Linkey

  • 1
  • Problem
  • Updated 1 year ago
  • Acknowledged
Linkey was installed on my Mac Air after I was trying to update my Adobe Flash software. I can't get rid of it, and usually Trend Micro is my go to virus protection because it works great! Its not even able to help. I also downloaded Housecall in hopes it would find more of the adware, but its not finding anything. I've deleted all files that I know came in with this adware/spyware, but how do I get rid of Linkey for good? Its still popping up even though I've "uninstalled" it and removed it from the extensions.
Photo of ellisbrandi84

ellisbrandi84

  • 150 Points 100 badge 2x thumb

Posted 1 year ago

  • 1
Photo of TM_Ferry

TM_Ferry, Employee

  • 2,536 Points 2k badge 2x thumb
Hi ellisbrandi84,

Thank you for posting your concern here and welcome to Trend Micro Community.

Since you were able to uninstall the "Linkey" from your MAC, may we know if you were able to empty your trash?

If not, kindly empty first thrash of your MAC then kindly try clearing the cache of your web browser. Here's the steps on how to clear the cache of your web browser:

For Safari:
1. Click Safari at the upper left corner of your screen. In the menu that appears, click Preferences.
2. In the window that appears, click the Privacy tab. Click the button Remove All Website Data...
3. Click Remove Now in the pop up window that appears.

For Chrome:
1. Click on Chrome at the upper left corner of your screen then click Clear Browsing Data....
2. Check the following: 
  • Empty the cache
  • Delete cookies and other site data
3. Select the beginning of time in the drop down box and click on the Clear Browsing Data button.

For Firefox:
1. In the menu bar, click on History > Clear Recent History..
2. In the window that appears, click on the dropdown menu to the right of Time range to clear and select Everything. If necessary, expand the Details section and check both Cookies and Cache.
3. Click Clear Now. The progress wheel may spin for a few minutes, depending on how much data needed to be deleted. Once it has stopped, the process is complete.

Please restart your MAC and check if the Linkey is still on your computer.

We'll wait for your update. Thank you and have a wonderful day!

Trend Micro Home Users Community

Photo of ellisbrandi84

ellisbrandi84

  • 150 Points 100 badge 2x thumb
I cleared the Cache as instructed, but Linkey is still there. Also I was able to empty the trash.
(Edited)
Photo of Tom Emmelot

Tom Emmelot, Champion

  • 24,358 Points 20k badge 2x thumb
Hi Ellis,

Hope this works,
http://www.2-spyware.com/remove-linkey.html#h-mac-os-x

Kind regards,
Tom
Photo of ellisbrandi84

ellisbrandi84

  • 150 Points 100 badge 2x thumb
Thanks Tom, but I've already tried that site and several others. This adware roots itself deep in the system. It looks like I deleted it already when you check "applications" folder and "extensions," but its still there when I open my browser. I'm not as versed on iOS as I am Windows. On a regular PC I can actually command it be removed, but Apple is so very different. Thank you again for trying though. 
Photo of Tom Emmelot

Tom Emmelot, Champion

  • 24,358 Points 20k badge 2x thumb
Hi Ellis,

In Windows, the most common thing is that the link that starts the program there in the start comment also the site is placed where you go to.
Maybe it is the same with the Mac.
Good luck, i look further for you.

Kind regards,
Tom
Photo of Tom Emmelot

Tom Emmelot, Champion

  • 24,358 Points 20k badge 2x thumb
Hi Ellis,

Try this program:
https://nl.malwarebytes.com/mac-download/
Hope that it can do the trick ;)

Kind regards,
Tom
Photo of TM_Ferry

TM_Ferry, Employee

  • 2,536 Points 2k badge 2x thumb
Hi ellisbrandi84,

Thank you for the update. Let's try resetting your web browser. Please also make sure that you backup/import all the bookmarks saved on your web browser.

For Chrome:

1. Launch Chrome and open its Settings menu by clicking on the button in the top right-hand corner of the window.
2. Scroll down to the bottom of the page and hit ‘Show advanced settings...’. Scroll down the window once again and locate the ‘Reset settings’ menu. Confirm the process by hitting the ‘Reset’ button in the dialog box you will see.

For Firefox:
1. Click the menu button New Fx Menu and then click help Help-29 .
2. From the Help menu choose Troubleshooting Information.
3. Click the Refresh Firefox button in the upper-right corner of the Troubleshooting Information page.
4. To continue, click Refresh Firefox in the confirmation window that opens.
5. Firefox will close to refresh itself. When finished, a window will list your imported information. Click Finish and Firefox will open.

Hope this helps. 

Enjoy the rest of your weekend!

Trend Micro Home Users Community
Photo of ellisbrandi84

ellisbrandi84

  • 150 Points 100 badge 2x thumb
I have a Macbook Air, so how would I refresh Safari? This is the first time I've ever had an issue with Mac and I'm typically a Windows user, so I don't know my way around iOS. 
Photo of Tom Emmelot

Tom Emmelot, Champion

  • 24,358 Points 20k badge 2x thumb
Hi Ellis,

For Safari:
1. Click Safari at the upper left corner of your screen. In the menu that appears, click Preferences.
2. In the window that appears, click the Privacy tab. Click the button Remove All Website Data...
3. Click Remove Now in the pop up window that appears.

Kind regards,
Tom
Photo of TM_Nicole

TM_Nicole

  • 900 Points 500 badge 2x thumb
Hi, @Tom Emmelot!

Thank you for your quick response!

Hi, @ellisbrandi84!

Thank you for your updates! 

The steps that @Tom Emmelot provided are correct. Please perform the steps and check if the issue persists; we will be glad to assist you further.

Have a great day!

Trend Micro Home Users Community
Photo of ellisbrandi84

ellisbrandi84

  • 150 Points 100 badge 2x thumb
Hello,

Thank you @Tom.Emmelot and @TM_Nicole and @TM_Ferry. I am still seeing Linkey. Does TM have any software for Mac that might be able to better detect it. I have the Maximum Security, which is what I've used for years on my PCs, but it doesn't seem to have as much functionality on Mac. Again, it could just be my unfamiliarity with it in regards to Mac. 
Photo of Tom Emmelot

Tom Emmelot, Champion

  • 24,358 Points 20k badge 2x thumb
Hi Ellis,

Did you try the suggestion i provide above???
I use the free version to scan 1 time in a month.
But only the free version to scan (no realtime protection)

Kind regards,
Tom
Photo of ellisbrandi84

ellisbrandi84

  • 150 Points 100 badge 2x thumb
@Tom Emmelot, yes I tried letting the Malware Anti-Malware scan and while it did find some files, Linkey is still there when I open my web browser. 
Photo of Tom Emmelot

Tom Emmelot, Champion

  • 24,358 Points 20k badge 2x thumb
Hi Ellis,

There is a video on YouTube remove malware from a MAC and to RESET Safari browser, but there are more of those, Google on "Remove Linkey from a MAC" and you find several.

Kind regards,
Tom
Photo of TM_Ferry

TM_Ferry, Employee

  • 2,536 Points 2k badge 2x thumb
Hi ellisbrandi84,

Thank you for your update. 

May we know if the "Linkey" appears immediately after opening your Safari or it appears randomly while surfing the net?

Kindly try these following steps:

A.) Manually delete all files dropped by the threat.

1. Navigate the Apple Menu bar and click on “Go“. Then, select “Go to Folder“.
2. Kindly enter this following line in the field then press Enter:
 /Library/LaunchAgents
3. The Launch Agents folder will open. Please look for any Linkey file and move it to trash. This may need a password if administrator privilege is needed.
4. After moving the files to the trash, kindly go back to step 1 and enter this following line:
~/Library/LaunchAgents
5. Do the same as in step 3.
6. Kindly go back to step 1 and enter this following line:
~/Library/Application Support
7. Find the same files as in Step 3 and remove it.
8. Empty your trash and restart your MAC computer.


B.) Scan your MAC using our HouseCall.

Here's the link for the steps on how to use our HouseCall for MAC:

Scanning your computer using Trend Micro HouseCall (For Home Users)

Kindly make sure that you're on the HouseCall for MAC tab.

Please let us know if the issue has been fixed after doing the steps provided.

Thank you!

Trend Micro Home Users Community
Photo of ellisbrandi84

ellisbrandi84

  • 150 Points 100 badge 2x thumb
Linked shows up immediately after opening Safari. When I completed step 2, the only files in the folder were three files for Trend Micro, and when I tried to complete step 6, it said "folder not found." I am getting ready to scan with HouseCall for Mac. 
Photo of TM_Ferry

TM_Ferry, Employee

  • 2,536 Points 2k badge 2x thumb
Hi ellisbrandi84,

Thank you for your prompt response and update.

Since you weren't able to find the folder Application Support, kindly try doing again the step 1 then enter this line:

~/Library

Please look for these three folders: Application Support, LaunchAgent, and LaunchDaemons

Kindly open each folder and look for a file that has Linkey in its name and move it to trash.

Also, may we know if you were able to scan your MAC with our HouseCall?

Thank you!

Trend Micro Home Users Community
Photo of ellisbrandi84

ellisbrandi84

  • 150 Points 100 badge 2x thumb
None of the folders has a file for Linkey. I even double checked the "Extensions" folder. I checked other folders too and nothing shows Linkey, but its still on my computer. HouseCall for MAC will run and I did run it afterward, but it found nothing. 
Photo of TM_JustineM

TM_JustineM, Employee

  • 3,774 Points 3k badge 2x thumb
Hello ellisbrandi84,

Thank you for the prompt response and sorry for getting back late.

One possible reason why you cannot see the files associated with Linkey is that they are hidden. Please try to do the following steps to show all hidden files and folders.
  1. Open Terminal found in Finder > Applications > Utilities
  2. In Terminal, paste the following: defaults write com.apple.finder AppleShowAllFiles YES
  3. Press return
  4. Hold the ‘Option/alt’ key, then right click on the Finder icon in the dock and click Relaunch.
This will show all hidden files. To hide them again, follow the same steps but replace the Terminal command with:

defaults write com.apple.finder AppleShowAllFiles NO

Once you are able to see the hidden files look again for Linkey or the publisher Aztech Media Inc folder.You can do this by following the steps provided on this thread and delete the Linkey or Aztech Media Inc folder. If the issue still persist and you have another browser like Google Chrome or Mozilla Firefox. Please download Safari on either Google Chrome or Mozilla Firefox and remove the Safari browser that has the Linkey and reinstall Safari browser and check.

Please let us know if the issue has been fixed after doing the steps provided.

Thank you!

Trend Micro Home Users Community
Photo of ellisbrandi84

ellisbrandi84

  • 150 Points 100 badge 2x thumb
I tried everything listed above except downloading a new browser and re-installing Safari, that's next. 
Photo of TM_Ferry

TM_Ferry, Employee

  • 2,536 Points 2k badge 2x thumb
Hi ellisbrandi84,

Thank you for the update.

It seems that Linkey hijacked your web browser that is why it can't be removed just by uninstalling it from your Applications or removing its extensions.

Please let us know if reinstalling Safari or using other web browser fixed the issue. 

Thank you!

Trend Micro Home Users Community

This conversation is no longer open for comments or replies.