chlooethomas

Q: What is AppYM?

My macbook is very hot and my batterie is shutting down too fast, I don't know what's going on. I have this AppYM which is using a lot of my processor, so maybe it's a virus? I don't know, can someone help me please? I have this macbook air for 2 years an d I never had any issues before today.

MacBook Air, OS X Yosemite (10.10.5)

Posted on Nov 9, 2015 6:48 AM

Close

Q: What is AppYM?

  • All replies
  • Helpful answers

Previous Page 2 of 3 last Next
  • by rpote,

    rpote rpote Dec 9, 2015 4:16 AM in response to DLCIPRIANI2012
    Level 1 (0 points)
    Dec 9, 2015 4:16 AM in response to DLCIPRIANI2012

    I went to the Apple Store yesterday to ensure the malware didn't cause further issues on my MacBook Pro. They installed an app called Malwarebytes AntiMalware and ran some diagnostics. Found only one file still floating around out there but also gave me a tool to monitor and check on this with my other Macs and my notebook. I'd recommend this app.

  • by BillieBillie,

    BillieBillie BillieBillie Dec 9, 2015 7:44 AM in response to Linc Davis
    Level 1 (4 points)
    Mac OS X
    Dec 9, 2015 7:44 AM in response to Linc Davis

    Thanks a million Link. I may have "overdone it", to wit: I didn't write down all of the several "something.plist" and after going through your procedures for LaunchAgents and LaunchDaemons I got to looking around and found dozens of other "something.plist" throughout the Application Support File (sub folders included Adobe and Apple). They were partially labeled info.....plist, manifest.....plist, TableOfContents.....plist, Version.....plist, and so on. Did I trash too many items? The good news is iMac is working like a charm! Do I need any of those items deleted? Thanks again........

  • by Keith Barkley,

    Keith Barkley Keith Barkley Dec 9, 2015 10:11 AM in response to BillieBillie
    Level 5 (6,427 points)
    Dec 9, 2015 10:11 AM in response to BillieBillie

    Generally, a program will recreate a default plist if you delete one. You might lose some application settings (which is what the plist is for) but no permanent harm done.

  • by Helene Fromm,

    Helene Fromm Helene Fromm Dec 9, 2015 2:11 PM in response to Linc Davis
    Level 1 (0 points)
    Dec 9, 2015 2:11 PM in response to Linc Davis

    THANK YOU SO MUCH! I followed your instructions and found a bunch of them. Now everything works again wonderfully. Such a big relief.

  • by lucysmom15,

    lucysmom15 lucysmom15 Dec 9, 2015 6:42 PM in response to chlooethomas
    Level 1 (0 points)
    Dec 9, 2015 6:42 PM in response to chlooethomas

    Thank you for this very thorough explanation. My computer seems to be working much better since following these steps. Very much appreciated!!!!

  • by BillieBillie,

    BillieBillie BillieBillie Dec 11, 2015 10:09 AM in response to Keith Barkley
    Level 1 (4 points)
    Mac OS X
    Dec 11, 2015 10:09 AM in response to Keith Barkley

    Thanks. I found about 200 .plst and had not deleted them all, until I read your response. It so happens that about the same time I read your response, the AppYM showed up again in my activity monitor, reeking havoc on my process speed! So now ALL the .plst are deleted.......... Now comes the re-boot to see if "all is well"....

  • by Ric_K,

    Ric_K Ric_K Dec 14, 2015 7:18 AM in response to Linc Davis
    Level 1 (0 points)
    Dec 14, 2015 7:18 AM in response to Linc Davis

    Having the same issues with YMAPP eating up memory.  I followed your instructions to identify and delete files in the ~lunchagents library.  I found several files there, but when I tried to move to the trash, I get the error:

     

    "The operation cannot be completed because one or more of the required items can't be found.  (euro code  - 43)"

     

    Are there any solutions for this problem?

     

    Many thanks!

  • by Billb3346,

    Billb3346 Billb3346 Dec 14, 2015 7:57 AM in response to chlooethomas
    Level 1 (0 points)
    Dec 14, 2015 7:57 AM in response to chlooethomas

    This "FIX" worked great and immediately returned functionality to my iMac which showed 0 memory available and was stalled with the color wheel of death with no apps running.

    I found three of the "something" files and their sub files and deleted all.  Also found Safari extensions to delete.

    Would be interested if anyone know where these originated.

    I guess malware has finally come to Mac Land.  ****!

    Thanks Linc Davis for this excellent and quick FIX,   your contribution is definitely appreciated.

  • by mamventure,

    mamventure mamventure Dec 17, 2015 11:59 AM in response to Linc Davis
    Level 1 (0 points)
    Dec 17, 2015 11:59 AM in response to Linc Davis

    This was incredibly helpful. My Mac was incredibly slow, and some other odd things were happening. Getting rid of AppYM and the accompanying kuklorest files has saved the day. Thanks, Linc Davis!

  • by hnaveh55,

    hnaveh55 hnaveh55 Dec 26, 2015 8:04 PM in response to chlooethomas
    Level 1 (0 points)
    Dec 26, 2015 8:04 PM in response to chlooethomas

    You are a God

  • by Robert H. Ziller,

    Robert H. Ziller Robert H. Ziller Jan 9, 2016 3:41 PM in response to Linc Davis
    Level 1 (25 points)
    Jan 9, 2016 3:41 PM in response to Linc Davis

    Another Kudo for your expertise & help!

     

    I figured out where I picked up my copy of this computer cootie. There was a link on OOKLA's website for a free little utility for doing internet speed tests. It is called "Download Speed Test" by AB Tools.

    It turns out that cnet did a review of this product and gave it 5-stars (incredibly inept, horrible advice).

     

    **CAUTION**:   The link is still alive and well at cnet for you to observe: http://download.cnet.com/Download-Speed-Test/3000-2381_4-75448535.html

    Whatever you do, DON'T ACCIDENTALLY DOWNLOAD OR ATTEMPT TO INSTALL THIS APP.

     

    Cheers!

    Bob

  • by Linc Davis,

    Linc Davis Linc Davis Jan 9, 2016 5:41 PM in response to Linc Davis
    Level 10 (208,000 points)
    Applications
    Jan 9, 2016 5:41 PM in response to Linc Davis

    As people are still replying to this thread, I should reiterate that the instructions I posted in November 2015 have a limited shelf life. As of now, they still seem to be working, because the attacker has been too lazy to change his MO. Eventually he will change it, and anyway there are other kinds of adware in circulation. If the instructions don't work for you, look for newer ones or start your own thread, and resist the blandishments of those who will tell you to use "anti-malware" software.

  • by Missevadee69,

    Missevadee69 Missevadee69 Jan 23, 2016 6:10 AM in response to Linc Davis
    Level 1 (0 points)
    Jan 23, 2016 6:10 AM in response to Linc Davis

    Saw APPYM in my Activity Monitor sucking memory and quit it, but don't see any of the files you mentioned. In my LaunchAgents directory I only have:

     

    com.adobe.ARMDC...c37a23d420d.plist

    com.oracle.java.Java-Updated.plist

    edu.mit.appinventor.aiStarter.plist

     

    In my ApplicationSupport directory I have:

     

    Adobe, App Store, Apple, com.apple.TCC, CrashReporter, Fitbit Connect, Garage Band, iLifeMediaBrowser, Macromedia, Microsoft, Oracle, ProApps, Script Editor, and VMware

     

    I'll go look for newer threads, although this still seems pretty recent.

  • by Garage girl,

    Garage girl Garage girl Mar 28, 2016 4:27 AM in response to Linc Davis
    Level 1 (8 points)
    Mar 28, 2016 4:27 AM in response to Linc Davis

    Hey

     

    I found this post really helpful when I noticed that AppYm was on my mac - thanks.


    I checked both locations ~/Library/Application Support and ~/Library/Launch Agents and found some of the files you mentioned, and removed them.


    I also found 'gUpdater.plist' and wondered if you've heard of it? And if you could advise if I should remove it?


    I think it may be linked to google software that automatically updates chrome, without asking permission, but I thought it might be worth double checking before I remove it.


    Thanks a lot.

  • by etresoft,

    etresoft etresoft Mar 28, 2016 10:38 AM in response to Garage girl
    Level 7 (29,298 points)
    Mac OS X
    Mar 28, 2016 10:38 AM in response to Garage girl

    Garage girl wrote:

     

    I checked both locations ~/Library/Application Support and ~/Library/Launch Agents and found some of the files you mentioned, and removed them.


    I also found 'gUpdater.plist' and wondered if you've heard of it? And if you could advise if I should remove it?

    The gUpdater.plist file is usually part of the the "bait" software you installed. The only purpose of the bait is to get you to install the actual adware payload. Technically speaking, gUpdater.plist isn't adware, but adware isn't always black and white. In the case of this file, it is more of a mid-tone charcoal or dark grey colour.

     

    Also, I should caution anyone against using the instructions posted in this thread. If you think you have an adware infection, please start your own thread. Don't attempt to identify and delete these files on your own. Unless you have a lot of experience with adware, you may not be able to tell the difference between adware and legitimate software. As noted above, sometimes it is a grey area.

     

    In most cases, the easiest thing to do is use a tool like EtreCheck (http://etrecheck.com) to identify and remove the adware. If you don't want to have EtreCheck automatically remove the adware, you can just post the EtreCheck report and it will list all of the adware it finds. Then other helpers can give you specific instructions about what files you need to delete. If you don't even want to run EtreCheck at all, you can take screen shots of the contents of various hidden directories as instructed in Linc Davis' more recent postings. Then, people can look at the screen shots to identify the adware files and tell you which ones to remove and how.

     

    Disclaimer: Although EtreCheck is free, there are other links on my site that could give me some form of compensation, financial or otherwise.

Previous Page 2 of 3 last Next