How to remove Adware?

Hi all,

I suddenly started getting a lot of adware, as well as another weird issue.. on Facebook (the only site i've noticed it on), in the text field where you'd type a status update, as well as a few other text fields on the main page, the color of the font is perpetually cycling through the rainbow. I cannot make it stop. This started as soon as the adware stared. I ran the adware removal tool, it didn't find anything. It's happening on both of my computers, on Chrome only. Can anyone please help me? Any assistance would really be appreciated.

Thank you

Best,

Joe

Linc Davis

Thank you for the respond. For the last 2 weeks I have been having MacKeeper pop ups, the only thing I have done is update Java. I cleaned out the computer and removed everything I downloaded before just in case but nothing. So I try out your solution, I had 3 out of 6 and PRESTO everything back to normal. Still think it was the Java. Thanks for your help!!

hey I dont have

/Library/Application Support/VSearch

when I go to reveal it tells me

The operation can’t be completed because the item can’t be found.

you know why?

Hi thomas_r,

I ran the bash script and pasted the output below. Can you please take a look at it?

I reformatted my computer a few times and the problem still crop up. I'm thinking it might be a hacked network issue. The router is mine but the cable modem belongs to the ISP (comcast).

I read your guides on thesafemac and use my laptop at starbucks. None of the ads seems to be popping up and when I got home, they stopped as well. Then, once I restart the mac, the ads starts appearing as well. At this point, do you recommend that I reinstall the router with DD-WRT software? I have a linksys Cisco E3000 router and WPA2-personal security.

My roommate, running a windows laptop, also experiences these problems but never told me about it.

Boot Mode: Normal

Model: MacBookPro10,1

Battery cycles: 347

System diagnostics

2014-08-29 UNKNOWN spin

2014-08-29 UNKNOWN spin

2014-08-29 launchd,librariand,ssh-agent shutdownStall

Kernel messages

Aug 29 02:54:58 Previous Shutdown Cause: -112

--- last message repeated 1 time ---

Aug 29 07:39:00 Sound assertion in AppleHDAFunctionGroup at line 1057

Aug 29 08:35:52 disk2s2: I/O error.

--- last message repeated 14 times ---

Aug 29 08:42:50 process mdworker[3509] thread 49475 caught burning CPU! It used more than 85% CPU (Actual recent usage: 85%) over 40 seconds. thread lifetime cpu usage 54.014571 seconds, (13.960066 user, 40.054505 system) ledger info: balance: 34000733188 credit: 53545593482 debit: 19544860294 limit: 34000000000 (85%) period: 40000000000 time since last refill (ns): 39864245120

Aug 29 08:44:49 process mdworker[3526] thread 49993 caught burning CPU! It used more than 85% CPU (Actual recent usage: 88%) over 40 seconds. thread lifetime cpu usage 89.436340 seconds, (18.789548 user, 70.646792 system) ledger info: balance: 34000798149 credit: 89146044269 debit: 55145246120 limit: 34000000000 (85%) period: 40000000000 time since last refill (ns): 38286699726

Aug 29 08:53:25 disk2s2: I/O error.

--- last message repeated 1588 times ---

Aug 29 09:02:10 process Dropbox[5961] thread 57796 caught burning CPU! It used more than 50% CPU (Actual recent usage: 85%) over 180 seconds. thread lifetime cpu usage 93.342761 seconds, (80.451650 user, 12.891111 system) ledger info: balance: 90000844303 credit: 90186040611 debit: 185196308 limit: 90000000000 (50%) period: 180000000000 time since last refill (ns): 104797063650

Aug 29 17:55:10 IOPPF: Sent cpu-plimit-notification last value 3 (rounded time weighted average 3)

Aug 29 17:55:21 IOPPF: Sent cpu-plimit-notification last value 4 (rounded time weighted average 8)

Aug 29 18:56:01 IOPPF: Sent cpu-plimit-notification last value 3 (rounded time weighted average 3)

Aug 29 18:56:12 IOPPF: Sent cpu-plimit-notification last value 4 (rounded time weighted average 6)

Aug 29 19:56:52 IOPPF: Sent cpu-plimit-notification last value 11 (rounded time weighted average 11)

Aug 29 19:56:52 IOPPF: Sent gpu-external-plimit-notification last value 1 (rounded time weighted average 1)

Aug 29 19:56:52 IOPPF: Sent gpu-internal-plimit-notification last value 1 (rounded time weighted average 1)

Aug 29 20:57:44 IOPPF: Sent cpu-plimit-notification last value 6 (rounded time weighted average 4)

Aug 29 20:57:45 disk1s2: I/O error.

--- last message repeated 12 times ---

Aug 29 20:57:55 IOPPF: Sent cpu-plimit-notification last value 2 (rounded time weighted average 7)

Aug 29 20:57:57 disk1s2: I/O error.

--- last message repeated 287 times ---

Aug 29 22:21:21 Previous Shutdown Cause: -112

Extrinsic daemons

org.wireshark.ChmodBPF

com.google.keystone.daemon

Extrinsic agents

com.google.keystone.system.agent

homebrew.mxcl.postgresql

launchd items

/Library/LaunchAgents/com.google.keystone.agent.plist

(com.google.keystone.system.agent)

/Library/LaunchDaemons/com.google.keystone.daemon.plist

(com.google.keystone.daemon)

/Library/LaunchDaemons/org.wireshark.ChmodBPF.plist

(org.wireshark.ChmodBPF)

Library/LaunchAgents/homebrew.mxcl.postgresql.plist

(homebrew.mxcl.postgresql)

Extrinsic loadable bundles

/Library/Internet Plug-Ins/googletalkbrowserplugin.plugin

(com.google.googletalkbrowserplugin)

/Library/Internet Plug-Ins/o1dbrowserplugin.plugin

(com.google.o1dbrowserplugin)

Modified periodic scripts

/etc/periodic/daily/110.clean-tmps

/etc/periodic/daily/130.clean-msgs

/etc/periodic/daily/140.clean-rwho

/etc/periodic/daily/199.clean-fax

/etc/periodic/daily/310.accounting

/etc/periodic/daily/400.status-disks

/etc/periodic/daily/420.status-network

/etc/periodic/daily/430.status-rwho

/etc/periodic/daily/999.local

/etc/periodic/monthly/199.rotate-fax

/etc/periodic/monthly/200.accounting

/etc/periodic/monthly/999.local

/etc/periodic/weekly/320.whatis

/etc/periodic/weekly/999.local

DNS (from DHCP): 107.170.245.37

User login items

iTunesHelper

Dropbox.app

Google Chrome

Restricted user files: 119

Elapsed time (s): 99

Thank you to this kind soul who posted this- I stayed up all night trying to figure out how to get rid of adware on my mac. THANK YOU!!!!! much love. also, FYI never download KeyPlayer

Thank you to this kind soul who posted this- I stayed up all night trying to figure out how to get rid of adware on my mac. THANK YOU!!!!! much love. also, FYI never download KeyPlayer

kellyyygirl wrote:

FYI never download KeyPlayer

KeyPlayer wasn't mentioned anywhere in this discussion, but I'm working with another user who has it, so I have to ask what made you bring it up? Did you find something by that name on your Mac or just read it somewhere else?

Thank you, Mr. Linc Davis! That downlite trojan was on my laptop and I kept it turned off for weeks because it was so obnoxious. Your instructions were so clear and easy to follow. Now I have my computer back and I can't thank you enough. 🙂

Boot Mode: Normal

Model: MacBookAir5,2

System load advisory

combined level = Bad

- user level = OK

- battery level = Bad

- thermal level = Great

System diagnostics

2014-08-17 com.apple.WebKit.WebContent spin

2014-08-17 iTunes hang

2014-08-18 galileod crash

2014-08-20 galileod crash

2014-08-28 Microsoft Word spin

2014-09-07 iPhoto spin

2014-09-10 Safari hang

2014-09-10 com.apple.WebKit.WebContent spin

2014-09-10 galileod crash

User diagnostics

2014-08-17 PluginProcess crash

2014-09-03 PluginProcess crash

Kernel messages

Sep 4 00:00:43 wl0: Roamed or switched channel, reason #1, bssid 20:c9:d0:1f:8d:29

Sep 4 00:00:47 wl0: Roamed or switched channel, reason #8, bssid 20:c9:d0:1f:8d:29

Sep 4 14:59:07 AFP_VFS afpfs_DoReconnect: Max reconnect time: 30 secs, Connect timeout: 15 secs for /Volumes/Data

Sep 4 15:33:17 wl0: Roamed or switched channel, reason #8, bssid 20:c9:d0:1f:8d:2a

Sep 5 12:47:54 Previous Shutdown Cause: -60

Sep 5 12:55:43 AFP_VFS afpfs_DoReconnect: Max reconnect time: 30 secs, Connect timeout: 15 secs for /Volumes/Data

--- last message repeated 2 times ---

Sep 7 18:36:28 wl0: Roamed or switched channel, reason #8, bssid 20:c9:d0:1f:8d:2a

Sep 7 18:40:21 wl0: Roamed or switched channel, reason #1, bssid 20:c9:d0:1f:8d:29

Sep 7 18:40:25 wl0: Roamed or switched channel, reason #8, bssid 20:c9:d0:1f:8d:29

Sep 8 17:57:48 AFP_VFS afpfs_DoReconnect: Max reconnect time: 30 secs, Connect timeout: 15 secs for /Volumes/Data

Sep 8 18:28:28 wl0: Roamed or switched channel, reason #8, bssid 20:c9:d0:1f:8d:29

Sep 8 19:14:06 AFP_VFS afpfs_DoReconnect: Max reconnect time: 30 secs, Connect timeout: 15 secs for /Volumes/Data

Loaded extrinsic kernel extensions

com.Cycling74.driver.Soundflower (1.5.2)

Extrinsic daemons

com.microsoft.office.licensing.helper

com.fitbit.galileod

com.adobe.fpsaud

Extrinsic agents

com.google.keystone.user.agent

launchd items

/Library/LaunchDaemons/com.adobe.fpsaud.plist

(com.adobe.fpsaud)

/Library/LaunchDaemons/com.fitbit.galileod.plist

(com.fitbit.galileod)

/Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist

(com.microsoft.office.licensing.helper)

Library/LaunchAgents/com.google.keystone.agent.plist

(com.google.keystone.user.agent)

Extrinsic loadable bundles

/System/Library/Extensions/Soundflower.kext

(com.Cycling74.driver.Soundflower)

/Library/Internet Plug-Ins/Flash Player.plugin

(com.macromedia.Flash Player.plugin)

/Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin

(com.microsoft.sharepoint.browserplugin)

/Library/Internet Plug-Ins/SharePointWebKitPlugin.webplugin

(com.microsoft.sharepoint.webkitplugin)

/Library/Internet Plug-Ins/Silverlight.plugin

(com.microsoft.SilverlightPlugin)

/Library/PreferencePanes/Flash Player.prefPane

(com.adobe.flashplayerpreferences)

Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin

(com.conduit.ConduitNPAPIPlugin)

Library/Internet Plug-Ins/Google Earth Web Plug-in.plugin

(com.Google.GoogleEarthPlugin.plugin)

Library/Internet Plug-Ins/WebEx64.plugin

(com.cisco_webex.plugin.gpc64)

Global login items

/Applications/Epson Software/Epson Low Ink Reminder.app/Contents/EpsonLowInkReminderAgent.app

User login items

iTunesHelper

Fitbit Connect Menubar Helper

Restricted user files: 219

Font problems: 45

Desktop file count: 47

Elapsed time (s): 85

Simple solution worked for me. I've posted it on other threads too.

I've also been experiencing problems with pop-up ads from malware on Safari and Firefox. I did all of the checking we're told to do on forums such as seeing if there is anything unusual in the Activity Monitor, deleted cookies and so on. Today, I also got malware on Google Chrome. After spending a long, long time trying to work out how to remove malware from my Mac or from the browsers, I was left confused and unable to remove it. Downloading anti-virus software didn't help either, as these sort of pop-up ads are not considered to be harmful to the computer, so the software seems not to to detect it. But I came across and article suggesting that I go to 'extensions' within Safari (click on 'Safari' > 'preferences' > 'extensions') and delete those. I only had one extension which I deleted and that has solved the problem. Sure enough, I had the same extension in Firefox (click on 'Tools' > 'add-ons') and Google Chrome ('Chrome' > 'preferences' > 'extensions'). Once deleted in Chrome's 'extensions' or disabled in Firefox's 'add-ons', the pop-up ads have disappeared. So in the end, I discovered the malware was affecting the browsers and not the Mac itself. How the extension on the browsers got there, I don't know. But I was really surprised as the eventual solution was very simple.

TheNiki81 wrote:

How the extension on the browsers got there, I don't know.

Then you need to read John Galt's How to install malware.

Boot Mode: Normal

Model: MacBookPro9,2

System diagnostics

2014-09-08 Google Chrome Helper spin

2014-09-08 Google Chrome spin

2014-09-16 iPhoto spin

2014-09-17 Microsoft Office Setup Assistant spin

2014-09-17 Microsoft Outlook spin

2014-09-17 Microsoft Outlook spin

2014-09-17 PluginProcess spin

2014-09-17 com.apple.WebKit.WebContent spin

2014-09-18 Google Chrome Helper spin

2014-09-20 Google Chrome Helper spin

User diagnostics

2014-08-22 storeagent crash

2014-08-28 PluginProcess crash

Kernel messages

Sep 15 20:45:37 wl0: Roamed or switched channel, reason #8, bssid 6a:95:04:08:52:4d

Sep 15 21:05:27 wl0: Roamed or switched channel, reason #1, bssid 6a:25:15:a5:e8:89

Sep 15 21:44:30 wl0: Roamed or switched channel, reason #4, bssid 6a:25:15:a5:e8:89

--- last message repeated 1 time ---

Sep 15 21:46:43 wl0: Roamed or switched channel, reason #4, bssid b2:95:04:b3:86:dd

Sep 15 21:47:37 wl0: Roamed or switched channel, reason #1, bssid 6a:25:15:a5:e8:89

Sep 15 21:47:51 wl0: Roamed or switched channel, reason #4, bssid 6a:95:04:08:52:4d

Sep 15 21:51:07 wl0: Roamed or switched channel, reason #4, bssid 6a:25:15:a5:e8:89

--- last message repeated 2 times ---

Sep 16 00:17:50 wl0: Roamed or switched channel, reason #8, bssid 6a:25:15:a5:e8:89

Sep 16 00:18:08 wl0: Roamed or switched channel, reason #4, bssid 6a:25:15:a5:e8:89

--- last message repeated 17 times ---

Sep 16 05:32:37 wl0: Roamed or switched channel, reason #8, bssid 6a:25:15:a5:e8:89

Sep 16 05:33:12 wl0: Roamed or switched channel, reason #4, bssid 6a:25:15:a5:e8:89

--- last message repeated 2 times ---

Sep 16 07:53:10 wl0: Roamed or switched channel, reason #1, bssid ba:95:04:b1:58:75

Sep 16 08:54:22 wl0: Roamed or switched channel, reason #8, bssid 6a:25:15:a5:e8:89

Sep 17 17:27:32 wl0: Roamed or switched channel, reason #4, bssid 6a:25:15:a5:e8:89

Sep 17 17:28:01 wl0: Roamed or switched channel, reason #4, bssid 6a:95:04:08:52:4d

Sep 18 23:20:22 wl0: Roamed or switched channel, reason #8, bssid 6a:25:15:a5:e8:89

--- last message repeated 1 time ---

Sep 20 20:19:41 wl0: Roamed or switched channel, reason #8, bssid 6a:95:04:08:52:4d

Sep 20 20:19:51 wl0: Roamed or switched channel, reason #4, bssid 6a:25:15:a5:e8:89

Sep 20 21:03:27 wl0: Roamed or switched channel, reason #8, bssid 6a:25:15:a5:e8:89

--- last message repeated 1 time ---

Extrinsic daemons

com.oracle.java.Helper-Tool

com.oracle.java.Java-Updater

com.vsearch.helper

com.microsoft.office.licensing.helper

com.adobe.fpsaud

Extrinsic agents

com.vsearch.agent

com.google.keystone.user.agent

com.genieo.completer.update

com.genieo.completer.download

com.adobe.ARM.UUID

launchd items

/Library/LaunchAgents/com.oracle.java.Java-Updater.plist

(com.oracle.java.Java-Updater)

/Library/LaunchAgents/com.vsearch.agent.plist

(com.vsearch.agent)

/Library/LaunchDaemons/com.adobe.fpsaud.plist

(com.adobe.fpsaud)

/Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist

(com.microsoft.office.licensing.helper)

/Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist

(com.oracle.java.Helper-Tool)

/Library/LaunchDaemons/com.vsearch.daemon.plist

(com.vsearch.daemon)

/Library/LaunchDaemons/com.vsearch.helper.plist

(com.vsearch.helper)

Library/LaunchAgents/com.adobe.ARM.UUID.plist

(com.adobe.ARM.UUID)

Library/LaunchAgents/com.genieo.completer.download.plist

(com.genieo.completer.download)

Library/LaunchAgents/com.genieo.completer.update.plist

(com.genieo.completer.update)

Library/LaunchAgents/com.google.keystone.agent.plist

(com.google.keystone.user.agent)

Extrinsic loadable bundles

/Library/Internet Plug-Ins/AdobePDFViewer.plugin

(com.adobe.acrobat.pdfviewer)

/Library/Internet Plug-Ins/AdobePDFViewerNPAPI.plugin

(com.adobe.acrobat.pdfviewerNPAPI)

/Library/Internet Plug-Ins/Flash Player.plugin

(com.macromedia.Flash Player.plugin)

/Library/Internet Plug-Ins/JavaAppletPlugin.plugin

(com.oracle.java.JavaAppletPlugin)

/Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin

(com.microsoft.sharepoint.browserplugin)

/Library/Internet Plug-Ins/SharePointWebKitPlugin.webplugin

(com.microsoft.sharepoint.webkitplugin)

/Library/PreferencePanes/Flash Player.prefPane

(com.adobe.flashplayerpreferences)

/Library/PreferencePanes/JavaControlPanel.prefPane

(com.oracle.java.JavaControlPanel)

DNS (from DHCP): 109.0.66.10

User login items

iTunesHelper

uTorrent

Safari extensions

DoNotTrackMe- Online Privacy Protection

Restricted user files: 43

Font problems: 21

Elapsed time (s): 205

It's generally not a good idea to post to an older thread like this as nobody is watching it any more. I'm surprised that I am.

Run AdwareMedic to remove Genieo, Downlite and any others you may have accidentally installed and read this to understand what you did avoid it in the future.

Linc Davis,

I too have this issue and and ran the shell script as per your instructions in this thread.

Boot Mode: Normal

Model: MacBookAir6,2

System load advisory

combined level = Bad

- user level = OK

- battery level = Bad

- thermal level = Great

System diagnostics

2014-09-19 PluginProcess spin

2014-09-19 PluginProcess spin

2014-09-19 PluginProcess spin

2014-09-19 PluginProcess spin

2014-09-19 PluginProcess spin

2014-09-19 com.apple.WebKit.WebContent spin

2014-09-20 Meeting Center spin

2014-09-20 TeamViewer_Desktop shutdownStall

2014-09-21 PluginProcess spin

2014-09-21 com.apple.WebKit.WebContent spin

User diagnostics

2014-09-01 PluginProcess crash

2014-09-04 PluginProcess crash

2014-09-05 PluginProcess crash

2014-09-05 PluginProcess crash

2014-09-14 PluginProcess crash

Kernel messages

Sep 15 09:47:15 wl0: Roamed or switched channel, reason #8, bssid f8:e4:fb:00:c2:0b

--- last message repeated 2 times ---

Sep 16 16:57:26 process com.apple.WebKit[24580] thread 1390535 caught burning CPU! It used more than 50% CPU (Actual recent usage: 57%) over 180 seconds. thread lifetime cpu usage 194.250762 seconds, (187.732446 user, 6.518316 system) ledger info: balance: 90008906425 credit: 192142642590 debit: 102133736165 limit: 90000000000 (50%) period: 180000000000 time since last refill (ns): 157867370395

Sep 17 04:19:39 wl0: Roamed or switched channel, reason #2, bssid f8:e4:fb:00:c2:0b

Sep 18 14:23:06 wl0: Roamed or switched channel, reason #8, bssid f8:e4:fb:00:c2:0b

--- last message repeated 6 times ---

Sep 19 23:50:40 process com.apple.WebKit[1001] thread 90194 caught burning CPU! It used more than 50% CPU (Actual recent usage: 55%) over 180 seconds. thread lifetime cpu usage 145.540020 seconds, (127.756049 user, 17.783971 system) ledger info: balance: 90056562313 credit: 136663263333 debit: 46606701020 limit: 90000000000 (50%) period: 180000000000 time since last refill (ns): 163231654813

Sep 20 08:24:38 wl0: Roamed or switched channel, reason #8, bssid f8:e4:fb:00:c2:0b

--- last message repeated 2 times ---

Sep 20 11:36:43 Process Setup Assistant [178] disabling system-wide I/O Throttling

Sep 20 11:36:43 Process Setup Assistant [178] disabling system-wide CPU Throttling

Sep 21 12:11:21 wl0: Roamed or switched channel, reason #8, bssid f8:e4:fb:00:c2:0b

--- last message repeated 3 times ---

Extrinsic daemons

jp.co.canon.MasterInstaller

com.vsearch.helper

com.teamviewer.service

com.period.searchprotectd

com.oracle.java.Helper-Tool

com.mozy.backup

com.microsoft.office.licensing.helper

com.adobe.fpsaud

Extrinsic agents

com.vsearch.agent

com.teamviewer.desktop

com.teamviewer.teamviewer

com.oracle.java.Java-Updater

com.mozy.status

launchd items

/Library/LaunchAgents/com.mozy.status.plist

(com.mozy.status)

/Library/LaunchAgents/com.oracle.java.Java-Updater.plist

(com.oracle.java.Java-Updater)

/Library/LaunchAgents/com.teamviewer.teamviewer.plist

(com.teamviewer.teamviewer)

/Library/LaunchAgents/com.teamviewer.teamviewer_desktop.plist

(com.teamviewer.desktop)

/Library/LaunchAgents/com.vsearch.agent.plist

(com.vsearch.agent)

/Library/LaunchDaemons/com.adobe.fpsaud.plist

(com.adobe.fpsaud)

/Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist

(com.microsoft.office.licensing.helper)

/Library/LaunchDaemons/com.mozy.backup.plist

(com.mozy.backup)

/Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist

(com.oracle.java.Helper-Tool)

/Library/LaunchDaemons/com.perion.searchprotectd.plist

(com.period.searchprotectd)

/Library/LaunchDaemons/com.teamviewer.teamviewer_service.plist

(com.teamviewer.service)

/Library/LaunchDaemons/com.vsearch.daemon.plist

(com.vsearch.daemon)

/Library/LaunchDaemons/com.vsearch.helper.plist

(com.vsearch.helper)

/Library/LaunchDaemons/jp.co.canon.MasterInstaller.plist

(jp.co.canon.MasterInstaller)

Extrinsic loadable bundles

/Library/Internet Plug-Ins/Flash Player.plugin

(com.macromedia.Flash Player.plugin)

/Library/Internet Plug-Ins/JavaAppletPlugin.plugin

(com.oracle.java.JavaAppletPlugin)

/Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin

(com.microsoft.sharepoint.browserplugin)

/Library/Internet Plug-Ins/SharePointWebKitPlugin.webplugin

(com.microsoft.sharepoint.webkitplugin)

/Library/PreferencePanes/Flash Player.prefPane

(com.adobe.flashplayerpreferences)

/Library/PreferencePanes/JavaControlPanel.prefPane

(com.oracle.java.JavaControlPanel)

/Library/PreferencePanes/MozyHome.prefPane

(com.mozy.configpane)

Library/Internet Plug-Ins/WebEx64.plugin

(com.cisco_webex.plugin.gpc64)

Global login items

/Library/Printers/SPanel/Samsung/SPanel.app

/Library/Printers/Samsung/Daemon/DaemonManager/DaemonManager.app

User login items

iTunesHelper

WDDriveUtilityHelper

WDDriveUtilityHelper

Dropbox.app

Restricted user files: 46

Font problems: 21

Elapsed time (s): 79

Linc is probably not monitoring this thread any longer and rarely responds to "me to" entries either.

Start a new discussion item, describe your problem in much greater detail (there's a lot of adware around) with screen-shots of what you see, if possible. Don't post Linc's shell script until asked for.

That's just the way this forum works best.