Malware

I have been having symptoms of malware and finally sat down to address the problem. When I called AppleCare, who directed me to the App Store, where I bought the Virus Barrier. They found about 32 Malware files, of which I was able to delete 28. Not being satisfied with four infections on my computer, I bought the Antivirus Zap, and ran it. They found about 95 Adware files and were able to zap about 91 of them.


The files I can't seem to locate in applications and can't seem to be deleted are:

OSX/Bundlore with a file named com.MyShopcoupon.agent.plist

OSX/SurBuyer.gen with a file of MyShopcoupon

OSX/Bundlore, com.MyMacUpdater.agent.plist


The adware files that the Zap couldn't zap are all related to MyShopCoupon and MyMacUpdater.


Also, my Google browser has "weknow" as a search engine, which I can't remove. Does anyone know how to do that?


Thanks,

Lori

MacBook Pro 13", 10.11

Posted on Feb 5, 2019 9:42 AM

Reply
Question marked as Top-ranking reply

Posted on Feb 5, 2019 9:48 AM

You must download an awful lot of garbage that in turn, installs lots of adware and other unwanted junk.


First, you didn't need to purchase anything. Especially not the worthless AV software from the App Store. Get the free MalwareBytes for Mac and run that. You can uninstall it afterwards by using the menu choice within the app.


Because macOS doesn't allow AV apps, or pretty much anything else to modify Safari, MalwareBytes will know the WeKnow junk is there, but can't do anything to remove it. For WeKnow:


  1. Look for WeKnow as an app (or something similarly named) in the Applications folder. Delete it.
  2. Open the System Preferences. You'll likely find an item in the last row named Profiles. Click on that. Remove any profiles in the left column. WeKnow typically names theirs AdminPrefs to try and make it sound like something that should be there.

Similar questions

3 replies
Question marked as Top-ranking reply

Feb 5, 2019 9:48 AM in response to Lorethio

You must download an awful lot of garbage that in turn, installs lots of adware and other unwanted junk.


First, you didn't need to purchase anything. Especially not the worthless AV software from the App Store. Get the free MalwareBytes for Mac and run that. You can uninstall it afterwards by using the menu choice within the app.


Because macOS doesn't allow AV apps, or pretty much anything else to modify Safari, MalwareBytes will know the WeKnow junk is there, but can't do anything to remove it. For WeKnow:


  1. Look for WeKnow as an app (or something similarly named) in the Applications folder. Delete it.
  2. Open the System Preferences. You'll likely find an item in the last row named Profiles. Click on that. Remove any profiles in the left column. WeKnow typically names theirs AdminPrefs to try and make it sound like something that should be there.

Feb 5, 2019 9:46 AM in response to Lorethio

Basics for Uninstalling Software 


Most OS X applications are completely self-contained "packages" that can be uninstalled by simply dragging the application to the Trash.  Applications may create preference files that are stored in the /Home/Library/Preferences/ folder.  Although they do nothing once you delete the associated application, they do take up some disk space.  If you want you can look for them at the above location and delete them, too. 


Some applications may install an uninstaller program that can be used to remove the application. If you cannot find the uninstaller then you could download the freeware, Easy Find, to locate files that need to be removed. The places you need to search include: 


  1. /Home/Library/Applications Support/ folder. Check if the application has created a folder then delete the folder that's in the Applications Support folder.
  2. Applications may install a startupitem or a LogIn item. StartupItems are usually installed in the /Library/StartupItems/ folder or the /Home/Library/StartupItems/ folder.  Login Items are set in the Users & Groups preferences.  Open it in System Preferences, then click on the Login Items tab.  Select the item from the list and click on the Delete [-] button to remove it.
  3. Some software use startup daemons or agents.  Look for them in /Library/LaunchAgents/ and /Library/LaunchDaemons/ or in /Home/Library/LaunchAgents/. 


Some applications install a receipt in the /Library/Receipts/ folder.  Usually with the same name as the program or the developer.  The item generally has a ".pkg" extension.  Be sure you also delete this item as some programs use it to determine if it's already installed. 


There are many utilities that can uninstall applications.  Here is a selection: 


  1. AppZapper
  2. AppDelete
  3. Hazel
  4. AppCleaner
  5. CleanApp
  6. iTrash
  7. AppBolish
  8. AppUninstaller
  9. Uninstaller 


For more information visit The XLab FAQs and read the FAQ on removing software.





This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Malware

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.