Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

How do I get rid of loadm.exelator.com

The Loadm.exelator virus is a nasty hijacker which keeps redirecting your browser to Loadm.exelator.com website which is a commercial site making profit from online users. This redirection actually happens because of a corrupt addon which can integrate with Firefox, Chrome, Internet explorer or Safari. After its integration, your default internet settings like homepage, search provider would be changed automatically. From here, everytime you access web search, or open a web link form your affected computer, the http://Loadm.exelator.com webpage will appear instead of the site you were expecting to see.


This is a description of this virus. How do I get rid of it, and what is a good virus protection program for the Mac?

Posted on Jul 26, 2014 8:40 AM

Reply
13 replies

Jul 26, 2014 10:22 AM in response to jvreed

That description was copied from rescuemybrowser.com, and isn't particularly useful. We need to know specifically what you are seeing, not what someone else running Windows has seen. The cause and behavior of a problem similar to yours in Windows is probably not the same.


If you are having advertisements added to many sites that should not contain those ads, you probably have some kind of adware. However, I'm unclear on whether that is actually the case. If it is, you should be able to find a solution using my Adware Removal Guide.


(Fair disclosure: The Safe Mac is my site, and contains a Donate button, so I may receive compensation for providing links to The Safe Mac. Donations are not required.)

Jul 26, 2014 10:45 AM in response to thomas_r.

It is not a problem with ads or Windows, it is with Firefox. The first paragraph in my question is from a site which describes just how "loadm.exelator.com" functions. It highjacks your browser and search capabilities. Each time you search for a website, say, Instapundit, the loadm.exelator.com page opens. Is there a virus removal program that would get rid of this in the Firefox program? Thanks for your help. By the way, I searched for loadm.exelator.com on your site but found no reference to it.

Jul 26, 2014 10:46 AM in response to jvreed

Sorry, I neglected to indicate the problem is with Firefox, not Safari. Safari seems to be ok.


But what is the actual problem? I've only got a vague idea so far. Sounds like you're having ads that shouldn't be there, but where? Specific sites? All sites? Are they appearing within other pages, or are you being redirected to an ad site?


Any thought as to anti virus software, something to scan all programs to clear the virus.


There is none that will do the job. Anti-virus software isn't the answer, because the problem isn't a virus. It may be adware, but most anti-virus software doesn't detect most adware.


Did you take a look at the page I referred you to yet? If so, what was the result? If not, do so now.

Jul 26, 2014 1:00 PM in response to thomas_r.

Two things.


First, I was able to start Firefox in safe mode and turn off a couple extensions.


Second, the mention at your site that spoke of problems caused by infiltration through modems may have a bearing on the problem. I use Apple Airport Extreme for WIFI, but recently had to replace a Centurylink modem that was outdated and causing problems. The new Centurylink modem includes WIFI which I did not wish to use and had Centurylink disable. Yesterday, it was necessary to reset the modem to establish internet connection and the modem automatically restarted its own WIFI. Then, today, the problems occurred with "loadm.exelator".


In any case, so far, with the extensions turned off the the Centurylink WIFI disabled, the problem seems to have been resolved.


I'll know for sure the next time it is necessary to reset the modem. If "loadm.exelator" doesn't return, it was the extensions. It it's back, it was bad stuff through the modem.

Jul 26, 2014 6:36 PM in response to thomas_r.

Here's what still puzzles me. The three extensions, two promoting shopping on Amazon and one promoting shopping on eBay, were on both Firefox and Safari. I suspect they were placed by Amazon and eBay and have been there for some time. So my guess is it is unlikely they were responsible for the virus. I seem to recall that, when the Centurylink WIFI was active, it appeared in the WIFI control, although it was not selected to be used. Is it feasible that a virus could, nonetheless, spread from the Centrylink modem and infect Firefox? And why would it not infect Safari, at the same time? As I mentioned earlier, the WIFI capability of the modem was turned off after it was installed to replace an obsolete modem. It is only since the modem was reset and WIFI was activated and remained on that problems with the virus occurred. I am guessing that, under normal circumstances, it should be possible to have more than one WIFI signal active while not selected for use. Puzzle.

Jul 27, 2014 7:47 AM in response to jvreed

Sounds like you have installed the Spigot adware, which would likely have come in piggybacking on a CNET Download.com installer. CNET is known to do this, and has been for some time. Download.com should be avoided at all costs, and for that matter, I would recommend avoiding all CNET sites. They've demonstrated an amazing lack of ethics, and should not be trusted.


Malware cannot infect a wireless router and then infect the computer. It is possible that malware could infect a router and then redirect legit sites to bad sites, from which the user might be tricked into downloading malware. However, since you had Spigot extensions installed, we don't need to venture down such theoretical roads to explain the problem.

Jul 27, 2014 3:38 PM in response to thomas_r.

I have removed all the browser extensions mentioned in your Adware Removal Guide: Spigot. However your removal instructions also advise removing ~/Library/Application Support/Spigot/


I gather that somewhere on my hard drive (which I can see on he desktop in Version 10.6.8) there lurks ~/Library/Application Support/Spigot/ which I need to remove.


I read your article “Locating files from paths” and note the following paragraph that gives me pause:


One important thing to keep in mind here is that Snow Leopard (Mac OS X 10.6) and earlier systems behave a little differently. If you enter the path to a file, rather than a folder, on later systems, the file will be displayed in the Finder. On Snow Leopard and earlier, an error message will be displayed. On such systems, you will have better luck with a different method.


Maybe I missed it but what is the “different method” to which you refer?


And when I find the offending file do I simply drag it into the trash?


I must say, since removing the browser extensions you noted, things have been running correctly. Is it the case that the Spigot line lurking the Library/Application Support will jump out and cause problems in the future?

How do I get rid of loadm.exelator.com

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.