Royal and Ancient

Q: Slow Mac

A site called Mackeeper occasionaly appears on safari promoting a clean up for slow Macs.  Is it legitimate? (http://mackeeperapp.zeobit.com )

MacBook Pro, Mac OS X (10.7.5)

Posted on Sep 14, 2014 12:27 PM

Close

Q: Slow Mac

  • All replies
  • Helpful answers

  • by Kappy,

    Kappy Kappy Sep 14, 2014 12:31 PM in response to Royal and Ancient
    Level 10 (271,850 points)
    Desktops
    Sep 14, 2014 12:31 PM in response to Royal and Ancient

    No. Do not download or install that software. If you are having problems with adware:

     

    Helpful Links Regarding Malware Problems

     

    If you are having an immediate problem with ads popping up see The Safe Mac » Adware Removal Guide and AdwareMedic.

     

    Open Safari, select Preferences from the Safari menu. Click on Extensions icon in the toolbar. Disable all Extensions. If this stops your problem, then re-enable them one by one until the problem returns. Now remove that extension as it is causing the problem.

     

    An excellent link to read is Tom Reed's Mac Malware Guide.

    Also, visit The XLab FAQs and read Detecting and avoiding malware and spyware.

    See these Apple articles:

     

      Mac OS X Snow Leopard and malware detection

      OS X Lion- Protect your Mac from malware

      OS X Mountain Lion- Protect your Mac from malware

      OS X Mavericks- Protect your Mac from malware

      About file quarantine in OS X

     

    If you require anti-virus protection Thomas Reed recommends using ClamXAV. (Thank you to Thomas Reed for this recommendation.)

  • by AM-12,

    AM-12 AM-12 Sep 14, 2014 12:45 PM in response to Royal and Ancient
    Level 1 (0 points)
    Sep 14, 2014 12:45 PM in response to Royal and Ancient

    I wouldn't trust Mackeeper. I get popup ads for it also. The reason that I don't is because usually when an ad pops up saying you have a virus or claiming to fix a slow computer, it is a virus itself just waiting for you to grant it access to your computer. And, more specifically pertaining to Mackeeper, the testimonials I have read were negative.  The best and safest way to speed up your Mac is to manually go through your hard drive and delete anything that you no longer need. Empty your trash, delete old files, get read of unused apps, etc. Here is a more detailed guide from Macworld. There are other 3rd party apps out there that claim to do what Mackeeper does but are actually legitimate, but just make sure that they aren't scams either when you download them. Usually a quick Google search like "is [blank software] legit" can give good testimonials about any software before you download it.

  • by Linc Davis,

    Linc Davis Linc Davis Sep 14, 2014 2:10 PM in response to Royal and Ancient
    Level 10 (208,044 points)
    Applications
    Sep 14, 2014 2:10 PM in response to Royal and Ancient

    You may have installed the "VSearch" trojan, perhaps under a different name. Remove it as follows.

    Malware is constantly changing to get around the defenses against it. The instructions in this comment are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.

    Back up all data before proceeding.

    Triple-click anywhere in the line below on this page to select it:

    /Library/LaunchAgents/com.vsearch.agent.plist

    Right-click or control-click the line and select

              Services Reveal in Finder (or just Reveal)

    from the contextual menu.* A folder should open with an item named "com.vsearch.agent.plist" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.

    Repeat with each of these lines:

    /Library/LaunchDaemons/com.vsearch.daemon.plist
    /Library/LaunchDaemons/com.vsearch.helper.plist
    /Library/LaunchDaemons/Jack.plist

    Restart the computer and empty the Trash. Then delete the following items in the same way:

    /Library/Application Support/VSearch
    /Library/PrivilegedHelperTools/Jack
    /System/Library/Frameworks/VSearch.framework
    ~/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin

    Some of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.

    From the Safari menu bar, select

              Safari Preferences... Extensions

    Uninstall any extensions you don't know you need, including any that have the word "Spigot," "Trovi," or "Conduit" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.

    Reset the home page and default search engine in all the browsers, if it was changed.

    This trojan is distributed on illegal websites that traffic in pirated content. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect much worse to happen in the future.

    You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that this Internet criminal has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing, has not done so, even though it's aware of the problem. This failure of oversight has compromised both Gatekeeper and the Developer ID program. You can't rely on Gatekeeper alone to protect you from harmful software.

    *If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination  command-C. In the Finder, select

              Go Go to Folder...

    from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.