HOW DO I GET RID OF FLASHMALL

My bad, I was not clear enough when I said " (Find) some other instance of "Flashmall" AND tell us WHERE you found anything "

By "WHERE" I did not mean in the Search Results window, but rather where in the Finder's file structure the find function FOUND it.

For example, I search for a known filename of an AppleScript... CLICK/TAP to enlarge (saving real estate)

Here is where I know it is to give you context for the search results

Here is the CMD + F in the finder search results for that file

Notice at the bottom of the window

Here is what you get

the PATH is what thomas would be interested in

Even better info might include clicking the at the right side of the line item, giving this added info

(More Info) button would top off the best info

If you didn't catch the pathname when you trashed it from the search window - OK BTW - this is merely an educational exercise for next time you need this kind of stuff.

HINT: When you find a file/app, and you want to open the enclosing folder in the Finder, just Double-Click the folder next to it on the path at the bottom

Anyway, glad you are all fixed up. STAY SAFE out there!

ÇÇÇ

Click here and follow the instructions, and for any types of adware not covered by them on the computer, these ones. If you're willing to use a tool to remove it(you don't need to, but may find it easier), you can instead run Adware Medic; this link is a direct download.

(122997)

Are you logged as "Administrator"?

>

How to remove Mac App Store apps that appear in Launchpad

jessy

Niel is very experienced and has likely provided just what you need to get this fixed. Next time you post (or reply here), always include your "Product info" - you can enter it at the bottom left of the Your Stuff Bio page . click your UserName to get there anytime you see it like this > Jessy14254

If you would reply with your device and OS, we can get this moved to a more appropriate forum, but Niel's instructions (especially the easy way - Adware Medic ) should suffice.

ÇÇÇ

There is no need to download anything to solve this problem. You installed the "Crossrider" trojan. Take the steps below to disable it.

Malware is always changing to get around the defenses against it. This procedure works as of now, as far as I know. It may not work in the future. Anyone finding this comment a few days or more after it was posted should look for a more recent discussion, or start a new one.

Back up all data before continuing.

1. Triple-click the line below on this page to select it, then copy the text to the Clipboard by pressing the key combination command-C:

~/Library/LaunchAgents

In the Finder, select

Go ▹ Go to Folder...

from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return. A folder named "LaunchAgents" will open.

2. Inside the folder you just opened, there may be files with any of the following names:

com.crossrider.wss*.agent.plist

com.webhelper.plist

com.webtools.uninstaller.plist

com.webtools.update.agent.plist

flashmall_updater.plist

flashmall_updater.sh

WebSocketServerApp

Here * stands for a variable six-digit number. Some of these files may be absent. Move any that you have to the Trash and close the Finder window. Log out or restart the computer. The trojan will now be inactive, but there are a few more components of it that should be cleaned up.

3. Do as in Step 1 with this line:

~/Library/Application Support

A folder named "Application Support" will open. Inside it there may be a subfolder with this name:

webHelperApp

If so, move that subfolder—not the "Application Support" folder—to the Trash.

4. Finally, open this folder in the same way as above:

~/Library

Look for a subfolder with this name:

WebTools

and move it to the Trash, if present. Finally, empty the Trash.

I did what you advised to get rid of Flahmall. It worked in the sense that it removed the application from the Applications folder, but the icon still remains on the Launchpad. The icon does not have an (X) that I could click to remove it from Launchpad. Is there anything you recommend?

knclp wrote:

yes i am the administrator, unfortunatly with this flashmall icon when you do those steps it does jiggle but does not provide the "x" as many of the other icons do.

You cannot remove apps that way unless they were downloaded from the Mac App Store. Flashmall wasn't, so you cannot remove it from within Launchpad.

In the Finder, choose Applications from the Go menu. This will open your Applications folder in a Finder window. Do you see a Flashmall app there? If so, drag it from there to the trash. You may be asked to provide your admin password.

If you don't see a Flashmall app there, let us know.

That may mean that there's still a Flashmall app on your hard drive somewhere. What did you do to remove the rest of the Flashmall adware components from your computer?

Download a copy of EasyFind from here:

http://www.devontechnologies.com/products/freeware.html

Search your entire hard drive for anything named "Flashmall". Let us know what is found, and where.

ok that worked. I did "command F" typed in flashmall and there it was. I dragged into trash. Went back to launchpad held the app until it jiggled and "?" appeared in the middle of the app and then i was able to drag it into trash and empty it.

Thanks everyone for your help on this.

knclp

The reason thomas_r asked you in his instruction to *Search* (Find) some other instance of "Flashmall" AND tell us WHERE you found anything is that he is our go to guy for AdWare/MalWare & general Apple Security.

He has a website - The Safe Mac - with the oft cited page - The Safe Mac » Adware Removal Guide - and the very cool & easy tool - AdwareMedic.

If the BUCA critter has developed a NEW characteristic = putting stuff where it has not before = Thomas wants & needs to know and so as to act accordingly in his removal tools.

WHERE did you find the instance of FLASHMALL that you dragged to the Trash using the Finder's 'Find' function (SpotLight) ? ? ?

yes I went to Finder then click on "File" and in the File dropdown menu i clicked "Find" and it opened up a window. Within that window in the upper right conner search space I typed in Flashmall and the icon appeared in the window.

From there I dragged it into the trash. Once i did that i was able to go to launchpad click on the flashmall icon until it jiggled and a large "?" appeared in the middle of the icon and then i was able to drag into the trash and empty.

hi, i just removed flashmall form my mac but was wondering if you ever figured out how to remove the icon from launchpad? id like to remove it also.

thank you

Click and hold until it shakes, then click the X at the top left.

thanks for your reply. Unfortunatly that does not work. Nor does dragging to my trash bin. But thank you.

yes i am the administrator, unfortunatly with this flashmall icon when you do those steps it does jiggle but does not provide the "x" as many of the other icons do.

thanks for the reply.