Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Level 1

0 points

Help!!! Suspected Malware or Virus...I'm not sure...

A friend used my computer and went to putlocker.is to watch movies and downloaded "MplayerX" update supposedly. He notified me and of course I freaked out.😮 After I got to the computer, I noticed all of these pop us were coming up through Safari and that had never happened before on an install. Especially a pop up saying your computer has a virus please download this to continue...😕 Since last night and after a few attempts to do little things I though would work like clear browser history, remove recent downloads increase safari preferences to block pop ups, delete and empty trash (which are kind of lame I know but I am not tech savvy)😢 I am still getting crazy pop ups. Does this mean i have a virus, trojan, or malware? (Are those even the same thing?)😕 Is there anything I can do to fix this problem? ⚠ I can't afford for this to be an issue and I can't afford to take it Apple. Please help. I would never have let someone go to a website like that to watch movies but I didn't know he was going on a site like that. ⚠

MacBook Pro (13-inch Early 2011), OS X Yosemite (10.10.2), null

Posted on Feb 6, 2015 9:04 AM

17 replies

thomas_r.

Level 7

31,989 points

Feb 7, 2015 3:08 PM in response to SiglerGem

SiglerGem wrote:

I keep finding something in this folder ~/Library/LaunchAgents/com.webhelper.plist

That is a part of a family of adware I call "Buca Apps" (because that was used as the developer name in some of the browser extensions that are part of this adware), which is also responsible for Flashmall ads. For manual removal instructions, see:

http://www.thesafemac.com/arg-buca-apps/

If that alone doesn't do the trick, you may have other adware as well. I've seen machines with as many as six different adware programs installed. For further manual removal instructions, see:

http://www.thesafemac.com/arg

(Fair disclosure: I may receive compensation from links to my sites, TheSafeMac.com and AdwareMedic.com, in the form of buttons allowing for donations. Donations are not required to use my site or software.)

SiglerGem Author

Level 1

0 points

Feb 7, 2015 3:30 PM in response to thomas_r.

Ok that's awesome! Looks like that worked. Is there a way to isolate anything downloaded on that specific date and time? I have figured out from the files I have deleted the time it happened. The apple support link worked for majority of the adware but I still had adware on the notebook. I am glad I found it. This is awesome! You ALL are awesome!🙂

Help!!! Suspected Malware or Virus...I'm not sure...