Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

MacVx and MacKeeper Ads and pop-ups invaded my Mac

Hi everyone,


After upgrading the Yosemite yesterday (Monday, 13-April-2015), Ads from MacVx and MacKeeperUser uploaded file are invading my Google Chrome browser. I did not installUser uploaded file any other free program or whatever else!

When I open a normal webpage that I used to open; lot of Ads are occupying the page, a lot of active links appear (normal words are transformed to active links with a small green logo beside) and an orange bar appears on the top of the page (inviting to check MacVx). And when I click on a real active link, a MacKeeper page is always popping-up in a new tab !!


This is so annoying and it is preventing me to work properly and I am wasting my time because shutting down these pages is not that easy (Often it is opening new Ads pages!!!)



Please, I am seeking your help.

Thanks in advance.


Mustapha

MacBook Pro, OS X Yosemite (10.10.3)

Posted on Apr 14, 2015 12:51 AM

Reply
6 replies

Apr 14, 2015 8:39 AM in response to alkharfa

There is no need to download anything to solve this problem.

You may have installed one or more of the common types of ad-injection malware. Follow the instructions on this Apple Support page to remove it. It's been reported that some variants of the "VSearch" malware block access to the page. If that happens, start in safe mode by holding down the shift key at the startup chime, then try again.

Back up all data before making any changes.

One of the steps in the article is to remove malicious Safari extensions. Do the equivalent in the Chrome and Firefox browsers, if you use either of those. If Safari crashes on launch, skip that step and come back to it after you've done everything else.

If you don't find any of the files or extensions listed, or if removing them doesn't stop the ad injection, ask for further instructions.

Make sure you don't repeat the mistake that led you to install the malware. It may have come from an Internet cesspit such as "Softonic" or "CNET Download." Never visit either of those sites again. You might also have downloaded it from an ad in a page on some other site. The ad would probably have included a large green button labeled "Download" or "Download Now" in white letters. The button is designed to confuse people who intend to download something else on the same page. If you ever download a file that isn't obviously what you expected, delete it immediately.

Malware is also found on websites that traffic in pirated content such as video. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow. Never install any software that you downloaded from a bittorrent, or that was downloaded by someone else from an unknown source.

In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.

Still in System Preferences, open the App Store or Software Update pane and check the box marked

Install system data files and security updates (OS X 10.10 or later)

or

Download updates automatically (OS X 10.9 or earlier)

if it's not already checked.

Apr 14, 2015 8:43 AM in response to alkharfa

I would suggest that you DO download AdwareMedic. It is a very quick download and when opened will run very quickly. Suggesting that a download is more complicated or will take longer than following the multistep procedure advocated by Linc Davis should be viewed as an erroneous inference.


Unlike Linc Davis' narrowly focused suggestion, AdwareMedic is designed to identify numerous possible problem makers. Therefore it will not be only easier to use but the chances for a successful resolution are much improved. In addition, the complicated procedures advocated by Linc Davis, by comparison, invites the possibility of unnecessary errors and mistakes.


So keep it fast and simple, use AdwareMedic. If there is no success, then by all means try the cumbersome procedure posted by Linc Davis. But the chances are that you will not need to.


This post is not under copyright and can be used in part or whole without attribution.


Ciao.

Apr 14, 2015 9:53 AM in response to alkharfa

Besides following the instructions in the support article, see below.

You may have installed the "VidX" trojan, perhaps under a different name. To remove it, first open the Applications folder by selecting

Go ▹ Applications

from the Finder menu bar, or by pressing the key combination shift-command-A. Look for an item named "VidX," "MacVx," "MacFest," or similar. If present, drag it to the Trash and empty.

From the Safari menu bar, select

Safari Preferences... Extensions

Uninstall any extension you don't know you need. If in doubt, remove all of them. You may well have more than one that's adware or spyware.

Apr 15, 2015 11:17 PM in response to alkharfa

If you use Firefox and none of the other stuff mentioned by the other replies works for you, here's what I tried after all that:


1. Open a new window/tab in Firefox

2. Type "about:addons" into the URL bar

3. click the "Extensions" tab and remove anything that does not look familiar or that sounds dangerous; for me it was multiple Macfest extensions and I removed them all)

4. Open another window/tab in Firefox

5. Type "about:config" into the URL bar (it will warn you if you want to continue, click yes)

6. Type "MacVx" into the search bar that comes up and multiple items will appear (somewhere around 6 if I remember correctly), each of them having:

Status: User Set

Type: String

Value: (lists a ton of different sites, probably the sources of all the ads or where they lead to)

7. Right-click (control + click) each item and reset them to default

8. Restart Firefox and load one of the pages that the MacVx ads were always showing up on, if they're gone then you are in the clear


On a side note, I went back into about:config to check for the "MacVx" search items and they have not appeared for me nor do I remember their Preference Names. I have not run into any problems since I did this and be warned, messing with your configs can be tricky to fix. I don't know jack-squat about computers so this was nearly pure luck on my part that it worked for me.


Let me know what's wrong with what I did or if this works for you!


Good Luck!

MacVx and MacKeeper Ads and pop-ups invaded my Mac

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.