Hemutian

Q: Unable to remove malware search.oliver.to

Apologies if I submitted this question to the wrong category. I couldn't figure out any other appropriate category to file it under.

 

I have malware on my MacBookAir (which is running El Capitan).

Every time I open Chrome, it goes to search.oliver.to as the default home page (see screenshot)

Screen Shot 2016-01-09 at 3.26.04 PM.png

Now, I've read other threads on this exact same topic, and followed their instructions, but they did not work for me.

 

In my Chrome preferences, search.oliver.to is not set as the homepage.

 

In my Library > Launch Agents folder, there are no files related to search.oliver.to

 

The only other suggestion I could find was to download Malwarebytes, but I'm hesitant to do so, because I've read conflicting advice saying to avoid all so-called anti-malware software.

 

What else can I do here?

MacBook Air, iOS 7.1

Posted on Jan 9, 2016 3:36 PM

Close

Q: Unable to remove malware search.oliver.to

  • All replies
  • Helpful answers

  • by Kappy,

    Kappy Kappy Jan 9, 2016 3:40 PM in response to Hemutian
    Level 10 (271,850 points)
    Desktops
    Jan 9, 2016 3:40 PM in response to Hemutian

    Remove Browser Pop-up Problems

     

         Malwarebytes | Free Anti-Malware Detection & Removal Software for

         Apple Macintosh Computers

         Adblock Plus 1.8.9, GlimmerBlocker, or AdBlock

         Remove adware that displays pop-up ads and graphics on your Mac

         How to remove the FlashMall adware from OS X

         Stop pop-up ads and adware in Safari - Apple Support

         DetectX 2.11


    Helpful Links Regarding Malware Problems

     

    If you are having an immediate problem with ads popping up see The Safe Mac » Adware Removal Guide, remove adware that displays pop-up ads and graphics on your Mac, and MalwareBytes for Mac. If you require anti-virus protection Thomas Reed recommends using ClamXAV. (Thank you to Thomas Reed for this recommendation.) You might consider adding this Safari extensions: Adblock Plus 1.8.9.

     

    Open Safari, select Preferences from the Safari menu. Click on Extensions icon in the toolbar. Disable all Extensions. If this stops your problem, then re-enable them one by one until the problem returns. Now remove that extension as it is causing the problem.

     

    The following comes from user stevejobsfan0123. I have made minor changes to adapt to this presentation.

     

    Fix Some Browser Pop-ups That Take Over Safari.

     

    Common pop-ups include a message saying the government has seized your computer and you must pay to have it released (often called "Moneypak"), or a phony message saying that your computer has been infected, and you need to call a tech support number (sometimes claiming to be Apple) to get it resolved. First, understand that these pop-ups are not caused by a virus and your computer has not been affected. This "hijack" is limited to your web browser. Also understand that these messages are scams, so do not pay any money, call the listed number, or provide any personal information. This article will outline the solution to dismiss the pop-up.

     

    Quit Safari

     

    Usually, these pop-ups will not go away by either clicking "OK" or "Cancel." Furthermore, several menus in the menu bar may become disabled and show in gray, including the option to quit Safari. You will likely have to force quit Safari. To do this, press Command + option + esc, select Safari, and press Force Quit.

     

    Relaunch Safari

     

    If you relaunch Safari, the page will reopen. To prevent this from happening, hold down the 'Shift' key while opening Safari. This will prevent windows from the last time Safari was running from reopening.

     

    This will not work in all cases. The shift key must be held at the right time, and in some cases, even if done correctly, the window reappears. In these circumstances, after force quitting Safari, turn off Wi-Fi or disconnect Ethernet, depending on how you connect to the Internet. Then relaunch Safari normally. It will try to reload the malicious webpage, but without a connection, it won't be able to. Navigate away from that page by entering a different URL, i.e. www.apple.com, and trying to load it. Now you can reconnect to the Internet, and the page you entered will appear rather than the malicious one.

     

    How to safely use MacUpdate to download malware-free software:

     

    This site has both free and paid membership accounts. If you have neither then some software will be distributed as an installer wrapper that includes adware/malware you may not want. Such a download may appear on your computer like this: Firefox Installer.dmg. Delete the download and return to the main site where you will find a direct link to the developer's website. Use that link from which to download the software.

     

    To avoid such downloads from MU just create a free membership account. Log into your account prior to using the site. This will avoid the installer wrappers and downloading adware or malware. I continue to use their site without any problems.

     

    If you prefer not to create a membership account then note that on the download page under the price box will be the link to the developer’s site. Use that link and download the software directly from the developer circumventing the use of MU altogether.

     

    You may be sent warnings from sone users that warns that the site is “dangerous.” This is an exaggeration. Learn the facts. You merely need to use the site intelligently. Support the site but do so wisely - establish a free or paid membership to avoid problems with malware. Don’t pay attention to other users who warn you away with hyperbole.

  • by OGELTHORPE,Helpful

    OGELTHORPE OGELTHORPE Jan 9, 2016 6:17 PM in response to Hemutian
    Level 9 (52,793 points)
    Mac OS X
    Jan 9, 2016 6:17 PM in response to Hemutian

    Hemutian wrote:

     

     

    The only other suggestion I could find was to download Malwarebytes, but I'm hesitant to do so, because I've read conflicting advice saying to avoid all so-called anti-malware software.

     

    Do not be hesitant about using Malwarebytes Anti-Malware for Mac.  There is only one person who tries to confuse the reader because it contains the word 'Malware' in the name and that person should be ignored.  That is part of the company name that distributes the software, hence the apparent confusion.  I have used it with success as have many other users.  It also has been often recommended by Apple telephone support personnel and Apple store genius bar technicians.  Can you ask for a better endorsement than that?  All it does is scan your Mac and produces a list of potential candidates that you then choose to remove or choose not to remove.  Total control is in your hands.

     

    Ciao.

  • by Hemutian,

    Hemutian Hemutian Jan 9, 2016 6:17 PM in response to OGELTHORPE
    Level 1 (4 points)
    Apple Watch
    Jan 9, 2016 6:17 PM in response to OGELTHORPE

    Thanks for the reassurance

  • by Linc Davis,Solvedanswer

    Linc Davis Linc Davis Jan 9, 2016 10:41 PM in response to Hemutian
    Level 10 (208,037 points)
    Applications
    Jan 9, 2016 10:41 PM in response to Hemutian

    A


    First, never use any kind of "anti-virus" or "anti-malware" software on a Mac. That's how you create problems, not how you solve them.


    B


    Please create a new Chrome user profile. Note that Chrome can sync your account settings between devices, so if you enable that feature, malicious profile data can spread from one to another in a virus-like way.


    C

    Links have been posted in this thread to the "macupdate" website. Do not follow the links, and never download anything from that site. It intentionally distributes OS X malware by packaging some free applications (such as "Firefox" and "Skype") in an unnecessary and malicious "installer."

    All software should be downloaded directly from the developer's website or from the App Store. Don't trust any site such as "macupdate" that aggregates links.

  • by Hemutian,

    Hemutian Hemutian Jan 9, 2016 10:41 PM in response to Kappy
    Level 1 (4 points)
    Apple Watch
    Jan 9, 2016 10:41 PM in response to Kappy

    Thank you

  • by M Stevens,

    M Stevens M Stevens Mar 30, 2016 7:05 PM in response to Linc Davis
    Level 1 (4 points)
    Mar 30, 2016 7:05 PM in response to Linc Davis

    what if the problem is in safari and firefox?