Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

How can I get rid of pop ups by flash mall?

I just recently started getting annoying pop ups by flash mall when I'm on safari. My macbook pro runs on Mac OS X version 10.7.5 I've tried everything! Please help!

MacBook Pro, Mac OS X (10.7.5)

Posted on Mar 5, 2015 7:26 AM

Reply
5 replies

Mar 5, 2015 7:27 AM in response to k.spenc

Please review the options below to determine which method is best to remove the Adware installed on your computer.


The Easy, safe, effective method:

http://www.adwaremedic.com/index.php


If you are comfortable doing manual file removals use the somewhat more difficult method:

http://support.apple.com/en-us/HT203987


Also read the articles below to be more prepared for the next time there is an issue on your computer.

https://discussions.apple.com/docs/DOC-7471

https://discussions.apple.com/docs/DOC-8071

http://www.thesafemac.com/tech-support-scam-pop-ups/

Mar 5, 2015 8:05 AM in response to k.spenc

There is no need to download anything to solve this problem. You installed the "Crossrider" trojan. Take the steps below to disable it.

Malware is always changing to get around the defenses against it. This procedure works as of now, as far as I know. It may not work in the future. Anyone finding this comment a few days or more after it was posted should look for a more recent discussion, or start a new one.

Back up all data before continuing.

1. Triple-click the line below on this page to select it, then copy the text to the Clipboard by pressing the key combination command-C:

~/Library/LaunchAgents

In the Finder, select

Go Go to Folder...

from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return. A folder named "LaunchAgents" will open.

2. Inside the folder you just opened, there may be files with any of the following names:

com.crossrider.wss*.agent.plist

com.webhelper.plist

com.webtools.uninstaller.plist

com.webtools.update.agent.plist

flashmall_updater.plist

flashmall_updater.sh

WebSocketServerApp

Here * stands for a variable six-digit number. Some of these files may be absent. Move any that you have to the Trash and close the Finder window. Log out or restart the computer. The trojan will now be inactive, but there are a few more components of it that should be cleaned up.

3. Do as in Step 1 with this line:

~/Library/Application Support

A folder named "Application Support" will open. Inside it there may be a subfolder with this name:

webHelperApp

If so, move that subfolder—not the "Application Support" folder—to the Trash.

4. Finally, open this folder in the same way as above:

~/Library

Look for a subfolder with this name:

WebTools

and move it to the Trash, if present. Finally, empty the Trash.

Nov 6, 2015 9:57 PM in response to Linc Davis

Hi Linc,

thank you so very much for your advice. It worked like a charm. I was having a horrible time with invasive messages from FlashMall, and I still don't know how it got there. It's really a nasty bug too. It puts graphics up on the monitor that move up and down to literally block what you are trying to read. And then I had another that said if I was an Optimum customer, that I had to call an 800 number for tech help before continuing on to Google, and it would not allow me to close the window or even Force Quit! I've also discovered that there are scores of "helpers" out there looking to rid your computer of its viruses for a stuff fee. Good grief!! I am glad that I came across your response. I hope others are smart enough to follow your solution. Thank you, again. Peace, Mia Scotia.

How can I get rid of pop ups by flash mall?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.