A
You installed a variant of the "Flashmall" trojan. To remove it, start by backing up all data.
Malware is always changing to get around the defenses against it. This procedure works as of now, as far as I know. It may not work in the future. Anyone finding this comment a few days or more after it was posted should look for a more recent discussion, or start a new one.
1. Please triple-click anywhere in the line below on this page to select it:
/Library/LaunchAgents
Right-click or control-click the highlighted line and select
Services ▹ Open
from the contextual menu.* A folder named "LaunchAgents" should open.
In the folder, there may be one or more files with a name that begins in either of the following ways:
com.EasyShopper
com.SoftwareUpdater
Move each such file to the Trash. You may be prompted for your administrator password.
2. Open this folder as in Step 1:
~/Library/LaunchAgents
Move to the Trash any files with one of the names listed in the last step.
3. Log out or restart the computer.
4. Open the Applications folder in the Finder. It may have subfolders with any of these names:
EasyShopper
mediaDownloader
SoftwareUpdater
Move each such subfolder to the Trash. Empty the Trash.
5. From the Safari menu bar, select
Safari ▹ Preferences... ▹ Extensions
Uninstall all extensions you don't know you need, including one called "SearchAssist," if it's present. If in doubt, remove all of them. None is required for normal operation.
If the search engine setting was changed, change it back in the Search tab.
Do the equivalent in the Chrome and Firefox browsers, if you use either of those.
*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select
Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You may not see what you pasted because a line break is included. Press return.
B
"CleanMyMac" is a scam and a common cause of instability and poor performance. Depending on what version you have, the developer's instructions may not completely remove it. Please follow those instructions, then do as below.
Back up all data before proceeding.
Triple-click anywhere in the line below on this page to select it:
/Library/LaunchDaemons/com.macpaw.CleanMyMac3.Agent.plist
Right-click or control-click the highlighted line and select
Services ▹ Reveal in Finder (or just Reveal)
from the contextual menu.* A folder may open with an item selected. If it does, move the selected item to the Trash. You may be prompted for your administrator login password.
Repeat with this line:
/Library/PrivilegedHelperTools/com.macpaw.CleanMyMac3.Agent
Restart the computer and empty the Trash.
You may also have to remove one or more of these items in the same way:
~/Library/LaunchAgents/com.macpaw.CleanMyMac.helperTool.plist
~/Library/LaunchAgents/com.macpaw.CleanMyMac.volumeWatcher.plist
~/Library/LaunchAgents/com.macpaw.CleanMyMac3.Scheduler.plist
Never again install "CleanMyMac" or anything like it.
*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select
Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You may not see what you pasted because a line break is included. Press return.