Whitemoonboots

Q: Some Sort of Malware, Can't Delete

Hey Apple community,

 

I have found a similar post, but cannot find the root. I have deleted Mackeeper that I accidentally downloaded with another application, but these pop ups happen constantly: Screen Shot 2016-07-05 at 11.27.59 AM.png


Any ideas on where I could find the root?

 

Thanks

Posted on Jul 5, 2016 8:33 AM

Close

Q: Some Sort of Malware, Can't Delete

  • All replies
  • Helpful answers

  • by lllaass,

    lllaass lllaass Jul 5, 2016 8:55 AM in response to Whitemoonboots
    Level 10 (187,764 points)
    Desktops
    Jul 5, 2016 8:55 AM in response to Whitemoonboots

    How did you remove MacKeeper?

    This includes instructions for removing it

    Do not install MacKeeper

     

    Next try:
    How to install (Really remove) adware
    https://discussions.apple.com/docs/DOC-7471

    Stop pop-up ads and adware in Safari
    https://support.apple.com/en-us/HT203987
    Adware Removal Guide : Identification
    http://www.thesafemac.com/arg-identification/
    Next if necessary:
    Malwarebytes Anti-Malware for Mac
    https://www.malwarebytes.org/antimalware/mac/?gclid=CjwKEAjw8qetBRCj6vKH8IC_kwoS JADGQ8dSXC2m8LzIJ_6AwtK7xznQOvkb7qN3FBqVS_jjw8JcdhoCCqDw_wcB
    MB for Lion:
    https://data-cdn.mbamupdates.com/web/MBAM-Mac-1.0.2.8.dmg

  • by Linc Davis,

    Linc Davis Linc Davis Jul 5, 2016 9:10 AM in response to Whitemoonboots
    Level 10 (207,926 points)
    Applications
    Jul 5, 2016 9:10 AM in response to Whitemoonboots

    You installed a fake "utility" called "Advanced Mac Cleaner" and/or "AdwareCleaner." Like any software that purports to automatically "clean up" or "speed up" a Mac, it's a scam.

    To inactivate it, please take the steps below. This procedure may leave a few small files behind, but they have no effect, and trying to remove them all would be more trouble than it's worth.

    Some of the files listed may be absent in your case. Back up all data before proceeding.

    Malware is always changing to get around the defenses against it. This procedure works as of now, as far as I know. It may not work in the future. Anyone finding this comment a few days or more after it was posted should look for a more recent discussion, or start a new one.

    If you paid for the software with a credit card, consider reporting the charge to the bank as fraudulent.

    Triple-click anywhere in the line below on this page to select it:

    ~/Library/LaunchAgents

    Right-click or control-click the highlighted line and select

              Services Open

    from the contextual menu.* A folder named "LaunchAgents" may open. If it does, look inside it for files with a name that begins in either of these ways:

              com.pcv.

              com.adwarecleaner.

    Move any such files to the Trash.

    Log out or restart the computer and empty the Trash.

    *If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination  command-C. In the Finder, select

              Go Go to Folder...

    from the menu bar and paste into the box that opens by pressing command-V. You may not see what you pasted because a line break is included. Press return.

    The malware is now permanently inactivated, as long as you don't reinstall it.

    The problem started when you downloaded something, perhaps an application called "FileZilla" or "NicePlayer," when prompted to do so by a popup on a website. Never visit that site again. All legitimate software should be downloaded directly from the developer's website or from the Mac App Store, if applicable.

    "Advanced Mac Cleaner" may have been bundled with other malware that was installed at the same time. If you still have problems with web browsers after removing it, ask for instructions.