Hi all
Recently I downloaded a disk image file![]()
from the internet which had some consequences.
It installed MacKeeper![]()
and a HelperBar safari extension. Those are the files![]()
I could find. However, when I read articles on the internet, some words from that article are highlighted, to point out it's a link.
Those links are something scam like, if you click on it they demand your phone number so you can download more content about the article. (see screenshots) It even does it in this thread (see third screenshot) I don't think malware is the right word but I can't find a better one.
Anyways, this is caused by that same .dmg file. Where could the cause be hiding, if it isn't in the application folder or in the safari extensions section? Adblocking the thing doesn't help either. I downloaded 'Malwarebytes without any results.
I thank you in advance
Lorenz
UPDATE
I was able to block the ad with adblock. Though this is not a solution because it also removes the linked word (the word is part of the article). Any help still welcome.
UPDATE 2.0
I got rid of the problem by simply restoring a backup from right before downloading the dmg file.
Take away message: don't download video players which claim they have the ability to play .wmv files. In this case the video player Movist, if I remember correctly.
Recently I downloaded a disk image file
from the internet which had some consequences.It installed MacKeeper
and a HelperBar safari extension. Those are the files I could find. However, when I read articles on the internet, some words from that article are highlighted, to point out it's a link.Those links are something scam like, if you click on it they demand your phone number so you can download more content about the article. (see screenshots) It even does it in this thread (see third screenshot) I don't think malware is the right word but I can't find a better one.
Anyways, this is caused by that same .dmg file. Where could the cause be hiding, if it isn't in the application folder or in the safari extensions section? Adblocking the thing doesn't help either. I downloaded 'Malwarebytes without any results.
I thank you in advance
Lorenz
UPDATE
I was able to block the ad with adblock. Though this is not a solution because it also removes the linked word (the word is part of the article). Any help still welcome.
UPDATE 2.0
I got rid of the problem by simply restoring a backup from right before downloading the dmg file.
Take away message: don't download video players which claim they have the ability to play .wmv files. In this case the video player Movist, if I remember correctly.
Attachments
Last edited by a moderator:
