{"id":52,"date":"2015-04-27T07:10:50","date_gmt":"2015-04-27T07:10:50","guid":{"rendered":"https:\/\/skeggs.org\/wp\/?p=52"},"modified":"2015-04-27T07:10:50","modified_gmt":"2015-04-27T07:10:50","slug":"mac-osx-chrome-adware-malware-cloudscout-removal","status":"publish","type":"post","link":"https:\/\/skeggs.org\/wp\/?p=52","title":{"rendered":"Mac OSX Chrome adware malware Cloudscout removal"},"content":{"rendered":"<p><a href=\"https:\/\/skeggs.org\/wp\/wp-content\/uploads\/2015\/04\/cloudscout.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-54\" src=\"https:\/\/skeggs.org\/wp\/wp-content\/uploads\/2015\/04\/cloudscout.png\" alt=\"cloudscout\" width=\"1023\" height=\"455\" srcset=\"https:\/\/skeggs.org\/wp\/wp-content\/uploads\/2015\/04\/cloudscout.png 1023w, https:\/\/skeggs.org\/wp\/wp-content\/uploads\/2015\/04\/cloudscout-300x133.png 300w\" sizes=\"(max-width: 1023px) 100vw, 1023px\" \/><\/a>Somehow, no doubt after installing some bit of software from a seedy part of the Internet, I ended up with ads being injected into my web browser as the pages rendered. You get this stuff all day on Windows, but not something I&#8217;d seen before on a Mac.<br \/>\nI looked for suspect extensions, and found none, but disabled them all any way.<br \/>\nThe ads took the form of aggressive animated gif banners, plus highlighted words in text linking to advertisements, see above.<\/p>\n<p>I tried searching the file system for suspect software, but didn&#8217;t find anything useful. I also tried searching the Internet, but while there is info for removing this from Windows, there is nothing for Mac that works.<\/p>\n<p>I ended up watching the developer console in Chrome to see what connections the browser was requesting. The list I got that I reckon is suspect is below. I added it to Adblock plus and the ads are gone. If you know what software is the culprit, please post in the comments and I will update the post.<\/p>\n<p>Good Luck<\/p>\n<pre>adnxs.com\r\nscorecardresearch.com\r\ndnsqa.me\r\nhklmm.com\r\n2mdm.com\r\ncptlsrv.com<\/pre>\n","protected":false},"excerpt":{"rendered":"<p>Somehow, no doubt after installing some bit of software from a seedy part of the Internet, I ended up with ads being injected into my web browser as the pages rendered. You get this stuff all day on Windows, but not something I&#8217;d seen before on a Mac. I looked for suspect extensions, and found<a class=\"more-link\" href=\"https:\/\/skeggs.org\/wp\/?p=52\">Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/skeggs.org\/wp\/index.php?rest_route=\/wp\/v2\/posts\/52"}],"collection":[{"href":"https:\/\/skeggs.org\/wp\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/skeggs.org\/wp\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/skeggs.org\/wp\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/skeggs.org\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=52"}],"version-history":[{"count":0,"href":"https:\/\/skeggs.org\/wp\/index.php?rest_route=\/wp\/v2\/posts\/52\/revisions"}],"wp:attachment":[{"href":"https:\/\/skeggs.org\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=52"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/skeggs.org\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=52"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/skeggs.org\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=52"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}