melissafromcranston
Level 1 (4 points)
Safari

Q: Malware on my mac

When I visit Pandora.com through Safari I get a message saying that Adobe Flash is out of date and download it "here." Like an idiot, I did, not thinking. It installed Advanced Mac Cleaner on my mac. I have been through the forums and I am pretty sure I have successfully removed the Advance Mac Cleaner. However I found another forum saying that there is a virus that is CAUSING that message to show up in the first place. It said that it is a virus that mimics other sites to get you to download Flash and this malware. I can't find and get rid of that one. I have cleared out Safari's history and favorites, I have reset my wireless router to factory settings. The forum said the virus could be in the router. I am able to get to Pandora.com through Google Chrome fine, just not Safari. I am concerned there is a second piece of malware that was already on my computer BEFORE I download Advance Mac Cleaner.

I am on an iMac, 3.4 GHZ Intel Core i7, running El Capitan 10.11.4

Any help would be greatly appreciated!

iMac with Retina 5K display, OS X El Capitan (10.11.4)

Posted on Jul 23, 2016 7:53 AM

by melissafromcranston,Solvedanswer
melissafromcranston melissafromcranston
Level 1 (4 points)
Safari
A:

Thanks Linc. you are correct. When I enabled it in the Security pane it worked. What had me worried was that the link on that page is the link that I used and downloaded the Malware on Friday. It is odd that Pandora has a corrupt link on their page that downloads Advanced Mac Cleaner at the same time. After that I didn't trust what I was seeing at all. Thanks every for your help. Lesson learned on hitting the download button too quick.

Posted on Jul 24, 2016 10:08 AM

Close
melissafromcranston

Q: Malware on my mac

  • All replies
  • Helpful answers

  • by macjack,Helpful

    macjack macjack Jul 24, 2016 7:19 AM in response to melissafromcranston
    Level 9 (55,682 points)
    Mac OS X
    Jul 24, 2016 7:19 AM in response to melissafromcranston

    Please download and run EtreCheck, created by one of own helpers here in ASC. It is a diagnostic tool that's very useful to us in finding problems. Also it will give us further specs on your Mac. After it runs post the log file here. It will contain no personal information.

  • by melissafromcranston,

    melissafromcranston melissafromcranston Jul 23, 2016 8:03 AM in response to macjack
    Level 1 (4 points)
    Safari
    Jul 23, 2016 8:03 AM in response to macjack

    EtreCheck version: 2.9.13 (267)

    Report generated 2016-07-23 11:02:57

    Download EtreCheck from https://etrecheck.com

    Runtime 1:47

    Performance: Excellent

     

    Click the [Support] links for help with non-Apple products.

    Click the [Details] links for more information about that line.

     

    Problem: Other problem

    Description:

    possible malware

     

    Hardware Information: ⓘ

        iMac (27-inch, Late 2012)

        [Technical Specifications] - [User Guide] - [Warranty & Service]

        iMac - model: iMac13,2

        1 3.4 GHz Intel Core i7 CPU: 4-core

        32 GB RAM Upgradeable - [Instructions]

            BANK 0/DIMM0

                8 GB DDR3 1600 MHz ok

            BANK 1/DIMM0

                8 GB DDR3 1600 MHz ok

            BANK 0/DIMM1

                8 GB DDR3 1600 MHz ok

            BANK 1/DIMM1

                8 GB DDR3 1600 MHz ok

        Bluetooth: Good - Handoff/Airdrop2 supported

        Wireless:  en1: 802.11 a/b/g/n

     

    Video Information: ⓘ

        NVIDIA GeForce GTX 680MX - VRAM: 2048 MB

            iMac 2560 x 1440

     

    System Software: ⓘ

        OS X El Capitan 10.11.4 (15E65) - Time since boot: about 15 hours

     

    Disk Information: ⓘ

        APPLE HDD ST1000DM003 disk1 : (1 TB) (Rotational)

            EFI (disk1s1) <not mounted> : 210 MB

            Recovery HD (disk1s3) <not mounted>  [Recovery]: 650 MB

            Macintosh HD (disk2) / : 1.11 TB (554.91 GB free)

                Core Storage: disk0s2 120.99 GB Online

                Core Storage: disk1s2 999.35 GB Online

     

        APPLE SSD SM128E disk0 : (121.33 GB) (Solid State - TRIM: Yes)

            EFI (disk0s1) <not mounted> : 210 MB

            Boot OS X (disk0s3) <not mounted> : 134 MB

            Macintosh HD (disk2) / : 1.11 TB (554.91 GB free)

                Core Storage: disk0s2 120.99 GB Online

                Core Storage: disk1s2 999.35 GB Online

     

    USB Information: ⓘ

        Seagate BUP Mac SL 4 TB

            EFI (disk3s1) <not mounted> : 210 MB

            Seagate Backup Plus Drive (disk3s2) /Volumes/Seagate Backup Plus Drive : 4.00 TB (3.06 TB free)

        Brother HL-2240 series

        Apple Inc. FaceTime HD Camera (Built-in)

        Apple Inc. BRCM20702 Hub

            Apple Inc. Bluetooth USB Host Controller

        Apple, Inc. Keyboard Hub

            Apple, Inc Apple Keyboard

     

    Thunderbolt Information: ⓘ

        Apple Inc. thunderbolt_bus

            Apple Inc. Thunderbolt to FireWire Adapter

     

    Gatekeeper: ⓘ

        Mac App Store and identified developers

     

    Kernel Extensions: ⓘ

            /Library/Extensions

        [loaded]    com.seagate.driver.PowSecDriverCore (5.2.7 (26997) - SDK 10.4 - 2016-04-23) [Support]

     

            /Library/Extensions/Seagate Storage Driver.kext/Contents/PlugIns

        [not loaded]    com.seagate.driver.PowSecLeafDriver_10_4 (5.2.7 (26997) - SDK 10.4 - 2016-03-31) [Support]

        [loaded]    com.seagate.driver.PowSecLeafDriver_10_5 (5.2.7 (26997) - SDK 10.5 - 2016-03-31) [Support]

        [not loaded]    com.seagate.driver.SeagateDriveIcons (5.2.7 (26997) - SDK 10.4 - 2016-03-31) [Support]

     

            /System/Library/Extensions

        [loaded]    com.logmein.driver.LogMeInSoundDriver (4.1.6795 - 2016-07-22) [Support]

     

    System Launch Agents: ⓘ

        [not loaded]    6 Apple tasks

        [loaded]    160 Apple tasks

        [running]    72 Apple tasks

     

    System Launch Daemons: ⓘ

        [failed]    com.apple.csrutil.report.plist

        [not loaded]    45 Apple tasks

        [loaded]    156 Apple tasks

        [running]    86 Apple tasks

     

    Launch Agents: ⓘ

        [not loaded]    com.adobe.AAM.Updater-1.0.plist (2016-06-23) [Support]

        [running]    com.adobe.AdobeCreativeCloud.plist (2016-06-23) [Support]

        [running]    com.extensis.FMCore.plist (2013-02-06) [Support]

        [running]    com.logmein.logmeingui.plist (2016-07-22) [Support]

        [running]    com.logmein.logmeinguiagent.plist (2016-07-22) [Support]

        [not loaded]    com.logmein.logmeinguiagentatlogin.plist (2016-07-22) [Support]

     

    Launch Daemons: ⓘ

        [loaded]    com.adobe.SwitchBoard.plist (2013-02-06) [Support]

        [running]    com.adobe.adobeupdatedaemon.plist (2016-06-23) [Support]

        [loaded]    com.adobe.agsservice.plist (2016-06-23) [Support]

        [failed]    com.adobe.fpsaud.plist (2016-04-15) [Support]

        [running]    com.logmein.logmeinserver.plist (2016-07-22) [Support]

        [loaded]    com.logmein.raupdate.plist (2016-05-18) [Support]

        [loaded]    com.microsoft.office.licensing.helper.plist (2010-10-12) [Support]

        [running]    com.seagate.TBDecorator.plist (2013-10-11) [Support]

     

    User Launch Agents: ⓘ

        [loaded]    com.adobe.AAM.Updater-1.0.plist (2013-02-08) [Support]

        [loaded]    com.adobe.ARM.[...].plist (2013-02-06) [Support]

        [loaded]    com.google.keystone.agent.plist (2016-07-12) [Support]

        [running]    com.pcv.hlpramcn.plist (2016-07-22) [Support]

     

    User Login Items: ⓘ

        iTunesHelper    Application  (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

        Dropbox    Application  (/Applications/Dropbox.app)

     

    Other Apps: ⓘ

        [running]    com.adobe.Acrobat.Pro.46112

        [running]    com.adobe.CCLibrary.164192

        [running]    com.adobe.CCXProcess.165792

        [running]    com.adobe.InDesign.53472.29C39AB5-F650-473F-AC37-56CC806E7031

        [running]    com.adobe.acc.AdobeDesktopService.165152.65AD1B7F-85B7-4277-ADD3-73F32D6F7F78

        [running]    com.adobe.accmac.77152

        [running]    com.extensis.SuitcaseFusion4.70432

        [running]    com.getdropbox.dropbox.100192

        [running]    com.google.Chrome.61472

        [running]    com.hp.devicemonitor

        [loaded]    407 Apple tasks

        [running]    193 Apple tasks

     

    Internet Plug-ins: ⓘ

        AdobeAAMDetect: 3.0.0.0 - SDK 10.9 (2016-06-23) [Support]

        FlashPlayer-10.6: 21.0.0.226 - SDK 10.6 (2016-04-21) [Support]

        QuickTime Plugin: 7.7.3 (2016-03-12)

        AdobePDFViewerNPAPI: 10.1.16 (2016-05-24) [Support]

        AdobePDFViewer: 10.1.16 (2016-05-24) [Support]

        Flash Player: 21.0.0.226 - SDK 10.6 (2016-04-21) Outdated! Update

        Default Browser: 601 - SDK 10.11 (2016-03-12)

        RL Secure Plug-In Layer: Unknown - SDK 10.5 (2014-02-21) [Support]

        SharePointBrowserPlugin: 14.3.6 - SDK 10.6 (2013-08-05) [Support]

        JavaAppletPlugin: 15.0.1 - SDK 10.7 (2016-04-12) Check version

     

    Safari Extensions: ⓘ

        Search Genius - Search Genius (2016-07-22)

     

    3rd Party Preference Panes: ⓘ

        Flash Player (2016-04-15) [Support]

        Seagate Dashboard for Mac OSX (2016-04-04) [Support]

     

    Time Machine: ⓘ

        Skip System Files: NO

        Auto backup: YES

        Volumes being backed up:

            Macintosh HD: Disk size: 1.11 TB Disk used: 556.91 GB

        Destinations:

            Seagate Backup Plus Drive [Local]

            Total size: 4.00 TB

            Total number of backups: 45

            Oldest backup: 4/24/16, 12:19 AM

            Last backup: 7/23/16, 10:27 AM

            Size of backup disk: Excellent

                Backup size 4.00 TB > (Disk size 1.11 TB X 3)

     

    Top Processes by CPU: ⓘ

             3%    WindowServer

             3%    kernel_task

             2%    thunderbird

             2%    fontd

             1%    Adobe InDesign CC 2014

     

    Top Processes by Memory: ⓘ

        1.63 GB    Google Chrome Helper(6)

        1.55 GB    kernel_task

        688 MB    thunderbird

        492 MB    Adobe InDesign CC 2014

        360 MB    mds_stores

     

    Virtual Memory Information: ⓘ

        23.00 GB    Free RAM

        9.04 GB    Used RAM (5.15 GB Cached)

        0 B    Swap Used

     

    Diagnostics Information: ⓘ

        Jul 23, 2016, 10:15:49 AM    ~/Library/Logs/DiagnosticReports/CEPHtmlEngine_2016-07-23-101549_[redacted].cra sh

            com.adobe.cep.CEPHtmlEngine - /Applications/Adobe InDesign CC 2014/Adobe InDesign CC 2014.app/Contents/MacOS/Resources/CEP/CEPHtmlEngine/CEPHtmlEngine.app/Contents/ MacOS/CEPHtmlEngine

        Jul 22, 2016, 07:30:31 PM    Self test - passed

        Jul 22, 2016, 07:10:05 PM    /Library/Logs/DiagnosticReports/installer_2016-07-22-191005_[redacted].crash

            /Library/Application Support/mediahm/mediahm.app/Contents/MacOS/installer

        Jul 22, 2016, 07:09:54 PM    /Library/Logs/DiagnosticReports/installer_2016-07-22-190954_[redacted].crash

        Jul 22, 2016, 06:29:13 PM    /Library/Logs/DiagnosticReports/installer_2016-07-22-182913_[redacted].crash

        Jul 22, 2016, 06:29:07 PM    /Library/Logs/DiagnosticReports/installer_2016-07-22-182907_[redacted].crash

        Jul 22, 2016, 06:09:43 PM    /Library/Logs/DiagnosticReports/installer_2016-07-22-180943_[redacted].crash

        Jul 22, 2016, 04:34:06 PM    /Library/Logs/DiagnosticReports/installer_2016-07-22-163406_[redacted].crash

        Jul 22, 2016, 04:02:41 PM    /Library/Logs/DiagnosticReports/installer_2016-07-22-160241_[redacted].crash

        Jul 22, 2016, 04:02:31 PM    /Library/Logs/DiagnosticReports/installer_2016-07-22-160231_[redacted].crash

        Jul 22, 2016, 03:21:21 PM    /Library/Logs/DiagnosticReports/installer_2016-07-22-152121_[redacted].crash

        Jul 22, 2016, 02:49:57 PM    /Library/Logs/DiagnosticReports/installer_2016-07-22-144957_[redacted].crash

        Jul 22, 2016, 02:18:24 PM    /Library/Logs/DiagnosticReports/installer_2016-07-22-141824_[redacted].crash

        Jul 22, 2016, 02:18:14 PM    /Library/Logs/DiagnosticReports/installer_2016-07-22-141814_[redacted].crash

        Jul 22, 2016, 02:18:04 PM    /Library/Logs/DiagnosticReports/installer_2016-07-22-141804_[redacted].crash

        Jul 22, 2016, 02:16:51 PM    /Library/Logs/DiagnosticReports/installer_2016-07-22-141651_[redacted].crash

        Jul 22, 2016, 02:16:41 PM    /Library/Logs/DiagnosticReports/installer_2016-07-22-141641_[redacted].crash

        Jul 22, 2016, 02:09:38 PM    /Library/Logs/DiagnosticReports/installer_2016-07-22-140938_[redacted].crash

        Jul 22, 2016, 02:09:28 PM    /Library/Logs/DiagnosticReports/installer_2016-07-22-140928_[redacted].crash

        Jul 22, 2016, 02:09:03 PM    /Library/Logs/DiagnosticReports/installer_2016-07-22-140903_[redacted].crash

        Jul 22, 2016, 02:08:53 PM    /Library/Logs/DiagnosticReports/installer_2016-07-22-140853_[redacted].crash

        Jul 22, 2016, 02:08:42 PM    /Library/Logs/DiagnosticReports/installer_2016-07-22-140842_[redacted].crash

  • by Eric Root,Helpful

    Eric Root Eric Root Jul 24, 2016 7:19 AM in response to melissafromcranston
    Level 9 (70,161 points)
    iTunes
    Jul 24, 2016 7:19 AM in response to melissafromcranston

    Probably just a false popup.

     

    Download this program which was written by Thomas Reed, a long time poster, to check for malware. The program will do the work for you which makes it easy.

     

    Malwarebytes Anti-Malware for Mac      10.8 and later

     

    What should I do if Malwarebytes Anti-Malware for Mac didn't solve my problem?


    Safari – Popup takes over


     

    Safari – Popup takes over (2)


     

    Popup remover – Scam Zapper


    Safari/Browsers - Eliminating browser redirects and advertisements

     

    Safari/Browsers - Eliminating browser redirects and advertisements (2)

     

  • by macjack,

    macjack macjack Jul 23, 2016 8:28 AM in response to melissafromcranston
    Level 9 (55,682 points)
    Mac OS X
    Jul 23, 2016 8:28 AM in response to melissafromcranston

    The only problem I see is in LaunchAgents pcv.hlpramcn. This is associated with Advanced MacCleaner, which is practically malware. I don't see the app itself so this may be just a leftover from a previous install of AMC. To delete it, in Finder from your "Go" menu choose "Go to folder" then type in ~/Library/LaunchAgents and trash that file.

     

    Other than that, no drivers are necessary for Seagate drive. But that could be involved to uninstall, so leave it for the time being.

    Also. CEPHtmlEngine can be problematic see this Adobe Support Topic:

    https://forums.adobe.com/thread/1961935

  • by Linc Davis,

    Linc Davis Linc Davis Jul 23, 2016 9:56 AM in response to melissafromcranston
    Level 10 (207,926 points)
    Applications
    Jul 23, 2016 9:56 AM in response to melissafromcranston

    A

    You installed a fake "utility" called "Advanced Mac Cleaner" and/or "AdwareCleaner." Like any software that purports to automatically "clean up" or "speed up" a Mac, it's a scam.

    To inactivate it, please take the steps below. This procedure may leave a few small files behind, but they have no effect, and trying to remove them all would be more trouble than it's worth.

    Some of the files listed may be absent in your case. Back up all data before proceeding.

    Malware is always changing to get around the defenses against it. This procedure works as of now, as far as I know. It may not work in the future. Anyone finding this comment a few days or more after it was posted should look for a more recent discussion, or start a new one.

    If you paid for the software with a credit card, consider reporting the charge to the bank as fraudulent.

    Triple-click anywhere in the line below on this page to select it:

    ~/Library/LaunchAgents

    Right-click or control-click the highlighted line and select

              Services ▹ Open

    from the contextual menu.* A folder named "LaunchAgents" may open. If it does, look inside it for files with a name that begins in either of these ways:

              com.pcv.

              com.adwarecleaner.

    Move any such files to the Trash.

    Log out or restart the computer and empty the Trash.

    *If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination  command-C. In the Finder, select

              Go ▹ Go to Folder...

    from the menu bar and paste into the box that opens by pressing command-V. You may not see what you pasted because a line break is included. Press return.

    The malware is now permanently inactivated, as long as you don't reinstall it.

    The problem started when you downloaded something, perhaps an application called "FileZilla" or "NicePlayer," when prompted to do so by a popup on a website. Never visit that site again. All legitimate software should be downloaded directly from the developer's website or from the Mac App Store, if applicable.

    "Advanced Mac Cleaner" may have been bundled with other malware that was installed at the same time. If you still have problems with web browsers after removing it, ask for instructions.

    B

    This is a general comment about Mac security. You become infected with malware by downloading and running an unknown application for an unknown reason, merely because you were prompted to by someone or something on a website. To avoid such attacks, never use any software unless you—not someone else—decided that you need it, and then only if you—not someone else—have done due diligence to determine whether it's safe.

    Only use software that does something for you—not for the computer. A word processor, a photo editor, and a game are examples of software that you might want to use because it does something for you. A "cleanup utility" and a "malware scanner" are examples of software that does nothing for you. You didn't buy a computer so you could clean it up or scan it for malware.

    You can reasonably assume that software that comes directly from the Mac App Store or from the website of a well-known, long-established developer is safe. Software from any other source must be researched carefully before you decide whether to trust it.

  • by melissafromcranston,

    melissafromcranston melissafromcranston Jul 24, 2016 8:01 AM in response to macjack
    Level 1 (4 points)
    Safari
    Jul 24, 2016 8:01 AM in response to macjack

    Thanks macjack, I removed that. The problem is still happening. I read all the stuff posted by Eric Root above, however I did not run Malware Bytes. This appears to be a browser redirect. I updated to the latest version of El Capitan and when I went to Pandora.com for a moment it was going to the correct site, then suddenly it changed to one that looks EXACTLY like Pandora.com but it has this bogus line at the top to download flash, which is actually the malware.

    I tried changing my DNS setting to 8.8.8.8 and clearing all my history and cache from safari, again, but it is still happening. I can just not use Safari. I rarely do anyways. I was just concerned that whatever is causing this redirect to this bogus site could also redirect me to a fake Amazon site, or a fake Paypal site and capture my password info.

  • by macjack,

    macjack macjack Jul 24, 2016 8:17 AM in response to melissafromcranston
    Level 9 (55,682 points)
    Mac OS X
    Jul 24, 2016 8:17 AM in response to melissafromcranston

    If it's a browser re-direct, then this ought to clear it up:

    Force Quit Safari ( command + option + esc keys). Then restart Safari holding the Shift key.

    If that doesn't help then download and run MalwareBytes. Malwarebytes was developed by one of our own colleagues here in ASC. It gets rave reviews and is about the most proven anti-malware software for Mac.

  • by melissafromcranston,

    melissafromcranston melissafromcranston Jul 24, 2016 9:09 AM in response to macjack
    Level 1 (4 points)
    Safari
    Jul 24, 2016 9:09 AM in response to macjack

    So that worked once. As soon as quit and logged back in without the holding the Shift key it went back to the way it was before. Now when I try again holding the Shift key it doesn't work. I downloaded Malware Bytes and ran it. It found a more of the malware that I originally downloaded and I got rid of it. It says I am clean now. I followed all the instructions for "if this doesn't solve your problem" including setting my DNS to 8.8.8.8. The only thing that is left is that my wireless router has been compromised. I tried resetting it to the factory settings but no luck. What doesn't make sense about that though is that there is another mac in my house that is fine and I am fine if I used Google Chrome. The issue seems to be on my computer and Safari only, which goes against what Malware Bytes says here:https://support.malwarebytes.com/customer/portal/articles/2049288-?b_id=9511

    Thanks for all your help.

  • by Esquared,

    Esquared Esquared Jul 24, 2016 9:19 AM in response to melissafromcranston
    Level 6 (8,410 points)
    Mac OS X
    Jul 24, 2016 9:19 AM in response to melissafromcranston

    Did you install any other software on July 22? There are various references to Logmein and 'Search Genius'. If you don't know what those are, and Malwarebytes didn't get rid of them already, remove them too.

  • by Linc Davis,

    Linc Davis Linc Davis Jul 24, 2016 9:22 AM in response to melissafromcranston
    Level 10 (207,926 points)
    Applications
    Jul 24, 2016 9:22 AM in response to melissafromcranston

    You may have installed ad-injection malware ("adware").

    Don't use any kind of "anti-virus" or "anti-malware" product on a Mac. There is never a need for it, and relying on it for protection makes you more vulnerable to attack, not less. You've already seen that it doesn't work.

    Back up all data first.

    If you're not already running the latest version of OS X, updating or upgrading in the App Store may cause the adware to be removed automatically. If you are already running the latest version, please log out or restart the computer. Again, some kinds of malware will be removed—not all. There is no such thing as automatic removal of all possible malware, either by OS X or by third-party software. That's why you can't rely on software to protect you.

    If the malware is removed in your case, you'll still need to make changes to the way you use the computer to protect yourself from further attacks. Ask if you need guidance.

    If the malware is not removed automatically, see below.

    This easy procedure will detect any kind of adware that I know of. Deactivating it is a separate, and even easier, procedure.

    Some legitimate software is ad-supported and may display ads in its own windows or in a web browser while it's running. That's not malware and it may not show up. Also, some websites carry intrusive popup ads that may be mistaken for adware.

    If none of your web browsers is working well enough to carry out these instructions, restart the computer in safe mode. The malware will be disabled temporarily.

    Step 1

    Please triple-click the line below on this page to select it, then copy the text to the Clipboard by pressing the key combination command-C: 

    ~/Library/LaunchAgents

    In the Finder, select

              Go ▹ Go to Folder...

    from the menu bar and paste into the box that opens by pressing command-V. Press return. Either a folder named "LaunchAgents" will open, or you'll get a notice that the folder can't be found. If the folder isn't found, go to the next step.

    If the folder does open, press the key combination command-2 to select list view, if it's not already selected. Please don't skip this step.

    There should be a column in the Finder window headed Date Modified. Click that heading twice to sort the contents by date with the newest at the top. If necessary, enlarge the window so that all of the contents are showing.

    Follow the instructions in this support article under the heading "Take a screenshot of a window." An image file with a name beginning in "Screen Shot" should be saved to the Desktop. Open the screenshot and make sure it's readable. If not, capture a smaller part of the screen showing only what needs to be shown.

    Start a reply to this message. Drag the image file into the editing window to upload it. You can also include text in the reply.

    Leave the folder open for now.

    Step 2

    Do as in Step 1 with this line:

    /Library/LaunchAgents

    The folder that may open will have the same name, but is not the same, as the one in Step 1. As in that step, the folder may not exist.

    Step 3

    Repeat with this line:

    /Library/LaunchDaemons

    This time the folder will be named "LaunchDaemons."

    Step 4

    Open the Safari preferences window and select the Extensions tab. If any extensions are listed, post a screenshot. If there are no extensions, or if you can't launch Safari, skip this step.

    Step 5

    If you use the Firefox or Chrome browser, open its extension list and do as in Step 4.

  • by macjack,

    macjack macjack Jul 24, 2016 9:24 AM in response to melissafromcranston
    Level 9 (55,682 points)
    Mac OS X
    Jul 24, 2016 9:24 AM in response to melissafromcranston

    Here is a Pandora support article which may help:

    https://help.pandora.com/customer/portal/articles/24257-safari-troubleshooting

  • by melissafromcranston,

    melissafromcranston melissafromcranston Jul 24, 2016 9:43 AM in response to Linc Davis
    Level 1 (4 points)
    Safari
    Jul 24, 2016 9:43 AM in response to Linc Davis

    Screen Shot 2016-07-24 at 12.37.38 PM.pngScreen Shot 2016-07-24 at 12.38.38 PM.pngScreen Shot 2016-07-24 at 12.39.08 PM.pngScreen Shot 2016-07-24 at 12.39.43 PM.png

    Just FYI - this is what it looks like when I got to Pandora in Safari:

    Screen Shot 2016-07-24 at 12.42.32 PM.png

    It is not that way on other computers in my house, it is not that way if I use Google Chrome. I also already downloaded Adobe Flash from the LEGIT website, just in case this was a real message. It is not.

  • by Linc Davis,

    Linc Davis Linc Davis Jul 24, 2016 9:57 AM in response to melissafromcranston
    Level 10 (207,926 points)
    Applications
    Jul 24, 2016 9:57 AM in response to melissafromcranston

    You don't have any adware, and that appears to be a legitimate web page. If you've installed Flash, you need to enable it in the Security pane of the Safari preferences window. Chrome has Flash built in and doesn't use the Adobe plugin.

  • by melissafromcranston,Solvedanswer

    melissafromcranston melissafromcranston Jul 24, 2016 10:08 AM in response to Linc Davis
    Level 1 (4 points)
    Safari
    Jul 24, 2016 10:08 AM in response to Linc Davis

    Thanks Linc. you are correct. When I enabled it in the Security pane it worked. What had me worried was that the link on that page is the link that I used and downloaded the Malware on Friday. It is odd that Pandora has a corrupt link on their page that downloads Advanced Mac Cleaner at the same time. After that I didn't trust what I was seeing at all. Thanks everybody for your help. Lesson learned on hitting the download button too quick.