Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

jmy2469

macrumors member
Original poster
Jun 10, 2010
79
0
Palm Harbor, FL
Made the mistake of letting my brother use my Macbook Pro. Now I have PJS-4.2 ads popping up all over the place. How can I find out where these are coming from and how can I remove them?
 

simonsi

Contributor
Jan 3, 2014
4,851
735
Auckland
Ask brother <exactly> what he did, what he downloaded and installed. Assuming to have an admin password did he have that?

Install ClamXAV from the Mac App Store and scan everything.
 

BrendanFlanagan

macrumors newbie
Jan 7, 2015
8
0
No, i haven't downloaded anything today. I accidentally clicked something on a website thats like buzzfeed and then i got this pop up that would keep coming up no matter how many times i clicked ok or the close button. Since i could not do anything else, i had to force shutdown my computer. I have tried to look in my safari extensions but there are non. I called the number it said for that pop up and they wanted to charge me $250 to get rid of it. So of course i said no. I did have MacKeeper for a while but i deleted it after i got the ad pop ups. Also in my browser, random words will be blue and if i hover over them, they're links "powered by PJS-4.2"

----------

and i have tried completely turning off extensions, even though i have none
 

BrendanFlanagan

macrumors newbie
Jan 7, 2015
8
0
for example Screen Shot 2015-01-07 at 11.20.41 PM.png
 

DNSamurai

macrumors newbie
Nov 1, 2014
4
0
I got this today to. Super annoying.

Here was the fix:

Download CCCleaner for Mac. Uninstall all startup programs you don't recognize. Restart computer.
 

etanman26

macrumors newbie
Jan 7, 2015
3
0
I'm having the same problem and I've downloaded CCleaner but what should I delete? The ads are really bothering me at this point
 

BrendanFlanagan

macrumors newbie
Jan 7, 2015
8
0
Anything that you have no idea what it is. Try to take a guess what is needed. Like if you look at my photo above, i didn't know what the random link with steamclean was, but i do have Steam, so i didn't delete it. I only had 2 or three i deleted that i couldnt even try to take a guess at
 

etanman26

macrumors newbie
Jan 7, 2015
3
0
I tried attaching the ones that have showed up on mine
 

Attachments

  • Screen Shot 2015-01-08 at 12.45.47 AM.png
    Screen Shot 2015-01-08 at 12.45.47 AM.png
    134.6 KB · Views: 229

BrendanFlanagan

macrumors newbie
Jan 7, 2015
8
0
Remove the top 4 active ones and the one that ends with daemon. thats what i did. restart and it all goes away!!! :)

----------

Im also running the extension now on safari called ABP. It stops pop ups so that might also effect it
 

etanman26

macrumors newbie
Jan 7, 2015
3
0
Thanks! It seems to be gone now! If I have any more questions, I'll be sure to ask here. I just hope there won't be any lingering effects on my computer.
 

jwarner

macrumors newbie
Jan 8, 2015
3
0
This has taken over my mac as well. I tried the above recommendations, but none of them worked. It seems like pjs 4.2 is a pretty new adware, since nothing is coming up on google. Help!
 

cpot187

macrumors newbie
Jan 8, 2015
1
0
I had the same issue and was able to remove it by downloading and running the Adware Removal Guide.

http://www.thesafemac.com/arg/

I tried all other options previously listed in the thread, with no luck. Adware Removal Guide was quick and painless. Download and run, restart.
 

Apple_Robert

Contributor
Sep 21, 2012
35,647
52,437
In a van down by the river
I had the same issue and was able to remove it by downloading and running the Adware Removal Guide.

http://www.thesafemac.com/arg/

I tried all other options previously listed in the thread, with no luck. Adware Removal Guide was quick and painless. Download and run, restart.

I mentioned AdwareMedic early on in the thread. Odd that it didn't work for the OP and did for you.
 

radar1030

macrumors newbie
Jan 8, 2015
1
0
This is REALLY annoying. CCleaner did not work, and I used the correct version for OS X Yosemite. I started getting the PJS 4.2 ads yesterday (Jan 7, 2015), there are no files on my Mac, and I've searched everywhere. I hope the creators of this malware are prepared to have the **** sued out of them.
 

jwarner

macrumors newbie
Jan 8, 2015
3
0
Cleaner did not work and neither did AdWareMedic. I was able to disable it for 24 hours through the actual ad program and it worked, but it actually warned me that it would be back within 24 hours. Their "uninstall" process, which is found in the settings of these ads (same place where you can disable it for 24 hours) instructs me to delete my Safari extensions. I deleted EVERY extension and it's still here. This is a stubborn one.
 

GalvinTjime

macrumors newbie
Jan 8, 2015
1
0
We just ran across this specific piece of malware today at work and managed to remove it. For us, AdwareMedic found PJS-4.2 to be some variant of the malware Conduit. We went through the removal process detailed here http://www.thesafemac.com/arg-conduit/ and it seems to have successfully removed the malware from the infected computer. Hopefully this will help you to find and remove it.

I'll update this if I learn anything else or if (heaven forbid) that it should come back on said machine.

Oh, also, note that you have to be an administrator for the removal process to work. I know it's foolish to say, but I just have to make sure. :p
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.