kext

(com.blackmagic-design.desktopvideo.iokit.framebufferdriver)

/System/Library/Extensions/DeckLinkHD_Driver.kext

(com.blackmagic-design.desktopvideo.iokit.decklinkhddriver)

/System/Library/Extensions/DigiDal.kext

(com.digidesign.iokit.DigiDal)

/System/Library/Extensions/PACESupportFamily.kext

(com.paceap.kext.pacesupport.master)

/System/Library/Extensions/RemoteControl.USBLAN_usbpart.kext

(com.RemoteControl.USBLAN.usbpart)

/System/Library/Extensions/RNBOClassicNotSeizeDriver.kext

(com.rnbo.iokit.RNBOClassicNotSeizeDriver)

/System/Library/Extensions/Sentinel.kext

(com.SafeNet.driver.Sentinel)

/System/Library/Extensions/SiliconImage3132r5.kext

(com.SiliconImage.driver.Si3132r5)

/System/Library/Extensions/SteerMouse.kext

(jp.plentycom.driver.SteerMouse)

/System/Library/Extensions/TabletDriverCFPlugin.bundle

(No bundle ID)

/Library/Audio/Plug-Ins/Components/iZInsightAUHook.component

(com.izotope.audioplugins.AU.Insight)

/Library/Audio/Plug-Ins/Components/iZMeterTapAUHook.component

(com.izotope.audioplugins.AU.Meter Tap)

/Library/Audio/Plug-Ins/VST/iZotope Insight.vst

(com.izotope.audioplugins.VST.Insight)

/Library/Audio/Plug-Ins/VST/iZotope Meter Tap.vst

(com.izotope.audioplugins.VST.Meter Tap)

/Library/Audio/Plug-Ins/VST3/iZotope Insight.vst3

(com.izotope.audioplugins.VST.Insight)

/Library/Audio/Plug-Ins/VST3/iZotope Meter Tap.vst3

(com.izotope.audioplugins.VST.Meter Tap)

/Library/Internet Plug-Ins/AdobeAAMDetect.plugin

(com.AdobeAAMDetectLib.AdobeAAMDetect)

/Library/Internet Plug-Ins/Aspera Web.plugin

(com.aspera.AsperaWeb)

/Library/Internet Plug-Ins/Aspera Web.webplugin

(com.asperasoft.AsperaWeb)

/Library/Internet Plug-Ins/Disabled Plug-Ins/Windows Media Plugin

(com.microsoft.WMP.defaultplugin)

/Library/Internet Plug-Ins/DivX Web Player.plugin

(com.divx.DivXPlusWebPlayer)

/Library/Internet Plug-Ins/DRM Plugin.bundle

(com.microsoft.DRMPlugin)

/Library/Internet Plug-Ins/Flip4Mac WMV Plugin.plugin

(net.telestream.wmv.plugin)

/Library/Internet Plug-Ins/Flip4Mac WMV Plugin.webplugin

(net.telestream.wmv.webplugin)

/Library/Internet Plug-Ins/JavaAppletPlugin.plugin

(com.oracle.java.JavaAppletPlugin)

/Library/Internet Plug-Ins/OfficeLiveBrowserPlugin.plugin

(com.microsoft.officelive.browserplugin)

/Library/Internet Plug-Ins/OVSHelper.plugin

(com.divx.OVSHelper)

/Library/Internet Plug-Ins/Silverlight.plugin

(com.microsoft.SilverlightPlugin)

/Library/PreferencePanes/DesktopVideoPrefsPanel.prefPane

(com.blackmagic-design.desktopvideo.prefspanel)

/Library/PreferencePanes/Flash Player.prefPane

(com.adobe.flashplayerpreferences)

/Library/PreferencePanes/Flip4Mac WMV.prefPane

(net.telestream.wmv.prefpane)

/Library/PreferencePanes/SteerMouse.prefPane

(jp.plentycom.prefpane.SteerMouse)

/Library/PreferencePanes/Wacom Tablet.prefPane

(com.wacom.settingsPrefPane)

/Library/QuickTime/AvidAV1xCodec.component

(com.avid.qtcodecs.AvidAV1xCodec)

/Library/QuickTime/AvidAVd1Codec.component

(com.avid.qtcodecs.AvidAVd1Codec)

/Library/QuickTime/AvidAVDJCodec.component

(com.avid.qtcodecs.AvidAVDJCodec)

/Library/QuickTime/AvidAVdnCodec.component

(com.avid.qtcodecs.AvidAVdnCodec)

/Library/QuickTime/AvidAVdvCodec.component

(com.avid.qtcodecs.AvidAVdvCodec)

/Library/QuickTime/AvidAVinCodec.component

(com.avid.qtcodecs.AvidAVinCodec)

/Library/QuickTime/AvidAVj2Codec.component

(com.avid.qtcodecs.AvidAVj2Codec)

/Library/QuickTime/AvidAVmpCodec.component

(com.avid.qtcodecs.AvidAVmpCodec)

/Library/QuickTime/AvidAVpkCodec.component

(com.avid.qtcodecs.AvidAVpkCodec)

/Library/QuickTime/AvidAVrpCodec.component

(com.avid.qtcodecs.AvidAVrpCodec)

/Library/QuickTime/AvidAVUICodec.component

(com.avid.qtcodecs.AvidAVUICodec)

/Library/QuickTime/Blackmagic Codec.component

(com.blackmagic-design.BlackmagicCodec)

/Library/QuickTime/DivX Decoder.component

(com.DivXInc.DivXDecoder)

/Library/QuickTime/DivX Encoder.component

(com.DivXInc.DivXCodec)

/Library/ScriptingAdditions/Adobe Unit Types.osax

(No bundle ID)

/Library/ScriptingAdditions/HightailOSAX.osax

(com.hightail.HightailOSAX)

/Library/Spotlight/GBSpotlightImporter.mdimporter

(com.apple.garageband.spotlightimporter)

/Library/Spotlight/iMovie.mdimporter

(com.apple.iMovieMDImporter)

Library/Address Book Plug-Ins/SkypeABDialer.bundle

(com.skype.skypeabdialer)

Library/Address Book Plug-Ins/SkypeABSMS.bundle

(com.skype.skypeabsms)

Library/Internet Plug-Ins/Move-Media-Player.plugin

(com.movenetworks.movemediaplayer.plugin)

Library/Mail/Bundles/SpamSieve.mailbundle

(com.c-command.spamsieve.mailplugin)

Library/Mail/Bundles (Disabled 1)/SpamSieve.mailbundle

(com.c-command.spamsieve.mailplugin)

Library/Mail/Bundles (Disabled 2)/SpamSieve.mailbundle

(com.c-command.spamsieve.mailplugin)



Extrinsic shared libraries



/usr/lib/libgenkit.dylib

/usr/lib/libgutenprint.2.0.3.dylib



DNS (not from DHCP): 8.8.8.8



Netmask: 255.255.240.0



Login hook



/Library/Application Support/Blackmagic Design/Blackmagic DeckLink/DeckLinkLoginItem.sh



Application check



com.google.GoogleDrive



Restricted user files: 164



Font problems: 44



Bad plists



Library/Preferences/ByHost/.GlobalPreferences.001f5bf48181.plist

Library/Preferences/ByHost/com.apple.DotMacNotifications.001f5bf48181.plist

Library/Preferences/ByHost/com.apple.FinalCutPro.PreferredEffects.001f5bf48181. plist

Library/Preferences/ByHost/com.apple.ImageCaptureExtension2.001f5bf48181.plist

Library/Preferences/ByHost/com.apple.iTunes.001f5bf48181.plist

Library/Preferences/ByHost/com.apple.iWork.001f5bf48181.plist

Library/Preferences/ByHost/com.apple.iWork.Keynote.001f5bf48181.plist

Library/Preferences/ByHost/com.apple.iWork.Numbers.001f5bf48181.plist

Library/Preferences/ByHost/com.apple.iWork.Pages.001f5bf48181.plist

Library/Preferences/ByHost/com.apple.MIDI.001f5bf48181.plist

Library/Preferences/ByHost/com.apple.PrefPane.Network.001f5bf48181.plist

Library/Preferences/ByHost/com.apple.print.Cache.001f5bf48181.plist

Library/Preferences/ByHost/com.apple.screensaver.001f5bf48181.plist

Library/Preferences/ByHost/com.apple.screensaver.slideshow.001f5bf48181.plist

Library/Preferences/ByHost/com.apple.SoftwareUpdate.001f5bf48181.plist

Library/Preferences/ByHost/com.apple.systemuiserver.001f5bf48181.plist

Library/Preferences/com.apple.iphotomosaic.plist

Library/Preferences/com.bundgmbh.generalnew.plist

Library/Preferences/com.diomgenic.seismogram.plist



Elapsed time (s): 269

Jun 2, 2014 3:41 PM in response to Anon4876

I am having a similar problem, but it must be a different extension because running the checks found nothing. I also have no extensions listed (looked at the awesome adware site), but probably deleted them a while back when this started happening. I continue to get popups in Safari and nothing has resolved the issue thus far. If any of these look funny please let me know!


Extrinsic daemons


com.seagate.TBDecorator.plist

com.microsoft.office.licensing.helper

com.adobe.fpsaud


Extrinsic agents


com.microsoft.SyncServicesAgent

com.google.keystone.user.agent

com.adobe.ARM.UUID


launchd items


/Library/LaunchDaemons/com.adobe.fpsaud.plist

(com.adobe.fpsaud)

/Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist

(com.microsoft.office.licensing.helper)

Library/LaunchAgents/com.adobe.ARM.UUID.plist

(com.adobe.ARM.UUID)

Library/LaunchAgents/com.google.keystone.agent.plist

(com.google.keystone.user.agent)

Library/LaunchAgents/com.microsoft.LaunchAgent.SyncServicesAgent.plist

(com.microsoft.SyncServicesAgent)


Extrinsic loadable bundles


/System/Library/Extensions/Seagate Storage Driver.kext

(com.seagate.driver.PowSecDriverCore)

/Library/Internet Plug-Ins/AdobePDFViewer.plugin

(com.adobe.acrobat.pdfviewer)

/Library/Internet Plug-Ins/AdobePDFViewerNPAPI.plugin

(com.adobe.acrobat.pdfviewerNPAPI)

/Library/Internet Plug-Ins/CouponPrinter-FireFox_v2.plugin

(com.coupons.plugin.mozilla-plugin)

/Library/Internet Plug-Ins/CouponPrinter-Safari.webplugin

(com.coupons.plugin.safari-plugin)

/Library/Internet Plug-Ins/Flash Player.plugin

(com.macromedia.Flash Player.plugin)

/Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin

(com.microsoft.sharepoint.browserplugin)

/Library/Internet Plug-Ins/SharePointWebKitPlugin.webplugin

(com.microsoft.sharepoint.webkitplugin)

/Library/PreferencePanes/Flash Player.prefPane

(com.adobe.flashplayerpreferences)

/Library/PreferencePanes/NTFSforMacOSX.prefPane

(com.paragon-software.filesystems.ntfs.prefpanel)

Library/Internet Plug-Ins/Picasa.plugin

(com.google.PicasaPlugin)

Library/Services/Attach to new message in outlook.workflow

(No bundle ID)

Jun 2, 2014 6:22 PM in response to EditThis

You have the Genieo adware installed. See my Adware Removal Guide for removal instructions.


You also have MacKeeper installed. This is a garbage app that is currently the subject of two separate class-action lawsuits alleging fraud. Uninstall it.


(Fair disclosure: The Safe Mac is my site, and contains a Donate button, so I may receive compensation for providing links to The Safe Mac. Donations are not required.)

How to remove Adware?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.