Malicious plug-ins?

I was checking safari/preferences/privacy/manage website data and I found these plug-ins:


cdn-net.com

iesnare.com

chaturbate.com


I keep deleting them and they keep coming back.


They don't appear in safari/preferences/websites/plugins and I've checked all the libraries and they aren't there.


Looking these things up, it appears that they are advertising/activity trackers. I don't know if they're malicious, but I'd really like to get rid of them.


Can anybody help?

iMac, macOS High Sierra (10.13.6), Standard setup

Posted on Sep 20, 2018 4:38 AM

Reply
4 replies

Sep 20, 2018 7:56 AM in response to garryfromguiseley

As the 2nd article points out, they are capable of regenerating after deletion with files that go to many parts of the system.



Safari/Browsers – can’t delete cookies



Evercookie



The myth of the dangerous cookie



Quit Safari.


In Finder go to Go menu and then Go to Folder.


Copy and paste this ~/Library/Safari/Databases.


Delete the contents of the folder.


Launch Safari again and check if all is ok.


If that doesn’t work, copy and paste this ~/Library/Safari/LocalStorage.


Delete the contents of the folder.


Then go to Safari/History and delete any entries for the related websites.


Test.

Sep 20, 2018 8:46 AM in response to Eric Root

Thanks for this, Eric -- but it didn't work (I've tried that route for embedded databases). I wondered if it might have put a new line into SitesAllowedToAutoplay.plist , which currently looks like this:

bplist00Ø h


!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghX6play. fr[9now.com.auZabc.go.comXacfun.tv\amazon.co.jp\amazon.co.ukZamazon.comYamazon.d e_ atresplayer.com_ au.tv.yahoo.com_ beinsportsconnect.tvXblim.comWcbs.com\channel4.com[cinemax.com_ cinepolisklic.com^clarovideo.com[clipfish.de[crackle.com_ crunchyroll.comVctv.ca_ dailymotion.com[daisuki.net]dalealplay.esWdeti.fm\dilidili.com[directv.com^dire ctvnow.comYdouyu.comZdumpert.nl\facebook.comZfilmon.comWfox.com_ foxsportsgo.com_ freeform.go.com^fxnetworks.comZgo.cnn.comZgo.sky.com_ gyao.yahoo.co.jpZhbonow.comZhorizon.tvXhulu.comYiqiyi.comWitv.comYke.qq.comWku6 .comYmaxgo.com_ mediathek.daserste.de_ moviestarplanet.co.uk]music.163.comVmy5.tvWnbc.com[netflix.comVnfb.ca_ nhk-ondemand.jpXnick.comZnickjr.com^nicolaconte.it\nicovideo.jpYnowtv.com[pando ra.com_ pgatourlive.com_ play.google.com^play.hbogo.com_ play.spotify.com^primevideo.com^shahid.mbc.netZsmotri.com_ southpark.cc.com_ stream.golfchannel.com_ stream.nbcsports.comXsyfy.com_ talktalktvstore.co.uk^tenplay.com.auVtf1.fr_ therugbychannel.tv[tinypic.comUtu.tvZtubitv.comYtudou.com[tv.sohu.com^tv.xfinit y.com^tvpot.daum.netYtwitch.tv[uk.wuaki.tv_ uktvplay.uktv.co.ukZustream.tvZuverse.comXv.qq.comXveoh.com]video.fc2.com_ video.foxnews.com_ video.sina.com.cnYvimeo.comWviz.comXvudu.comWwasu.cn_ worldstarhiphop.com[wowow.co.jpYxiami.comXy.qq.comYyouku.com[youtube.com^yule.i qiyi.com s|àìú©∂¡À›Ô $ 0 D S _ k } Ñ ñ ¢ ∞ ∏ ≈ — ‡ Í ı

' 9 H S ^ q | á ê ö ¢ ¨ ¥ æ ÷ Ó ¸ 0 9 D S ` j v à ö © º À ⁄  ¯ ( 1 I X _ t Ä Ü ë õ ß ∂ ≈ œ € Ò ¸ ' ; O Y a j r à î û ß ± Ω i Ã


I wonder what would happen if I deleted this lot?


Any other thoughts gratefully appreciated.


Best,


Garry

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Malicious plug-ins?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.