Safari infected with akamaihd

Safari is opening up new windows and being redirected to security company or advertiser sites every time I select a link. From my research it sounds like akamaihd has infected Safari. Can't figure out how to get this removed. Every time I remove all the cookies in Preferences....Privacy, akamaihd.net and others (66 cookies last count) automatically reappear in seconds. I've deleted all extensions.


Other info to this problem. The only thing I have updated recently is a new version of Flash. MacKeeper somehow got installed, I believe through the update of Flash. Removed MacKeeper immediately, but the akamaihd problem appeared the moment I deleted MacKeeper.


Firefox not affected .... yet.


System: iMac Late 2012, OS X 10.11.6, Safari 10.0.


Suggestions?

MacBook Pro, OS X Mavericks (10.9.5)

Posted on Oct 27, 2016 10:32 AM

Reply
Question marked as Top-ranking reply

Posted on Sep 29, 2017 2:38 PM

Although I couldn't follow what you were saying, I trusted your links to Etracheck and Malwarebytes. And thank you for those. Installed Etrecheck and its report identified the malware: akamaihd.net and all its cheesy follow-ons. I choose the "remove/report" option and after being asked to confirm, the software trashed them and I emptied the trash. Then I installed the Malwarebytes (after some fussiness by the App. Store) and no sooner than the software was installed, up popped their "quarantine window" alerting me to a piece of malware. It was one of the cheesy follow-ons trying to get back in again. Nope, left it quarantined.


Thanks for the two great app. reccomendations.


John Roehling

6 replies
Question marked as Top-ranking reply

Sep 29, 2017 2:38 PM in response to Eric Root

Although I couldn't follow what you were saying, I trusted your links to Etracheck and Malwarebytes. And thank you for those. Installed Etrecheck and its report identified the malware: akamaihd.net and all its cheesy follow-ons. I choose the "remove/report" option and after being asked to confirm, the software trashed them and I emptied the trash. Then I installed the Malwarebytes (after some fussiness by the App. Store) and no sooner than the software was installed, up popped their "quarantine window" alerting me to a piece of malware. It was one of the cheesy follow-ons trying to get back in again. Nope, left it quarantined.


Thanks for the two great app. reccomendations.


John Roehling

Oct 27, 2016 12:18 PM in response to planoiceman

Try running this program in your normal account , then copy and paste the output in a reply. The program was created by Etresoft, a frequent contributor. Please use copy and paste as screen shots can be hard to read. On the screen with Options, please open Options and check the bottom 2 boxes before running. Click “Share Report” button in the toolbar, select “Copy to Clipboard” and then paste into a reply. This will show what is running on your computer. No personal information is shown.

Etrecheck – System Information


You can also download this program which was written by Thomas Reed, a long time poster, to see if it will remove it. The program will do the work for you which makes it easy.


Malwarebytes Anti-Malware for Mac 10.8 and later


What should I do if Malwarebytes Anti-Malware for Mac didn't solve my problem?

Nov 27, 2016 7:38 AM in response to planoiceman

I posted this way because there are so many questions on deleted cookies reappearing. I had the following cookie reappear (eBay) after deleting it every which way possible: manually, deleting all cookies, deleting cache, etc.....

I have Mac OS X El Capitan 10.11.6 using Safari 10.0.1


I did the following and it worked. 🙂

On the Finder menu use "Go" then "Go to Folder..." the default folder is "~/Library" hit "Go"

Go to the "Safari" folder then in the "Databases" sub-folder.

There you should find another sub-folder "__IndexedDB" inside of that you will find subfolders of :


All the cookies that keep reappearing 😮


Just delete the folder of the cookie you no longer want to reappear and Boom! Pow! they're gone.


So the path is:

~/Library/Safari/Databases/__IndexedDB/


Hope this helps all the users and Apple on fixing this bug.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Safari infected with akamaihd

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.