Fixes for Adware and Pop-ups
- Malwarebytes
- DetectX 2.11
- Remove adware that displays pop-up ads and graphics on your Mac
- Stop pop-up ads and adware in Safari - Apple Support
[Please ignore remarks such as "Don't use any kind of "anti-virus" or "anti-malware" product on a Mac." Such remonstrations are an exaggeration. They may be needed in some situations, but need not be installed or used for all circumstances. Furthermore, adware removal programs make the job of removal much easier. They require no permanent installation to remove adware or other types of malware. They do no damage, and they don't make you more vulnerable to attack.]
Fixing Safari from Pop-ups
[The following comes from user stevejobsfan0123. I have made minor changes to adapt to this presentation.]
Fix Some Browser Pop-ups That Take Over Safari
Common pop-ups include a message saying the government has seized your computer and you must pay to have it released (often called "Moneypak"), or a phoney message saying that your computer has been infected, and you need to call a tech support number (sometimes claiming to be Apple) to get it resolved. First, understand that these pop-ups are not caused by a virus and your computer has not been affected. This "hijack" is limited to your web browser. Also, understand that these messages are scams, so do not pay any money, call the listed number, or provide any personal information. This article will outline the solution to dismiss the pop-up.
Quit Safari
Usually, these pop-ups will not go away by either clicking "OK" or "Cancel." Furthermore, several menus in the menu bar may become disabled and show in gray, including the option to quit Safari. You will likely have to force quit Safari. To do this, press Command + option + ESC, select Safari, and press Force Quit.
Relaunch Safari
If you relaunch Safari, the page will reopen. To prevent this from happening, hold down the 'Shift' key while opening Safari. This will prevent windows from the last time Safari was running from reopening.
This will not work in all cases. The shift key must be held at the right time, and in some cases, even if done correctly, the window reappears. In these circumstances, after force quitting Safari, turn off Wi-Fi or disconnect Ethernet, depending on how you connect to the Internet. Then relaunch Safari normally. It will try to reload the malicious web page, but without a connection, it won't be able to. Navigate away from that page by entering a different URL, i.e. www.apple.com, and trying to load it. Now you can reconnect to the Internet, and the page you entered will appear rather than the malicious one.
Last but not least:
Basics for Uninstalling Software
Most OS X applications are completely self-contained "packages" that can be uninstalled by simply dragging the application to the Trash. Applications may create preference files that are stored in the /Home/Library/Preferences/ folder. Although they do nothing once you delete the associated application, they do take up some disk space. If you want you can look for them in the above location and delete them, too.
Some applications may install an uninstaller program that can be used to remove the application. If you cannot find the uninstaller then you could download the freeware, Easy Find, to locate files that need to be removed. The places you need to search include:
- /Home/Library/Applications Support/ folder. Check if the application has created a folder then delete the folder that's in the Applications Support folder.
- Applications may install a startupitem or a Log In item. Startupitems are usually installed in the /Library/StartupItems/ folder or the /Home/Library/StartupItems/ folder. Log In Items are set in the Users & Groups preferences. Open it inSystem Preferences, then click on the LogIn Items tab. Select the item from the list and click on the Delete [-] button to remove it.
- Some software use startup daemons or agents. Look for them in /Library/LaunchAgents/ and /Library/LaunchDaemons/ or in /Home/Library/LaunchAgents/.
Some applications install a receipt in the /Library/Receipts/ folder. Usually with the same name as the program or the developer. The item generally has a ".pkg" extension. Be sure you also delete this item as some programs use it to determine if it's already installed.
There are many utilities that can uninstall applications. Here is a selection:
- AppZapper
- AppDelete
- Hazel
- AppCleaner
- CleanApp
- iTrash
- AppBolish
- AppUninstaller
- Uninstaller
For more information visit The XLab FAQs and read the FAQ on removing software.