Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ilivid

I inadvertently loaded "ilivid" while trying to obtain some information on an old boat. It has placed a tool bar on my computer, and I can't get rid of it. I've tried symantec, clamx and now sophos. In looking on the internet, it shows as malware, but none of the previous mentioned sites recognized it as such. Do any mac users know of a way to get rid of this? Thanks....

:1008173


This thread was automatically locked due to age.
  • After a quick check, I see that iLivid doesn't appear to be malicious, but DOES install the Bandoo toolbar on Windows.

    However, as mentioned, this is a Windows product; where did you get a copy of a Mac version?  If you point me at a link I should be able to do a few tests -- but I will not likely be writing detection for it unless it actually does something malicious to your Mac.  I might be able to write up some uninstall instructions however :)

    :1008285
  • ilivid is hijacking new tabs when i click to open a link instead of desired location i am sent to an ilivid page!

    i never downloaded ilivid.  it was in some search results re: vimeo and i saw the page but i did not install the app or toolbar or anything!  i searched my hard drive for anything titled ilivid but no joy. 

    i am on mac osx / macbook and i would definitely describe this as malware, it makes browsing tasks nearly impossible, it's a real nuisance, and i did not opt in for whatever their service may be.  i am presently running a sophos scan, so far no threats detected.

    if anyone has had a similar experience and found a way to remedy it, please reply and let me know what file names to look for or how to identify the files associated with this troublesome ilivid monster.  thank you very much!

    :1008450
  • That definitely sounds malicious...  What are the contents of your /Users/<youruserid>/Library/Safari/ folder?  How about /Users/<youruserid>/Library/WebKit/ ?  /Users/<youruserid>/Library/Internet Plug-Ins/ ?

    Those are the most likely places for something to be loaded that could be interfering with your browser.

    If you run Google Chrome or Mozilla Firefox, does the problem persist, or go away?

    :1008470
  • Can someone please help me with a nightmare

    I installed Ilivid, then found it was uncomptible, so uninstalled it and had to change Chrome settings for home page

    Problem 1 

    Its a vista OS - then found I had a problem when requesting a tab , which I wanted as google - whatever I did , I had could not shift the tab which has the following info on the bottom LH Side

     chrome-extension://bmapjpndbiamjgnblnlpghpbjccijkbc/config/skin/new-tab.html#

    Problem 2 

    The other problem I have is removing the ILividsetupV1.exe which shows as an application in a search setting in the folder Downloads(C:\Users\

    when I highlight and click delete I get the msg

    Could not find  this item . It is no longer located in Downloads (C:\Users\     

    Verify the item's location and try again 

    Any ideas how I can get rid of this ?

    I have looked in the control panel and there is nothing left to uninstall of Ilivid or search qu

    Many thanks

    :1010012
  • Hi

    Problem 1 solved 

    I went into tools and extensions and removed what looked like a bona fide extension and problem solved

    Problem 2 remains unsolved and I'd be gratful for any ideas

    Cheers 

    :1010014
  • Are you running Windows in a VM on your Mac, or is there some other reason you're asking for help removing a piece of Windows software on a Mac AV support forum?  I'm happy to help if this is Mac-related in some way.

    :1010016
  • oops apologies

    trying to do too many things at once -  its a windows only set up , no mac involved 

    Do you want me to shift the issue over or can you help and do that for me?

    Thanks

    :1010018
  • It'll have to be done by you or a moderator; I'm just a visitor here :)

    :1010026
  • I'm on a Mac Pro, and recently iLivid somehow invaded my computer - Intego software VirusBarrier does not detect it.

    iLivid is putting ads on my webpages, taking over and changing other company's logos and turning them into iLivid ads.

    I cannot find the code on any of the page sources.   207.232.22.27  or www.iLivid.com

    What can I do?

    :1010226
  • Are the DNS settings on your computer and router set to the right address (right being your ISP's DNS server or something like 8.8.8.8)?  This could just be a DNS intercept.

    If it's not that, you may also want to check your /etc/hosts file and also look for anything on your computer referencing ilivid.

    You may also want to check your proxy settings to see if your proxy is set to some strange address, and finally: try using an alternate browser and see if it's a safari extension plugin or somesuch that something's dropped to inject ilivid.

    If it's the last, please submit the file to Sophos via our site's submission tool -- https://secure2.sophos.com/en-us/support/contact-support/sample-submission.aspx -- we'd be more than happy to write detection/cleanup for it.  Fill in "SAV Mac Home Edition" under company name.

    :1010256