What this beap.gemini.yahoo.com thing?

[halofan56]

When you access certain websites mainly on yahoo website. I enclosed a screen shot of it. Not just Safari, but other browsers, So it is system wide. It got to be a certain file controlling it, question is, where is it? No malware or AV can detect it. Anyone?

 

[DeepIn2U]

Just a guess ... does this occur when you try login into another account on your Mac?

Safari > Preferences > Privacy - Manage Website data is this yahoo page listed therein?
If you clear your browser cached and saved page data, close and relaunch does it still occur?

 

[halofan56]

Yes, And have other browsers and don't run any extensions. I read that extensions like certain search engines. I had my AV tech claims its a malware that's hard to detect.

 

[tyc0746]

It's a 'trojan' that's been installed by a piece of dodgy software you've downloaded & installed, which tries to make all your searches go through a different search engine and thus making money from their advertisers rather than those of your preferred search engine.

You'll just have to see whether the default search engine has been changed on your browsers, see if any unknown/unrecognised extensions have been installed, or even have a look through your recently-installed apps to verify they're official apps from official sources and not cracked/hacked apps from usenet/torrents.

You can also check you activity monitor (and login items) to see if there's any unrecognised app listed - and force quit/remove it.

 

[halofan56]

I tried to look in activity monitor, don't see anything.

 

[Apple_Robert]

Run Malwarebytes and see if it picks up anything.

 

[halofan56]

Ran malwarebytes several times over time and could not find anything.

 

[Taz Mangus]

If there is anything in the following folders, remove the files and restart the computer.

• Your user account Library/LaunchAgents
• /Library/LaunchAgents
• /Library/LaunchDaemons