PJS-4.2 ads removal?

Discussion in 'OS X Yosemite (10.10)' started by jmy2469, Jan 7, 2015.

  1. jmy2469 macrumors member

    Joined:
    Jun 10, 2010
    Location:
    Palm Harbor, FL
    #1
    Made the mistake of letting my brother use my Macbook Pro. Now I have PJS-4.2 ads popping up all over the place. How can I find out where these are coming from and how can I remove them?
     
  2. BasicGreatGuy Contributor

    BasicGreatGuy

    Joined:
    Sep 21, 2012
    Location:
    In the middle of several books.
    #2
    Download AdwareMedic and see if it removes it. Very good program and it's free.
     
  3. jmy2469 thread starter macrumors member

    Joined:
    Jun 10, 2010
    Location:
    Palm Harbor, FL
    #3
    I tried AdwareMedic and it did not help. Nothing came up after I scanned my laptop.
     
  4. simonsi macrumors 601

    simonsi

    Joined:
    Jan 3, 2014
    Location:
    Auckland
    #4
    Ask brother <exactly> what he did, what he downloaded and installed. Assuming to have an admin password did he have that?

    Install ClamXAV from the Mac App Store and scan everything.
     
  5. BasicGreatGuy Contributor

    BasicGreatGuy

    Joined:
    Sep 21, 2012
    Location:
    In the middle of several books.
    #5
    Do you have a Time Machine backup for right before you loaned out the Mac? If so, try that.

    Nothing is coming up in a Google search on this problem unfortunately.
     
  6. BrendanFlanagan macrumors newbie

    Joined:
    Jan 7, 2015
    #6
    I have the same problem and its really pissing me off
     
  7. BasicGreatGuy Contributor

    BasicGreatGuy

    Joined:
    Sep 21, 2012
    Location:
    In the middle of several books.
    #7
    What have you installed recently? Have you clicked on any popups or warnings?
     
  8. simonsi macrumors 601

    simonsi

    Joined:
    Jan 3, 2014
    Location:
    Auckland
    #8
    AdwareMedic
    ClamXAV
    Check your browser extensions, make sure none you don't recognise are installed, turn extensions off in Safari and see if they stop.
     
  9. BrendanFlanagan macrumors newbie

    Joined:
    Jan 7, 2015
    #9
    No, i haven't downloaded anything today. I accidentally clicked something on a website thats like buzzfeed and then i got this pop up that would keep coming up no matter how many times i clicked ok or the close button. Since i could not do anything else, i had to force shutdown my computer. I have tried to look in my safari extensions but there are non. I called the number it said for that pop up and they wanted to charge me $250 to get rid of it. So of course i said no. I did have MacKeeper for a while but i deleted it after i got the ad pop ups. Also in my browser, random words will be blue and if i hover over them, they're links "powered by PJS-4.2"

    ----------

    and i have tried completely turning off extensions, even though i have none
     
  10. DNSamurai macrumors newbie

    Joined:
    Nov 1, 2014
    #11
    I got this today to. Super annoying.

    Here was the fix:

    Download CCCleaner for Mac. Uninstall all startup programs you don't recognize. Restart computer.
     
  11. BrendanFlanagan macrumors newbie

    Joined:
    Jan 7, 2015
    #12
    I deleted a few of them, but are any of these unnecessary? Screen Shot 2015-01-08 at 12.18.11 AM.png
     
  12. BrendanFlanagan macrumors newbie

    Joined:
    Jan 7, 2015
  13. etanman26 macrumors newbie

    Joined:
    Jan 7, 2015
    #14
    I'm having the same problem and I've downloaded CCleaner but what should I delete? The ads are really bothering me at this point
     
  14. BrendanFlanagan macrumors newbie

    Joined:
    Jan 7, 2015
    #15
    Anything that you have no idea what it is. Try to take a guess what is needed. Like if you look at my photo above, i didn't know what the random link with steamclean was, but i do have Steam, so i didn't delete it. I only had 2 or three i deleted that i couldnt even try to take a guess at
     
  15. etanman26 macrumors newbie

    Joined:
    Jan 7, 2015
    #16
    I tried attaching the ones that have showed up on mine
     

    Attached Files:

  16. BrendanFlanagan macrumors newbie

    Joined:
    Jan 7, 2015
    #17
    Remove the top 4 active ones and the one that ends with daemon. thats what i did. restart and it all goes away!!! :)

    ----------

    Im also running the extension now on safari called ABP. It stops pop ups so that might also effect it
     
  17. etanman26 macrumors newbie

    Joined:
    Jan 7, 2015
    #18
    Thanks! It seems to be gone now! If I have any more questions, I'll be sure to ask here. I just hope there won't be any lingering effects on my computer.
     
  18. jwarner macrumors newbie

    Joined:
    Jan 8, 2015
    #19
    This has taken over my mac as well. I tried the above recommendations, but none of them worked. It seems like pjs 4.2 is a pretty new adware, since nothing is coming up on google. Help!
     
  19. cpot187 macrumors newbie

    Joined:
    Jan 8, 2015
    #21
    I had the same issue and was able to remove it by downloading and running the Adware Removal Guide.

    http://www.thesafemac.com/arg/

    I tried all other options previously listed in the thread, with no luck. Adware Removal Guide was quick and painless. Download and run, restart.
     
  20. BasicGreatGuy Contributor

    BasicGreatGuy

    Joined:
    Sep 21, 2012
    Location:
    In the middle of several books.
    #22
    I mentioned AdwareMedic early on in the thread. Odd that it didn't work for the OP and did for you.
     
  21. radar1030 macrumors newbie

    Joined:
    Jan 8, 2015
    #23
    This is REALLY annoying. CCleaner did not work, and I used the correct version for OS X Yosemite. I started getting the PJS 4.2 ads yesterday (Jan 7, 2015), there are no files on my Mac, and I've searched everywhere. I hope the creators of this malware are prepared to have the **** sued out of them.
     
  22. jwarner macrumors newbie

    Joined:
    Jan 8, 2015
    #24
    Cleaner did not work and neither did AdWareMedic. I was able to disable it for 24 hours through the actual ad program and it worked, but it actually warned me that it would be back within 24 hours. Their "uninstall" process, which is found in the settings of these ads (same place where you can disable it for 24 hours) instructs me to delete my Safari extensions. I deleted EVERY extension and it's still here. This is a stubborn one.
     
  23. GalvinTjime macrumors newbie

    Joined:
    Jan 8, 2015
    #25
    We just ran across this specific piece of malware today at work and managed to remove it. For us, AdwareMedic found PJS-4.2 to be some variant of the malware Conduit. We went through the removal process detailed here http://www.thesafemac.com/arg-conduit/ and it seems to have successfully removed the malware from the infected computer. Hopefully this will help you to find and remove it.

    I'll update this if I learn anything else or if (heaven forbid) that it should come back on said machine.

    Oh, also, note that you have to be an administrator for the removal process to work. I know it's foolish to say, but I just have to make sure. :p
     

Share This Page