AdwareDefinitionFiles/Genieo.adf at master · rfcampbell/AdwareDefinitionFiles · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
<AdwareDefinition>
	<Version>95</Version>
	<SavingThrowVersion>1.1.0</SavingThrowVersion>
	<DefinitionAuthor>Owen Pragel</DefinitionAuthor>
	<DefinitionSource>http://www.adwaremedic.com/signatures.xml</DefinitionSource>
	<Comment>This definition is based on the AdwareMedic list of files, not the Apple kbase article. It includes some different things.</Comment>
	<Comment>This is a work in progress, and as such, many lines are as of yet unconverted to ADF format.</Comment>
	<Adware>
		<AdwareName>Genieo</AdwareName>
		<!-- <item type="login">Genieo</item> -->
		<!-- <item type="login">InKeepr</item> -->
        <!-- <item type="extName" havingContent="(genieo)|(installmac)">omnibar</item> -->
        <!-- <item type="extName" havingContent="com\.gold\.safari">GoldenBoy</item> -->
        <!-- <item type="extName">texiday</item> -->
        <!-- <item type="extContent">valueIMSearchEngine</item> -->
		<File>/Users/*/Library/LaunchAgents/com.genieo.completer.download.plist</File>
		<File>/Users/*/Library/LaunchAgents/com.genieo.completer.update.plist</File>
		<File>/Users/*/Library/LaunchAgents/com.genieo.completer.ltvbit.plist</File>
		<File>/Users/*/Library/LaunchAgents/com.installer.completer.download.plist</File>
		<File>/Users/*/Library/LaunchAgents/com.installer.completer.update.plist</File>
		<File>/Users/*/Library/LaunchAgents/com.installer.completer.ltvbit.plist</File>
		<TestedFile>
            <Path>/Users/*/Library/LaunchAgents</Path>
            <Path>/private/var/root/Library/LaunchAgents</Path>
			<FilenameRegex>\.((download)|(update)|(ltvbit))\.plist</FilenameRegex>
			<Regex>\-firstAppId</Regex>
		</TestedFile>
		<File>/Users/*/Library/LaunchAgents/texiday.download.plist</File>
		<File>/Users/*/Library/LaunchAgents/texiday.update.plist</File>
		<File>/Users/*/Library/LaunchAgents/texiday.ltvbit.plist</File>
		<File>/Library/LaunchAgents/com.genieoinnovation.macextension.plist</File>
		<File>/Library/LaunchAgents/com.genieoinnovation.macextension.client.plist</File>
		<File>/Library/LaunchAgents/com.genieo.engine.plist</File>
		<File>/Library/LaunchAgents/com.genieo.completer.update.plist</File>
		<File>/Library/LaunchDaemons/com.genieoinnovation.macextension.client.plist</File>
		<File>/Applications/Genieo.app</File>
		<Process>Genieo</Process>
		<Process>genieo</Process>
		<File>/Applications/InKeepr.app</File>
		<Process>InKeepr</Process>
		<Process>inkeepr</Process>
		<File>/Applications/InstallGenieo.app</File>
		<Process>InstallGenieo</Process>
		<Process>installgenieo</Process>
		<File>/Applications/Reset Search.app</File>
		<File>/Applications/Uninstall Genieo.app</File>
		<File>/Applications/Uninstall IM Completer.app</File>
		<File>/Applications/InstallMac</File>
		<File>/Applications/InstallGenieo</File>
		<File>/Applications/Texiday</File>
		<File>/Applications/Listchack</File>
		<File>/Applications/InKeepr</File>
		<File>/Applications/Celipsow</File>
		<File>/Applications/Nariabox</File>
		<File>/Applications/Oliverto</File>
		<File>/Applications/Epolife</File>
		<File>/Applications/Leperdvil</File>
		<File>/Applications/Myppes</File>
		<File>/Applications/Otwexplain</File>
		<File>/Applications/Quitelex</File>
		<File>/Applications/Kuklorest</File>
		<File>/Applications/Totiteck</File>
		<File>/Applications/Javeview</File>
		<File>/Applications/Qamails</File>
		<File>/Applications/Olivernetko</File>
		<File>/Applications/Portsayd</File>
		<File>/Applications/mainorne</File>
		<File>/Applications/montageobox</File>
		<File>/Applications/JakeCares</File>
		<File>/Users/*/Library/Application Support/com.genieoinnovation.Installer</File>
		<File>/Users/*/Library/Application Support/Genieo</File>
		<File>/Users/*/Library/Application Support/IM.Installer</File>
		<File>/Users/*/Library/Application Support/Listchack</File>
		<File>/Users/*/Library/Application Support/InKeepr</File>
		<File>/Users/*/Library/Application Support/Asistents</File>
		<File>/Users/*/Library/Application Support/Celipsow</File>
		<File>/Users/*/Library/Application Support/Nariabox</File>
		<File>/Users/*/Library/Application Support/Oliverto</File>
		<File>/Users/*/Library/Application Support/Epolife</File>
		<File>/Users/*/Library/Application Support/Leperdvil</File>
		<File>/Users/*/Library/Application Support/Myppes</File>
		<File>/Users/*/Library/Application Support/Otwexplain</File>
		<File>/Users/*/Library/Application Support/Quitelex</File>
		<File>/Users/*/Library/Application Support/Kuklorest</File>
		<File>/Users/*/Library/Application Support/Totiteck</File>
		<File>/Users/*/Library/Application Support/Javeview</File>
		<File>/Users/*/Library/Application Support/Qamails</File>
		<File>/Users/*/Library/Application Support/Olivernetko</File>
		<File>/Users/*/Library/Application Support/Portsayd</File>
		<File>/Users/*/Library/Application Support/mainorne</File>
		<File>/Users/*/Library/Application Support/montageobox</File>
		<File>/Users/*/Library/Application Support/JakeCares</File>
		<File>/Library/PrivilegedHelperTools/com.genieoinnovation.macextension.client</File>
		<File>/Library/Frameworks/GenieoExtra.framework</File>
		<File>/Users/*/Library/Application Support/Firefox/Profiles/*/searchplugins/my-homepage.xml</File>
		<TestedFile>
            <File>/private/etc/launchd.conf</File>
			<Regex>lib(gen|imc)kit(sa)?\.dylib</Regex>
		</TestedFile>
		<File>/usr/lib/libgenkit.dylib</File>
		<File>/usr/lib/libgenkitsa.dylib</File>
		<File>/usr/lib/libimckit.dylib</File>
		<File>/usr/lib/libimckitsa.dylib</File>
		<File>/Users/*/Library/Safari/Extensions/Oliverto.safariextz</File>
		<File>/Users/*/Library/LaunchAgents/Feelbegin.AppRemoval.plist</File>
	</Adware>
</AdwareDefinition>