media_lush

Q: how to get rid of MacBooster mini software?

hate it when this crappy mac software sneaks in... I wasn't paying attention when I installed VLC on a reformatted HD and got it from mac.software (top link in google and it looked just like the Videolan site)... thought everything was fine and then noticed strange behaviour ... did a bot of checking and found out this Macbooster app was piggy-backed with the VLC download! Why the **** this happens beats me, especially as I just can't seem to track it down anywhere ... Spotlight can't find it, going through all the preference folders can't find it... I know it's there as it pops up on Activity Monitor from time to time (see pic).

 

Any software that "cons" its way onto a mac is suspect and is not to be trusted  IMO -  any idea how to get rid of it... or even actually find where it's hiding?

 

Screen Shot 2015-01-06 at 20.04.50.png

 

Screen Shot 2015-01-10 at 01.59.46.png

Posted on Jan 9, 2015 6:12 PM

Close

Q: how to get rid of MacBooster mini software?

  • All replies
  • Helpful answers

first Previous Page 4 of 4
  • by Kurt Lang,

    Kurt Lang Kurt Lang Jan 11, 2015 10:34 AM in response to media_lush
    Level 8 (37,820 points)
    Mac OS X
    Jan 11, 2015 10:34 AM in response to media_lush
    this time I wasn't paying that much attention and just selected the top hit

    That's like Firefox. If you're looking for it from a Windows computer, the top hit is a link to Yahoo, where you do get Firefox, but the installer also drops very difficult to remove crapware on your computer. The second link is to Mozilla's site (you won't get the same list results looking from a Mac).

     

    I'm rather surprised Firefox hasn't (apparently) complained to Google that a garbage link to their software comes ahead of the real site.

  • by Annalea,

    Annalea Annalea Feb 23, 2015 1:41 PM in response to thomas_r.
    Level 1 (4 points)
    Mac OS X
    Feb 23, 2015 1:41 PM in response to thomas_r.

    Thomas_r, I could KISS you.

     

    I long ago deleted the files mentioned earlier in this thread, but Macbooster mini was still appearing and disappearing in my activity monitor every few seconds. This post, and the one you made before it, were the info I needed to finally get this d@mn process off my iMac.

     

    And here I was trying to figure out how to do a nuke and pave, because Finder wasn't showing results for searches that *should* have included the folders I just deleted. It has acted funny ever since I managed to get this malware on my machine, back in November. Here's to hoping that I shouldn't have to spend hours doing a fresh OSX install.)

     

    Thank you!

  • by animation.analyst,

    animation.analyst animation.analyst May 21, 2015 6:07 PM in response to media_lush
    Level 1 (0 points)
    May 21, 2015 6:07 PM in response to media_lush

    I faced the similar problem with MacBooster...

     

    Thanks a media_lush.. Thank you so much..  The hard work you had put, saved my life too..  Thanks a million

  • by march845,

    march845 march845 May 30, 2015 11:20 AM in response to media_lush
    Level 1 (0 points)
    May 30, 2015 11:20 AM in response to media_lush

    Please forgive me but I am completely computer illiterate and I have tried everything that I could find on this forum and I am still having trouble removing macbooster or any other potentially problematic programs from my computer.  Any assistance would  be greatly appreciated!


    EtreCheck version: 2.2 (132)

    Report generated 5/30/15, 1:04 PM

    Download EtreCheck from http://etresoft.com/etrecheck

     

    Click the [Click for support] links for help with non-Apple products.

    Click the [Click for details] links for more information about that line.

     

    Hardware Information: ℹ️

        MacBook Pro (13-inch, Mid 2010) (Technical Specifications)

        MacBook Pro - model: MacBookPro7,1

        1 2.4 GHz Intel Core 2 Duo CPU: 2-core

        4 GB RAM Upgradeable

            BANK 0/DIMM0

                2 GB DDR3 1067 MHz ok

            BANK 1/DIMM0

                2 GB DDR3 1067 MHz ok

        Bluetooth: Old - Handoff/Airdrop2 not supported

        Wireless:  en1: 802.11 a/b/g/n

        Battery: Health = Normal - Cycle count = 450 - SN = 9G04105UVD3NB

     

    Video Information: ℹ️

        NVIDIA GeForce 320M - VRAM: 256 MB

            Color LCD 1280 x 800

     

    System Software: ℹ️

        OS X 10.10.3 (14D136) - Time since boot: 0:14:41

     

    Disk Information: ℹ️

        Hitachi HTS545025B9SA02 disk0 : (250.06 GB)

            EFI (disk0s1) <not mounted> : 210 MB

            Macintosh HD (disk0s2) / : 249.20 GB (50.33 GB free)

            Recovery HD (disk0s3) <not mounted>  [Recovery]: 650 MB

     

        MATSHITADVD-R   UJ-898 

     

    USB Information: ℹ️

        Apple Inc. Built-in iSight

        Apple Internal Memory Card Reader

        Apple Inc. BRCM2046 Hub

            Apple Inc. Bluetooth USB Host Controller

        Apple Computer, Inc. IR Receiver

        Apple Inc. Apple Internal Keyboard / Trackpad

     

    Gatekeeper: ℹ️

        Mac App Store and identified developers

     

    Kernel Extensions: ℹ️

            /Library/Extensions

        [not loaded]    com.leapfrog.driver.LfConnectDriver (1.11.1 - SDK 10.10) [Click for support]

     

            /System/Library/Extensions

        [not loaded]    com.leapfrog.codeless.kext (2) [Click for support]

     

    Startup Items: ℹ️

        cma: Path: /Library/StartupItems/cma

        HP Trap Monitor: Path: /Library/StartupItems/HP Trap Monitor

        Startup items are obsolete in OS X Yosemite

     

    Problem System Launch Daemons: ℹ️

        [failed]    com.apple.mtrecorder.plist

     

    Launch Agents: ℹ️

        [loaded]    com.google.keystone.agent.plist [Click for support]

        [loaded]    com.hp.help.tocgenerator.plist [Click for support]

        [loaded]    com.mcafee.menulet.plist [Click for support]

        [loaded]    com.mcafee.reporter.plist [Click for support]

     

    Launch Daemons: ℹ️

        [loaded]    com.adobe.fpsaud.plist [Click for support]

        [failed]    com.apple.spirecorder.plist

        [loaded]    com.google.keystone.daemon.plist [Click for support]

        [loaded]    com.leapfrog.connect.authdaemon.plist [Click for support]

        [loaded]    com.mcafee.ssm.Eupdate.plist [Click for support]

        [loaded]    com.mcafee.ssm.ScanManager.plist [Click for support]

        [failed]    com.mcafee.virusscan.fmpd.plist [Click for support] [Click for details]

        [loaded]    com.microsoft.office.licensing.helper.plist [Click for support]

     

    User Launch Agents: ℹ️

        [loaded]    com.adobe.ARM.[...].plist [Click for support]

        [running]    com.iobit.MacBoosterMini.plist [Click for support]

        [running]    com.leapfrog.connect.monitor.plist [Click for support]

        [running]    com.spotify.webhelper.plist [Click for support]

     

    User Login Items: ℹ️

        AdobeResourceSynchronizer    Application Hidden (/Applications/Adobe Reader.app/Contents/Support/AdobeResourceSynchronizer.app)

        HPEventHandler    UNKNOWN  (missing value)

     

    Internet Plug-ins: ℹ️

        DirectorShockwave: Version: 11.6.0r626 [Click for support]

        o1dbrowserplugin: Version: 5.41.0.0 - SDK 10.8 [Click for support]

        Default Browser: Version: 600 - SDK 10.10

        Flip4Mac WMV Plugin: Version: 2.4.4.2 [Click for support]

        AdobePDFViewerNPAPI: Version: 10.1.9 [Click for support]

        FlashPlayer-10.6: Version: 17.0.0.188 - SDK 10.6 [Click for support]

        Silverlight: Version: 4.1.10329.0 [Click for support]

        Flash Player: Version: 17.0.0.188 - SDK 10.6 [Click for support]

        QuickTime Plugin: Version: 7.7.3

        googletalkbrowserplugin: Version: 5.41.0.0 - SDK 10.8 [Click for support]

        iPhotoPhotocast: Version: 7.0 - SDK 10.7

        AdobePDFViewer: Version: 10.1.9 [Click for support]

        SharePointBrowserPlugin: Version: 14.3.9 - SDK 10.6 [Click for support]

        MeetingJoinPlugin: Version: Unknown - SDK 10.6 [Click for support]

     

    User internet Plug-ins: ℹ️

        CitrixOnlineWebDeploymentPlugin: Version: 1.0.105 [Click for support]

     

    3rd Party Preference Panes: ℹ️

        Flash Player  [Click for support]

        Flip4Mac WMV  [Click for support]

        Tuxera NTFS  [Click for support]

     

    Time Machine: ℹ️

        Time Machine not configured!

     

    Top Processes by CPU: ℹ️

            28%    ReportCrash

             8%    WindowServer

             4%    coresymbolicationd

             4%    fmpd

             1%    diagnosticd

     

    Top Processes by Memory: ℹ️

        422 MB    kernel_task

        156 MB    com.apple.WebKit.WebContent

        90 MB    Finder

        90 MB    WindowServer

        57 MB    Safari

     

    Virtual Memory Information: ℹ️

        1.66 GB    Free RAM

        2.34 GB    Used RAM

        0 B    Swap Used

     

    Diagnostics Information: ℹ️

        May 30, 2015, 01:04:08 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130408_[redacted].crash

        May 30, 2015, 01:03:57 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130357_[redacted].crash

        May 30, 2015, 01:03:47 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130347_[redacted].crash

        May 30, 2015, 01:03:36 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130336_[redacted].crash

        May 30, 2015, 01:03:26 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130326_[redacted].crash

        May 30, 2015, 01:03:15 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130315_[redacted].crash

        May 30, 2015, 01:03:05 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130305_[redacted].crash

        May 30, 2015, 01:02:55 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130255_[redacted].crash

        May 30, 2015, 01:02:44 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130244_[redacted].crash

        May 30, 2015, 01:02:34 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130234_[redacted].crash

        May 30, 2015, 01:02:23 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130223_[redacted].crash

        May 30, 2015, 01:02:13 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130213_[redacted].crash

        May 30, 2015, 01:02:02 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130202_[redacted].crash

        May 30, 2015, 01:01:52 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130152_[redacted].crash

        May 30, 2015, 01:01:41 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130141_[redacted].crash

        May 30, 2015, 01:01:31 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130131_[redacted].crash

        May 30, 2015, 01:01:20 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130120_[redacted].crash

        May 30, 2015, 01:01:10 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130110_[redacted].crash

        May 30, 2015, 01:00:59 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130059_[redacted].crash

        May 30, 2015, 01:00:49 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130049_[redacted].crash

        May 30, 2015, 12:48:06 PM    Self test - passed

        May 30, 2015, 12:15:29 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121529_[redacted].crash

        May 30, 2015, 12:15:19 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121519_[redacted].crash

        May 30, 2015, 12:15:09 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121509_[redacted].crash

        May 30, 2015, 12:14:58 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121458_[redacted].crash

        May 30, 2015, 12:14:48 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121448_[redacted].crash

        May 30, 2015, 12:14:38 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121438_[redacted].crash

        May 30, 2015, 12:14:27 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121427_[redacted].crash

        May 30, 2015, 12:14:06 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121406_[redacted].crash

        May 30, 2015, 12:13:56 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121356_[redacted].crash

        May 30, 2015, 12:13:46 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121346_[redacted].crash

        May 30, 2015, 12:13:35 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121335_[redacted].crash

        May 30, 2015, 12:13:25 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121325_[redacted].crash

        May 30, 2015, 12:13:14 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121314_[redacted].crash

        May 30, 2015, 12:13:04 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121304_[redacted].crash

        May 30, 2015, 12:12:54 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121254_[redacted].crash

        May 30, 2015, 12:12:43 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121243_[redacted].crash

        May 30, 2015, 12:12:33 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121233_[redacted].crash

        May 30, 2015, 12:12:22 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121222_[redacted].crash

        May 30, 2015, 12:12:12 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121212_[redacted].crash

        May 29, 2015, 12:23:05 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122305_[redacted].crash

        May 29, 2015, 12:22:55 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122255_[redacted].crash

        May 29, 2015, 12:22:34 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122234_[redacted].crash

        May 29, 2015, 12:22:23 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122223_[redacted].crash

        May 29, 2015, 12:22:13 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122213_[redacted].crash

        May 29, 2015, 12:22:02 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122202_[redacted].crash

        May 29, 2015, 12:21:52 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122152_[redacted].crash

        May 29, 2015, 12:21:41 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122141_[redacted].crash

        May 29, 2015, 12:21:29 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122129_[redacted].crash

        May 29, 2015, 12:21:19 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122119_[redacted].crash

        May 29, 2015, 12:21:09 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122109_[redacted].crash

        May 29, 2015, 12:20:58 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122058_[redacted].crash

        May 29, 2015, 12:20:47 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122047_[redacted].crash

        May 29, 2015, 12:20:37 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122037_[redacted].crash

        May 29, 2015, 12:20:26 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122026_[redacted].crash

        May 30, 2015, 12:14:17 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121417_[redacted].crash

        May 29, 2015, 12:22:44 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122244_[redacted].crash

        May 29, 2015, 12:20:16 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122016_[redacted].crash

        May 29, 2015, 12:20:05 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122005_[redacted].crash

        May 29, 2015, 12:19:55 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-29-121955_[redacted].crash

        May 29, 2015, 12:19:44 PM    /Library/Logs/DiagnosticReports/fmpd_2015-05-29-121944_[redacted].crash

  • by konradz,

    konradz konradz Dec 3, 2015 12:20 PM in response to march845
    Level 1 (15 points)
    Dec 3, 2015 12:20 PM in response to march845

    Hi,

    I came across this problem. I would start from deleting all files that may refer to MacBooster:

    sudo find / -iname "macbooster"
    
  • by this is another name,

    this is another name this is another name Dec 5, 2015 6:47 AM in response to konradz
    Level 1 (0 points)
    Dec 5, 2015 6:47 AM in response to konradz

    hi everybody

     

    i read the whole thread and still have problems to remove macbooster mini. it appears still in the activity monitor.

    but i can not find any of the mentioned plist files in the folder launchagents or anywhere. also not with finder or by the terminal command like konradz suggested.

     

    (everything is made by a normal user not he admin. as admin everything is fine. nothing found with etrecheck or finder or activity monitor)

     

    i find something with etrecheck but still have no solution:

     

    EtreCheck version: 2.6.6 (226)

    Report generated 05.12.15 11:27

    Runtime 3:32

    Download EtreCheck from http://etrecheck.com

     

    Click the [Click for support] links for help with non-Apple products.

    Click the [Click for details] links for more information about that line.

     

    Hardware Information: (What does this mean?)

        MacBook Intel Core 2 Duo (white, Early 2009)

        [Click for Technical Specifications]

        [Click for User Guide]

        MacBook - model: MacBook5,2

        1 2 GHz Intel Core 2 Duo CPU: 2-core

        4 GB RAM Upgradeable

        [Click for upgrade instructions]

            BANK 0/DIMM0

                2 GB DDR2 SDRAM 667 MHz ok

            BANK 1/DIMM0

                2 GB DDR2 SDRAM 667 MHz ok

        Bluetooth: Old - Handoff/Airdrop2 not supported

        Wireless:  en1: 802.11 a/b/g/n

        Battery: Health = Normal - Cycle count = 18 - SN = 9G925P26G4M0A

     

    Video Information: (What does this mean?)

        NVIDIA GeForce 9400M - VRAM: 256 MB

            Color LCD 1280 x 800

     

    System Software: (What does this mean?)

        OS X Mavericks 10.9.5 (13F1134) - Time since boot: less than an hour

     

    Disk Information: (What does this mean?)

        Hitachi HTS725050A7E630 disk0 : (500,11 GB) (Rotational)

            EFI (disk0s1) <not mounted> : 210 MB

            SYSTEM (disk0s2) / : 74.65 GB (28.49 GB free)

            MATERIAL (disk0s3) /Volumes/MATERIAL : 424.47 GB (13.85 GB free)

     

        HL-DT-ST DVDRW  GS22N   ()

     

    USB Information: (What does this mean?)

        Micron Built-in iSight

        Apple Inc. BRCM2046 Hub

            Apple Inc. Bluetooth USB Host Controller

        Apple Inc. Apple Internal Keyboard / Trackpad

        Apple Computer, Inc. IR Receiver

     

    Configuration files: (What does this mean?)

        /etc/hosts - Count: 576

     

    Gatekeeper: (What does this mean?)

        Mac App Store and identified developers

     

    Kernel Extensions: (What does this mean?)

            /Applications/Capture One.app

        [not loaded]    com.Leaf.driver.LeafFwXDriverMatcher (1.2.0d1) [Click for support]

     

            /Applications/Toast 14 Titanium/Toast Audio Assistant.app

        [not loaded]    com.Cycling74.driver.Soundflower (1.6.7 - SDK 10.7) [Click for support]

     

            /Library/Extensions

        [loaded]    at.obdev.nke.LittleSnitch (4240 - SDK 10.8) [Click for support]

        [loaded]    org.virtualbox.kext.VBoxDrv (4.2.10) [Click for support]

        [not loaded]    org.virtualbox.kext.VBoxNetAdp (4.2.10) [Click for support]

        [not loaded]    org.virtualbox.kext.VBoxNetFlt (4.2.10) [Click for support]

        [loaded]    org.virtualbox.kext.VBoxUSB (4.2.10) [Click for support]

     

            /System/Library/Extensions

        [not loaded]    com.cisco.nke.ipsec (2.0.1) [Click for support]

     

            ~/Library/Services/ToastIt.service/Contents/MacOS

        [not loaded]    com.roxio.TDIXController (2.0) [Click for support]

     

    Startup Items: (What does this mean?)

        AdobeVersionCueCS2: Path: /Library/StartupItems/AdobeVersionCueCS2

        VirtualBox: Path: /Library/StartupItems/VirtualBox

        Startup items are obsolete in OS X Yosemite

     

    Launch Agents: (What does this mean?)

        [running]    at.obdev.LittleSnitchUIAgent.plist [Click for support]

        [loaded]    com.adobe.AAM.Updater-1.0.plist [Click for support]

        [running]    com.canon.MFManager.plist [Click for support]

        [loaded]    com.divx.dms.agent.plist [Click for support]

        [loaded]    com.divx.update.agent.plist [Click for support]

        [loaded]    com.teamviewer.teamviewer.plist [Click for support]

        [loaded]    com.teamviewer.teamviewer_desktop.plist [Click for support]

        [loaded]    org.macosforge.xquartz.startx.plist [Click for support]

     

    Launch Daemons: (What does this mean?)

        [running]    at.obdev.littlesnitchd.plist [Click for support]

        [loaded]    com.adobe.SwitchBoard.plist [Click for support]

        [loaded]    com.adobe.fpsaud.plist [Click for support]

        [loaded]    com.adobe.versioncueCS3.plist [Click for support]

        [loaded]    com.bombich.ccc.plist [Click for support]

        [failed]    com.crashplan.engine.plist [Click for support]

        [loaded]    com.oracle.java.JavaUpdateHelper.plist [Click for support]

        [loaded]    com.skype.skypeinstaller.plist [Click for support]

        [loaded]    com.teamviewer.Helper.plist [Click for support]

        [loaded]    com.teamviewer.teamviewer_service.plist [Click for support]

        [loaded]    org.macosforge.xquartz.privileged_startx.plist [Click for support]

     

    User Launch Agents: (What does this mean?)

        [loaded]    com.adobe.AAM.Updater-1.0.plist [Click for support]

        [loaded]    com.adobe.ARM.[...].plist [Click for support]

        [loaded]    com.adobe.ARM.[...].plist [Click for support]

        [failed]    com.apple.CSConfigDotMacCert-[...]@me.com-SharedServices.Agent.plist - /System/Library/Frameworks/CoreServices.framework/Frameworks/OSServices.framewo rk/Versions/A/Support/CSConfigDotMacCert: Executable not found!

        [failed]    com.iobit.MacBoosterMini.plist [Click for support]

        [loaded]    com.linotype.FontFolderProtector.plist [Click for support]

        [loaded]    com.macpaw.CleanMyMac.helperTool.plist [Click for support]

        [loaded]    com.valvesoftware.steamclean.plist [Click for support]

        [loaded]    org.virtualbox.vboxwebsrv.plist [Click for support]

     

    User Login Items: (What does this mean?)

        FontExplorerXAutoload    Programm Hidden (~/Library/Application Support/Linotype/FontExplorer X/FontExplorerXAutoload.app)

        Spyder3Utility    Programm  (~/Applications/Datacolor/Spyder3Elite/Spyder3Utility.app)

     

    Other Apps: (What does this mean?)

        [running]    [0x0-0x12012].at.obdev.LittleSnitchNetworkMonitor

        [running]    [0x0-0xf40f4].com.etresoft.EtreCheck

        [running]    org.mozilla.firefox.10240

        [running]    org.mozilla.thunderbird.10768

     

    Internet Plug-ins: (What does this mean?)

        Flip4Mac WMV Plugin: Version: 3.2.0.16   - SDK 10.8 [Click for support]

        FlashPlayer-10.6: Version: 19.0.0.245 - SDK 10.6 [Click for support]

        DivX Web Player: Version: 3.4.1.14 - SDK 10.10 [Click for support]

        Flash Player: Version: 19.0.0.245 - SDK 10.6 Cannot contact Adobe

        AdobePDFViewer: Version: 11.0.0 - SDK 10.6 [Click for support]

        Default Browser: Version: 537 - SDK 10.9

        OVSHelper: Version: 1.1 [Click for support]

        QuickTime Plugin: Version: 7.7.3

        Silverlight: Version: 5.1.10411.0 - SDK 10.6 [Click for support]

        DirectorShockwave: Version: 11.5.0r595 [Click for support]

        JavaAppletPlugin: Version: 14.9.0 - SDK 10.7 Check version

     

    Audio Plug-ins: (What does this mean?)

        DVCPROHDAudio: Version: 1.3.2

     

    3rd Party Preference Panes: (What does this mean?)

        Flash Player  [Click for support]

        Flip4Mac WMV  [Click for support]

        Growl  [Click for support]

        hueyPRO  [Click for support]

        MacFUSE  [Click for support]

     

    Time Machine: (What does this mean?)

        Skip System Files: NO

        Mobile backups: OFF

        Auto backup: NO - Auto backup turned off

        Volumes being backed up:

            SYSTEM: Disk size: 74.65 GB Disk used: 46.16 GB

        Destinations:

            SICHERUNG [Local]

            Total size: 944.86 GB

            Total number of backups: 26

            Oldest backup: 30.01.15 12:04

            Last backup: 18.11.15 19:36

            Size of backup disk: Excellent

                Backup size 944.86 GB > (Disk size 74.65 GB X 3)

     

    Top Processes by CPU: (What does this mean?)

            68%    MacBooster mini

             8%    firefox

             4%    WindowServer

             2%    kernel_task

             1%    coreaudiod

     

    Top Processes by Memory: (What does this mean?)

        537 MB    firefox

        417 MB    kernel_task

        213 MB    thunderbird

        213 MB    iTunes

        147 MB    com.apple.IconServicesAgent

     

    Virtual Memory Information: (What does this mean?)

        805 MB    Free RAM

        3.19 GB    Used RAM (940 MB Cached)

        0 B    Swap Used

     

    Diagnostics Information: (What does this mean?)

        Dec 5, 2015, 11:26:49 AM    ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112649_[redacted].crash

        Dec 5, 2015, 11:26:38 AM    ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112638_[redacted].crash

        Dec 5, 2015, 11:26:28 AM    ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112628_[redacted].crash

        Dec 5, 2015, 11:26:17 AM    ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112617_[redacted].crash

        Dec 5, 2015, 11:26:09 AM    ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112609_[redacted].crash

        Dec 5, 2015, 11:25:57 AM    ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112557_[redacted].crash

        Dec 5, 2015, 11:25:45 AM    ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112545_[redacted].crash

        Dec 5, 2015, 11:25:35 AM    ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112535_[redacted].crash

        Dec 5, 2015, 11:25:25 AM    ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112525_[redacted].crash

        Dec 5, 2015, 11:25:20 AM    ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112520_[redacted].crash

        Dec 5, 2015, 11:25:03 AM    ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112503_[redacted].crash

        Dec 5, 2015, 11:24:52 AM    ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112452_[redacted].crash

        Dec 5, 2015, 11:24:43 AM    ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112443_[redacted].crash

        Dec 5, 2015, 11:24:31 AM    ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112431_[redacted].crash

        Dec 5, 2015, 11:24:20 AM    ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112420_[redacted].crash

        Dec 5, 2015, 11:24:10 AM    ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112410_[redacted].crash

        Dec 5, 2015, 11:23:59 AM    ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112359_[redacted].crash

        Dec 5, 2015, 11:23:49 AM    ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112349_[redacted].crash

        Dec 5, 2015, 11:23:38 AM    ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112338_[redacted].crash

        Dec 5, 2015, 11:23:28 AM    ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112328_[redacted].crash

        Dec 5, 2015, 10:48:10 AM    ~/Library/Logs/DiagnosticReports/Spyder3Utility_2015-12-05-104810_[redacted].cr ash

        Dec 5, 2015, 10:45:39 AM    Self test - passed

        Dec 4, 2015, 06:35:22 PM    ~/Library/Logs/DiagnosticReports/Finder_2015-12-04-183522_[redacted].crash

     

        Standard users cannot read /Library/Logs/DiagnosticReports.

        Run as an administrator account to see more information.

  • by terryfromsurrey,

    terryfromsurrey terryfromsurrey Mar 14, 2016 3:24 AM in response to media_lush
    Level 1 (0 points)
    Mar 14, 2016 3:24 AM in response to media_lush

    I had a message pop up after a power outage that MacBooster mini "Quit Unexpectedly". Being aware that more or less any "App" that claims to "Speed Up", "Boost", or "Clean" your Mac is at best junk if not malware or spyware, I followed the convenient filepath shown in the "Unexpectedly Quit" window and located it in the /Users/USER/Library/Application Support/MacBooster/XXX file and did a quick Get Info on it to determine it it was some obscure Apple file before I deleted it. It showed up as being created by "iObit". I took a screenshot of the "Unexpectedly Quit" window for future reference (below) and deleted it, then emptied the trash.

    Screen Shot 2016-03-14 at 12.39.07 AM.JPG

    Next issue was to find any remaining bits. Since it was self opening at startup and running invisibly in the background, I had a look in /LibraryLaunchDaemons, /Library LaunchAgents, and /Library/StartupItems for MacBooster or iObit. I located an iObit file and deleted that, then checked the hidden (by Apple) User Library via the Finder/Go Menu with Option key held down/Library and checked the LaunchAgents, LaunchDaemons, and StartupItems there also. I found another iObit file lurking in there and deleted it. Finally I checked the ~User/Library/Preferences and deleted three more iObit preference files.

    Screen Shot 2016-03-14 at 2.16.51 AM.JPG

    I suspect it came in via either a VLC auto-update as noted in the original enquiry, or via an Adobe Flash Player or Adobe Reader update, which I have found to have pre-checked junkware piggybacked on them also. DIVX is another serial offender in that regard. I deleted it and all of it's related crap off some time back and never missed it. This piggybacked junkware has been a common problem on PCs for years, and is increasingly becoming an issue on Macs.

     

    If this "App" wasn't up to no good, it would be installed in Applications where it belongs, not hiding in the Application Support files.

     

    I have also occasionally found malware hiding in the hidden /Private/VAR folder or the /Private/Etc. folder in a few of my client's computers. Some of my clients have fallen victim to a malware Popup that freezes a web browser, usually Safari or Firefox, with a 1-800 number to call to a supposed "Security Expert" purporting to be from Microsoft or an "Internet Security" outfit of some kind. The "Security Expert" then convinces the victim to download and install a version of LogMeIn that lets them take control of the computer, do some damage, and then demand a ransom payment to "remove the malware he found" and restore the function of the computer, leaving the LogMeIn behind for future use. Usually LogMeIn is installed in Applications, but the smarter criminals are starting to use an installer which installs it in a subfolder, usually VAR or Etc.  of the hidden /Private folder. I use Marcel Bresink's free TinkerTool's Finder Options to Show Invisible Files to render them visible when tracking down this sort of malware. Thanks, Marcel.

  • by Kurt Lang,

    Kurt Lang Kurt Lang Mar 14, 2016 5:56 AM in response to terryfromsurrey
    Level 8 (37,820 points)
    Mac OS X
    Mar 14, 2016 5:56 AM in response to terryfromsurrey
    I suspect it came in via either a VLC auto-update as noted in the original enquiry, or via an Adobe Flash Player or Adobe Reader update, which I have found to have pre-checked junkware piggybacked on them also.

    I have to wonder where you're getting your apps and updates from. Adobe never, ever tags extra junk in with their Flash Player or Acrobat Reader downloads or updates. If VLC is obtained directly from their site, it is also always free of garbage, as are the auto updates. Downloaded from the videolan.org web site, the VLC app doesn't even include an installer. You open the .dmg file and then drag and drop the app into the Applications folder.

     

    I can only guess you're using aggregate sites like C|NET's www.downloads.com, or www.softonic.com. You're pretty much guaranteed to get unwanted extras from them.

  • by joefocusrite,

    joefocusrite joefocusrite Jul 28, 2016 8:58 AM in response to media_lush
    Level 1 (4 points)
    Jul 28, 2016 8:58 AM in response to media_lush

    18 months later... try here:

    ~/Library/Application Support/MacBooster/MacBooster mini.app

first Previous Page 4 of 4