The Safe Mac

Follow The Safe Mac on Twitter to stay advised of the latest Mac security news!


Adware Removal Guide : DownLite

Published February 25th, 2014 at 1:30 PM EST, modified December 19th, 2014 at 8:08 PM EST

downlite_iconDownLite is a program that pretends to be a torrent downloading app. This same adware has also been commonly seen under different names being downloaded by people looking for free video downloads online. These downloads are typically illegal movies and the like, downloaded from illegal sites like Pirate Bay. It should go without saying that any site offering any commercial offering (movies, software, etc) for free is illegal, and that such sites should be avoided. Unfortunately, that does seem to need saying, repeatedly. If you have been taking part in such activities, take this as a learning experience and stop doing so immediately!

Removal

Move the following items to the trash. Note that removing many of these files will require administrator access, so you will need to be sure you are logged in to an admin account on your Mac. If you are not, you will be unable to remove some of them. Also, this list represents all files installed by all known variants of Downlite, so not all files listed will be present. If you don’t know how to locate a file based on the path given below, you should read Locating files from paths.

/Library/Application Support/VSearch
/Library/LaunchAgents/com.vsearch.agent.plist
/Library/LaunchDaemons/com.vsearch.daemon.plist
/Library/LaunchDaemons/com.vsearch.helper.plist
/Library/LaunchDaemons/Jack.plist
/Library/PrivilegedHelperTools/Jack
/System/Library/Frameworks/VSearch.framework
/System/Library/Frameworks/v.framework

You may also find files with the following names, where “xxx” can be any word:

/Library/Application Support/xxx
/Library/LaunchAgents/com.xxx.agent.plist
/Library/LaunchDaemons/com.xxx.daemon.plist
/Library/LaunchDaemons/com.xxx.helper.plist

Some examples of words used in place of the “xxx” that I have seen are “heizenberg,” “dot,” “steak” and “moonlight.” However, I am sure that many other variants also exist. In all cases, whatever word was used on a particular Mac was used for all these files. In other words, you should only see one single word used in place of “xxx” in all four of these files on your Mac. If you see any files matching these description, move them to the trash.

After you have moved these items to the trash, restart the computer. After restarting, you can empty the trash.

<- Back to Adware Removal Guide


This page and all contents (unless otherwise noted) copyright 2011-2014 by Thomas Reed.
For questions or comments, please contact me.