Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Need help removing adware from Macbook pro with El Capitan

Restarting does not work. Searched and found an old thread where it told you to run a script and post the results to receive feedback on how to get rid of the adware. I know that shoppy tool and zip cloud and mac keeper were put on my computer but want to make sure to get all of it off.

Kind regards


Beaner



Boot Mode: Normal



Model: MacBookPro6,2



Battery cycles: 1089



System diagnostics



2016-07-16 Safari hang

2016-07-29 Kernel panic

2016-07-29 Kernel panic

2016-08-05 Kernel panic



User diagnostics



2016-07-23 Photos crash

2016-07-28 Photos crash



Kernel messages



Aug 1 07:09:17 AssertMacros: tmpData (value: 0x0), file: /BuildRoot/Library/Caches/com.apple.xbs/Sources/AppleCredentialManager/AppleCre dentialManager-83.40.3/AppleCredentialManager/AppleCredentialManager.cpp, line: 785

--- last message repeated 1 time ---

Aug 3 19:46:59 Previous shutdown cause: -62

Aug 3 20:56:02 wl0: Roamed or switched channel, reason #3, bssid 90:84:0d:db:0a:44

Aug 3 20:56:43 Process launchd [1] disabling system-wide I/O Throttling

Aug 3 20:56:43 Process launchd [1] disabling system-wide CPU Throttling

Aug 4 20:01:02 AssertMacros: tmpData (value: 0x0), file: /BuildRoot/Library/Caches/com.apple.xbs/Sources/AppleCredentialManager/AppleCre dentialManager-83.40.3/AppleCredentialManager/AppleCredentialManager.cpp, line: 785

Aug 4 20:01:13 wl0: Roamed or switched channel, reason #3, bssid 90:84:0d:db:0a:44

Aug 8 20:18:38 Process launchd [1] disabling system-wide I/O Throttling

Aug 8 20:18:38 Process launchd [1] disabling system-wide CPU Throttling

Aug 8 20:20:29 AssertMacros: tmpData (value: 0x0), file: /BuildRoot/Library/Caches/com.apple.xbs/Sources/AppleCredentialManager/AppleCre dentialManager-83.40.3/AppleCredentialManager/AppleCredentialManager.cpp, line: 785

--- last message repeated 1 time ---



Extrinsic daemons



com.sonos.SonosLibraryServer

com.google.keystone.daemon

com.adobe.fpsaud



Extrinsic agents



com.google.keystone.system.agent

com.ShoppyTool.agent

com.jdibackup.ZipCloud.autostart

com.Software-Updater.agent

com.spotify.webhelper

com.amazon.music

com.jdibackup.ZipCloud.notify

com.amazon.cloud-player



launchd items



/Library/LaunchAgents/com.google.keystone.agent.plist

(com.google.keystone.system.agent)

/Library/LaunchDaemons/com.adobe.fpsaud.plist

(com.adobe.fpsaud)

/Library/LaunchDaemons/com.google.keystone.daemon.plist

(com.google.keystone.daemon)

/Library/LaunchDaemons/com.sonos.SonosLibraryServer.plist

(com.sonos.SonosLibraryServer)

Library/LaunchAgents/com.amazon.cloud-player.plist

(com.amazon.cloud-player)

Library/LaunchAgents/com.amazon.music.plist

(com.amazon.music)

Library/LaunchAgents/com.jdibackup.ZipCloud.autostart.plist

(com.jdibackup.ZipCloud.autostart)

Library/LaunchAgents/com.jdibackup.ZipCloud.notify.plist

(com.jdibackup.ZipCloud.notify)

Library/LaunchAgents/com.ShoppyTool.agent.plist

(com.ShoppyTool.agent)

Library/LaunchAgents/com.Software-Updater.agent.plist

(com.Software-Updater.agent)

Library/LaunchAgents/com.spotify.webhelper.plist

(com.spotify.webhelper)



Startup items



/Library/StartupItems/Virex/Resources/English.lproj/Localizable.strings

/Library/StartupItems/Virex/Resources/French.lproj/Localizable.strings

/Library/StartupItems/Virex/Resources/German.lproj/Localizable.strings

/Library/StartupItems/Virex/Virex



Extrinsic loadable bundles



/System/Library/Extensions/BJUSBLoad.kext

(jp.co.canon.bj.print.BJUSBLoad)

/System/Library/Extensions/BJUSBMP.kext

(jp.co.canon.bj.kext.BJUSBMP)

/System/Library/Extensions/hp_designjet_series.kext

(com.hp.print.hpio.Designjet.kext)

/System/Library/Extensions/hp_Deskjet_io_enabler.kext

(com.hp.print.hpio.Deskjet.kext)

/System/Library/Extensions/hp_fax_io.kext

(com.hp.kext.hp-fax-io)

/System/Library/Extensions/hp_Inkjet1_io_enabler.kext

(com.hp.print.hpio.Inkjet1.kext)

/System/Library/Extensions/hp_Inkjet2_io_enabler.kext

(com.hp.print.hpio.Inkjet2.kext)

/System/Library/Extensions/hp_Inkjet3_io_enabler.kext

(com.hp.print.hpio.Inkjet3.kext)

/System/Library/Extensions/hp_Inkjet4_io_enabler.kext

(com.hp.print.hpio.Inkjet4.kext)

/System/Library/Extensions/hp_Inkjet5_io_enabler.kext

(com.hp.print.hpio.Inkjet5.kext)

/System/Library/Extensions/hp_Inkjet7_io_enabler.kext

(com.hp.print.hpio.inkjet7.kext)

/System/Library/Extensions/hp_Inkjet8_io_enabler.kext

(com.hp.print.hpio.inkjet8.kext)

/System/Library/Extensions/hp_Inkjet_io_enabler.kext

(com.hp.print.hpio.Inkjet.kext)

/System/Library/Extensions/hp_Laserjet_io_enabler.kext

(com.hp.print.hpio.Laserjet.kext)

/System/Library/Extensions/hp_Officejet_io_enabler.kext

(com.hp.print.hpio.Officejet.kext)

/System/Library/Extensions/hp_Photosmart_io_enabler.kext

(com.hp.print.hpio.Photosmart.kext)

/System/Library/Extensions/hp_PhotosmartPro_io_enabler.kext

(com.hp.print.hpio.PhotosmartPro.kext)

/System/Library/Extensions/hp_qc_io_enabler.kext

(com.hp.hpio.hp_psa530_630_io_enabler)

/System/Library/Extensions/LexmarkUSBMerge.kext

(com.lexmark.print.usbmerge)

/Library/Audio/Plug-Ins/HAL/DVCPROHDAudio.plugin

(com.apple.DVCPROHDAudio)

/Library/Internet Plug-Ins/AmazonMP3DownloaderPlugin101750.plugin

(com.AmazonMP3DownloaderPluginLib.Amazon MP3 Downloader Plugin)

/Library/Internet Plug-Ins/Disabled Plug-Ins/Windows Media Plugin

(com.microsoft.WMP.defaultplugin)

/Library/Internet Plug-Ins/DivXBrowserPlugin.plugin

(com.divx.DivXBrowserPlugin)

/Library/Internet Plug-Ins/DRM Plugin.bundle

(com.microsoft.DRMPlugin)

/Library/Internet Plug-Ins/Flash Player.plugin

(com.macromedia.Flash Player.plugin)

/Library/Internet Plug-Ins/Flip4Mac WMV Plugin.plugin

(net.telestream.wmv.plugin)

/Library/Internet Plug-Ins/Flip4Mac WMV Plugin.webplugin

(net.telestream.wmv.webplugin)

/Library/Internet Plug-Ins/googletalkbrowserplugin.plugin

(com.google.googletalkbrowserplugin)

/Library/Internet Plug-Ins/JavaAppletPlugin.plugin

(com.apple.java.JavaAppletPlugin)

/Library/Internet Plug-Ins/o1dbrowserplugin.plugin

(com.google.o1dbrowserplugin)

/Library/Internet Plug-Ins/OfficeLiveBrowserPlugin.plugin

(com.microsoft.officelive.browserplugin)

/Library/Internet Plug-Ins/Silverlight.plugin

(com.microsoft.SilverlightPlugin)

/Library/PreferencePanes/DivX.prefPane

(com.divx.divxprefs)

/Library/PreferencePanes/Flash Player.prefPane

(com.adobe.flashplayerpreferences)

/Library/PreferencePanes/Flip4Mac WMV.prefPane

(net.telestream.wmv.prefpane)

/Library/QuickTime/DesktopVideoOut.component

(com.apple.DesktopVideoOut)

/Library/QuickTime/DVCPROHDMuxer.component

(com.apple.DVCPROHDMuxer)

/Library/QuickTime/DVCPROHDVideoDigitizer.component

(com.apple.DVCPROHDVideoDigitizer)

/Library/QuickTime/DVCPROHDVideoOutput.component

(com.apple.DVCPROHDVideoOutput)

/Library/QuickTime/DVCPROHDVideoOutputClock.component

(com.apple.DVCPROHDVideoOutputClock)

/Library/QuickTime/DVCPROHDVideoOutputCodec.component

(com.apple.DVCPROHDVideoOutputCodec)

/Library/QuickTime/LiveType.component

(com.apple.LiveType.component)

/Library/QuickTime/TSCC.component

(com.techsmith.TSCCComponentBundle)

/Library/Spotlight/iMovie.mdimporter

(com.apple.iMovieMDImporter)

/Library/Spotlight/iWeb.mdimporter

(com.apple.MDImporter.iWeb)

/Library/Spotlight/Microsoft Entourage.mdimporter

(com.microsoft.entourageMDImporter)

Library/Address Book Plug-Ins/SkypeABDialer.bundle

(com.skype.skypeabdialer)

Library/Address Book Plug-Ins/SkypeABSMS.bundle

(com.skype.skypeabsms)



Extrinsic shared libraries



/usr/lib/libgutenprint.2.0.3.dylib



Safari extensions



LastPass

com



Restricted user files: 422



Elapsed time (s): 140

MacBook Pro (15-inch Mid 2009), OS X El Capitan (10.11.6)

Posted on Aug 8, 2016 7:29 PM

Reply
3 replies

Aug 8, 2016 11:04 PM in response to MrBean1440

Please run EtreCheck and post the report here.


http://etresoft.com/etrecheck


Download it, open Downloads folder, click on it to open and select ”Open”.

Select a problem from the “Choose a problem” popup menu box, and then “Start EtreCheck” in the dialog.

Click “Share Report” button in the toolbar, select “Copy to Clipboard”, and then paste it when you reply.

Aug 9, 2016 6:33 AM in response to MrBean1440

the majorty of volunteers here have use malwarebytes for mac to remove (not protect against) malware for Mac.

It is developed by a frequent contributor to these forums and in addition Apple consultants have used it as well.

While it is not the only way to remove adware and no single solution is fool proof it has a history on these forums as providing the tools needed to remove infections from Adware and Malware the software is aware of. This software is often erroneously lumped in with Anti-Virus but this is a misgiving, the software does not say resident and conflict with the OS like many Mac AV titles

https://www.malwarebytes.com/antimalware/mac/

Need help removing adware from Macbook pro with El Capitan

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.