beap.gemini.yahoo.com adware removal.

[halofan56]

Has anyone has dealt with with this beap.gemini.yahoo.com adware that I cannot get rid of. I have no extensions in safari or google chrome, cannot see it in activity monitor. It blocks certain articles in yahoo.com, and certain quires in yahoo.com, for example, if I want to go to best buy in a search, I click on the best buy.com it blocks me from going to it. Also I search the launch agents. Below is the screen shot, any browser I use does similar what safari does, so its system wide.

 

[Taz Mangus]

Did you look in /Library/LaunchAgents and /Library/LaunchDaemons? Not clear if you were referring to ~/Library/LaunchAgents or /Library/LaunchAgents. Also, try using something like malwareByyes to scan for malware on your computer. If you create a clean user account, restart the computer, login to the new user does the issue still happen?

 

[halofan56]

Did you look in /Library/LaunchAgents and /Library/LaunchDaemons? Not clear if you were referring to ~/Library/LaunchAgents or /Library/LaunchAgents. Also, try using something like malwareByyes to scan for malware on your computer. If you create a clean user account, restart the computer, login to the new user does the issue still happen?

I checked in there, did not see anything. Malware bytes could not detect it. My own program ClamXAV could not detect it.

 

[KALLT]

Have you checked your network settings also?

You might have some luck with EtreCheck also.

 

[Fishrrman]

Download MalwareBytes and run it:

Official Site | Malwarebytes: Antivirus, Anti-Malware & Privacy

Malwarebytes offers real-time antivirus, advanced anti-malware and privacy protection for all your devices. Launched in 2004 as a free virus scan, we still offer a free basic version 20 years later. Learn more.

www.malwarebytes.com

IMPORTANT:
Select the "home" option.
It's a FREE download

IMPORTANT:
You DO NOT NEED TO BUY A SUBSCRIPTION to run MalwareBytes.
It will run FOREVER IN FREE MODE.
When you open it, IGNORE the button to "Upgrade Now" or "Activate License".
Just click "Scan".
Again, you DO NOT have to buy the pay-for version!

 

[Taz Mangus]

Download MalwareBytes and run it:

Official Site | Malwarebytes: Antivirus, Anti-Malware & Privacy

Malwarebytes offers real-time antivirus, advanced anti-malware and privacy protection for all your devices. Launched in 2004 as a free virus scan, we still offer a free basic version 20 years later. Learn more.

www.malwarebytes.com

IMPORTANT:
Select the "home" option.
It's a FREE download

IMPORTANT:
You DO NOT NEED TO BUY A SUBSCRIPTION to run MalwareBytes.
It will run FOREVER IN FREE MODE.
When you open it, IGNORE the button to "Upgrade Now" or "Activate License".
Just click "Scan".
Again, you DO NOT have to buy the pay-for version!

The OP already tried MalwareByes, see post #3.

 

[Taz Mangus]

I checked in there, did not see anything. Malware bytes could not detect it. My own program ClamXAV could not detect it.

Did you try a clean new user account? I would suggest restarting after you create the new user account and login to the new user account.

 

[halofan56]

Did you try a clean new user account? I would suggest restarting after you create the new user account and login to the new user account.

My Wife's account was created after the this and it has the same problem. So it's systemwide

 

[MacGizmo]

That's not malware... that's Safari not loading the site because the website is using too many auto-forwards for ads that don't load for the link. They're trying to make money with every link click with automated ad services that many times have broken javascript code. It's a common problem.

 

[halofan56]

Well thanks for clearing that up. It’s makes sense now. I am assuming Yahoo is Aware of this or too much traffic? It’s happens on any browser you use, not just safari.

 

[Taz Mangus]

Well thanks for clearing that up. It’s makes sense now. I am assuming Yahoo is Aware of this or too much traffic? It’s happens on any browser you use, not just safari.

Can you give a more detailed explanation of how beap.gemini.yahoo.com shows up. In your original post, you mention putting "Best Buy" in the search and clicking on the result?

 

[halofan56]

If I search for best buy, for example, in the search box, this is the the page you would see. (I made it for focused on this area, I would get this page below;. for the results......

If i click on the upper left, Best Buy, The Official ......I would get the error screen below. If you go down to the lower link, Best Buy.com, it would normally load the page as requested. You can do that on any browser, and get the same result. I believe you are correct. It's a yahoo issue. It only happens on www.yahoo.com website. If you click on certain articles, it happens on those as well.

 

[Taz Mangus]

Does it always happen for you?

 

[halofan56]

I think Macgizmo answered the question. It’s yahoo’s issue, not what we thought. Thanks. I’ll accept his answer.

 

[MacGizmo]

The first links in almost any search are paid ads. They're automated via javascript code. Many times that code is broken, and the site it appears on doesn't even know it because it's all automated.

 

[halofan56]

Well, The AV people out there are all making that this is some kind of adware or malware. it just riddled with it. Just to get you to buy their software. Even my own AV people. Thanks for enlightening me on this.