How to remove Genieo virus or trojan from my Mac?

Genieo is a content recommendation engine, that you might have accidentally installed when it masqueraded itself as a necessary update to an existing extension or flash player without your interaction. Genieo changes the behavior of your browsers to allow custom searches and targeted advertising to be presented on a home page, managed through a browser extension. It also tracks what you do and guides your searches and activity to relevant commercial sites and deals.

If you have Norton product for Mac installed, Genieo.app is automatically detected as a threat by Norton and removed from your Mac. To manually remove the malicious extensions and files from Genieo, follow the instructions in the article.

Remove Genieo from your Mac

  1. On the Apple menu bar, in the top-right corner, click the Genieo icon and then select Quit.

  2. From the dock, launch Finder.

  3. In the top-right corner of the Finder window, in the search box, type launchd.confand press return.

  4. To modify the search criteria and look for Genieo files in system files, click the Add (+) icon.

  5. From the toolbar that appears under Search: This Mac, click Kind and then from the drop-down menu, select Other.

  6. In the Select a search attribute dialog box, scroll-down and check the box next to System files, and then click OK.

  7. When the search criteria is set to System files, from the drop-down menu, select are included.

    Search results are modified and system files with the keyword being searched is displayed.

  8. Select launchd.conf from the search results, and move it to Trash.

    If you cannot find "launchd.conf", do not delete ".dylib" files in Step 9. Follow the instructions carefully, deleting any inappropriate file can cause your computer to freeze and probably it may not restart.

  9. On the Apple menu bar, click Go and then select Go to Folder.

    • /Applications/Genieo

    • /Applications/InstallMac

    • /Applications/Uninstall Genieo

    • /Applications/Uninstall IM Completer.app

    • ~/Library/Application Support/com.genieoinnovation.Installer/

    • ~/Library/Application Support/Genieo/

    • ~/Library/LaunchAgents/com.genieo.completer.download.plist

    • ~/Library/LaunchAgents/com.genieo.completer.update.plist

    • /Library/LaunchAgents/com.genieoinnovation.macextension.plist

    • /Library/LaunchAgents/com.genieo.engine.plist

    • /Library/LaunchAgents/com.genieo.completer.update.plist

    • /Library/LaunchDaemons/com.genieoinnovation.macextension.client.plist

    • /Library/PrivilegedHelperTools/com.genieoinnovation.macextension.client

    • /usr/lib/libgenkit.dylib

    • /usr/lib/libgenkitsa.dylib

    • /usr/lib/libimckit.dylib

    • /usr/lib/libimckitsa.dylib

    Where ".app", ".plist", and ".dylib" are all system files for Genieo. Move all the listed files to trash and then empty the Trash.

    You may be prompted to enter the user name and password for the Admin account on your Mac, to move these system files to the Trash.

  10. Restart your computer.

Thank you!

Thank you for using Norton Support.

< Back

Was this information helpful?

DOCID: v103415336_EndUserProfile_en_us
Operating System: Mac OS X
Last modified: 02/24/2015