VSearch Mac Adware – The new Adware on Mac Os X Mavericks

VSearch Mac Adware – The new Adware on Mac Os X Mavericks

VSearch Mac Adware change google search results

VSearch Mac Adware change google search results

Does those advertising seems familiar to you?!

If yes, you might have the “VSearch Mac Adware” also known as the “Downlite” or “Conduit” installed on your Mac…

Lately, we’ve encountered this Adware quite a few times on our customers’ Macs. Sometimes users hasn’t even noticed that something was going wrong…

This Adware changes your browser Homepage to its own, web search results by adding a lot of advertising (as seen on the picture above), brings pop up windows to your Desktop and prevent some settings to be saved under Safari.

Basically, it’s an hidden program that runs in the background and modify browser’s traffic.

Where did i get this Adware from?

It gets installed when you try to watch TV or movies from unofficial sources. The most known website to get it from is “PirateBay”… a famous Torrent website!

For it to install, the user must still enter an administrator user name and password, so always be careful when entering your administrator password.

How to get rid of VSearch Mac Adware, Downlite or Conduit on Mac?

Thomas Reed of “The Safe Mac” explains how to get rid of it :

Move the following items to the trash. Note that removing many of these files will require administrator access, so you will need to be sure you are logged in to an admin account on your Mac. If you are not, you will be unable to remove some of them. Also, some of these files may not be present in all variants of this adware. If you don’t know how to locate a file based on the path given below, you should read Locating files from paths.

/Library/Application Support/VSearch
/Library/LaunchAgents/com.vsearch.agent.plist
/Library/LaunchDaemons/com.vsearch.daemon.plist
/Library/LaunchDaemons/com.vsearch.helper.plist
/Library/LaunchDaemons/Jack.plist
/Library/PrivilegedHelperTools/Jack
/System/Library/Frameworks/VSearch.framework

After you have moved these items to the trash, restart the computer. After restarting, you can empty the trash.

I thought there were no Adware, Malware or Virus on Mac

It is definitely not true! However, Mac Os X is much more secured than Microsoft Windows. Also, Apple has 2 good built-in soft-wares to prevent Adware and Malware to be installed on Mac named “GateKeeper” and “XProtect”. But as the Apple’s market is growing, we have to be prepared to see more case like this…

So you are wondering why could VSearch Mac Adware be installed since it’s known as a malware?

Linc Davis on a thread on Apple’s Support Communities found the reason:

You may be wondering why you didn’t get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that the DownLite developer has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing, has not done so, even though it’s aware of the problem. This failure of oversight is inexcusable and has compromised both Gatekeeper and the Developer ID program. You can’t rely on Gatekeeper alone to protect you from harmful software.

How can i protect myself from other Adwares on Mac?

As seen in this post, you can follow some basic rules to protect your Mac from unwanted soft-wares.

(EDIT)

Thomas Reed has since 2015 joined the Malwarebytes team to help develop a very useful tool named: Malwarebytes for Mac

It is a free software for home user but has a premium package that the Free version doesn’t include.

It has became a must have software for Mac users and have helped many of our customers in Phuket.

3 thoughts on “VSearch Mac Adware – The new Adware on Mac Os X Mavericks

  1. SByrnes

    Search adware is on a rampage! But thank goodness that I’ve found a reliable source. Thank you once again. Anyways, is it for free?

    Reply
  2. Aidan Fox

    I removed all the files and it didn’t work, the virus is still present.. Although I emptied my trash before restarting and read the part about emptying the trash post-reboot afterwards. What else can I do?

    Reply

Leave a Reply

Your email address will not be published. Required fields are marked *