MyShopMate Ads pop up everywhere

Please run EtreCheck and post the report here.

http://etresoft.com/etrecheck

MyShopMate is an adware, it displays pop-up ads and advertisements on web pages that you visit.

This is the step to remove it:

Step 1: Uninstall MyShopMate application: remove MyShopMate and Software-Updater files

step 2: remove plist files.

Detail you can refer to the following link:

securemacos.***/single-post/2016/08/07/Remove-MyShopMate-popup-ads-from-Apple-Ma c-OS-X

<Link Edited by Host>

Hello AmondSolun,

Please do NOT click on the post above that references the "securemacos" web site. That is website pushing scam-ware.

Hello SeptQ,

I checked your posting history and you don't appear to be a scammer. I almost used my "golden buzzer" on you though. You have to be very careful with adware removal links. Most of them, including the one you posted, are thinly disguised ads for scamware. It wouldn't surprise me if much of the adware in circulation today was written by the scam-ware developers themselves specifically to drive users to these sites and spend money.

The only active, Mac-specific, anti-adware/malware tools in circulation today are EtreCheck and MalwareBytes for Mac. There are some corporate AV tools but they seem to ignore adware. There were some high-level ASC members who were trying to fight the future with screenshots and terminal commands, but they are no longer active. We Mac users definitely need more people doing anti-adware and anti-malware research. But you have to be careful because they are very tricky.

I suggest looking at EtreCheck reports and the EtreCheck Git Hub site (https://github.com/etresoft/EtreCheck) more more information. MalwareBytes is a fine product too, but it is more of a black box. All you can do is recommend it, hope the OP runs it, and hope it worked.

Hi etresoft,

Thanks for the reminder, I will recommend other apps in the next time.

Does this mean we can't recommand other apps except etrecheck and malwaretype?

But I found there are still someone recommend other apps. For example:

https://discussions.apple.com/thread/7403445

lllaass recommand othere apps in this discussion. Does this because lllaass is level 10?

https://discussions.apple.com/thread/6532285?answerId=30540406022#30540406022

OGELTHORPE recommand sophos and clamxav.

SeptQ wrote:

Thanks for the reminder, I will recommend other apps in the next time.

Does this mean we can't recommand other apps except etrecheck and malwaretype?

Hello again SeptQ,

No, not at all. You can recommend whatever you want. Well, I guess within reason. There are a few well-known scam-ware apps. You can recommend those too but you'll get responses much like mine. If it happens a lot people will start to accuse you of working for those companies on their "street teams". Unfortunately, most of the random "how to remove ... virus" pages that you'll find on the internet are just thinly disguised ads for various scam-ware programs. Adware, malware, and "clean up" apps are a big, seedy underbelly of the internet.

If you find an anti-malware tool that works well, I'm sure people would like to know about it. Most of the "big name" tools are low-quality ports from Windows that just make your Mac run more slowly and crash more often. Judging by the many EtreCheck reports I've seen, they seem to be about 90% ineffective too. I can certainly vouch for my own app. MalwareBytes for Mac works well too. But there are many, many other ones. Most of them are fraudulent. I can see their launchd scripts from EtreCheck reports. There are a few new, legitimate ones, but I don't know how most people would ever be able to tell the difference.

Hi Etresoft,

much clear now, thanks for the information.

AmondSolun wrote:

Hi SeptQ,

Thanks for the solution. It works. Since the link was removed, I list it here again.

Hello AmondSolun,

I really wish you wouldn't. That is a scam app that posts fake reviews (http://www.securemacos.com/), violates Apple Mac App Store policies (Security Threat: Adware Doctor requesting administrator rights), and has a shady history (https://twitter.com/thomasareed/status/681908391418150914).