How can I get rid of pop ups by flash mall?
I just recently started getting annoying pop ups by flash mall when I'm on safari. My macbook pro runs on Mac OS X version 10.7.5 I've tried everything! Please help!
MacBook Pro, Mac OS X (10.7.5)
I just recently started getting annoying pop ups by flash mall when I'm on safari. My macbook pro runs on Mac OS X version 10.7.5 I've tried everything! Please help!
MacBook Pro, Mac OS X (10.7.5)
Please review the options below to determine which method is best to remove the Adware installed on your computer.
The Easy, safe, effective method:
http://www.adwaremedic.com/index.php
If you are comfortable doing manual file removals use the somewhat more difficult method:
http://support.apple.com/en-us/HT203987
Also read the articles below to be more prepared for the next time there is an issue on your computer.
https://discussions.apple.com/docs/DOC-7471
There is no need to download anything to solve this problem. You installed the "Crossrider" trojan. Take the steps below to disable it.
Malware is always changing to get around the defenses against it. This procedure works as of now, as far as I know. It may not work in the future. Anyone finding this comment a few days or more after it was posted should look for a more recent discussion, or start a new one.
Back up all data before continuing.
1. Triple-click the line below on this page to select it, then copy the text to the Clipboard by pressing the key combination command-C:
~/Library/LaunchAgents
In the Finder, select
Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return. A folder named "LaunchAgents" will open.
2. Inside the folder you just opened, there may be files with any of the following names:
com.crossrider.wss*.agent.plist
com.webhelper.plist
com.webtools.uninstaller.plist
com.webtools.update.agent.plist
flashmall_updater.plist
flashmall_updater.sh
WebSocketServerApp
Here * stands for a variable six-digit number. Some of these files may be absent. Move any that you have to the Trash and close the Finder window. Log out or restart the computer. The trojan will now be inactive, but there are a few more components of it that should be cleaned up.
3. Do as in Step 1 with this line:
~/Library/Application Support
A folder named "Application Support" will open. Inside it there may be a subfolder with this name:
webHelperApp
If so, move that subfolder—not the "Application Support" folder—to the Trash.
4. Finally, open this folder in the same way as above:
~/Library
Look for a subfolder with this name:
WebTools
and move it to the Trash, if present. Finally, empty the Trash.
Thank you. When I selected Go then Go to Finder then Go again it says "This folder cannot be found"
Open the Library folder in your home folder by holding down the option key and selecting
Go ▹ Library
from the Finder menu bar. Navigate in the usual way to the folders indicated above.
Hi Linc,
thank you so very much for your advice. It worked like a charm. I was having a horrible time with invasive messages from FlashMall, and I still don't know how it got there. It's really a nasty bug too. It puts graphics up on the monitor that move up and down to literally block what you are trying to read. And then I had another that said if I was an Optimum customer, that I had to call an 800 number for tech help before continuing on to Google, and it would not allow me to close the window or even Force Quit! I've also discovered that there are scores of "helpers" out there looking to rid your computer of its viruses for a stuff fee. Good grief!! I am glad that I came across your response. I hope others are smart enough to follow your solution. Thank you, again. Peace, Mia Scotia.
How can I get rid of pop ups by flash mall?