Want to highlight a helpful answer? Upvote!

Did someone help you, or did an answer or User Tip resolve your issue? Upvote by selecting the upvote arrow. Your feedback helps others! Learn more about when to upvote >

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

On startup: do you want to continue the installation?

When I restart the computer I am asked if I want to complete the installation. I can choose abort or continue. I choose abort because I have no idea what is being installed. The message continues to appear on restart. How can I find out what is being installed? And why doesn't the installation abort?

iMac, OS X Yosemite (10.10.2), Core Intel i5

Posted on May 24, 2015 8:03 AM

Reply
10 replies

May 24, 2015 8:07 AM in response to ainsfield

Adware Genieo is installed without your knowledge. Removing it will help.


1. Use free AdwareMedic to remove adware


http://www.adwaremedic.com/index.php


Install , open, and run it by clicking “Scan for Adware” button to remove adware.

Once done, quit AdwareMedic.


or


Remove the adware manually by following the “HowTo” from Apple.

http://support.apple.com/en-us/HT203987



2. Safari > Preferences > Extensions

Turn those off and relaunch Safari.

Turn those on one by one and test.


3. Safari > Preferences > Search > Search Engine :

Select your preferred search engine.


4. Safari > Preferences > General > Homepage:

Set your Homepage.

May 24, 2015 8:56 AM in response to ainsfield

There is no need to download anything to solve this problem.

If Safari crashes on launch and you don't have another web browser, you should be able to launch Safari by starting up in safe mode.

You may have installed the "Genieo" or "InstallMac" ad-injection malware. Follow the instructions on this Apple Support page to remove it.

Back up all data before proceeding.

Malware is always changing to get around the defenses against it. In addition to the files listed in the support article, you may also have to remove the following in the same way:

~/Library/LaunchAgents/com.Installer.completer.download.plist
~/Library/LaunchAgents/com.Installer.completer.ltvbit.plist
~/Library/LaunchAgents/com.Installer.completer.update.plist
~/Library/LaunchAgents/com.spigot.SearchProtection.plist
~/Library/Application Support/IM.Installer/Completer.app

One of the steps in the article is to remove malicious Safari extensions. Do the equivalent in the Chrome and Firefox browsers, if you use either of those.

After removing the malware, remember to reset your home page in all the web browsers affected, if it was changed.

If you don't find any of the files or extensions listed, or if removing them doesn't stop the ad injection, then you may have one of the other kinds of adware covered by the support article. Follow the rest of the instructions in the article.

If you find Apple's instructions too hard to follow, ask for an alternative that doesn't require you to trust a black-box application without knowing what it does.

Make sure you don't repeat the mistake that led you to install the malware. Chances are you got it from an Internet cesspit such as "Softonic" or "CNET Download." Never visit either of those sites again. You might also have downloaded it from an ad in a page on some other site. The ad would probably have included a large green button labeled "Download" or "Download Now" in white letters. The button is designed to confuse people who intend to download something else on the same page. If you ever download a file that isn't obviously what you expected, delete it immediately.

In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.

Still in System Preferences, open the App Store or Software Update pane and check the box marked

Install system data files and security updates (OS X 10.10 or later)

or

Download updates automatically (OS X 10.9 or earlier)

if it's not already checked.

May 24, 2015 12:49 PM in response to ainsfield

It sounds like you have the Genieo (aka InstallMac) adware installed. You should be aware that there are a couple recent variants of Genieo that are not entirely removed by either Linc's instructions or Apple's instructions. I'd advise you to follow the directions in my Adware Removal Guide instead, which are far more complete.


(Fair disclosure: I may receive compensation from links to my sites, TheSafeMac.com and AdwareMedic.com.)

May 24, 2015 3:24 PM in response to Linc Davis

Thank you for the information. Before I followed it, I decided to update to Maverick 10.10.3. It was a lengthy update, but once completed I no longer had the message about aborting the installation. Hopefully it will not reappear. Now I a dealing with the learning curve on Photos, which apparently replaced iPhotos. I appreciate your input.

May 24, 2015 4:19 PM in response to Linc Davis

Linc Davis wrote:


What do you think is incomplete in Apple's instructions? Post the information here.


As I have mentioned to you on another topic, there are "GoldenBoy" and "Texiday" variants. They will install browser extensions by that name. The "Texiday" variant will also install several LaunchAgents using the "Texiday" name. Rather than duplicate work by putting full instructions as to what they're called and how to find them, I refer you back to my guide. There is no reason to avoid it just because it has a Donate button on it, there's no need for anyone to click that to access any of the information there.

On startup: do you want to continue the installation?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.