Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

How do I remove Mac Adware Cleaner?I

I think I accidentally downloaded adware. I was getting popups asking me to install Mac Adware Cleaner and some other software. I loaded OS X El Capitan Version 10.11.5 and but still get a popup in the upper right corner warning me that I have a virus and need to download the cleaner. I read advice in someone else's post and took screenshots of launch files in finder, but don't know where to go from here. Can someone tell me how to get rid of this pesky adware? Thanks.


User uploaded fileUser uploaded file

MacBook Pro, OS X El Capitan (10.11.5)

Posted on Jun 3, 2016 12:45 PM

Reply
6 replies

Jun 3, 2016 12:54 PM in response to conniefromoakland

conniefromoakland wrote:


I think I accidentally downloaded adware. I was getting popups asking me to install Mac Adware Cleaner and some other software. I loaded OS X El Capitan Version 10.11.5 and but still get a popup in the upper right corner warning me that I have a virus and need to download the cleaner. I read advice in someone else's post and took screenshots of launch files in finder, but don't know where to go from here. Can someone tell me how to get rid of this pesky adware? Thanks.


User uploaded fileUser uploaded file


You don't have any adware/malware, not based on those screenshots. It sounds like you're describing a browser hijacker. To get rid of it, Force Quit Safari ( --> Force Quit --> Safari), then restart Safari in Safe Mode by holding down the Shift key. This prevents previously opened tabs/windows from reopening. If that still doesn't work, disconnect from the Internet, then go up to Safari --> Clear History. This will remove your entire browsing history. Reconnect to the Internet, then quit Safari normally and start it normally. Do you still get this pop-up?


In the future, to prevent browser hijackers from taking over Safari (or Chrome/Firefox/Opera/etc.), avoid the following kinds of sites:


  • XXX sites
  • torrent sites
  • aggregate download sites (CNET, Download (dot) com, MacUpdate, Softpedia, Softonic, etc.)
  • mp3 download sites (Mp3 Skull, mp3monkey, etc.)
  • any site that says you can do or download something for free that you know would otherwise cost money

Jun 3, 2016 9:06 PM in response to conniefromoakland

Don't use any kind of "anti-virus" or "anti-malware" product on a Mac. There is never a need for it, and relying on it for protection makes you more vulnerable to attack, not less.

You installed the "Search Genius" malware. Please take the steps below to disable it.

Malware is always changing to get around the defenses against it. This procedure works as of now, as far as I know. It may not work in the future. Anyone finding this comment a few days or more after it was posted should look for a more recent discussion, or start a new one.

Back up all data before continuing.

1. Triple-click the line below on this page to select it, then copy the text to the Clipboard by pressing the key combination command-C:

~/Library/LaunchAgents

In the Finder, select

Go Go to Folder...

from the menu bar and paste into the box that opens by pressing command-V. You may not see what you pasted because a line break is included. Press return. A folder named "LaunchAgents" will open.

2. Inside the folder you just opened, there may be one or more files with a name that begins as follows:

com.mediahm

Move any such files to the Trash. There may not be anything else in the LaunchAgents folder; in that case, you can delete the folder, but otherwise don't delete it. Other files in the folder are not necessarily malicious (though they could be, if you also installed some other kind of malware.)

Log out or restart the computer.

3. From the Safari menu bar, select

Safari Preferences... Extensions

Uninstall all extensions you don't know you need. If in doubt, remove all of them. None is required for normal operation. Do the equivalent in the Chrome and Firefox browsers, if you use either of those.

4. Reset the home page in each of your browsers, if it was changed. In Safari, first load the home page you want, then select

Safari Preferences... General

and click

Set to Current Page

5. This step is optional. Open this folder as in Step 1:

~/Library/Application Support

and move to the Trash the subfolder with the name

mediahm

if present.

Don't move the Application Support folder or anything else inside it.

6. "Search Genius" is distributed in the form of a fake updater for "Adobe Flash Player." You may have been prompted by a popup on a website to update Flash. Never follow a prompt on any website to install any software, no matter what you think it is. Software should be downloaded only because you—not someone else—decided that you need it, and then only from the developer's website or from the Mac App Store. Some software, including Flash Player, has a buit-in updater that is safe enough to use, provided that the existing installation came from a reliable source.

Oct 14, 2016 8:21 AM in response to conniefromoakland

I had this problem and was not able to remove the Mac Adware Cleaner icon from the launch pad, that is until I found the application hidden under applications in the -MacOSX folder. I never looked at this because I felt it was my operating system and know better than to mess with that. After all searches for the cleaner program failed, I clicked on the OSX folder and there it was sitting there. Searches for the program in library always failed. Once I deleted the program then removed the folder, I re started my Mac and went to launch pad. The icon was there but it was morphed into a default icon which I dragged to trash and it was gone. All my other efforts to remove this program seemed to work except when launched Chrome browser it sometimes launched a fake browser redirecting me to Yahoo. This told me that the cleaner program was still lurking about. It looks like it is gone now. Good luck with your efforts to remove this program.

Nov 26, 2016 9:14 AM in response to shipsofglass

Hi, shipofglass, and thanks for posting this. I expected to come back and let you know how thrilled I was to finally get rid of this &$#!*#ing adware -- I found it right where you said after a friend who's a programmer had thought he'd got rid of every trace -- but alas, I guess since you posted this they have figured out another way to hide it because after I rebooted it came right back. I simply despair...almost willing to pay the $8 blackmail money, but like any blackmailer they would probably come back for more.


I went to the trouble to find out from my phone service provider how to hide my number when I finally called them and gave them a piece of my mind...but a minute after I hung up I got a call from the same area code, so I guess that didn't work either. I hate these people with a passion and I wish them ill.


If anybody adds more info, I'll be notified, but they may have defeated us. I've had Macs since 1986; I can't imagine what it must have been like to have a PC all this time.


"Thanks for listening"!


Suzie E in NYC

How do I remove Mac Adware Cleaner?I

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.