How to remove unwanted adware that displays pop-up ads and graphics on your Mac

Wednesday, March 25, 2015 | Apple

[Swordmaker]

Use these instructions to uninstall or remove ad-injection software — sometimes called adware – from your Mac.

Ad-injection software is advertising-supported software that can come from third-party download sites. Software that you download from such sites may have been customized to install both the software you want and the ad-injection software. If your Mac has ad-injection software installed, you might see pop-up windows, ads, and graphics while surfing the web, even if “Block pop-up windows” is selected in Safari preferences. Ad-injection software might also change your homepage and preferred search engine.

Check Safari settings and extensions

Go to Safari > Preferences, then follow these steps:
1. Click the General icon and make sure that the Homepage field contains the website you want.
2. Click the Search icon and make sure that the search engine setting shows your preferred search engine. Some versions of Safari have this setting in the General pane instead.
3. Click the Extensions icon. If you don’t want an extension or don’t know what it does, select the extension from the list and click Uninstall. These are examples of ad-injection extensions, but there are others:
• Amazon Shopping Assistant by Spigot Inc.
• Ebay Shopping Assistant by Spigot Inc.
• Searchme by Spigot, Inc.
• Slick Savings by Spigot Inc.
• GoPhoto.It
• Omnibar

Remove certain ad-injection software

Use this “Go to Folder” method to find and remove each item listed in the sections below, one item at a time:

1. Drag to select an entire line in the lists below, starting with /System/Library/Frameworks/v.framework, for example.
2. Choose Edit > Copy.
3. Open a Finder window, then choose View > As Columns.
4. Choose Go > Go to Folder.
5. Choose Edit > Paste to paste the line you copied into the text field.
6. Press Return.

• If the item is on your Mac, a window opens with the item you searched for already selected. Drag only that item to the Trash. If you’re asked to enter a password, enter your administrator password.
• If the item is not on your Mac, you’ll see a message that the folder can’t be found. Continue to the next item in the list.

Remove Downlite, VSearch, Conduit, Trovi, MyBrand, Search Protect

Use Go to Folder to find and remove each of these items:
/System/Library/Frameworks/v.framework
/System/Library/Frameworks/VSearch.framework
/Library/PrivilegedHelperTools/Jack
/Library/InputManagers/CTLoader/
/Library/Application Support/Conduit/
~/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
~/Library/Internet Plug-Ins/TroviNPAPIPlugin.plugin
/Applications/SearchProtect.app

After you remove the items above, restart your Mac. Then choose Finder > Empty Trash to permanently remove them.

Remove Genieo, InstallMac

First follow these steps to stop the Genieo or InstallMac processes, if they’re running. Be sure to restart your Mac when instructed.

1. Open Activity Monitor.
You can use Spotlight (Command-Space) to search for “Activity Monitor,” then choose Activity Monitor from the search results.
2. In the Activity Monitor window, click the CPU tab, then click Process Name at the top of that column to sort the list alphabetically.
3. Look for the process “Genieo.” Select it, then click the Force Quit button (x) in the upper-left corner of the window.
4. Look for the process “InstallMac.” Select it, then click the Force Quit button.
5. Quit Activity Monitor.
6. Use Go to Folder to find and remove /private/etc/launchd.conf.

Restart your Mac

Use Go to Folder to find and remove each of these items:
/Applications/Genieo
/Applications/InstallMac
/Applications/Uninstall Genieo
/Applications/Uninstall IM Completer.app
/usr/lib/libgenkit.dylib
/usr/lib/libgenkitsa.dylib
/usr/lib/libimckit.dylib
/usr/lib/libimckitsa.dylib
/Library/PrivilegedHelperTools/com.genieoinnovation.macextension.client
~/Library/Application Support/Genieo/
~/Library/Application Support/com.genieoinnovation.Installer/

Restart your Mac

Now find and remove /Library/Frameworks/GenieoExtra.framework.

Restart your Mac

Choose Finder > Empty Trash to permanently remove the items.

Optionally remove other adware files

You don’t need to remove these files to disable the adware. If you do remove them, first remove the other files listed in the sections above. Use the same Go to Folder method to find and remove each item.

/Library/LaunchAgents/com.genieo.completer.update.plist
/Library/LaunchAgents/com.genieo.engine.plist
/Library/LaunchAgents/com.genieoinnovation.macextension.client.plist
/Library/LaunchAgents/com.genieoinnovation.macextension.plist
/Library/LaunchDaemons/com.genieoinnovation.macextension.client.plist
/Library/LaunchDaemons/Jack.plist
~/Conduit/
~/Trovi/
~/Library/Caches/com.Conduit.takeOverSearchAssetsMac
~/Library/Caches/com.VSearch.bulk.installer
~/Library/Caches/com.VSearch.VSinstaller
~/Library/LaunchAgents/com.genieo.completer.download.plist
~/Library/LaunchAgents/com.genieo.completer.ltvbit.plist
~/Library/LaunchAgents/com.genieo.completer.update.plist
~/Library/Preferences/com.genieo.global.settings.plist.lockfile
~/Library/Preferences/com.geneio.settings.plist.lockfile
~/Library/Preferences/com.geneio.global.settings.plist
~/Library/Saved Application State/com.genieo.RemoveGenieoMac.savedState
~/Library/Saved Application State/com.VSearch.bulk.installer.savedstate

Go to the /Library/LaunchAgents/ folder and look for a file named com.*.agent.plist. The asterisk (*) could be any word, including “Apple.” Example: com.midnight.agent.plist. Move the file to the Trash.

Go to the /Library/LaunchDaemons/ folder and look for a file named com.*.daemon.plist and a file named com.*.helper.plist. The asterisk (*) could be any word, but it will be the same word used in the LaunchAgents folder, above. Example: com.midnight.daemon.plist and com.midnight.helper.plist. Move the files to the Trash.
Go to the /Library/Application Support/ folder and look for a file name that is the same word used in the LaunchAgents and LaunchDaemons folders, above. Example: midnight. Move the file to the Trash.

Restart your Mac, then choose Finder > Empty Trash to permanently remove the items.

 
Source: Apple Inc.

[Utilizer]

I did not either. Of course, that was because I was working within a real machine and OS and not that of an overpriced graphics boxen / dumb terminal, but I could be wrong.

I could have accidentally plugged in the Atari with the default cartridge and had the same problem crop up!

The horrors!

[867V309]

Not surprised the apple adherents have adopted a ‘rainbow-flag’ emblem for their precious posessions.

Apple IS Hollywood, Politico, PC fag-o-rama. Example: House of cards with gay-spacey: only brand-name ever shown is apple. Face it: Gay=Apple.

[Swordmaker]

Of course. Macophiles grudgingly admit that their precious graphics platforms are subject to adware, malware, and unwanted popups. What a surprise.

Only if they install it themselves. . . it's just another program. These instructions are on how to delete every aspect of these programs. Sorry, They are not self-installing. . . they come in with things like FLASH installer or Adobe Reader installer. If the user doesn't uncheck the extra-sorftware that accompanies these installers, they are likely to get these junk apps.

You anti-Apple haters have to come in here and spread your LGBT gay bile. . . I think you protesteth too much. Are you hiding something, Utilizer? Are you hiding in your closet?

You act quite the ass, did you know that?

[Swordmaker]

I seem to recall that if you type in a particular line in the address bar, Armenian I think, you will quickly find out how best to display your equipment’s capabilities for all to see. :)

No, idiot, that problem is with GOOGLE'S coding in Chrome. . . It closes the TAB you type it in. . . Again, you are an idiot. Industrial strength idiot.

[867V309]

You anti-Apple haters have to come in here and spread your LGBT gay bile...

I think Ted Cruz will provoke many "conservatives" to reveal their true selves on this forum. Maybe that truth will spread.

[MaxMax]

Haha. You evil person you.

[Nailbiter]

Thx useful info

[867V309]

LGBT gay bile

BTW, "LGBT gay bile..." is redundant, dumbass.

[Utilizer]

I’m just surprised -check that then, I guess I am NOT, that no one else has commented on how the LGBT crowd can not stop promoting their macmachines. Apple uber alles, seems to be their rallying cry!

With that rainbow flag in mind, I find it difficult not to snicker when I see the macophiles in other places *cough**like here**cough* try to distance themselves from the usual crowd I have had to deal with in the San Fran Bay Area. ALL of them have macmachines, and I find it difficult not to smirk when I tell them every few months that they need to purchase the latest overpriced version of their graphics boxen in order to keep up with all the ‘new developements’, LOL.

I have to deal with the Liberal Gay Democrat Deviants on a continuing basis, and what makes it all worthwhile is the necessity of them paying four figures and up per hour simply to be told to purchase another graphics boxen, or almost 1k per hour otherwise just to hold their hands while they try to decide upon their IRA (NOT the Irish Republican Army!) options or teach how to create a birthday card for their Royal Offspring *gag* and sometimes help them with their Brush Selections while they attempt to Creat A Masterpiece...

Or perhaps I should be More Tolerant, and simply understand that they Know What Is Best For Us and accept it.

Still, as long as the checks clear, I must admit that I will grinningly continue to allow them to pay for the privilege of hand-holding them through whatever precious project they next have a problem with.

[Swordmaker]

Didn’t find any of that crap on my Mac. Yay me.

999 out of a thousand Mac users won't find it.

[GOP Poet]

bookmark

[867V309]

I’m just surprised -check that then, I guess I am NOT, that no one else has commented on how the LGBT crowd can not stop promoting their macmachines. Apple uber alles, seems to be their rallying cry!

It started in the '90's when Photoshop was an apple thing. PCs threatened the airy-fairy crowd and became the enemy. Like everything with the homos, it became open hostility/warfare.

[Irish Eyes]

mark

[Swordmaker]

BTW, "LGBT gay bile..." is redundant, dumbass.

I don't have to accept their acronyms, idiot. Ceding the language to the Liberals is ceding more than half the battle.

[TigerClaws]

Thanks.

I’ve had problems lately with Chrome. Adware with popups. Hate it. Nothing shows up when I run anti-virus software.

Can this process be used on Chrome?

Appreciate it.

[867V309]

I don't have to accept their acronyms, idiot. Ceding the language to the Liberals is ceding more than half the battle.

That's just stupid.

[Swordmaker]

That's just stupid.

No, 86, you have no clue about general semantics. If you allow the enemy to control the conversation, they have defined the battlefield of thought with their propaganda. They define the terms in which the battle of ideas will be fought. THEY KNOW this. . . and they will, in every case, make the first salvo to freeze the language of the debate on THEIR TERMS! Conservatives need to understand this in their bones. Until we do, we will continue to lose the debates in the media. . . because the arguments are always made with the established Liberal terminology. It forms the basis of thinking.

Consider the fact that the United States has not won a war since we changed the Department of War to the Department of Defense. . . and that change in focus in thinking has MADE A HELL OF A DIFFERENCE! Semantics.

[867V309]

Semantics aren’t acronyms. No wonder you’re a fanboy.

[Swordmaker]

With that rainbow flag in mind, I find it difficult not to snicker when I see the macophiles in other places *cough**like here**cough* try to distance themselves from the usual crowd I have had to deal with in the San Fran Bay Area. ALL of them have macmachines, and I find it difficult not to smirk when I tell them every few months that they need to purchase the latest overpriced version of their graphics boxen in order to keep up with all the ‘new developements’, LOL.

What makes you think that conservatives on FreeRepublic are homosexual? You come on Apple threads and repeatedly make that scurrilous blanket and false accusation about thousands of your fellow Freepers. . . attempting to start a flame war. YOU HAVE NO FACTS OR EVIDENCE TO BACK UP YOUR CLAIMS, so cut out the insults!

You have smeared everyone on this thread and every other Apple user on FreeRepublic. . . and you do it repeatedly. . . and you do it maliciously. I pinged everyone who has replied positively on this thread that you have smeared and insulted. They can judge your behavior for what it is. . . that of a rude, uncivilized, adolescent brat.

[Swordmaker]

Semantics aren’t acronyms. No wonder you’re a fanboy.

You again demonstrate your total ignorance of semantics. Semantics is the study of MEANING, you idiot. It matters not whether meaning is transmitted in words or acronyms. Don't try to educate an educated man. . . when you only can show how uneducated you most certainly must be to have posted that. . . and you devolved to insults, argumentum ad hominem, the last refuge of the person without facts or logic.

You suffer from a severe case of MAPS. . .

Swordmaker's and Kathy's proposed diagnosis for the new IDC-10 addenda:

90210 iOS Munchausen's Apple-Plexy Syndrome (MAPS), The overwhelming compulsion to post negative, judgmental, aggressive, and false commentary on any website thread related to Apple products wherever found, including phobic reaction to projected Apple user euphoria. First and subsequent encounters.