removing genio adware files

from the contextual menu.

If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select

from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.

A folder should open with an item named "GenieoExtra.framework" selected. Move that item to the Trash. You'll be prompted for your administrator password.

  
 
    

   
  
     

       /Library/LaunchAgents/com.genieo.completer.update.plist 
      
/Library/LaunchAgents/com.genieo.engine.plist 
      
/Library/LaunchAgents/com.genieoinnovation.macextension.plist 
      
/Library/LaunchDaemons/com.genieoinnovation.macextension.client.plist 
      
/Library/PrivilegedHelperTools/com.genieoinnovation.macextension.client/u/usr/lib/libgenkit.dylib 
     
/usr/lib/libgenkitsa.dylib
   
  
     
/usr/lib/libimckit.dylib
   
  
     
/usr/lib/libimckitsa.dylib
  
 
    
  
 
    
~/Library/Application Support/com.genieoinnovation.Installer
  
 
    

     
  
   ~/Library/LaunchAgents/com.genieo.completer.download.plist
   
  
     
~/Library/LaunchAgents/com.genieo.completer.update.plist
  
 
    

If there are other items with a name that includes "Genieo" or "genieo" alongside any of those listed above, move them as well. There's no need to restart after each one. Some of these items will be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.

Restart and empty the Trash. Don't try to empty the Trash until you have restarted.

Step 3

From the Safari menu bar, select

Safari ▹ Preferences... ▹ Extensions

Uninstall any extensions you don't know you need, including ones called "Genieo" or "Omnibar," and any that have the word "Spigot" or "InstallMac" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.

Your web browser(s) should now be working, and you should be able to reset the home page and search engine. If not, stop here and post your results.

Make sure you don't repeat the mistake that led you to install this software. Chances are you got it from an Internet cesspit such as "Softonic" or "CNET Download." Never visit either of those sites again. You might also have downloaded it from an ad in a page on some other site. Typically the ad is a large green button labeled "Download Now" in white letters. The button is designed to mislead people who want to download something else on the same page. If you everdownload a file that isn't obviously what you expected, delete it immediately.

You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that the Genieo developer has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing, has not done so, even though it's aware of the problem. It must be said that this failure of oversight is inexcusable and has seriously compromised the value of Gatekeeper and the Developer ID program. You cannot rely on Gatekeeper alone to protect you from harmful software.

Finally, be forewarned that when Genieo is mentioned on this site, the developer sometimes shows up under the name "Genieo support." If that happens, don't believe anything he says, but feel free to tell him what you think of his scam.