Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

How can I remove tradeadexchange malware?

I have had tradeadexchange malware creating new tabs randomly for a few weeks now. I have uninstalled Chrome and reinstalled it several times, using crunchify to remove all traces of it. I have run Malwarebytes, Admedic, F-secure and ClamXAV, none of which detected anything. I have looked at all my extensions and disabled them and re-enabled them one by one, to no avail. I really don't know very much about computers at all, and have followed more knowledgeable friends' advice as far as I can, but no one seems to be able to get rid of it. Please help me find out how to get rid of it. I have no idea what to do. Any replies will be most gratefully received. Please feel free to talk to me like an idiot, because I don't know what I'm doing! Thanks so much!

MacBook Air, OS X Yosemite (10.10.5)

Posted on Aug 26, 2015 3:22 PM

Reply
73 replies

Aug 27, 2015 8:44 AM in response to Csound1

True enough, I suppose. It's never found anything until, ironically, the Sophos link above!


What all you guys need to understand is how much you know compared to most people and how hard it is for us to have the faintest clue what is going on. We are vulnerable to a lot of rubbish that you don't give a moment's thought to, and whilst I think of myself as pretty canny in real life with actual people, I don't have any reason to suppose that Virginmedia are out to get me, or if they are, that there is anything I can do about it. I imagine all internet providers are the same, tbh. I don't visit dodgy websites - I'm a middle aged woman ffs - and I don't take risks with much in life, but if you can't download an extension from the Chrome store without bringing all this crap with it, then I feel I might as well just revert to the era of pen and paper.


Sorry for the rant...😊 Not aimed at anyone on here.

Aug 27, 2015 8:49 AM in response to WZZZ

As I said, I'm a moderator on a student website and I am pretty good at sussing people out on there, but this is stuff I don't know jack **** about. I'm still running the Sophos scan, so I'll see what that throws up. I've deleted most of the extensions, except the ones I really can't live without, and I've ditched F-Secure, so there's not much for it after that but to wait and see if the ad comes back. Could be ages, could be half an hour. Who can tell?


Thanks for taking the time and trouble to help me out, especially at what seems to be an unearthly hour in the morning from where I am.

Aug 27, 2015 8:52 AM in response to Carnationlilyrose

It is true that Virginmedia are representative of most (not all) providers, in the UK I use Sky, in the US it's Comcast, both 'bundle' unnecessary (and performance damaging) software, Comcast even go as far as recommending that you use it. The reason is the same in both cases, the providers profit from it. Sadly the user does not. Caveat Emptor rules as usual.


Chrome is a Google product (which I am sure you know already), it exists to facilitate Googles large scale data collection policies, data which they then resell to interested parties in order to profit from it.


In the case of most 'free' products you are the product.

Aug 27, 2015 8:55 AM in response to Csound1

There is undoubtedly no such thing as a free lunch, that is for certain. When I'm in philosophical and whimsical mood, I often think about what the internet shows about the human race. There was a world which could have existed purely for good, and yet within no time at all, people had artificially created viruses and the like just to screw it up.


Then I pull myself together and go shopping on eBay.

Aug 27, 2015 9:20 AM in response to Carnationlilyrose

Adblock Plus, Adblock Pro, Adblock Super, Adguard Adblocker, Calendar and Countdown, Clearly, Extension Defender, Hover Zoom, McAfee Secure safe browsing, Pin It button, Search by Image by Google, Settings button, Speed Dial 2, Stylish, Tampermonkey, TinEye, Wikiwand and TSR Add Ons,

I have not read everything in this thread, but this list is overdoing it by miles:

1. Use only one adblocker, and realise how these people are harassed by ad companies to whitelist their ads (and they are willingly pay for such), as far as I could research the most ethical is Adblock, get rid of the rest. You can also remove any adblocker by avoiding sites with an overdose of ads: obviously their earning model is selling ads instead of content.

2. McAfee is one of the worst AV softwares that is not only doing nothing on a mac, but counterproductive with the OSX built in safety methods and really compromising your system. the very worst - even in Windows - are McAfee and Symantec/Norton.

3. You can delete Search by image by Google, since Google stopped the image sites. Tampermonkey suspect, the rest I do not know.

Lex

Aug 27, 2015 9:21 AM in response to Carnationlilyrose

Carnationlilyrose wrote:


I have deleted Adblock Super via the trashcan. I just wondered if getting rid of it that way got rid of it entirely. Nothing else seems that easy!


For browser extensions, it actually is that easy, as long as that's all that was installed. If you downloaded Adblock Super from the Chrome store, which is the only place I've ever seen it, then deleting it using that trash can button in Chrome is sufficient to remove it entirely.


I don't use Safari - the only time I use it is to download Chrome when I uninstalled it. It doesn't happen when I use Safari on my ipad, however, nor on my husband's windows laptop, if that is relevant to the hijack question.


That's good information, and that suggests that the problem is definitely not related to any kind of network hack.


I appreciate that you don't generally use Safari, but it would help narrow down the cause of the problem if you could open Safari and just do some typical web browsing, until you see the problem occur in Safari, or you feel reasonably sure that it isn't happening in Safari. If it's not happening in Safari, that pretty definitively shows that one of your other Chrome extensions is causing the problem.


That's all assuming that the problem is still occurring after removing Adblock Super.

Aug 27, 2015 9:31 AM in response to Lexiepex

Ok, thanks. I got rid of a lot of them before you posted but I have thinned it down more. I'm afraid the Chrome Store is a bit like a sweet shop. However, in my naivety I tended to assume that things from the Chrome store had some form of official sanction. I realise that this was stupid of me, but in my defence I'd say 95% of people think this way. I can't manage without the TSR extension, which is for the forum I moderate, and it couldn't be downloaded originally without Tampermonkey. I don't know if removing Tampermonkey now would stop the other from working. I don't use it for anything else, so it could certainly go. I've kept Adblock Plus. I can't bear sites covered in ads. I got rid of McAfee.

Aug 27, 2015 9:34 AM in response to thomas_r.

I'm glad to hear the dustbin (sorry, I'm British - trashcan) is enough to get rid of them, and also that it is not the network. I'll keep on surfing on Chrome for a while to see if it comes back, then if it does, I'll try Safari.


I'm still running Sophos, and it has picked something up, so I will report back when the scan is finished.


Thank you for your time.

Aug 27, 2015 9:37 AM in response to Carnationlilyrose

Carnationlilyrose wrote:


Ok, thanks. I got rid of a lot of them before you posted but I have thinned it down more. I'm afraid the Chrome Store is a bit like a sweet shop. However, in my naivety I tended to assume that things from the Chrome store had some form of official sanction. I realise that this was stupid of me, but in my defence I'd say 95% of people think this way.

More like the Gingerbread house.

User uploaded file

How can I remove tradeadexchange malware?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.