Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Remove Shoppy Tool pop ups on my mac?

Please can you advise how to remove Shoppy Tool pop ups on my mac? I am not confident enough to remove hidden files. I Have deleted zip cloud and mac keeper apps which appeared yesterday after updating flash player but have been left with these pesky pop ups

MacBook Air (13-inch, Early 2015), OS X El Capitan (10.11.3)

Posted on Feb 21, 2016 9:34 AM

Reply
Question marked as Best reply

Posted on Feb 21, 2016 9:38 AM

Clickhereand follow the instructions, or if there’s a type of adware not covered by them on the computer,these ones. If you'd rather not remove it manually, you can instead runMalwareBytes for Mac.

MalwareBytes is a removal tool and doesn't stop adware or other malware from getting onto the computer. For actual protection, avoid downloading software from sources other than the Mac App Store or the developer websites. If you see a prompt to update Flash, download it from get.adobe.com or helpx.adobe.com instead of from the popup.

(139788)

18 replies
Question marked as Best reply

Feb 21, 2016 9:38 AM in response to casafie

Clickhereand follow the instructions, or if there’s a type of adware not covered by them on the computer,these ones. If you'd rather not remove it manually, you can instead runMalwareBytes for Mac.

MalwareBytes is a removal tool and doesn't stop adware or other malware from getting onto the computer. For actual protection, avoid downloading software from sources other than the Mac App Store or the developer websites. If you see a prompt to update Flash, download it from get.adobe.com or helpx.adobe.com instead of from the popup.

(139788)

Feb 21, 2016 10:10 AM in response to casafie

You installed ad-injection malware ("adware").

Don't use any kind of "anti-virus" or "anti-malware" product on a Mac. There is never a need for it, and relying on it for protection makes you more vulnerable to attack, not less.

Back up all data first.

Some of the most common types of adware can be removed by following Apple's instructions. But before you follow those instructions, you can attempt an automatic removal.

If you're not already running the latest version of OS X ("El Capitan"), updating or upgrading in the App Store may cause the adware to be removed automatically. If you're already running the latest version of El Capitan, you can nevertheless download the current updater from the Apple Support Downloads page and run it. Again, some kinds of malware will be removed—not all. There is no such thing as automatic removal of all possible malware, either by OS X or by third-party software. That's why you can't rely on software to protect you.

If the malware is removed in your case, you'll still need to make changes to the way you use the computer to protect yourself from further attacks. Ask if you need guidance.

If the malware is not removed automatically, and you can't remove it yourself by following Apple's instructions, see below.

This easy procedure will detect any kind of adware that I know of. Deactivating it is a separate, and even easier, procedure.

Some legitimate software is ad-supported and may display ads in its own windows or in a web browser while it's running. That's not malware and it may not show up. Also, some websites carry intrusive popup ads that may be mistaken for adware.

If none of your web browsers is working well enough to carry out these instructions, restart the computer in safe mode. That will disable the malware temporarily.

Step 1

Please triple-click the line below on this page to select it, then copy the text to the Clipboard by pressing the key combination command-C:

~/Library/LaunchAgents

In the Finder, select

Go Go to Folder...

from the menu bar and paste into the box that opens by pressing command-V. Press return. Either a folder named "LaunchAgents" will open, or you'll get a notice that the folder can't be found. If the folder isn't found, go to the next step.

If the folder does open, press the key combination command-2 to select list view, if it's not already selected. Please don't skip this step.

There should be a column in the Finder window headed Date Modified. Click that heading twice to sort the contents by date with the newest at the top. If necessary, enlarge the window so that all of the contents are showing.

Follow the instructions in this support article under the heading "Take a screenshot of a window." An image file with a name beginning in "Screen Shot" should be saved to the Desktop. Open the screenshot and make sure it's readable. If not, capture a smaller part of the screen showing only what needs to be shown.

Start a reply to this message. Drag the image file into the editing window to upload it. You can also include text in the reply.

Leave the folder open for now.

Step 2

Do as in Step 1 with this line:

/Library/LaunchAgents

The folder that may open will have the same name, but is not the same, as the one in Step 1. As in that step, the folder may not exist.

Step 3

Repeat with this line:

/Library/LaunchDaemons

This time the folder will be named "LaunchDaemons."

Step 4

Open the Safari preferences window and select the Extensions tab. If any extensions are listed, post a screenshot. If there are no extensions, or if you can't launch Safari, skip this step.

Step 5

If you use the Firefox or Chrome browser, open its extension list and do as in Step 4.

Feb 21, 2016 12:22 PM in response to casafie

Hello casafie,

I wrote a little diagnostic program to help show what software is running in the background on your Mac. If it finds any adware, it will help you easily remove it. Download EtreCheck from http://www.etrecheck.com and run it. If it reports any adware, delete it. If it reports any "Unknown files", post your report here and we can help you determine which ones are legitimate. If there is any brand-new adware listed that EtreCheck couldn't detect as adware, we can help you delete it.


EtreCheck is perfectly safe to run, does not ask for your password to install, and is signed with my Apple Developer ID.



Disclaimer: Although EtreCheck is free, there are other links on my site that could give me some form of compensation, financial or otherwise.

Feb 21, 2016 2:21 PM in response to casafie

Hello again casafie,

You've been told that your adware problems are your own fault. That is a typical "blame the victim" reply that is completely discredited in most civilized circles. Adware is an epidemic on Macs right now and most Mac users have no idea how to handle it.


You should always make sure that any software you run is well-known and frequently recommended by other people. And make sure there are real people behind it who support it and can be contacted via e-mail. While that is good advice, it isn't going to keep you safe from adware installed by one of the top 100 most powerful corporations in the world. Instead, use trusted tools like those frequently recommended here on Apple Support Communities.

Feb 21, 2016 2:28 PM in response to casafie

Thank you for your advice, just noticed a Shoppy tool app has appeared in my app folder so I have deleted it and the pop ups have stopped. In light of the opposing views I am not confident to download any more software or assume all is clear so think I will head off to my local apple store for advice and to make sure no rogue files are left behind.

Feb 21, 2016 2:39 PM in response to casafie

I am not confident to download any more software

Until you have more experience as a Mac user, I suggest that you change a setting to allow only Apple updates and software from the App Store to be installed.

Open the Security & Privacy pane in System Preferences and select the General tab. Click the lock icon in the lower left corner and enter your password to unlock the settings. Select the button marked

Mac App Store

and close the preference pane. For information about the effects of the setting, see this support article. You may need to change the setting temporarily to install some third-party software, such as Adobe Flash Player. Be especially careful with that, as malware is often distributed in the form of a fake Flash update. Never follow a link to a Flash update on any web page. Instead, use the built-in updater in the Flash Player preference pane.

The products in the App Store, while they aren't always very good, can at least be considered safe enough to use.

Whatever you choose to do, make sure you never use any third-party software that purports to "clean up" your computer automatically. No such software is ever to be trusted, no matter where it comes from.

Feb 21, 2016 3:21 PM in response to casafie

Hello casafie,

I'm afraid a few clarifications are in order.


The default setting for the Security & Privacy pane is "Mac App Store and identified developers". That is a good balance between security and convenience. Switching that to "Mac App Store" would provide even more security because much of the adware in circulation does come from those "identified developers".


However, the Mac App Store is not completely safe either. Apple has been the target of some sophisticated malware campaigns that let to Apple's App Stores distributing a number of iOS apps that harvested and distributed personal information. The same rules apply there. Make sure that any software you run is well-known and frequently recommended by other people. And make sure there are real people behind it who support it and can be contacted via e-mail. There are a vast number of Mac App Store apps that do not qualify. Some of them are merely ads themselves for adware installers.


And I do not recommend frequently changing the GateKeeper setting in the Security & Privacy pane. I see far too many EtreCheck reports where people have disabled Gatekeeper entirely. Whatever setting you choose, keep it that way. Then, if you need to install a Developer ID app like EtreCheck, you can just right-click or command-click on the app. Then you can choose "Open" from the context menu to bypass GateKeeper for that app and only that app. Your default Gatekeeper setting will not be changed.


And in this day and age, I really cannot recommend Adobe's Flash Player. Flash is one of the most frequently exploited programs of all time. Most web sites are now iOS-friendly and do not require Flash. If you must use Flash, please download and install the ClickToFlash extension (http://hoyois.github.io/safariextensions/clicktoplugin/). This will automatically block any Flash content. You can then enable Flash only for the content and web sites where it is really necessary. I don't even recommend using the built-in updater as its pop-up window can be easily confused with fraudulent pop-ups. If you do happen to install Flash, every time you get the Flash update pop-up (and you will get it often), you should close the window and then manually go to System Preferences > Flash Player > Updates > Check Now.


The internet is quickly becoming a very unreliable source of information. By all means, discuss these topics with the staff of the Apple Store.

Feb 21, 2016 3:33 PM in response to casafie

The default setting for Gatekeeper provides zero protection from malware, for the simple reason that all OS X malware now in circulation is signed by a registered Apple developer. Therefore, Gatekeeper will not warn you about it. Don't get the idea that just because an application is signed by a developer, it is in any way trustworthy. Registered developers can be dishonest, incompetent, or criminal. I speak from personal experience.


App Store products, on the other hand, have passed at least superficial scrutiny by Apple. That's no guarantee, but in practice, it's very unusual for an App Store product to do anything overtly harmful. Of course, it may not do anything useful, either. Most App Store products, like most other software, are more or less junk.

Feb 21, 2016 4:21 PM in response to casafie

casafie wrote:


Thanks again for the advice, what a minefield!

Hello again casafie,

Well, it's not quite as bad as that. You've stumbled upon what is called a "sensitive topic" that ultimately has very little to do with adware or malware, but theoretical disputes between members of this forum.


Apple picked the default Gatekeeper settings for a reason - not because they provide absolute protection, but because Apple feels they are best for most Mac users. "Does there exist" malware signed by an identified Apple developer? I don't know. There is quite a bit of signed adware, but that's not quite the same thing. If any true malware were signed by an Apple developer, Apple would simply revoke that developer's certificate and the malware could no longer be installed. That is how Gatekeeper works. But adware is a more messy, grey area. Some people have started to refer to virtually any software they personally don't like as "malware".


I don't dispute anything that Linc says about the Mac App Store. But it is very unusual for any software product to do anything overtly harmful. In my experience, software that is not in the Mac App Store is generally more useful and higher quality. There are some great Mac App Store apps, but not very many. There are some great apps that aren't in the Mac App Store. There are even a few developers that refuse any kind of Apple control on philosophical grounds. Most such software is very useful and completely legitimate. Some of it even comes bundled in OS X. 🙂


It is messy, but not really a minefield. Stick with the defaults, ask people for advice, avoid crazy, and you can't go wrong.

Aug 28, 2016 12:28 PM in response to Rinnie88

Hello Rinnie88,

All that will do is give your e-mail address to the spammers and let them know that you are live person who reads the spam, making your e-mail address that much more valuable in the online e-mail address exchanges.


NEVER give out your e-mail address to marketers or spammers unless you want more spam, adware, adware, and malware.

Aug 28, 2016 2:39 PM in response to etresoft

Never asks for your email or anything. No signing in no information given. I believe that at most, it uses the IP addrless to block incoming signals. What I do know is that the site is to computers what the do not call list is for phones. I've used it before and never had an issue until I changed computer. Maybe you should do your research before making assumptions.

Remove Shoppy Tool pop ups on my mac?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.