Remove Nonamebnm POP-UP Scam from Mac OS X

How to Delete Nonamebnm POP-UP Scam Permanently from PC

As the name suggest, Nonamebnm is a scam that is used by cyber-criminals as a platform to promote unsafe applications, websites and unnecessary services. In our research, we concluded that it is promoting “Smart Mac Booster” app which is a bogus application in reality. On the targeted PC, it triggers fake notification claiming that visitor’s computer is damaged and is infected with malware. The novice users are manipulated to fix the problem using one of the advertised applications. Contrast to what it claims, it is not recommended to download or install any application that is promoted by Nonamebnm or its sister’s websites.

The notification that you receive on Nonamebnm website claims that some webpage that you visited earlier has infected your Mac PC. When you close the pop-up, another notification occurs that asks you to click on the “Scan Now” button to fix the problem. As a trap, the scanning report detects some risky infections such as “Bankwork”. In order to remove this malware, you are asked to download “Advanced Mac Cleaner” app. When you click on “download now” button, some unusual program gets downloaded instead of the recommended application. Some other application that could be downloaded are “Mac Cleanup Pro”, “Mac Keeper”, “Mac Auto Fixer” and so on. These apps promoted through Nonamebnm should not be trusted and neither should be they installed in the PC.

The apps or services like Nonamebnm are designed to trick user for visiting untrusted websites and download unnecessary applications. The suspicious websites often contains PUA that gets installed in the PC secretly through backdoor. They trigger aggressive sponsored ads as well as spy on user’s information in order to steal their data. They server ads that are customized based on the visited website and clicking on them reroute to harmful websites or download scripts that are designed to install questionable applications. These PUAs circulate all kinds of ads such as banners, coupons, surveys and so on.

As mentioned earlier, there is a threat for personal data as well. It can collect highly sensitive and personal data such as IP address, geographical location, search queries, browsing patterns and so on. These data are misused in order to gain quick revenue. These data are sold third-parties and they use them to exploit your work-station. So, having program like Nonamebnm installed in your browser, OS or anywhere in the PC is very risky. You are bound to face data theft, privacy and browsing issues hence it is strongly recommended to delete Nonamebnm from the work-station immediately.

Quick Glance

Threat Type: PUA, Phishing, Scam, Mac Virus

Bogus Claims: Your Mac Pc is infected with a severe malware

Detected Name: Nonamebnm, Spamhaus

Serving IP address: 193.35.51.4

Promoted Potentially Unwanted Program: “Smart Mac Booster”

Symptoms: Regular bombarding of pop-ups and banners, slow browsing speed, browser malfunctioning

Damage: Tracks the users activities and leads to data theft, causes unwanted webpage redirections, commercial ads bombarding

Distribution: Software bungling and installers, peer-to-peer file sharing, social engineering, deceptive pop-ups

How PUAs Gets Inside the PC? (Detailed)

The common method of PUA intrusion is deceptive ads, bogus program installation setup, and social engineering. Click on random ads may trigger scripts that download harmful software in the backdoor. This suspicious files often comes hidden under advance or custom installation method which is often ignored by the novice users. When you download programs without checking advance settings, it automatically gets permission to download preselected hidden additional files.

It is strongly opposed to download programs from peer-to-peer file sharing network such as torrents, emule, downloaders, installers and so on. While downloading any application, always choose advance or custom installation method and see the preselected files. Dismiss the download process immediately if you notice anything suspicious in it.  Avoid click on random links and pop-ups. Don’t visit questionable webpage that are especially related to porn, Online gambling, dating and so on. If you have already installed any kind of plug-ins, add-ons or installers in the work-station then uninstall them immediately. Upgrade the PC security settings and use a powerful anti-malware tool that has strong scanning algorithm and programming logics.

Automatic Removal of Nonamebnm POP-UP Scam (Instant Solution)

The deletion and uninstallation of components related to Nonamebnm POP-UP Scam is possible through both manual as well as automatic process. However, the manual removal steps require a lot of expertise and technical knowledge. It is advised to use an automatic Nonamebnm POP-UP Scam removal tool so that you can remove all the threats present in the work-station in hassle-free way. Additionally, it improves the PC security setting and protects the PC from malware attacks in future.

Remove all the suspicious files, folders and PUA related to Nonamebnm POP-UP Scam from Mac OSX

Step 1: In the /Library/LaunchAgents folder, check for all the suspicious files that are generated by the adware.

In the Go to Folder … bar, type /Library/LaunchAgents

In “LaunchAgents” folder, you can check for any suspicious files or folders and move them to “Trash”. Some of the common suspicious files types are “installmac.AppRemoval.plist”, “kuklorest.update.plist” , “mykotlerino.ltvbit.plist”, “myppes.download.plist”, and so on.

Step2: Check for suspicious files and folders created by the adware in /Library /Application Support folder

In the Go to Folder.. bar, type: /Library/Application Support

Go to “Application Support” folder and check for any new files or folder that looks suspicious. Doubtful applications such as “NicePlayer” and “MPlayerX” etc. should be moved to Trash

Step3: Check for suspicious files and folders created by the adware in /Library /LaunchAgents folder:

In Go to Folder bar, type /Library/LaunchAgents

In the “LaunchAgents”, select all the recently added files and folders that looks suspicious and move them to “Trash”. Example of some of the suspicious files are “installmac.AppRemoval.plist”, “myppes.download.plist”, “mykotlerino.ltvbit.plist”, “kuklorest.update.plist” and so on.

Step4: Check for suspicious files and folders created by the adware in /Library /LaunchDaemons folder:

In the Go to Folder… bar, type: /Library/LaunchDaemons

In the “LaunchDaemons” folder, looks for all the suspicious and doubtful files that have been recently added. Some of the example of such files are “com.aoudad.net-preferences.plist”, “com.myppes.net-preferences.plist”, “com.kuklorest.net-preferences.plist”, “com.avickUpd.plist” and move them to “Trash”.

Step5: Remove Nonamebnm POP-UP Scam from Internet Browsers

Delete Malicious Extensions from Safari

Uninstall all the extension related to Nonamebnm POP-UP Scam from “Safari”

Open the Safari Browser, In the menu bar, select “Safari” and click on “Preferences”

In the preference window, choose “Extension” and search for any newly added suspicious extension. When any suspicious extensions get detected, select the “Uninstall” button next to them. You must know that none of the extensions are necessary for daily browsing activities.

Remove all the plug-ins related to Nonamebnm POP-UP Scam from “Mozilla Firefox”

Delete all the add-ons related to Nonamebnm POP-UP Scam from Mozilla Firefox

Open the Mozilla Firefox. Click on the “Open Menu” present at the top right corner of the screen. In the newly opened menu, choose “Add-ons”.

In the “Extension tab”, select all the suspicious add-ons and click on the remove button next to them. Again, you can delete all the extension as none of them are necessary for the normal browser operation

Remove Malicious Extension from Google Chrome

Delete Google Chrome add-ons related to Nonamebnm POP-UP Scam

Open Google Chrome and click on “Chrome menu” that is located on the top-right corner of the screen. In the drop-down menu, choose “More Tools” and select “Extensions”.

In the extension window, select all the suspicious add-ons. After tracing all of them, click on the “Trash” option button next to them. Again, if require you can delete all the extensions as they are not necessary for normal browsing activities.

Step 6:  Scan the Mac PC with an automatic Nonamebnm POP-UP Scam Removal Tool

If you execute all the steps mentioned above in your Mac as it is stated, your work-station will get free from malware. However, to be sure that your PC is free malware, it is advised to scan it with a powerful anti-malware tool. Using automatic tool is also recommended because not every victims or users have expertise and technical knowledge to execute the manual process mentioned above in a proper way.

After you download the application, you have to execute in your work-station and begin the automatic scanning. On scanning, if it shows” Nonamebnm POP-UP Scam threats found”. You can select its files and folders and remove it.

Note: Cliick here to get the Detailed User Guide to Use the anti-malware tool