Adware

MacPerformance is malicious application for MacOS, that belongs to OSX Pirrit adware family. It controls settings of Safari, Google Chrome, Mozilla Firefox to create redirects and display ads and pop-ups. It infiltrates Mac computers invisibly or by fraud and starts to generate advertisements, showing phishing pages, encouraging users to download potentially unwanted applications. Sometimes MacPerformance is offered to be installed in a bundle with good applications, and users, confused by the name of the program, think that this is optimisation software for MacOS, and allow installation.

Searchpage.com and SearchPage Tab is are, respectively, dubiuos search engine and browser add-on, that modifies search engine and homepage settings in Safari, Google Chrome, Mozilla Firefox and other browsers. It is also responsible for display of ads, pop-ups and notifications from Searchpage.com. This hijacker was developed by Iron Mountain Technology Limited, with headquaters situated in Hong Kong, as it is stated on their website. The site has a purely advertising purposes, having no value to the end user. Search requests typed in search box on the main page are redirected to search.yahoo.com.

MacOSDefender or MacOSDefender.app is malicious application for MacOS, that takes over search and homepage settings in Safari, Google Chrome or Mozilla Firefox. While searching for something, users can see multiple redirects, for example: goto-searchitnow.global.ssl.fastly.net -> my-search.com -> searchroute-1560352588.us-west-2.elb.amazonaws.com -> alphashoppers.co. Some of this web addresses figured in our previous articles, from what we can make a conclusion, that those hijackers have similar roots and, probably, one team of developers.

SafeFinder is browser extension that is installed in 3 major browsers (Google Chrome, Mozilla Firefox and Internet Explorer). SafeFinder replaces default search and homepage of all your browsers to search.safefinder.com. Even if you remove SafeFinder from Control Panel and extensions from browsers these settings will remain unchanged.

Ads and redirects from Laubeyrietechnology.com in Google Chrome or Mozilla Firefox are caused by installed browser extensions. As a result, users constantly see advertising blocks before and after Google search results. After clicking on links in this ads, they are redirected to the aforementioned domain. Currently, there is a list of certain add-ons, known to be the source of infection, however, malware developers may extend distribution by purchasing more and more Chrome and Firefox extensions projects. Ads and redirects appear soon after updating such e This is a dangerous and perfidious way of spreading the infection, as it hits unsuspecting owners of previously good and safe add-ons.

Search.genieo.com or Genieo virus is malicious Mac application, that is classified as adware and browser hijacker. Virus installs Genieo app and two extensions: Genieo and Omnibar. With help of this add-ons malware takes control over search settings and homepage in Safari, Google Chrome and Mozilla Firefox. It modifies those settings to search.genieo.com. Also, Genieo will generate intrusive ads in these browsers, that will be marked like "Ads by Genieo", "powered by Genieo", "brought by Genieo". Search.genieo.com hijacker is connected with Infospace advertising network.

Facebook.com (a.k.a Facebook App or just Facebook) is advertising application for Mac, that opens Facebook.com website on MacOS startup and adds itself to the Dock. At a first sight, it seems harmless, however with this application malefactors can get access to browser data and settings, and use it to display targeted advertising, pop-ups in Safari or Google Chrome. We recommend you to remove Facebook.com virus application from Mac and remove residual data.

Olpair.com is domain, that belongs to OpenCloud.co - legitimate online cloud hosting service. According to our research, promblems with ads, pop-ups and redirects related to Olpair.com come from Kodi Player. Kodi Player is multi-platform media player with access to huge database of movies, music, pictures and TV and radio streaming services. This player uses OpenCloud.co resources and in exchange for free 4 hours streaming redirects users browsers to Olpair.com (or OpenCloud.co/pair). In pursuit of profit, and wanting to "squeeze all the juice" on ads revenue OpenCloud.co generates numerous ads, pop-ups and redirects during one session. The quality of these advertisements also poor and sometimes is on the verge of outright scam and fraud.