Skip to content

Instantly share code, notes, and snippets.

@sheagcraig
Last active October 29, 2016 14:22
Show Gist options
  • Save sheagcraig/5c76604f823d45792952 to your computer and use it in GitHub Desktop.
Save sheagcraig/5c76604f823d45792952 to your computer and use it in GitHub Desktop.
Apple Identified Adware
# https://support.apple.com/en-us/ht203987
# TODO: handle Safari extensions:
# Amazon Shopping Assistant by Spigot Inc.
# Ebay Shopping Assistant by Spigot Inc.
# Searchme by Spigot, Inc.
# Slick Savings by Spigot Inc.
# GoPhoto.It
# Omnibar
# Downlite, VSearch, Conduit, Trovi, MyBrand, Search Protect.
/System/Library/Frameworks/v.framework
/System/Library/Frameworks/VSearch.framework
/Library/PrivilegedHelperTools/Jack
/Library/InputManagers/CTLoader/
/Library/Application Support/Conduit/
/Users/*/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
/Users/*/Library/Internet Plug-Ins/TroviNPAPIPlugin.plugin
/Applications/SearchProtect.app
# Genieo, InstallMac.
/private/etc/launchd.conf
/Applications/Genieo
/Applications/InstallMac
/Applications/Uninstall Genieo
/Applications/Uninstall IM Completer.app
/usr/lib/libgenkit.dylib
/usr/lib/libgenkitsa.dylib
/usr/lib/libimckit.dylib
/usr/lib/libimckitsa.dylib
/Library/PrivilegedHelperTools/com.genieoinnovation.macextension.client
/Users/*/Library/Application Support/Genieo/
/Users/*/Library/Application Support/com.genieoinnovation.Installer/
/Library/Frameworks/GenieoExtra.framework
# "Optional" other files.
/Library/LaunchAgents/com.genieo.completer.update.plist
/Library/LaunchAgents/com.genieo.engine.plist
/Library/LaunchAgents/com.genieoinnovation.macextension.client.plist
/Library/LaunchAgents/com.genieoinnovation.macextension.plist
/Library/LaunchDaemons/com.genieoinnovation.macextension.client.plist
/Library/LaunchDaemons/Jack.plist
/Users/*/Conduit/
/Users/*/Trovi/
/Users/*/Library/Caches/com.Conduit.takeOverSearchAssetsMac
/Users/*/Library/Caches/com.VSearch.bulk.installer
/Users/*/Library/Caches/com.VSearch.VSinstaller
/Users/*/Library/LaunchAgents/com.genieo.completer.download.plist
/Users/*/Library/LaunchAgents/com.genieo.completer.ltvbit.plist
/Users/*/Library/LaunchAgents/com.genieo.completer.update.plist
/Users/*/Library/Preferences/com.genieo.global.settings.plist.lockfile
/Users/*/Library/Preferences/com.geneio.settings.plist.lockfile
/Users/*/Library/Preferences/com.geneio.global.settings.plist
/Users/*/Library/Saved Application State/com.genieo.RemoveGenieoMac.savedState
/Users/*/Library/Saved Application State/com.VSearch.bulk.installer.savedstate
# Obfuscated LaunchAgents, LaunchDaemons, Application Support folders handled by Saving Throw.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment