How to remove adware from Mac that shows pop-up ads and unwanted graphics

 

Removing adware from Mac portables and desktops is simple and only takes a few minutes. Follow these instructions to uninstall and/or remove ad-injection adware software from your Mac

 

remove adware from safariAd-injection software is a type of advertising software that originates from third-party software download sites. Software that is downloaded from these sites can be modified to install software you want along with the adware/ad-injection software without your knowledge. If you are seeing pop-up advertising windows or graphics while web surfing on your Mac, you are most likely victim of ad-injection software. These ads will still display even if “Block pop-up windows” is enabled in your Safari preferences. Most of the time, Ad-injection software will also change your preferred homepage and search engine. These instructions will show you how to get rid of adware on Mac computers.

 

Check extensions in your Safari Preferences

If you are experiencing the symptoms above, go to Safari > Preferences, then follow these steps to remove the adware:

  1. Click the General tab at the top of the window. Set your Homepage field to the website you wish to open when you launch Safari. If you see a site in the homepage field you are not familiar with, this could be a sign that you have adware on your Mac.
  2. Click the Search tab (or Search dropdown in the General tab) to ensure the default search engine is set to your preferred search engine. Most people prefer using Google as their default search engine.
  3. Next, click the Extensions tab at the top of the window. If there are extensions installed you are unfamiliar with, select the extension and click Uninstall. Some main examples of adware/ad-injection extensions, are:
    • GoPhoto.It
    • Trovi
    • Amazon/Ebay Shopping Assistant by Spigot Inc.
    • Searchme by Spigot, Inc.
    • Slick Savings by Spigot Inc.
    • Omnibar

 

Remove specific ad-injection software

This method uses finder to search for and locate ad-injection software. Once the software is located, it can be deleted from your Mac. This method is a little more technical and takes longer since you have to remove one file at a time:

  1. Open a new Finder window and click View from the drop down menu at the top of your screen and then click as Columns.
  2. Click Go from the drop down menu at the top of your screen and then click Go to Folder.
  3. Copy the text from each line in the list below and paste into the Go to Folder search bar
    • If the file in the list is installed on your Mac, a window will open with the selected file. To remove, drag that item to the Trash (be sure to drag only that item and not others). If prompted to enter your administrative password, enter it and hit return.
    • If the file is not present on your Mac, the message “folder can’t be found” will appear. You’re your way through the rest of the list to remove any other files.

Remove Downlite, VSearch, Conduit, Trovi, MyBrand, Search Protect

Use Go to Folder to find and remove each of these items:

  • /System/Library/Frameworks/VSearch.framework
  • /Library/PrivilegedHelperTools/Jack
  • /System/Library/Frameworks/v.framework
  • /Library/Application Support/Conduit/
  • ~/Library/Internet Plug-/Applications/SearchProtect.app
  • Ins/ConduitNPAPIPlugin.plugin
  • /Library/InputManagers/CTLoader/
  • ~/Library/Internet Plug-Ins/TroviNPAPIPlugin.plugin

 

After you have moved these items to the trash, you will need to restart your Mac. After your Mac has restarted, choose Finder from the drop down menu at the top of your screen and then click Empty Trash. This will completely remove the ad-injection files from your Mac.

How to remove InstallMac and Genieo from your Mac

If you the Genieo or InstallMac processes are running on your Mac, follow these instructions to end the processes.

  1. Launch the Activity Monitor application. This can be found in Applications > Utilities > Activity monitor. Alternatively, you can use Spotlight (Command-Space bar) and search for Activity Monitor. Once the search results are populated,  choose Activity Monitor from the results.
  2. Once Activity Monitor launches, click the CPU tab to view all running processes. To sort the processes alphabetically, click Process Name at the top.
  3. Look for the processes Genieo and InstallMac. If either of these are present, select the procese, then click the Force Quit button (x) in the upper-left corner of the window.
  4. After force quitting these processes, quit Activity Monitor.
  5. Open a new Finder window and click View from the drop down menu at the top of your screen and then click as Columns.
  6. Click Go from the drop down menu at the top of your screen and then click Go to Folder. Copy and paste /private/etc/launchd.conf. into the search bar. Move the item to the trash and empty your trash. Be sure to restart your Mac after emptying the trash.
  7. Use the Go to Folder function to search for and remove each of these items:
  • /Applications/InstallMac
  • /usr/lib/libgenkitsa.dylib
  • /usr/lib/libgenkit.dylib
  • /Applications/Genieo
  • /Applications/Uninstall Genieo
  • ~/Library/Application Support/Genieo/
  • /Applications/Uninstall IM Completer.app
  • /usr/lib/libimckit.dylib
  • /usr/lib/libimckitsa.dylib
  • /Library/PrivilegedHelperTools/com.genieoinnovation.macextension.client
  • ~/Library/Application Support/com.genieoinnovation.Installer/

After removing these, be sure to restart your Mac.

Next, use the Go to Folder function to find and delete /Library/Frameworks/GenieoExtra.framework.

After removing this item, be sure to restart your Mac.

After your Mac has restarted, choose Finder from the drop down menu at the top of your screen and then click Empty Trash. This will completely remove the ad-injection files from your Mac

How to remove other adware files

It is not necessary to to remove these files, however it can help ensure all adware has been removed from your Mac. If you choose to remove these files, be sure to delete the files in the above sections. Using the Go to Folder function, search for and delete each item from this list:

  • /Library/LaunchAgents/com.genieo.engine.plist
  • /Library/LaunchAgents/com.genieoinnovation.macextension.client.plist
  • /Library/LaunchDaemons/com.genieoinnovation.macextension.client.plist
  • /Library/LaunchAgents/com.genieo.completer.update.plist
  • /Library/LaunchDaemons/Jack.plist
  • ~/Conduit/
  • ~/Trovi/
  • ~/Library/Caches/com.Conduit.takeOverSearchAssetsMac
  • ~/Library/Caches/com.VSearch.bulk.installer
  • ~/Library/Caches/com.VSearch.VSinstaller
  • ~/Library/LaunchAgents/com.genieo.completer.download.plist
  • /Library/LaunchAgents/com.genieo.engine.plist
  • ~/Library/Preferences/com.genieo.global.settings.plist.lockfile
  • /Library/LaunchAgents/com.genieoinnovation.macextension.plist
  • ~/Library/LaunchAgents/com.genieo.completer.ltvbit.plist
  • ~/Library/LaunchAgents/com.genieo.completer.update.plist
  • ~/Library/Preferences/com.geneio.global.settings.plist
  • ~/Library/Saved Application State/com.genieo.RemoveGenieoMac.savedState
  • ~/Library/Preferences/com.geneio.settings.plist.lockfile
  • ~/Library/Saved Application State/com.VSearch.bulk.installer.savedstate

 

Next, go to the /Library/LaunchAgents/ directory. Look for and delete any files named com.@@@.agent.plist. The @@@ symbols represent a placeholder which can be any word, including “Apple.” For example: com.Apple.agent.plist.

Then go to the /Library/LaunchDaemons/ directory and search for and delete the files com.@@@.daemon.plist and com.@@@.helper.plist. Again the @@@ symbols can be any word. For example: com.Apple.daemon.plist and com.Apple.helper.plist. Finally, go to the /Library/Application Support/ directory and search for filenames that are the same as the ones used in the LaunchAgents and LaunchDaemons directories. For example, com.Apple.daemon.plist and com.Apple.helper.plist. Move these files to the trash and restart your Mac. After your Mac has restarted, choose Finder from the drop down menu at the top of your screen and then click Empty Trash.

 

Following the instructions above will remove adware and ad-injection software from your Mac and you should no longer experience unwanted popups.

 

 

Posted in:

Leave a Reply

Your email address will not be published. Required fields are marked *