Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Question:

Question: a.akamaihd.net & Safari

Hi all. Last night I downloaded what I thought was a Flash plugin update (prompted by a legitimate site I visited) but it installed some kind of crazy 'Mac Cleaner' programme. I went through the usual process to delete and remove that but it left a strange search engine plugin on my browsers. I've removed it from Chrome & Firefox (which was easy) run a virus cleaner but it's still messing with Safari.


I've wiped Safari but when I go to preferences it still shows that my set homepage is http://search46107304-a.akamaihd.net/h?_pg=D7634BD9-F8A9-54E1-8E63-775A46B626FA


I've tried setting a new homepage (BBC News, Google, whatever) but, no matter what I do, it defaults to the above. I have no plugins installed and I just don't know what to do to either kill the malware completely or how to fix Safari. I even reinstalled MacOS and it's still doing it.


Anyhow, anyone got any ideas?


User uploaded file


User uploaded file

iMac, Mac OS X (10.7)

Posted on

Reply
Question marked as Solved
Answer:
Answer:

Credit: thomas_r


The following procedure appears to solve the problem:


* In Safari, choose Preferences from the Safari menu.

* In the window that opens, click the General icon (if necessary)

* Enter your desired home page in the "Homepage" field, but DO NOT press return!

* At the top of the window, click any of the other icons (eg, Tabs, AutoFill, etc).

* You may see a prompt asking for confirmation for changing the home page. If so, confirm.

* Switch back to the General page and check to make sure the home page has been changed.



https://discussions.apple.com/thread/8018092

Posted on

There’s more to the conversation

Read all replies

Page content loaded

Mar 18, 2018 1:53 AM in response to BenfromHove In response to BenfromHove

1. Use MalwareBytes for Mac to remove malware/adware.


Install guide: https://support.malwarebytes.com/docs/DOC-1817

Uninstall Guide: https://support.malwarebytes.com/docs/DOC-1190


The installer may ask you to allow it in Security & Privacy /System Preference. Allow it.


2. Choose a search engine.

Delete all text in the Smart Search field, click the magnifying glass , then choose a search engine from the list.

https://support.apple.com/guide/safari/customize-your-search-ibrwe75c2a3c/mac


3. Set your Home Page. https://support.apple.com/guide/safari/set-your-homepage-ibrw1020/mac


4. Restart your Mac.


5. Launch Safari holding the Shift key down.

Mar 18, 2018 1:53 AM

Reply Helpful

Mar 18, 2018 3:13 AM in response to dominic23 In response to dominic23

Thanks but I've already run MalwareBytes and got a clean bill of health. The trouble is that I can't change the homepage search field in Safari preferences (see the first of my two screenshots). It simply won't let me regardless of whether I click 'Set to current page' or delete the current and type or paste in a new one in. When I follow the steps and start Safari holding shift, I just get the dodgy search page (see attached).


It might be worth noting that I've tried clicking 'Uninstall' down the bottom right of the iffy browser and that gives me instructions that tell me to delete the plug-in (there isn't one showing - second screenshot) or delete the app which I can't do with Safari.

Mar 18, 2018 3:13 AM

Reply Helpful

Mar 18, 2018 3:40 AM in response to BenfromHove In response to BenfromHove

System Preferences > Profiles

Is there any Profile listed?

Is there any unknown application in Application folder?

Finder > Applications

Please run EtreCheck and post the report here.


https://etrecheck.com


Click “Free Download” button, open Downloads folder, click on it to open, and then select ”Open”.

Click on the bouncing EtreCheck icon in the Dock.

“Choose a problem” from the popup menu box, and then “Start EtreCheck” in the dialog.


Click “Share Report” button in the toolbar, select “Copy to Clipboard” .

Paste it into the reply.

Mar 18, 2018 3:40 AM

Reply Helpful

Mar 18, 2018 3:55 AM in response to dominic23 In response to dominic23

Where would I find profiles in System Preferences? It doesn't come up as one of the options.


Here's the EtreCheck report:


EtreCheck version: 4.1.3 (4A188)

Report generated: 2018-03-18 10:54:18

Download EtreCheck from https://etrecheck.com

Runtime: 4:19

Performance: Good


Problem: Other problem


Major Issues: None


Minor Issues:

These issues do not need immediate attention but they may indicate future problems.


Time Machine auto backup disabled - Time Machine auto backups are disabled.

Kernel extensions blocked - There are blocked kernel extensions awaiting user approval.

Unsigned files - There is unsigned software installed. They appear to be legitimate but should be reviewed.

System modifications - There are a large number of system modifications running in the background.

32-bit Apps - This machine has 32-bits apps that may have problems in the future.


Hardware Information:

iMac (27-inch, Late 2012)

iMac Model: iMac13,2

1 2.9 GHz Intel Core i5 (i5-3470S) CPU: 4-core

8 GB RAM Upgradeable

BANK 0/DIMM0

4 GB DDR3 1600 ok

BANK 1/DIMM0

4 GB DDR3 1600 ok

BANK 0/DIMM1

Empty

BANK 1/DIMM1

Empty


Video Information:

NVIDIA GeForce GTX 660M - VRAM: 512 MB

iMac 2560 x 1440


Drives:

disk0 - APPLE SSD SM128E 121.33 GB (Solid State - TRIM: Yes)

Internal SATA 6 Gigabit Serial ATA

disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk0s2 [Core Storage Container] 120.99 GB

disk2 - M************a (Journaled HFS+) [Fusion Drive] 1.11 TB

disk0s3 - B*******X [Recovery] 134 MB


disk1 - APPLE HDD ST1000DM003 1.00 TB (Mechanical)

Internal SATA 3 Gigabit Serial ATA

disk1s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk1s2 [Core Storage Container] 999.35 GB

disk2 - M************a (Journaled HFS+) [Fusion Drive] 1.11 TB

disk1s3 - Recovery HD (Journaled HFS+) [Recovery] 650 MB


Mounted Volumes:

disk2 - M************a [Fusion Drive] 1.11 TB (355.41 GB free)

Journaled HFS+

Mount point: /


Network:

Interface en0: Ethernet

Interface en6: iPhone

Interface en1: Wi-Fi

802.11 a/b/g/n

One IPv4 address

Interface en4: Bluetooth PAN

Interface bridge0: Thunderbolt Bridge

iCloud Quota: 147.92 GB available


System Software:

macOS High Sierra 10.13.3 (17D102)

Time since boot: Less than an hour

System Load: 2.75 (1 min ago) 2.54 (5 min ago) 2.20 (15 min ago)


Security:

System Status
Gatekeeper Mac App Store and identified developers
System Integrity Protection Enabled


Unsigned Files:

Launchd: /Library/LaunchDaemons/com.adobe.fpsaud.plist

Executable: /Library/Application Support/Adobe/Flash Player Install Manager/fpsaud

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.sony.WirelessAutoImportLauncher.agent.plist

Executable: /Library/Application Support/WirelessAutoImport/WirelessImporterDaemon

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.coupons.coupond.plist

Executable: /Library/Application Support/Coupons/coupond launchd

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.amazon.sendtokindle.launcher.plist

Executable: /usr/bin/stkLaunchAgent.sh

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist

Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper

Details: Exact match found in the whitelist - probably OK


32-bit Applications:

Name Version
Microsoft Error Reporting 2.2.9
Music Manager 1.0
Microsoft Outlook 14.1.0
GarageBand 6.0.5
Equation Editor 14.1.0
Adobe Application Manager 10.0.0.49
Microsoft Chart Converter 14.1.0
Microsoft Communicator 13.1.1
Adobe AIR Uninstaller 14.0
My Day 14.1.0
LEGO Digital Designer 4.3.10
Unstoppable Gorg 1.0.5
Quidco Cashback Reminder 36.0.1985.125
SyncServicesAgent 14.1.0
HP Uninstaller 3.3.0
KBRG_8_0_1 4.3.0.256
LEGO® Marvel Super Heroes 1.0
SLLauncher 1.0
Microsoft Clip Gallery 14.1.0
adobe_licutil 10.0.0.208
Remote Desktop Connection 2.1.0
Open XML for Excel 14.1.0
CORG_1_1_32 4.3.0.256
Microsoft Database Utility 14.1.0
Microsoft Lync 14.3.3
CitrixOnlineLauncher 1.0.258
Microsoft Document Connection 14.1.0
Microsoft Messenger 8.0.0
BBC iPlayer Downloads 1.14.2
CORE_1_0_32 3.7.0.271
Microsoft Office Reminders 14.1.0
Pin It Button 36.0.1985.143
GoogleTalkPlugin 5.41.3.0
Microsoft Office Setup Assistant 14.0.0
COPS_1_0_32 3.7.0.271
{41A12FFC-89E9-4743-A51E-00975CA31F40} 7.0.0.108
Uninstall Product 5.0.65.0
AAMLauncherUtil 10.0.0.49
The LEGO® Movie Videogame 1.0
Microsoft OneNote 15.20
Google Photos Backup 1.1.1
Microsoft Excel 14.1.0
Adobe AIR Application Installer 14.0
Microsoft Upload Center 14.1.0
DPS App Builder 3.2.0
SonyAutoLauncher 3.3.00.12060
AAM Registration Notifier 10.0.0.194
SonyGPSSupportTool 3.3.00.12060
Uninstaller 4.3.0.256
PMHAnnounce 3.3.00.12060
Adobe Flash Player Install Manager 27.0.0.187
Setup 9.0.0.65
DVD Player 5.8
Install 4.3.0.256
Microsoft Graph 14.1.0
Alerts Daemon 14.1.0
Microsoft Database Daemon 14.1.0
MemoryFreer 1.2.2
Uninstall Coupon Printing Software Version 1.2.1
EyeTV 3.6.8 (7405)
Canon IJ Printer Utility 7.27.2
PlayMemories Home 3.3.00.12060
GoogleVoiceAndVideoUninstaller 5.41.3.0
Microsoft Word 14.1.0
AAM Updates Notifier 9.0.0.281
Microsoft PowerPoint 14.1.0
BookSmart 3.4.4_34805_en_US
Adobe AIR Updater 14.0
Cache Killer 35.0.1916.153
Microsoft Language Register 14.1.0
Adobe Content Viewer 3.4.3
Microsoft Ship Asserts 1.1.4
COCM_1_0_32 3.7.0.271


Kernel Extensions:

/Applications/Google Drive File Stream.app

[Loaded] dfsfuse.kext (Google, Inc., 3.7.1 - SDK 10.12)

/Applications/PMHMac.app

[Not Loaded] SONYDeviceType01.kext (1.2.00.09240 - SDK 10.5)

/Library/Extensions

[Blocked] MB_MBAM_Protection.kext (Malwarebytes Corporation, 3.2 - SDK 10.13)

[Not Loaded] SONYDeviceType04.kext (Sony Corporation, 1.3.0.06030 - SDK 10.10)

/System/Library/Extensions

[Not Loaded] EyeTVAfaTechHidBlock.kext (1.1)

[Not Loaded] EyeTVCinergy450AudioBlock.kext (1.1)

[Not Loaded] EyeTVCinergyXSAudioBlock.kext (1.1)

[Not Loaded] EyeTVEmpiaAudioBlock.kext (1.1)

[Not Loaded] EyeTVVoyagerAudioBlock.kext (1.1)

[Not Loaded] Wacom Tablet.kext (Wacom Tablet 6.3.6-3 - SDK 10.8)


System Launch Agents:

[Not Loaded] 8 Apple tasks
[Loaded] 169 Apple tasks
[Running] 113 Apple tasks


System Launch Daemons:

[Not Loaded] 37 Apple tasks
[Loaded] 179 Apple tasks
[Running] 117 Apple tasks


Launch Agents:

[Running] com.adobe.AdobeCreativeCloud.plist (Adobe Systems, Inc. - installed 2018-02-22)
[Running] com.sony.SonyAutoLauncher.agent.plist (? a756a1bd - installed 2016-12-06)
[Not Loaded] com.adobe.AAM.Updater-1.0.plist (? ffb65062 - installed 2018-02-25)
[Loaded] com.coupons.coupond.plist (? f6a15e5e - installed 2014-03-20)
[Running] com.wacom.wacomtablet.plist (? 9e9edb5e - installed 2013-06-06)
[Running] com.sony.WirelessAutoImportLauncher.agent.plist (? c33fba7e - installed 2016-12-06)
[Loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2018-02-04)
[Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2018-01-30)
[Running] com.amazon.sendtokindle.launcher.plist (? d18c2039 - installed 2015-11-13)
[Loaded] com.oracle.java.Java-Updater.plist (? c13c7584 - installed 2017-12-20)
[Other] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a2 3d420d.plist (Adobe Systems, Inc. - installed 2018-02-13)
[Running] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2018-02-26)


Launch Daemons:

[Loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2018-02-13)
[Running] com.sonos.SonosLibraryServer.plist (? ad20e9f8 - installed 2016-02-16)
[Running] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2018-02-26)
[Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2017-04-06)
[Running] com.elgato.EyeConnect.plist (Elgato Systems GmbH - installed 2014-11-07)
[Loaded] com.apple.installer.osmessagetracing.plist (Apple, Inc. - installed 2018-02-17)
[Loaded] com.macpaw.CleanMyMac-setapp.Agent.plist (MacPaw Inc. - installed 2018-03-17)
[Running] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2018-02-26)
[Loaded] com.adobe.acc.installer.plist (Adobe Systems, Inc. - installed 2018-02-22)
[Loaded] com.adobe.fpsaud.plist (? 2afb3af7 - installed 2017-10-26)
[Loaded] com.microsoft.office.licensing.helper.plist (? 6d8cb30e - installed 2010-08-25)
[Loaded] com.oracle.java.Helper-Tool.plist (? e3fefdd2 - installed 2017-12-20)
[Running] com.adobe.agsservice.plist (Adobe Systems, Inc. - installed 2018-01-30)
[Loaded] com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2018-02-13)
[Loaded] com.google.keystone.daemon.plist (Google, Inc. - installed 2018-03-06)
[Running] com.backblaze.bzserv.plist (Backblaze - installed 2018-02-02)
[Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2016-02-12)


User Launch Agents:

[Running] com.setapp.DesktopClient.SetappAgent.plist (Setapp Limited - installed 2018-03-14)
[Running] com.spotify.webhelper.plist (Spotify - installed 2017-12-05)
[Loaded] com.citrixonline.GoToMeeting.G2MUpdate.plist (? 0 - installed 2015-01-09)
[Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2018-01-30)
[Running] com.backblaze.bzbmenu.plist (Backblaze - installed 2018-02-02)
[Loaded] com.setapp.DesktopClient.SetappUpdater.plist (Setapp Limited - installed 2018-03-14)
[Loaded] com.adobe.AAM.Updater-1.0.plist (? 0 - installed 2018-02-25)


User Login Items:

Google Drive File Stream Application (Google, Inc.

(/Applications/Google Drive File Stream.app)

CleanMyMac Menu Application (MacPaw Inc. - installed 2018-03-17)

(/Applications/Setapp/CleanMyMac.app/Contents/MacOS/CleanMyMac Menu.app)

iTunesHelper Application (Apple, Inc. - installed 2018-01-25)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

Day One Classic Reminders SMLoginItem (Mac App Store - installed 2018-03-17)

(/Applications/Day One Classic.app/Contents/Library/LoginItems/Day One Classic Reminders.app)

CraftManagerHelper SMLoginItem (Tomas Hanacek - installed 2018-03-17)

(/Applications/CraftManager.app/Contents/Library/LoginItems/CraftManagerHelper. app)


Internet Plug-ins:

JavaAppletPlugin: Java 8 Update 161 build 12 (installed 2018-03-17)

o1dbrowserplugin: 5.41.3.0 (installed 2015-12-16)

WacomNetscape: 2.1.0-1 (installed 2013-06-06)

Unity Web Player: UnityPlayer version 5.0.3f2 (installed 2015-09-27)

WacomTabletPlugin: WacomTabletPlugin 2.1.0.2 (installed 2013-06-06)

AdobeAAMDetect: 3.0.0.0 (installed 2018-02-22)

FlashPlayer-10.6: 27.0.0.187 (installed 2018-03-17)

AdobePDFViewerNPAPI: 17.012.20098 (installed 2018-03-17)

Silverlight: 5.1.41212.0 (installed 2018-03-17)

QuickTime Plugin: 7.7.3 (installed 2018-01-19)

Flash Player: 27.0.0.187 (installed 2018-03-17)

googletalkbrowserplugin: 5.41.3.0 (installed 2015-12-11)

NP_2020Player_IKEA: 5.0.94.1 (installed 2012-09-28)

AdobePDFViewer: 18.011.20038 (installed 2018-03-17)

CouponPrinter-FireFox_v2: 5.0.4 (installed 2014-03-20)

SharePointBrowserPlugin: 14.1.0 (installed 2016-04-25)

MeetingJoinPlugin: Unknown (installed 2016-04-05)


3rd Party Preference Panes:

Backblaze Backup (installed 2018-03-17)

Flash Player (installed 2017-10-26)

Java (installed 2018-03-17)

MusicManager (installed 2018-03-17)


Time Machine:

Skip System Files: No

Mobile backups: No

Auto backup: No

Volumes being backed up:

M************a: Disk size: 1.11 TB - Disk used: 756.42 GB

Destinations:

M*****n [Local] (Last used)

Total size: 2.00 TB

Total number of backups: 4

Oldest backup: 2015-02-19 10:26:13

Last backup: 2016-02-25 08:02:22


Top Processes by CPU:

Process (count) Source % of CPU
Duplicate Photos Fixer Pro Mac App Store 106
WindowServer Apple 20
kernel_task Apple 9
Finder Apple 6
QuickLookUIService Apple 4


Top Processes by Memory:

Process (count) Source RAM usage
Google Chrome Helper (11) Google, Inc. 1.03 GB
kernel_task Apple 853 MB
Duplicate Photos Fixer Pro Mac App Store 355 MB
Google Chrome Google, Inc. 294 MB
mdworker (15) Apple 289 MB


Top Processes by Network Use:

Process Source Input Output
EyeConnect Elgato Systems GmbH 687 KB 129 B
mDNSResponder Apple 182 KB 52 KB
usbmuxd Apple 11 KB 17 KB
apsd Apple 5 KB 11 KB
netbiosd Apple 4 KB 1 KB


Top Processes by Energy Use:

Process (count) Source Energy usage (0-100)
Duplicate Photos Fixer Pro Mac App Store 47
WindowServer Apple 3
Google Chrome Google, Inc. 1
bzfilelist Backblaze 1
Adobe CEF Helper (2) Adobe Systems, Inc. 0


Virtual Memory Information:

Available RAM 1.40 GB
Free RAM 19 MB
Used RAM 6.60 GB
Cached files 1.38 GB
Swap Used 57 MB


Software Installs (past 30 days):

Name Version Install Date
Bear 1.4.3 2018-02-26
Duplicate Cleaner For iPhoto 1.15 2018-03-01
Agenda 2.0 2018-03-11
Duplicate Photos Fixer Pro 2.5 2018-03-15


Diagnostics Information (past 7 days):

2018-03-18 10:45:27 Duplicate Photos Fixer Pro.app CPU (once)


End of report

Mar 18, 2018 3:55 AM

Reply Helpful

Mar 18, 2018 5:24 AM in response to BenfromHove In response to BenfromHove

1. Uninstall Wacom tablet software uninstall it reinstall the latest.


2. Uninstall CleanMyMac3 (installed yesterday) and test.

Uninstall CleanMyMac3

http://macpaw.com/support/cleanmymac/knowledgebase/how-to-uninstall-cleanmymac-3


3. 3rd Party Preference Panes:

Backblaze Backup (installed 2018-03-17)

Flash Player (installed 2017-10-26)

Java (installed 2018-03-17)

MusicManager (installed 2018-03-17)


Did you install MusicManager Profile yesterday?


4. Visit apple.com


Safari > Preferences > General

Homepage


Click Set to Current page

Mar 18, 2018 5:24 AM

Reply Helpful

Mar 18, 2018 5:51 AM in response to BenfromHove In response to BenfromHove

Clear the entry in Safari search bar.

Click the magnifying glass icon in the Safari search bar.

Choose Google.


User uploaded file


Make sure that profiles not knowingly installed by you are removed.

https://support.apple.com/kb/PH25680?locale=en_US

Mar 18, 2018 5:51 AM

Reply Helpful

Mar 19, 2018 4:17 AM in response to Eric Root In response to Eric Root

Thanks Eric but my system preferences doesn't show an option to view profiles, which I'm told means I don't have any installed. That thread tells me to delete the set safari homepage...' profile but I don't have it installed.

Mar 19, 2018 4:17 AM

Reply Helpful
Question marked as Solved

Mar 19, 2018 11:08 AM in response to BenfromHove In response to BenfromHove

Credit: thomas_r


The following procedure appears to solve the problem:


* In Safari, choose Preferences from the Safari menu.

* In the window that opens, click the General icon (if necessary)

* Enter your desired home page in the "Homepage" field, but DO NOT press return!

* At the top of the window, click any of the other icons (eg, Tabs, AutoFill, etc).

* You may see a prompt asking for confirmation for changing the home page. If so, confirm.

* Switch back to the General page and check to make sure the home page has been changed.



https://discussions.apple.com/thread/8018092

Mar 19, 2018 11:08 AM

Reply Helpful (1)
User profile for user: BenfromHove

Question: a.akamaihd.net & Safari