How to remove unwanted adware that displays pop-up ads and graphics on your Mac

Wednesday, March 25, 2015 | Apple

[Swordmaker]

Use these instructions to uninstall or remove ad-injection software — sometimes called adware – from your Mac.

Ad-injection software is advertising-supported software that can come from third-party download sites. Software that you download from such sites may have been customized to install both the software you want and the ad-injection software. If your Mac has ad-injection software installed, you might see pop-up windows, ads, and graphics while surfing the web, even if “Block pop-up windows” is selected in Safari preferences. Ad-injection software might also change your homepage and preferred search engine.

Check Safari settings and extensions

Go to Safari > Preferences, then follow these steps:
1. Click the General icon and make sure that the Homepage field contains the website you want.
2. Click the Search icon and make sure that the search engine setting shows your preferred search engine. Some versions of Safari have this setting in the General pane instead.
3. Click the Extensions icon. If you don’t want an extension or don’t know what it does, select the extension from the list and click Uninstall. These are examples of ad-injection extensions, but there are others:
• Amazon Shopping Assistant by Spigot Inc.
• Ebay Shopping Assistant by Spigot Inc.
• Searchme by Spigot, Inc.
• Slick Savings by Spigot Inc.
• GoPhoto.It
• Omnibar

Remove certain ad-injection software

Use this “Go to Folder” method to find and remove each item listed in the sections below, one item at a time:

1. Drag to select an entire line in the lists below, starting with /System/Library/Frameworks/v.framework, for example.
2. Choose Edit > Copy.
3. Open a Finder window, then choose View > As Columns.
4. Choose Go > Go to Folder.
5. Choose Edit > Paste to paste the line you copied into the text field.
6. Press Return.

• If the item is on your Mac, a window opens with the item you searched for already selected. Drag only that item to the Trash. If you’re asked to enter a password, enter your administrator password.
• If the item is not on your Mac, you’ll see a message that the folder can’t be found. Continue to the next item in the list.

Remove Downlite, VSearch, Conduit, Trovi, MyBrand, Search Protect

Use Go to Folder to find and remove each of these items:
/System/Library/Frameworks/v.framework
/System/Library/Frameworks/VSearch.framework
/Library/PrivilegedHelperTools/Jack
/Library/InputManagers/CTLoader/
/Library/Application Support/Conduit/
~/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
~/Library/Internet Plug-Ins/TroviNPAPIPlugin.plugin
/Applications/SearchProtect.app

After you remove the items above, restart your Mac. Then choose Finder > Empty Trash to permanently remove them.

Remove Genieo, InstallMac

First follow these steps to stop the Genieo or InstallMac processes, if they’re running. Be sure to restart your Mac when instructed.

1. Open Activity Monitor.
You can use Spotlight (Command-Space) to search for “Activity Monitor,” then choose Activity Monitor from the search results.
2. In the Activity Monitor window, click the CPU tab, then click Process Name at the top of that column to sort the list alphabetically.
3. Look for the process “Genieo.” Select it, then click the Force Quit button (x) in the upper-left corner of the window.
4. Look for the process “InstallMac.” Select it, then click the Force Quit button.
5. Quit Activity Monitor.
6. Use Go to Folder to find and remove /private/etc/launchd.conf.

Restart your Mac

Use Go to Folder to find and remove each of these items:
/Applications/Genieo
/Applications/InstallMac
/Applications/Uninstall Genieo
/Applications/Uninstall IM Completer.app
/usr/lib/libgenkit.dylib
/usr/lib/libgenkitsa.dylib
/usr/lib/libimckit.dylib
/usr/lib/libimckitsa.dylib
/Library/PrivilegedHelperTools/com.genieoinnovation.macextension.client
~/Library/Application Support/Genieo/
~/Library/Application Support/com.genieoinnovation.Installer/

Restart your Mac

Now find and remove /Library/Frameworks/GenieoExtra.framework.

Restart your Mac

Choose Finder > Empty Trash to permanently remove the items.

Optionally remove other adware files

You don’t need to remove these files to disable the adware. If you do remove them, first remove the other files listed in the sections above. Use the same Go to Folder method to find and remove each item.

/Library/LaunchAgents/com.genieo.completer.update.plist
/Library/LaunchAgents/com.genieo.engine.plist
/Library/LaunchAgents/com.genieoinnovation.macextension.client.plist
/Library/LaunchAgents/com.genieoinnovation.macextension.plist
/Library/LaunchDaemons/com.genieoinnovation.macextension.client.plist
/Library/LaunchDaemons/Jack.plist
~/Conduit/
~/Trovi/
~/Library/Caches/com.Conduit.takeOverSearchAssetsMac
~/Library/Caches/com.VSearch.bulk.installer
~/Library/Caches/com.VSearch.VSinstaller
~/Library/LaunchAgents/com.genieo.completer.download.plist
~/Library/LaunchAgents/com.genieo.completer.ltvbit.plist
~/Library/LaunchAgents/com.genieo.completer.update.plist
~/Library/Preferences/com.genieo.global.settings.plist.lockfile
~/Library/Preferences/com.geneio.settings.plist.lockfile
~/Library/Preferences/com.geneio.global.settings.plist
~/Library/Saved Application State/com.genieo.RemoveGenieoMac.savedState
~/Library/Saved Application State/com.VSearch.bulk.installer.savedstate

Go to the /Library/LaunchAgents/ folder and look for a file named com.*.agent.plist. The asterisk (*) could be any word, including “Apple.” Example: com.midnight.agent.plist. Move the file to the Trash.

Go to the /Library/LaunchDaemons/ folder and look for a file named com.*.daemon.plist and a file named com.*.helper.plist. The asterisk (*) could be any word, but it will be the same word used in the LaunchAgents folder, above. Example: com.midnight.daemon.plist and com.midnight.helper.plist. Move the files to the Trash.
Go to the /Library/Application Support/ folder and look for a file name that is the same word used in the LaunchAgents and LaunchDaemons folders, above. Example: midnight. Move the file to the Trash.

Restart your Mac, then choose Finder > Empty Trash to permanently remove the items.

 
Source: Apple Inc.

[Swordmaker]

How to remove ad-injection software and adware such as Genieo, GoPhoto, Omnibar, unwanted pop-upows, Spigot, VSearch, and some unwanted pop-up windows in Apple Mac OS X.

[Swordmaker]

Instructions from Apple on how to remove adware and pop-ups in Safari from your Mac — PING!

Apple anti-adware Ping!

If you want on or off the Mac Ping List, Freepmail me.

[Kenny]

Thanks! I’m new to mac and this is very helpful.

[babygene]

bookmark

[TexasBarak]

I’m seeing that very thing in window’s at the moment- the articles on the main FR page all have hyperlinks on random words or phrases. The first one I saw, I thought the poster had done it on purpose, but I quickly figured out what was going on.

[GeronL]

Life in prison should be a good incentive on this

[867V309]

How to remove unwanted adware that displays pop-up ads and graphics on your Mac

1) fill bathtub or utility sink
2) you know the rest

[martin_fierro]

Didn’t find any of that crap on my Mac. Yay me.

[Swordmaker]

Thanks! I’m new to mac and this is very helpful.

Just remember that on a Mac, you have to install it. There are certain installers that WILL install these adware addenda along with what you want unless you are very careful to uncheck the extras options. ALWAYS uncheck the extras. NEVER allow the extras to be installed. NEVER ALLOW THE EXTRAS TO BE INSTALLED! You simply do not need them.

[Utilizer]

Of course. Macophiles grudgingly admit that their precious graphics platforms are subject to adware, malware, and unwanted popups. What a surprise.

“Here’s a quarter kid. Go out and buy yourself a real computer!”

On a side note, I could not help but notice that the majority of persons in the San Fran area where I had to work in the past simply loved their precious macmachines. To clarify: ALL the “alternate-lifestyle” and “NonStandardGender” (LGBT/whatever) persons without fail were apple-adherents.

I gathered that it was at least partly because when there was a problem with that perfectly precious platform then they could spend a lot of time chatting up various persons to try to ‘help’ them.

Not surprised the apple adherents have adopted a ‘rainbow-flag’ emblem for their precious posessions.

[PA Engineer]

Thanks. Bookmarked.

[PA Engineer]

On a side note, I could not help but notice that the majority of persons in the San Fran area where I had to work in the past simply loved their precious macmachines. To clarify: ALL the “alternate-lifestyle” and “NonStandardGender” (LGBT/whatever) persons without fail were apple-adherents.

Were you a member of the FUD packer group?

[minnesota_bound]

ADWCleaner for Mac
http://www.bleepingcomputer.com/download/ccleaner-for-mac/

[Utilizer]

Bewdy. And if you had a standard PC instead of a graphics boxen, you might have had a less stressful method of dealing with networks problems.

But then again, you might have needed to print a calender or an artwork repro instead of doing some real computing work, so I supose then you would need one of the graphics-centralized late Atari 2600 clones that apple touts so greatly.

Good luck with your calender, restaurant menu, or Louvre-impression, and don’t smudge the lippy if you’ve the chance or the nancyboys might vote you out of the macophile’s clubhouse.

[minnesota_bound]

Oops I used the wrong naem. It should be: CCleaner

[Utilizer]

You read My mind. *laugh*

[Utilizer]

Were you a member of the FUD packer group?

No, why? Did your husband finally give up his lifelong membership?

[BreitbartSentMe]

iPing

[Utilizer]

How to fix a mac...

1. Find wastebin. The one located next to Barry’s Bath-house will do nicely.

2. Add Petrol, then ignite

3. Profit!

4. Buy a real computer.

[Utilizer]

I seem to recall that if you type in a particular line in the address bar, Armenian I think, you will quickly find out how best to display your equipment’s capabilities for all to see. :)