How can I get rid of vsearch ad injection malware?

I believe I have vsearch ad injection malware. How can I get rid of this? I am constantly getting pop up ads mostly for Mac Keeper.

iMac, OS X Yosemite (10.10.1), 1 year old

Posted on Jan 9, 2015 5:49 AM

Reply
7 replies

Jan 9, 2015 3:15 PM in response to jeanfrombelleville

There is no need to download anything to solve this problem. You may have installed a variant of the "VSearch" ad-injection malware.

Triple-click the line below on this page to select it, then copy the text to the Clipboard by pressing the key combination command-C:

/Library/LaunchDaemons

In the Finder, select

Go Go to Folder...

from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.

A folder named "LaunchDaemons" may open. Look inside it for a file with a name of the form

com.something.daemon.plist

Here something is a variable word, which can be different in each case. It could be "cloud," "dot," "highway," "submarine," "trusteddownloads," or pretty much anything else.

There may also be a file named

com.something.helper.plist

in the same folder.

If you find files with names that fit the above description, post what you have for "something."

Feb 18, 2015 2:19 PM in response to Linc Davis

Hi Linc,


I have been having a ton of trouble with VSearch and pop-ups after (stupidly from installing MPlayerX - which I have removed). I installed Norton Antivirus which has solved the pop up windows .. but now I get constant pop ups from Norton saying that they are blocking these pages (annoying). I just want it all to go away so I don't have to use an antivirus. I use Safari.


I just did the search you recommended and found the following with the key word "daemons or Helper":


file:///Library/LaunchDaemons/com.size.daemon.plist

file:///Library/LaunchDaemons/com.size.helper.plist

file:///Library/LaunchDaemons/com.symantec.liveupdate.daemon.NFM.plist

file:///Library/LaunchDaemons/com.symantec.symdaemon.NFM.plist

file:///Library/LaunchDaemons/com.symantec.SymLUHelper.NFM.plist

file:///Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist

file:///Library/LaunchDaemons/com.oracle.java.JavaUpdateHelper.plist


Thanks!!!

Feb 18, 2015 3:00 PM in response to Kurt Lang

Thanks Kurt,


I used the Apple Forum : Remove unwanted adware that displays pop-up ads and graphics on your Mac.

The first time (weeks ago) I did this and nothing was found. This time I found some of those folders and deleted them.

Then I turned off all of Norton's security items.


So far so good!!! NO POP-UP's!! Hopefully this problem is solved! I'm letting the remaining days of Norton's free trial run out, then I'll cancel and uninstall. Thanks for your help!

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

How can I get rid of vsearch ad injection malware?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.