A lot of Mac users have recently reported an issue where a lot of random ads, page-redirects and online suggestions pop-ups on their screens while they are using their browser to surf the Internet, where the one common thing between all the advertising materials is that they seem to have something to do with the MacKeeper optimization tool for Mac machines. MacKeeper, in itself, is a legitimate tool/program for Mac which offers a number of useful features such as deletion of redundant and junk data, improvement of the online and offline security of the computer, boosting of the machine’s performance as a whole. However, if you are experiencing a lot of seemingly random advertisements, redirects and other nagging promotional material that prompt you to download the MacKeeper program, then you might have an unwanted and maybe even a potentially hazardous program inside of your Mac computer that you’d need to get rid of.
What could you be potentially be dealing with?
Normally, software that triggers unwanted ads generation in the users’ browsers is nothing new and shouldn’t be a reason for panicking since here we are not talking about Ransomware, Trojan Horses, Spyware or other similar highly-dangerous virus categories. That said, if there are too many ads on your screen and they aren’t coming from any particular site and instead seem to follow you to each and every page that you visit, then you may need to take certain precautions. In this case, the ads pointing you to MacKeeper might not be dangerous in themselves since the promoted program is legitimate but there is nothing to say that you won’t, at a certain point, get shown other, more questionable advertisements.
What are the dangers that you can expect?
As said above, ads like the ones redirecting you to the MacKeeper tool shouldn’t pose a direct threat to your PC. However, the software responsible for their generation could be unpredictable and the content, the quality and the reliability of the advertisements can easily change for the worse before you even know it, thus, leading to a number of potential hazards for your Mac machine. The instructions we’ve posted above can help you pinpoint any undesirable software and remove it but you should also know how to avoid it in the future so that you won’t need to uninstall it all over again.
Usually, unwanted ad-generating apps like adware, browser hijackers and any software that might be redirecting you to MacKeeper could come from spam messages, shady online requests and also in file bundles with other programs. In fact, some have reported that apps like the one responsible for the MacKeeper redirects might actually come in bundles with the MacKeeper program as an additionally added component. Oftentimes such components are added to legit programs in order to reach more computers and users normally tend to fail to notice their presence in the installer. This might also be the case with some installation bundles with MacKeeper as their main program. However, a quick look in the Advanced menu should allow the user to deselect any of the additionally included apps and thus leave them out in order to only install the main program.
|Danger Level||Medium (nowhere near threats like Ransomware, but still a security risk)|
|Symptoms||If you are getting a lot of ads and redirects related to MacKeeper, then you are likely dealing with this particular browser-redirect software.|
|Distribution Method||Mostly through getting bundled with legitimate programs such as MacKeeper.|
MacKeeper Redirect Removal
The first thing you need to do is to Quit Safari (if it is opened). If you have trouble closing it normally, you may need to Force Quit Safari:
You can choose the Apple menu and click on Force Quit.
Alternatively you can simultaneously press ⌘ (the Command key situated next to the space bar), Option (the key right next to it) and Escape (the key located at the upper left corner of your keyboard).
If you have done it right a dialog box titled Force Quit Applications will open up.
In this new dialog window select Safari, then press the Force Quit button, then confirm with Force Quit again.
Close the dialog box/window.
WARNING! READ CAREFULLY BEFORE PROCEEDING!
Once there, look at all the processes: if you believe any of them are hijacking your results, or are part of the problem, highlight the process with your mouse, then click the “i” button at the top. This will open up the following box:
Now click on Sample at the bottom:
Do this for all processes you believe are part of the threat, and run any suspicious files in our online virus scanner, then delete the malicious files:
The next step is to safely launch Safari again. Press and hold the Shift key while relaunching Safari. This will prevent Safari’s previously opened pages from loading again. Once Safari is opened up, you can release the Shift key.
On the off chance that you are still having trouble with scripts interrupting the closing of unwanted pages in Safari, you may need to take some additional measures.
First, Force Quit Safari again.
Now if you are using a Wi-Fi connection turn it off by selecting Wi-Fi off in you Mac’s Menu. If you are using a cable internet (Ethernet connection), disconnect the Ethernet cable.
Re-Launch Safari but don’t forget to press and hold the Shift button while doing it, so no previous pages can be opened up. Now, Click on Preferences in the Safari menu,
and then again on the Extensions tab,
Select and Uninstall any extensions that you don’t recognize by clicking on the Uninstall button. If you are not sure and don’t want to take any risks you can safely uninstall all extensions, none are required for normal system operation.
The threat has likely infected all of your browsers. The instructions below need to be applied for all browsers you are using.
Again select Preferences in the Safari Menu, but this time click on the Privacy tab,
Now click on Remove All Website Data, confirm with Remove Now. Keep in mind that after you do this all stored website data will be deleted. You will need to sign-in again for all websites that require any form of authentication.
Still in the Preferences menu, hit the General tab
Check if your Homepage is the one you have selected, if not change it to whatever you prefer.
Select the History menu this time, and click on Clear History. This way you will prevent accidentally opening a problematic web page again.
How to Remove MacKeeper Redirect From Firefox in OSX:
Open Firefox, click on (top right) ——-> Add-ons. Hit Extensions next.
The problem should be lurking somewhere around here – Remove it. Then Refresh Your Firefox Settings.
How to Remove MacKeeper Redirect From Chrome in OSX:
Start Chrome, click —–>More Tools —–> Extensions. There, find the malware and select .
Click again, and proceed to Settings —> Search, the fourth tab, select Manage Search Engines. Delete everything but the search engines you normally use. After that Reset Your Chrome Settings.
If the guide doesn’t help, download the anti-virus program we recommended or try our free online virus scanner. Also, you can always ask us in the comments for help!