When you open an application downloaded from the Internet using a “File Quarantine-aware” application like Safari, Chrome, Mail, or iChat, you’ll see a warning message informing you the application was downloaded from the web along with the specific website it was downloaded from and when. How XProtect Works The built-in anti-malware protection on Mac OS X is known as “XProtect,” which is technically a feature built into “File Quarantine.” This feature was added back in 2009 with Mac OS X 10.6 Snow Leopard.
It will help us see where the adware is and help you remove it. Alternatively, create a report with EtreCheck and paste it here. The go-to program for Mac users is MalwareBytes Anti-Malware, which is an on-demand scanner.