Want to highlight a helpful answer? Upvote!

Did someone help you, or did an answer or User Tip resolve your issue? Upvote by selecting the upvote arrow. Your feedback helps others! Learn more about when to upvote >

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

How do I remove a virus?

I used this website that a friend of mine suggested to download music and then after using it, all these pop-ups have been showing up when I open my safari. Mac keeper and ads like that.

MacBook Air, Mac OS X (10.2.x)

Posted on Aug 26, 2015 1:01 AM

Reply
8 replies

Aug 26, 2015 1:02 AM in response to Jsum22

There is no viruses for mac.

I assume you have adware. Follow the instructions on this web page in order to manually remove adware from your mac: https://support.apple.com/en-us/HT203987

You may also find adware removal guide on this page http://www.thesafemac.com/arg-identification/

If you do not want to remove adware manually use this anti malware tool in order to scan and remove it: https://www.malwarebytes.org/antimalware/mac/?utm_source=blog&utm_medium=social

Aug 26, 2015 5:16 AM in response to Jsum22

You may have installed ad-injection malware ("adware").

Don't use any kind of "anti-virus" or "anti-malware" product on a Mac. There is never a need for it, and relying on it for protection makes you more vulnerable to attack, not less.

Some of the most common types of adware can be removed by following Apple's instructions. If those instructions don't work for you, or if you have trouble following them, see below.

This easy procedure will detect any kind of adware that I know of. Deactivating it is a separate, and even easier, procedure that doesn't involve downloading anything.

Some legitimate software is ad-supported and may display ads in its own windows or in a web browser while it's running. That's not malware and it may not show up. Also, some websites carry intrusive popup ads that may be mistaken for adware.

If none of your web browsers is working well enough to carry out these instructions, restart the computer in safe mode. That will disable the malware temporarily.

Step 1

Please triple-click the line below on this page to select it, then copy the text to the Clipboard by pressing the key combination command-C:

~/Library/LaunchAgents

In the Finder, select

Go Go to Folder...

from the menu bar and paste into the box that opens by pressing command-V. Press return. Either a folder named "LaunchAgents" will open, or you'll get a notice that the folder can't be found. If the folder isn't found, go to the next step.

If the folder does open, press the key combination command-2 to select list view, if it's not already selected. Please don't skip this step.

There should be a column in the Finder window headed Date Modified. Click that heading twice to sort the contents by date with the newest at the top. If necessary, enlarge the window so that all of the contents are showing.

Follow the instructions in this support article under the heading "Take a screenshot of a window." An image file with a name beginning in "Screen Shot" should be saved to the Desktop. Open the screenshot and make sure it's readable. If not, capture a smaller part of the screen showing only what needs to be shown.

Start a reply to this message. Drag the image file into the editing window to upload it. You can also include text in the reply.

Leave the folder open for now.

Step 2

Do as in Step 1 with this line:

/Library/LaunchAgents

The folder that may open will have the same name, but is not the same, as the one in Step 1. As in that step, the folder may not exist.

Step 3

Repeat with this line:

/Library/LaunchDaemons

This time the folder will be named "LaunchDaemons."

Step 4

Open the Safari preferences window and select the Extensions tab. If any extensions are listed, post a screenshot. If there are no extensions, or if you can't launch Safari, skip this step.

Step 5

If you use the Firefox or Chrome browser, open its extension list and do as in Step 4.

Aug 26, 2015 5:27 AM in response to Jsum22

Whenever an anonymous stranger asks you to execute commands in Terminal be very wary, Terminal is an effective attack vector, used with malice or insufficient knowledge it can be used to cripple your Mac. Ensure that that the person who posts it leaves a method of contact for you to use in the event that something goes wrong. Always check that the posters email address is supplied, and always backup your Mac before executing the code that is posted.

Aug 26, 2015 6:44 AM in response to Linc Davis

Linc Davis wrote:

Don't use any kind of "anti-virus" or "anti-malware" product on a Mac. There is never a need for it, and relying on it for protection makes you more vulnerable to attack, not less.

Be advised that Malwarebytes Anti-Malware for Mac is not an anti-virus or anti-malware application. By making this statement, you may be confusing the OP and others as well. Don't you agree?


Ciao.

Aug 26, 2015 12:59 PM in response to Linc Davis

Linc Davis wrote: Don't use any kind of "anti-virus" or "anti-malware" product on a Mac. There is never a need for it, and relying on it for protection makes you more vulnerable to attack, not less.

Since this piece of advice is appearing in the context of the suggestion to use Malwarebytes for Mac (Adware Medic), it is incumbent on you to demonstrate, with serious evidence, aka, "facts," how using that program specifically can leave you more vulnerable to attack, not less. I am certain that doing so will prove to be constructive and helpful to the OP, or anyone else happening upon this thread, who must now feel put off using said program because of what you have written.


And since you are making this claim, I must also ask if you have ever tested this program on your own system? You do know that the ToU for this site require such.


5. Test your answer. When possible, make sure your Submission works on your own computer before you post it.

How do I remove a virus?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.