Hi Ronni,
I looked at the website this morning and had already carried out the
steps suggested. (refer my post below)
I went back into the Library files again, there was one Pitchofcase
file left which I trashed.
Tried to re-start, but it gets stuck at about 60%. I can only boot
into safe mode.
Thanks for your help.
Cheers
Walter
On 27/05/2018, at 2:11 PM, Ronda Brown wrote:
Hello Walter,
Step 1: Remove Browser Extensions that belongs to
Search.pitchofcase.com
1. Locate the add-on or extension that is relevant to the adware.
To do this, please follow the following depending on affected browser.
Safari – Choose Preferences from the Safari menu, then click the
Extensions icon. This will open a window showing all installed
extensions.
Step 2: Delete Malicious Files that have installed
Search.pitchofcase.com
1. Select and copy the string below to your Clipboard by pressing
Command + C on your keyboard.
~/Library/LaunchAgents
2. Go to your Finder. From the menu bar please select Go > Go to
Folder…
3. Press Command + V on your keyboard to paste the copied string.
Press Return to go to the said folder.
4. You will now see a folder named LaunchAgents. Take note of the
following files inside the folder:
unknown.download.plist
unknown.ltvbit.plist
unknown.update.plist
The term unknown is just a representation of the actual malware
name. It is normally an unfamiliar file name such as the following:
– Pitchofcase, InstallMac, Manroling, Genieo, Inkeeper, Software
Updater
If you cannot find the specified file, please look for any
unfamiliar or suspicious entries. It may be the one causing the
Search.pitchofcase.com to be present on your Mac. Arranging all
items to see the most latest ones may also help you identify
recently installed unfamiliar files. Please press Option + Command
+ 4 on your keyboard to arrange the application list in
chronological order.
Important: Take note of all the suspicious files as you may also
delete the same item on another folder as we go on.
5. Drag all suspicious files that you may find to Trash.
6. Please restart the computer.
7. Open another folder using the same method as above. Copy and
Paste the following string to easily locate the folder.
~/Library/Application Support
8. Look for any suspicious items that are similar to the ones in
Step 4. Drag them to the Trash.
Optional: For locked files that cannot be removed, do the following:
1. Go to Launchpad, Utilities folder, open Activity Monitor.
2. Select the process you want to quit.
3. Click on Force Quit button.
4. You may now delete or remove locked files that belongs to
Search.pitchofcase.com.
Step 3: Scan the System with Adware Removal Tool for Mac
1. Download Malwarebytes Anti-malware for Mac from this link:
Click here to download MBAM for Mac (this will open a new window)
2. Run Malwarebytes Anti-malware for Mac. It will check for updates
and download if most recent version is available. This is necessary
in finding recent malware threats including Search.pitchofcase.com.
3. If it prompts to close all running web browser, please do so.
Thus, we advise you to PRINT this guide for your reference before
going offline.
4. Once it opens the user interface, please click on Scan button to
start scanning your Mac computer.
Walter, Best to Go Here: - read, print and follow all the
instructions;
https://malwarefixes.com/remove-search-pitchofcase-com-mac-os/
Cheers,
Ronni
Ronni Brown’s iPad Pro 12.9-inch 256GB
On 27 May 2018, at 1:11 pm, FW <whae...@iinet.net.au> wrote:
Good morning all,
I’m looking for help to solve my problem with the iMac (10.13.4)
booting approx. 60% then it’s stuck.
I have shut it down and tried to boot in Safe mode which worked.
(is in safe mode now).
Also launched into recovery mode (Command+R) and tried Repair disc
which it did and reported “Operation successful”.
Looked at the list of applications and found one that was
installed yesterday: PITCHOFCASE.
After reading on the net it sounds like it’s a Bitchofcase ?
Tried some of the suggestions on the net to find and remove
unwanted Pitchofcase files.
Checked extensions in Safari preferences, but only 1Password is
listed.
Tried to open Malwarebytes but it was: "Background service is
offline”.
Removed Malwarebytes and reinstalled it, scanned it, it came up
with a clean scan but looking under Quarantine
it had quarantined 5 Pitchofcase files which I trashed within
Malwarebytes. Emptied trash.
Tried a normal restart but nothing has changed - it won’t go
further than 60%.
Now back in safe mode.
Also searched in WAMUG archives for that problem but did not
really find anything.
Tried to open 1Password, it jumps around and talks about a
vulnerability problem and change password.
Tried to open iPhoto, the pictures are all black.
iTunes opens but no sound, I guess because I’m in safe mode.
I have the option of reinstalling the system from the Superduper
clone.
Looking for any suggestions.
Thanks
Walter
-- The WA Macintosh User Group Mailing List --
Archives - <http://www.wamug.org.au/mailinglist/archives.shtml>
Guidelines - <http://www.wamug.org.au/mailinglist/guidelines.shtml>
Settings & Unsubscribe - <http://lists.wamug.org.au/listinfo/
wamug.org.au-wamug>
-- The WA Macintosh User Group Mailing List --
Archives - <http://www.wamug.org.au/mailinglist/archives.shtml>
Guidelines - <http://www.wamug.org.au/mailinglist/guidelines.shtml>
Settings & Unsubscribe - <http://lists.wamug.org.au/listinfo/
wamug.org.au-wamug>
-- The WA Macintosh User Group Mailing List --
Archives - <http://www.wamug.org.au/mailinglist/archives.shtml>
Guidelines - <http://www.wamug.org.au/mailinglist/guidelines.shtml>
Settings & Unsubscribe - <http://lists.wamug.org.au/listinfo/wamug.org.au-wamug>
