When searching on Google the file name gives no search results. Anyone else who has this file and knows what it does? Since it gives no search results I suspect that the file doesn't belong there, but I'm not sure if I should delete it, because what if it had some important function.
iOS 10.1.1
I have removed com.interdorsal.plist which removed adware from Safari
and removed the files:
com.jdibackup.ZipCloud.autostart.plist
and
com.jdibackup.ZipCloud.notify.plist from the LaunchAgent folder
which removed the ssp.zryydi.com adware from Chrome
Here is a screenshot of the source code of the com.interdorsal.plist:
When I try to go to the ~/Library/interdorsal/interdorsal I just end up in the Library folder and not in a subdirectory. When I search "interdorsal" in the Library only the .plist file is found. Could the file be hidden?
It sounds like adware to me: How to install adware
Look in each of the following locations for additional files you do not recognize:
~/Library/LaunchAgents
/Library/LaunchAgents/
/Library/LaunchDaemons/
To navigate to them, copy and paste each one of the above lines into the Finder's Go menu > Go to Folder...field.
By default Apple installs nothing in any of those folders, which means that you should be absolutely certain everything they contain is required for software that you need. Post their contents if you are uncertain.
The files you've removed are the adware persistence agents - what actually loads the adware at log in and other times - but they're not the actual adware binaries.
To find those, you need to look inside those plists and find the paths under either the Program key and/or Program Arguments key.
If the plists are still in your Trash or on a Time Machine / Clone backup, go dig them out so that you can find and remove the binaries (and if you do that, it'd be useful if you could post the paths here too for others).
It's in the local domain Library folder, not the user Library folder
i.e.,
Macintosh HD/Library/
not
Macintosh HD/Users/<your username/Library
(where 'Macintosh HD' is a whatever your internal drive is actually called).
I found it, thank you.
Btw, the other mentioned files that caused the ssp.zryydi.com adware in Chrome are in
/Users/user_name/Library/Logs/ZipCloud/
I also had the snowbitt adware in Firefox (that sets your default search engine to "Safe Finder"), but refreshing Firefox removed it.
And when I removed MacKeeper, this guide really helped:
It isn't an OS X file. Put it in the Trash then restart the computer.
In LaunchAgents-folder is a file called "com.interdorsal.plist", is it malware?
