URGENT HELP! NEED TO GET RID OF MACKEEPER VIRUS BUT ACCIDENTALLY ALREADY MOVED IT TO TRASH AND EMPTIED TRASH BEFORE KNOWING THAT I NEEDED TO UNINSTALL IT THE RIGHT WAY!

Thank you for this post.

Mackeeper infected our home Mac Mini today, and although the app was quickly trashed we couldn't find the hidden files it had thrown into the system. They hijacked Safari, causing redirects to ads on every link we clicked.

The solution was found at http://www.adwaremedic.com/ We downloaded this utility and it quickly found the 4 files hidden deep in the system. Deleted them, then restarted the Mac Mini, and Mackeeper was 100 percent history -- no more redirects, no more ads, no more hijacking Safari.

Just to note, MacKeeper wasn't your issue, it was adware that was popping up advertisements for MacKeeper, along with whatever else.

One source of adware is illegal downloads of commercial software, but most of it is coming from "legitimate" sources. Those being sites like C|NET's downloads.com, softonic.com and other sites where you can download and try all kinds of software. You do get the software you want to try, but it also contains an adware installer.

Right now, adware is the biggest headache for Mac users. So far, it has been benign. Just lots of unwanted ads. It is extremely annoying, though.

Oracle's Java installer is now installing adware too.

http://www.thesafemac.com/java-now-installing-adware/

Yes! That's right. Forgot about that. Thanks for nothing, Oracle. 😠

just had the same adware issue and used adwaremedic. I was prompted to restart my computer, which I did, but after logging in I get two windows popping open about my keychain. The first says ' the system was unable to unlock your login keychain' and gives me three options : continue login, create new keychain and update keychain password. The second window lists various programs that want use my login keychain such as com.apple.icloudhelper.xpc, accountsd, identityservicesd, cloudd, etc.

any idea why this is happening and how i should proceed? Thanks in advance!

thank you so much! you really saved my bacon

Open Keychain Access in Applications/Utilities to update the password.

If keychains are not visible in the left column, choose View > Show Keychains.

Select a keychain in the Keychains list, and click the lock icon at the top of the window to lock or unlock the keychain.

If a dialog asks you for a password, enter your keychain password.

Thanks. This helped me as well. Durn malware. 😢

Hello, this is the best solution I had after searching daily for a month. It's called AdwareMedic !

I was also trying to locate files :

Home/Library/Caches/com.zeobit.MacKeeper ::::not Exist

Home/Library/Caches/com.zeobit.MacKeeper.Helper ::::not Exist

Home/Library/LaunchAgents/com.zeobit.MacKeeper.Helper ::::not Exist

Home/Library/LaunchAgents/com.zeobit.MacKeeper.plugin.Backup.agent ::::not Exist

Home/Library/Preferences/com.zeobit.MacKeeper.plist ::::not Exist

Home/Library/Preferences/com.zeobit.MacKeeper.Helper.plist ::::not Exist

without getting hit , even they looked at Activity Monitor !

I deleted files that had nothing to do with the name of that said ZeoBIT

or MacKeeper ! It is very good and I've taken the time to share it with you

since I was desperate many days !

files found:

Home/Library/Preferences/com.6d881edf12530991fd.plist

Home/Library/LaunchAgents/com.6d881edf12530991fd.plugin.Backup.agent

Home/Library/Preferences/com.Help.Helper.plist

Home/Library/Caches/com.Agent

...

.....

.........

It is different and discrete with names taken

Download here....

Names used by MacKeeper is a moving target. They are constantly changing the names so users can't find the files to remove.

I agree Adware Medic is the best solution out there. The author, Thomas Reed is constantly working on keeping it updated and adding new threats to remove.

Adware Medic is donationware. Please donate to support this valuable resource.

Just to note, AdwareMedic won't help in the least with the removal of MacKeeper (not to be confused with popup ads touting the purchase of MacKeeper). Its function is to remove adware, which it is very good at. MacKeeper needs to be removed by other methods.

to me it has worked great! AdwareMedic.

problems :

1. no pictures in google chrome look .

2. open offer pages

3. erase history clean cache but is useless

4. not find MacKeeper running on the computer

5. any name seems to MacKeeper .

I can now go online without any problem ! It is the best

What it did then was remove adware you had inadvertently installed. Some of the ads were to push you to purchase MacKeeper. That's what you were seeing. MacKeeper itself wasn't installed on your Mac. But yes, adware is highly annoying! 🙂

Hi there, this worked for me, I don't know if its complete out but the pop ups stop, hope this helps. I did all 3 steps before opening Safari again.

To start, open Finder. The press Command + Shift + G, or in the menu bar, select Go > Go to Folder. Type the following file path:

~/Library/Preferences

Look for a file named com.apple.Safari.plist, and drag it to the trash. Then restart your Mac. After it reboots, try launching Safari. A new preferences file should have been automatically created, so no more action is required on your part, and the pop-up should now be gone.

Another file you can try removing if you still don't see a change, is com.apple.Safari.savedState, which can be found in:

~/Library/Saved Application State

One last file to remove, if removing the above files didn't solve your problem, is named LastSession.plist. It is found in:

~/Library/Safari

Thank you very much!