Solved

Genieo - how to get rid of it on a Mac / Firefox?

Posted on 2014-03-27
22
1,978 Views
Last Modified: 2014-03-27
Hi

I am being pestered by genieo. I use a MacBook Pro with OS X 10.7.5. and Firefox 27.0.1 and find all my Firefox searches hijacked by genieo.

I have tried very many things including meticulously going through all steps in this guide:

http://www.thesafemac.com/arg-genieo/

I found only one of the files listed there and deleted this, but genieo was still there.

What do I need to do to get rid of this malware???? Any help most welcome!!
0
Comment
Question by:thuna72
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 12
  • 6
  • 2
  • +1
22 Comments
 
LVL 53

Expert Comment

by:strung
ID: 39958706
Go to http://www.genieo.com/faq/#uninstall, and download the uninstaller program provided in the “On Mac” section.
0
 

Author Comment

by:thuna72
ID: 39958723
strung, thanks, but are you sure this is a good idea? i've read elsewhere that the uninstaller actually makes things worse. from reading in forums what i've read, i don't trust anything that comes directly from genieo.
0
 
LVL 53

Expert Comment

by:strung
ID: 39958761
On further search, you are right. It seems the only reliable way to remove this software is to follow the SafeMac instructions.

Are you sure you were looking in the right library file for the files to delete? There are three library files on your computer. You can access each of them by pulling down the GO menu in Finder to Go to Folder and copying and pasting one of the following lines and hitting return:

/library

~/library

/system/library
0
Create the perfect environment for any meeting

You might have a modern environment with all sorts of high-tech equipment, but what makes it worthwhile is how you seamlessly bring together the presentation with audio, video and lighting. The ATEN Control System provides integrated control and system automation.

 

Author Comment

by:thuna72
ID: 39958784
i'm not sure i looked int he right library file, and actually i was going to ask you that. what i did: i copied each of the below lines separately into the "Go to Folder"-window (they are the ones on the safemac list):

/Applications/Genieo
/Applications/Uninstall Genieo
/Library/LaunchAgents/com.genieoinnovation.macextension.plist
/Library/LaunchAgents/com.genieoinnovation.macextension.client.plist
/Library/LaunchAgents/com.genieo.engine.plist
/Library/PrivilegedHelperTools/com.genieoinnovation.macextension.client
/usr/lib/libgenkit.dylib
/usr/lib/libgenkitsa.dylib
/usr/lib/libimckit.dylib
/usr/lib/libimckitsa.dylib

the only one that got a hit was one of the /usr/lib-pages, i don't know which one any more. then i followed all the other steps on macsafe but  genieo was still there. did i search the wrong library?
0
 
LVL 30

Expert Comment

by:Sudeep Sharma
ID: 39958841
Is it appearing in Safari or in Firefox or any other browser?

Sudeep
0
 

Author Comment

by:thuna72
ID: 39958853
i think i have just found a way to delete it from firefox just now (keep my fingers crossed):

on firefox Help > Troubleshooting Information and then in the following window on the top right "Reset Firefox".

but it still appears in safari, which i also use frequently.
0
 

Author Comment

by:thuna72
ID: 39958861
.... i think i was now also able to delete it on safari, uninstalled the omnibar plugin and reset the homepage to google.com. i'll gladly get back to you if genieo jumps back at me, which i'm afraid it might do after all i've read about it.... thanks for the help!
0
 
LVL 30

Expert Comment

by:Sudeep Sharma
ID: 39958885
0
 

Author Comment

by:thuna72
ID: 39958892
thanks sudeep. i'm using mackeeper, is that not enough, then?
0
 
LVL 53

Expert Comment

by:strung
ID: 39958903
MacKeeper is problematic too. I would get rid of it too.
0
 

Author Comment

by:thuna72
ID: 39958913
are you serious?? i just spent $50 on it...
0
 
LVL 53

Expert Comment

by:strung
ID: 39958914
The problem you are having it that you are putting file names, not folder names into go to folder. You have to put in just the folder names, the find the file in the folder and delete it.



GO to Folder:     /Applications

then delete files named:

Genieo
Uninstall Genieo

GO to Folder:    /Library/LaunchAgents

then delete files named:

com.genieoinnovation.macextension.plist
com.genieoinnovation.macextension.client.plist
com.genieo.engine.plist


GO to Folder:    /Library/PrivilegedHelperTools

then delete file named:

com.genieoinnovation.macextension.client


GO to Folder:    /usr/lib

then delete files named:

libgenkit.dylib
libgenkitsa.dylib
libimckit.dylib
libimckitsa.dylib
0
 

Author Comment

by:thuna72
ID: 39958945
ok thanks i checked all those folders and all the listed files seem to be gone, thanks for the clarification! so you mean i need to uninstall mackeeper?
0
 
LVL 53

Accepted Solution

by:
strung earned 500 total points
ID: 39958970
MacKeeper has a lot of mixed reviews. I suggest you google "mackeeper review" and do your own research. Here are a few:

https://discussions.apple.com/docs/DOC-3036

https://discussions.apple.com/message/24791231#24791231

http://www.insanelymac.com/_/apple/mac-keeper-25-review-r996
0
 

Author Comment

by:thuna72
ID: 39958996
oh-oh that looks pretty bad... well, another one bites the dust. thanks for directing my attention to this!
0
 
LVL 40

Expert Comment

by:Eoin OSullivan
ID: 39959005
I'd second strung's vote against MacKeeper .. it does very little useful on OSX.  I'd not recommend it and would second a vote to uninstall it and look for a refund.

A true anti-virus tool like Avast for OSX is your best bet .. or ClamXAV if you want a free option.
0
 

Author Comment

by:thuna72
ID: 39959013
thanks! i'll try to get a refund.
0
 

Author Comment

by:thuna72
ID: 39959020
i was actually looking for a good program to unclutter my mac from old logs and the like rather than an anti-virus progam....  do you have any suggestions for that?
0
 
LVL 53

Expert Comment

by:strung
ID: 39959044
The freeware Onyx is what you are looking for:

http://www.titanium.free.fr
0
 

Author Comment

by:thuna72
ID: 39959049
great, thank you!
0
 
LVL 40

Expert Comment

by:Eoin OSullivan
ID: 39959087
OSX has scripts that automatically purge log files on a periodic basis .. as long as your mac is running regularly these will be cleaned out anyway.

Onyx is a good tool and powerful but use with caution .. purging log files right, left and centre can be dangerous to the uninitiated.

Please ensure you've a TimeMachine or other complete system backup at all times Just In Case!!
0
 

Author Comment

by:thuna72
ID: 39959091
yes, thanks, i tend to have several backups in several places.... thanks for the info!
0

Featured Post

Increase your protection from Zero Day threats!

Running two Antivirus' is never a good idea.
Taking advantage of Multiple Security layers on the other hand can often save your hide.
See which top notch security software brands have been proven to happily coexist together.
Reduce your chances of becoming a statistic.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
CodeIgniter XSS confusion 5 110
Vulnerability assesment , how much should I charge? 3 130
EXCHANGE 2007, EXCHANGE 2013 8 149
Equivalent of WSUS for Solaris, AIX and Cisco devices 11 132
If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
A professional opinion on which Apple product to buy, and a tidbit about the WWDC.
This tutorial gives a high-level tour of the interface of Marketo (a marketing automation tool to help businesses track and engage prospective customers and drive them to purchase). You will see the main areas including Marketing Activities, Design …
In this Experts Exchange video Micro Tutorial, I'm going to show how small business owners who use Google Apps can save money by setting up what is called a catch-all email address in their Gmail accounts. By using the catch-all feature, small busin…

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question