You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

How do I get rid of Mac Cleanup Pro

Hi I was on the University of Alberta website (trust worthy site) and was prompted to download the latest version of Flash to use one of their online resources. I think the Mac Cleanup Pro piggy backed on the download. I have followed the steps to remove it that were posted in https://discussions.apple.com/thread/7418460?answerId=29616967022#29616967022 but it's still popping up. I think it is getting relaunched when I use Chrome.


Is there a new process for finding this malware on my computer and deleting it? Thanks!

MacBook Pro 15", macOS 10.13

Posted on Mar 9, 2019 11:47 AM

Reply
Question marked as Top-ranking reply

Posted on Mar 12, 2019 6:32 PM

Thanks.


First, ensure you have a reliable backup of your Mac, in case something should go wrong with continued troubleshooting. To learn how to do that, please read Back up your Mac with Time Machine.


  • A backup is a fundamental prerequisite regardless of whatever method you may choose uninstall adware, and would apply even if your Mac were running perfectly well. Do not overlook this fundamental requirement. It's important.


Next: This step is optional, but will preclude any related inability to use your Mac due to the adware's excessive demands imposed upon it. Restart in "Safe Mode", and log in: Use safe mode to isolate issues with your Mac. Starting in Safe Mode takes longer than usual so let it finish.


In the third screenshot (/Library/LaunchAgents) select (single-click) the files and folders shown below:



Drag that selection of files to the Trash. You may be asked to authenticate. Confirm they are no longer present in that folder. Leave all the others alone for now.


"join.me.launcher" is suspicious but only because I've never heard of it. As BDAqua wrote so are "com.company.engine.finder.plist" and "com.company.installer". Leave them alone for now too.


There may also be adware-associated app icons in your Mac's Applications folder. Those apps may be known by the names "Mac Adware Cleaner", "Mac Cleanup Pro", or "Advanced Mac Cleaner". Open Applications and carefully examine its contents for those or similarly named apps. In general anything claiming to "clean" your Mac should be regarded with suspicion, but those are just a few examples of pernicious adware that can go by literally any name. Any unwanted or mysterious app icons should be obvious to you, but again please don't remove anything if you are uncertain—ask first. Identify any suspicious apps by name, or post another screenshot.


Next: In an abundance of caution, examine System Preferences > Extensions. Determine if there are any Extensions that may have been installed without your knowledge. Ask if you're uncertain.


While you are examining System Preferences, check for the presence of any Profiles. Profiles are installed by organizations with a need to manage Macs deployed in institutional, corporate, or educational environments. Unless your Mac is managed in similar deployments using MDM, no Profiles should be installed. Scam products exploit that ability, directing you to their own revenue-grabbing search engines instead while preventing you from changing Safari's Search preferences to your own.


Open Safari and select the Safari menu > Preferences... > Extensions. If you see any Extensions that you do not recognize or understand, simply click the Uninstall button and they will be gone. No Safari Extensions are required for normal operation. Then, select the General pane and review your Homepage selection. Then, make sure your Search preferences reflect the search engine you wish to use. Repeat those equivalent actions for any other browser you may use.


You can then restart your Mac and use it normally.


Next: if you want to eradicate all remaining adware remnants post a screenshot of the following folder, in the same manner as you did earlier:


~/Library/Application Support


It is normal for that folder to contain many items, but anything associated with the above adware will bear identical names ("Mac Adware Cleaner", "Mac Cleanup Pro", or "Advanced Mac Cleaner" for example). Without the files you already removed or the reintroduction of similar malware, they can do nothing but occupy space. These can be removed if you wish, but again don't remove anything if you are uncertain.


14 replies
Question marked as Top-ranking reply

Mar 12, 2019 6:32 PM in response to questionslotso

Thanks.


First, ensure you have a reliable backup of your Mac, in case something should go wrong with continued troubleshooting. To learn how to do that, please read Back up your Mac with Time Machine.


  • A backup is a fundamental prerequisite regardless of whatever method you may choose uninstall adware, and would apply even if your Mac were running perfectly well. Do not overlook this fundamental requirement. It's important.


Next: This step is optional, but will preclude any related inability to use your Mac due to the adware's excessive demands imposed upon it. Restart in "Safe Mode", and log in: Use safe mode to isolate issues with your Mac. Starting in Safe Mode takes longer than usual so let it finish.


In the third screenshot (/Library/LaunchAgents) select (single-click) the files and folders shown below:



Drag that selection of files to the Trash. You may be asked to authenticate. Confirm they are no longer present in that folder. Leave all the others alone for now.


"join.me.launcher" is suspicious but only because I've never heard of it. As BDAqua wrote so are "com.company.engine.finder.plist" and "com.company.installer". Leave them alone for now too.


There may also be adware-associated app icons in your Mac's Applications folder. Those apps may be known by the names "Mac Adware Cleaner", "Mac Cleanup Pro", or "Advanced Mac Cleaner". Open Applications and carefully examine its contents for those or similarly named apps. In general anything claiming to "clean" your Mac should be regarded with suspicion, but those are just a few examples of pernicious adware that can go by literally any name. Any unwanted or mysterious app icons should be obvious to you, but again please don't remove anything if you are uncertain—ask first. Identify any suspicious apps by name, or post another screenshot.


Next: In an abundance of caution, examine System Preferences > Extensions. Determine if there are any Extensions that may have been installed without your knowledge. Ask if you're uncertain.


While you are examining System Preferences, check for the presence of any Profiles. Profiles are installed by organizations with a need to manage Macs deployed in institutional, corporate, or educational environments. Unless your Mac is managed in similar deployments using MDM, no Profiles should be installed. Scam products exploit that ability, directing you to their own revenue-grabbing search engines instead while preventing you from changing Safari's Search preferences to your own.


Open Safari and select the Safari menu > Preferences... > Extensions. If you see any Extensions that you do not recognize or understand, simply click the Uninstall button and they will be gone. No Safari Extensions are required for normal operation. Then, select the General pane and review your Homepage selection. Then, make sure your Search preferences reflect the search engine you wish to use. Repeat those equivalent actions for any other browser you may use.


You can then restart your Mac and use it normally.


Next: if you want to eradicate all remaining adware remnants post a screenshot of the following folder, in the same manner as you did earlier:


~/Library/Application Support


It is normal for that folder to contain many items, but anything associated with the above adware will bear identical names ("Mac Adware Cleaner", "Mac Cleanup Pro", or "Advanced Mac Cleaner" for example). Without the files you already removed or the reintroduction of similar malware, they can do nothing but occupy space. These can be removed if you wish, but again don't remove anything if you are uncertain.


Mar 9, 2019 11:54 AM in response to questionslotso

You inadvertently installed adware. You do not need to download or install anything to fix it.


Navigate to the following folder, and post its contents in a screenshot.


~/Library/LaunchAgents


To open that folder, copy the entire line above and paste it in the Finder's Go menu > Go to Folder... field. Make it look like this:





... and click the Go button.


A Finder window will open. Take a screenshot showing all that folder's contents, and post it in a reply. To take a screenshot read the Appendix in the following User Tip: Writing an effective Apple Support Communities question.


Usually, there is nothing in that folder so don't be surprised to find it empty. The reason for starting with that folder is to eliminate other potential causes before proceeding with steps that will identify and eradicate whatever is affecting that Mac.


There will be additional instructions to follow and this is just the first step.


For a description of how this may have occurred, how to avoid it in the future, and for Apple's recommended actions read How to install adware.


Review your Gatekeeper settings: OS X : About Gatekeeper - Apple Support. Gatekeeper is designed to help prevent you from inadvertently installing garbage software.

Mar 11, 2019 8:35 PM in response to questionslotso

Mac Cleanup Pro is a fake Mac optimizer that spreads with the help of the fake Adobe Flash Player


Mac Cleanup Pro is a potentially unwanted application (PUP) that looks legitimate and handy while gathering various sensitive information about its user. Just like Advanced Mac CleanerMac Auto Fixer, and similar viruses, this tool appears to be a good Mac OS optimizing program. However, the program has been using deceptive techniques to spread around and then delivering deceptive advertisements to convince its victims that they have numerous issues on their computers. At the moment, the virus is spreading as a Flash Player update by using such and similar notifications: Flash Player Update!Adobe Flash Player is out of date, and similar. Beware that these ads are fake. They are associated with adware[1] trying to infect the system with a totally useless app. Additionally, Mac Cleanup Pro starts scanning the system and returns fake scan results promoting its license. However, you should never invest in such tools if you don't want to lose your money.


While the term “Mac Cleanup Pro virus” is not entirely accurate, users have been actively using it to describe their struggle with this program. The biggest concern is its intrusive behavior that has been frustrating people for several months now. After infiltrating its target computers with the help of bundling, the PUP has also been causing havoc on the system and also failing to leave the system when being asked.

The main activity of Mac Cleanup Pro relies on fake system scanners that are displayed each time the system is rebooted. Additionally, the app starts reporting numerous issues and offers to purchase its license to fix all of them. All these scanners can significantly diminish the time you spend on your device and make your computer or browser run slow.

You may also notice that your Safari, Google Chrome or Mozilla Firefox browsers have started displaying numerous ads while browsing the Internet. This promotional content is used to promote either this tool or similar applications that are supposed to:

  • fix errors;
  • improve computer's speed;
  • disable ads on your computer;
  • remove malware;
  • make your PC run faster.

However, this list is used just to trick you into installing even more PUPs on your computer. Additionally, these programs can not only start interrupting you with their fake ads but can also trick you into purchasing their useless full versions. 


However, this list is used just to trick you into installing even more PUPs on your computer. Additionally, these programs can not only start interrupting you with their fake ads but can also trick you into purchasing their useless full versions. 

Another big problem with programs like Mac Cleanup Pro and other suspicious tools is the relation with advertisers and sponsors. This association leads to data gathering and sharing the accumulated information with third-party companies. Your IP address, location, browsing history, most viewed sites, and other online preferences can be tracked. Later on, this information can be used to generate more commercial[2] content on your screen.

There are tons of similar programs that look legitimate and useful but provide no real value. Unfortunately, they can also affect the performance of your device, its speed, and even security. You need to remove Mac Cleanup Pro as soon as you notice any of these signs showing that you are affected by the PUP:

  • constant redirects to commercial sites;
  • pop-up ads delivered to your screen;
  • promotional content;
  • messages about your device being infected;
  • suggestions to purchase a license key of Mac Cleanup Pro. 


At the moment of writing, Malwarebytes is considered the easiest way to get rid of this virus.

Mar 12, 2019 4:01 PM in response to questionslotso

No. Please notice that you posted two screenshots of the exact same folder.


Three separate folders require inspection. They as follows:


~/Library/LaunchAgents

/Library/LaunchDaemons

/Library/LaunchAgents


Navigate to each folder in the same manner—by copying and pasting them into the Finder's Go > Go to Folder menu selection. It's the third one that is missing.


How do I get rid of Mac Cleanup Pro

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.