my Macbook is infected with adware?
Hi,
I have the same problem - my Macbook is infected with adware and I followed the instructions that you posted to Rebecca and downloaded EtreCheck and it issued a report. When I go to remove the infected files it tells me that I must remove them manually. Could you please show me how to do this? I am also wondering why it says that I have insufficient RAM as I just increased it by 8GB a couple of months ago. Thanks for your help!
EtreCheck version: 2.9.11 (264)
Report generated 2016-04-29 07:37:40
Download EtreCheck from https://etrecheck.com
Runtime 4:37
Performance: Good
Click the [Support] links for help with non-Apple products.
Click the [Details] links for more information about that line.
Click the [Remove] links to remove adware.
Problem: Other problem
Description:
my browser (Safari) opens with perfetnight.com. I want to get rid of it.
MacBook Pro (13-inch, Late 2011)
[Technical Specifications] - [User Guide] - [Warranty & Service]
MacBook Pro - model: MacBookPro8,1
1 2.4 GHz Intel Core i5 CPU: 2-core
8 GB RAM Upgradeable - [Instructions]
BANK 0/DIMM0
4 GB DDR3 1333 MHz ok
BANK 1/DIMM0
4 GB DDR3 1333 MHz ok
Bluetooth: Old - Handoff/Airdrop2 not supported
Wireless: en1: 802.11 a/b/g/n
Battery: Health = Normal - Cycle count = 599
Intel HD Graphics 3000
Color LCD 1280 x 800
OS X El Capitan 10.11.2 (15C50) - Time since boot: about 13 days
Hitachi HTS547550A9E384 disk0 : (500.11 GB) (Rotational)
EFI (disk0s1) <not mounted> : 210 MB
Macintosh HD (disk0s2) / : 499.25 GB (226.88 GB free)
Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB
MATSHITADVD-R UJ-8A8 ()
Apple Inc. FaceTime HD Camera (Built-in)
Apple Inc. Apple Internal Keyboard / Trackpad
Apple Inc. BRCM2070 Hub
Apple Inc. Bluetooth USB Host Controller
Apple Computer, Inc. IR Receiver
Apple Inc. thunderbolt_bus
Mac App Store and identified developers
/Library/LaunchAgents/com.EasyShopper.agent.plist
/Library/LaunchAgents/com.SoftwareUpdater.agent.plist
/Library/LaunchAgents/com.google.keystone.agent.plist
/Library/LaunchDaemons/com.google.keystone.daemon.plist
~/Library/LaunchAgents/Javeview.update.plist
~/Library/LaunchAgents/Perfetnight.AppVemoral.plist
~/Library/LaunchAgents/Perfetnight.btvlit.plist
~/Library/LaunchAgents/Perfetnight.dolnwoad.plist
~/Library/LaunchAgents/Perfetnight.uadpte.plist
~/Library/LaunchAgents/com.EasyShopper.agent.plist
~/Library/LaunchAgents/com.SoftwareUpdater.agent.plist
~/Library/LaunchAgents/com.google.keystone.agent.plist
~/Library/LaunchAgents/com.jdibackup.ZipCloud.autostart.plist
~/Library/LaunchAgents/com.jdibackup.ZipCloud.notify.plist
~/Library/Safari/Extensions/Perfetnight.safariextz
15 adware files found. [Remove]
/Library/Extensions
[not loaded] expressvpn.tap (20150118 - 2016-02-20) [Support]
[loaded] expressvpn.tun (20150118 - 2016-02-20) [Support]
/System/Library/Extensions
[not loaded] com.devguru.driver.SamsungComposite (1.4.25 - SDK 10.6 - 2016-01-12) [Support]
[not loaded] com.tomtom.driver.UsbEthernetGadget (1.0.0d1 - 2016-01-12) [Support]
/System/Library/Extensions/ssuddrv.kext/Contents/PlugIns
[not loaded] com.devguru.driver.SamsungACMControl (1.4.25 - SDK 10.6 - 2014-08-13) [Support]
[not loaded] com.devguru.driver.SamsungACMData (1.4.25 - SDK 10.6 - 2014-08-13) [Support]
[not loaded] com.devguru.driver.SamsungMTP (1.4.25 - SDK 10.5 - 2014-08-13) [Support]
[not loaded] com.devguru.driver.SamsungSerial (1.4.25 - SDK 10.6 - 2014-08-13) [Support]
[not loaded] 7 Apple tasks
[loaded] 152 Apple tasks
[running] 74 Apple tasks
[killed] 3 Apple tasks
3 processes killed due to insufficient RAM
[failed] com.apple.Kerberos.digest-service.plist
[not loaded] 45 Apple tasks
[loaded] 151 Apple tasks
[running] 86 Apple tasks
[killed] 5 Apple tasks
5 processes killed due to insufficient RAM
[failed] com.EasyShopper.agent.plist (2016-02-19) Adware! [Remove]
[loaded] com.SoftwareUpdater.agent.plist (2016-02-19) Adware! [Remove]
/Applications/SoftwareUpdater/SoftwareUpdater
[failed] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a...plist (2016-01-18) [Support]
[loaded] com.google.keystone.agent.plist (2016-02-03) [Support]
[running] com.trusteer.rapport.rapportd.plist (2016-03-19) [Support]
[loaded] com.adobe.ARMDC.Communicator.plist (2016-01-18) [Support]
[loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (2016-01-18) [Support]
[loaded] com.adobe.fpsaud.plist (2016-04-15) [Support]
[loaded] com.expressvpn.tap.plist (2016-02-20) [Support]
[loaded] com.expressvpn.tun.plist (2016-02-20) [Support]
[loaded] com.google.keystone.daemon.plist (2016-02-03) [Support]
[loaded] com.microsoft.office.licensing.helper.plist (2015-11-19) [Support]
[running] com.trusteer.rooks.rooksd.plist (2016-03-19) [Support]
[loaded] Javeview.update.plist (2016-04-23) Adware! [Remove]
~/Library/Application Support/Javeview/Javeview.app/Contents/MacOS/AppNOS
[loaded] Perfetnight.AppVemoral.plist (2016-04-28) Adware! [Remove]
~/Library/Application Support/Perfetnight/Perfetnight.app/Contents/MacOS/AppEH
[loaded] Perfetnight.btvlit.plist (2016-04-28) Adware! [Remove]
~/Library/Application Support/Perfetnight/Perfetnight.app/Contents/MacOS/AppEH
[loaded] Perfetnight.dolnwoad.plist (2016-04-28) Adware! [Remove]
~/Library/Application Support/Perfetnight/Perfetnight.app/Contents/MacOS/AppEH
[loaded] Perfetnight.uadpte.plist (2016-04-28) Adware! [Remove]
~/Library/Application Support/Perfetnight/Perfetnight.app/Contents/MacOS/AppEH
[failed] com.EasyShopper.agent.plist (2016-02-19) Adware! [Remove]
[loaded] com.SoftwareUpdater.agent.plist (2016-02-19) Adware! [Remove]
/Applications/SoftwareUpdater/SoftwareUpdater
[failed] com.adobe.ARM.[...].plist (2014-03-25) [Support]
[failed] com.google.keystone.agent.plist (2015-06-18) Adware! [Remove]
~/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Reso urces/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent
[failed] com.jdibackup.ZipCloud.autostart.plist (2016-02-20) Adware! [Remove]
[failed] com.jdibackup.ZipCloud.notify.plist (2016-02-20) Adware! [Remove]
Flux Application (/Applications/Flux.app)
iTunesHelper Application (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)
Dropbox Application (/Applications/Dropbox.app)
ExpressVPN Application (/Applications/ExpressVPN.app)
fuspredownloader Application Hidden (~/Library/Application Support/.FUS/fuspredownloader.app)
[running] 2BUA8C4S2C.com.agilebits.onepassword-osx-helper
[running] com.adobe.Reader.85792
[running] com.epson.scanner.ica.114272.7CE282F9-3940-4FC5-8C8F-72BAE1507CFD
[running] com.evernote.Evernote.62752
[running] com.expressvpn.ExpressVPN.107232
[running] com.getdropbox.dropbox.84832
[running] com.microsoft.Word.67872
[running] com.microsoft.autoupdate.fba.73312
[running] com.skype.skype.76512
[loaded] com.tidal.LaunchHelper
[running] org.herf.Flux.97632
[loaded] 396 Apple tasks
[running] 206 Apple tasks
[killed] 6 Apple tasks
FlashPlayer-10.6: 21.0.0.226 - SDK 10.6 (2016-04-22) [Support]
QuickTime Plugin: 7.7.3 (2015-12-03)
AdobePDFViewerNPAPI: 15.010.20060 - SDK 10.8 (2016-03-10) [Support]
AdobePDFViewer: 15.010.20060 - SDK 10.8 (2016-03-10) [Support]
Flash Player: 21.0.0.226 - SDK 10.6 (2016-04-22) [Support]
Default Browser: 601 - SDK 10.11 (2015-12-03)
o1dbrowserplugin: 5.41.3.0 - SDK 10.8 (2016-02-03) [Support]
SharePointBrowserPlugin: 14.5.9 - SDK 10.6 (2016-01-12) [Support]
googletalkbrowserplugin: 5.41.3.0 - SDK 10.8 (2015-12-11) [Support]
Silverlight: 5.1.41212.0 - SDK 10.6 (2016-02-20) [Support]
Google Earth Web Plug-in: 7.1 (2013-10-07) [Support]
1Password - AgileBits - https://agilebits.com/onepassword (2016-04-05)
Evernote Web Clipper - Evernote Corp. - http://evernote.com (2016-04-28)
Perfetnight - Perfetnight - http://www.perfetnight.com/faq#perfetnight (2016-02-19) Adware! [Remove]
Flash Player (2016-04-15) [Support]
Trusteer Endpoint Protection (2016-03-28) [Support]
Auto backup: YES
Volumes being backed up:
Macintosh HD: Disk size: 499.25 GB Disk used: 272.36 GB
Destinations:
Time Machine [Local]
Total size: 79.68 GB
Total number of backups: 0
Oldest backup: -
Last backup: -
Size of backup disk: Too small
Backup size 79.68 GB < (Disk used 272.36 GB X 3)
LaCie [Local]
Total size: 999.86 GB
Total number of backups: 17
Oldest backup: 2013-08-18, 5:16 PM
Last backup: 2016-01-12, 3:13 PM
Size of backup disk: Adequate
Backup size 999.86 GB > (Disk used 272.36 GB X 3)
10% WindowServer
5% launchservicesd
3% kernel_task
2% com.apple.WebKit.WebContent(2)
1% hidd
789 MB kernel_task
565 MB com.apple.WebKit.WebContent(2)
500 MB com.apple.audio.SandboxHelper(82)
254 MB Safari
238 MB mdworker(15)
708 MB Free RAM
7.31 GB Used RAM (2.05 GB Cached)
215 MB Swap Used
Apr 29, 2016, 06:43:04 AM ~/Library/Logs/DiagnosticReports/GoogleSoftwareUpdateAgent_2016-04-29-064304_[r edacted].crash
/Users/USER/Library/Google/*/GoogleSoftwareUpdate.bundle/Contents/Resources/Goo gleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent
Apr 28, 2016, 11:26:26 PM ~/Library/Logs/DiagnosticReports/GoogleSoftwareUpdateAgent_2016-04-28-232626_[r edacted].crash
Apr 28, 2016, 01:14:53 PM ~/Library/Logs/DiagnosticReports/GoogleSoftwareUpdateAgent_2016-04-28-131453_[r edacted].crash
Apr 28, 2016, 12:16:10 PM ~/Library/Logs/DiagnosticReports/GoogleSoftwareUpdateAgent_2016-04-28-121610_[r edacted].crash
Apr 28, 2016, 11:17:35 AM ~/Library/Logs/DiagnosticReports/GoogleSoftwareUpdateAgent_2016-04-28-111735_[r edacted].crash
Apr 28, 2016, 10:05:27 AM ~/Library/Logs/DiagnosticReports/GoogleSoftwareUpdateAgent_2016-04-28-100527_[r edacted].crash
Apr 28, 2016, 09:06:45 AM ~/Library/Logs/DiagnosticReports/GoogleSoftwareUpdateAgent_2016-04-28-090645_[r edacted].crash
Apr 28, 2016, 07:46:25 AM ~/Library/Logs/DiagnosticReports/GoogleSoftwareUpdateAgent_2016-04-28-074625_[r edacted].crash
Apr 27, 2016, 04:39:29 PM ~/Library/Logs/DiagnosticReports/GoogleSoftwareUpdateAgent_2016-04-27-163929_[r edacted].crash
Apr 27, 2016, 01:35:39 PM ~/Library/Logs/DiagnosticReports/GoogleSoftwareUpdateAgent_2016-04-27-133539_[r edacted].crash
Apr 26, 2016, 10:42:26 PM ~/Library/Logs/DiagnosticReports/GoogleSoftwareUpdateAgent_2016-04-26-224226_[r edacted].crash
Apr 26, 2016, 03:10:29 PM ~/Library/Logs/DiagnosticReports/GoogleSoftwareUpdateAgent_2016-04-26-151029_[r edacted].crash
Apr 26, 2016, 12:19:44 PM ~/Library/Logs/DiagnosticReports/GoogleSoftwareUpdateAgent_2016-04-26-121944_[r edacted].crash
Apr 26, 2016, 08:20:56 AM ~/Library/Logs/DiagnosticReports/GoogleSoftwareUpdateAgent_2016-04-26-082056_[r edacted].crash
<Re-Titled by Hosts>