jkendrick
Level 1 (28 points)
Mac OS X

Q: MacKeeper install nightmare

After stupidly installing MacKeeper, I now have a Guest User account that never existed before since first getting this MBP.

MacKeeper has been eliminated, along with most of the BS it created. Using Malwarebytes I also deleted

/private/etc/st-up.sh

/etc/change_net_settings.sh

/etc/st-up.sh

 

leaving only 4 items I cannot delete all in MacHD/private/var:

cellulate                 in MacHD/private/var

com.apple.launchd.peruser.401            in MacHD/private/var/db/launchd.db

com.apple.launchd.peruser.401            in MacHD/private/var/log

pishaugupd.root                                    in MacHD/private/var/tmp

 

 

Any idea what cellulate is? or pishaugupd.root? Any idea how to get rid of these?

 

Plus, no matter what, I cannot eliminate this Guest User account. The minus button doesn't help. I have disabled the account.

 

I've never used iCloud or Find My Mac.

I did sign in to iCloud just to make sure Find My Mac was unticked, but this was AFTER the Guest User account appeared.

 

There is also now an "Other" on the login screen, in addition to the two users I have had since first setting up this MBP. I have not a clue what name or password this account has, tried a few guesses, got nowhere. I'd like to eliminate this from the login screen.

 

Any help will be greatly appreciated, and please spell out any suggestions in elaborate detail. Thanks

 

MacBook Pro retina, mid 2012

Mt Lion  10.8.5

Intel Core i7, 2.3 GHz

16GB RAM

MacBook Pro (Retina, Mid 2012), OS X Mountain Lion (10.8.5), 16GB RAM

Posted on May 10, 2016 11:28 PM

by thomas_r.,Solvedanswer
thomas_r. thomas_r.
Level 7 (30,889 points)
Mac OS X
A:

First, go to the following folder in the Finder:


/etc/


In that folder, look for a file named pf_proxy.conf. It may or may not be there. If you do see it there, delete it.


Then, try this to delete that stubborn file:

 

sudo rm -f /private/var/tmp/pishaugupd.root

 

Beware, though! The "sudo rm" command is very dangerous, and will instantly delete any file you point it at. So be sure you enter the command exactly as shown above!


Also, that "ls -alO" command just lists everything in the given directory, including invisible files, along with some useful properties of those files.

Posted on May 16, 2016 1:07 PM

Close
jkendrick

Q: MacKeeper install nightmare

  • All replies
  • Helpful answers

first Previous Page 3 of 3

  • by thomas_r.,

    thomas_r. thomas_r. May 17, 2016 4:21 AM in response to jkendrick
    Level 7 (30,889 points)
    Mac OS X
    May 17, 2016 4:21 AM in response to jkendrick

    I'm glad I could help!

  • by JayK9684,

    JayK9684 JayK9684 May 26, 2016 3:55 AM in response to jkendrick
    Level 1 (4 points)
    May 26, 2016 3:55 AM in response to jkendrick

    I'm also having the same issue except I dont think I installed MacKeeper as I know it's a virus program. But I downloaded a different program and it put adware on my computer. Whenever I open up links it opens up tabs to Mackeeper and then i'm asked where on my mac do i want to download the program and I hit cancel. I get shopping ads for example called ShopHoppy. I have used Malwarebytes and it didnt find anything. I reinstalled OSX once and that didnt fix it. I cant find any vsearch or jack files within applications, library or systems folders. What should I do?

  • by thomas_r.,

    thomas_r. thomas_r. May 26, 2016 5:21 AM in response to JayK9684
    Level 7 (30,889 points)
    Mac OS X
    May 26, 2016 5:21 AM in response to JayK9684

    Any time Malwarebytes Anti-Malware for Mac doesn't detect something like this, choose Contact Support from the Help menu within Malwarebytes Anti-Malware for Mac. This will put you in contact with Malwarebytes support techs, who will help you with the problem for free.

  • by JayK9684,

    JayK9684 JayK9684 May 26, 2016 7:48 PM in response to thomas_r.
    Level 1 (4 points)
    May 26, 2016 7:48 PM in response to thomas_r.

    I ended up installing Sophos Anti Virus and ran it a couple times. It found and removed all traces of the adware including the Vsearch and Genieo. Thank you for replying back to me, really appreciate it!

first Previous Page 3 of 3