You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Malware found on app Duplicates cleaner

In the app store malware has been found by various virus software for the app Duplicates cleaner by PCVARK software private limited

MacBook Pro 13", macOS 10.13

Posted on Mar 23, 2019 3:59 AM

Reply
43 replies

May 28, 2019 8:41 AM in response to macfrombrampton

Since some of the forum users seem to think that the information provided is falses or that the Web site Virus total is not valid I am interested in any Apple forum users providing evidence that this software is not malware


these forums are in place for technical problems with Apple products. There is no need for us to provide “evidence” on any third party software you decided to install/run.


And, you can address your problem with it with the developer and/or Apple directly.

Jul 15, 2019 10:27 AM in response to babowa

I have been in communications with Intego malware detector and they also detected Malware. Strangely they he reported a different SHA256 than I detected on July-2019. See the below Email


Chris (Intego Support) 
Jul 12, 17:06 CDT 
Hello xxx,

Thank you for your reply.

I uploaded the Duplicates Cleaner app to virustotal and got the following:

63af964fe3c8846d517966128aebb172651355b804a2d15a69c05dea61428c4c

My VirusBarrier Scanner app is also now detecting the same threat. 

It appears the app is infected. You may uninstall the Duplicates Cleaner application. 

Please let us know if you have any other questions. 


Kind Regards,

Chris
Intego Support Team


Jul 15, 2019 11:06 AM in response to macfrombrampton

I hope you have a great time chasing after some utopian problem. Actually, I have a solution: uninstall Duplicates Cleaner.


I am well aware that this is a forum of users of this service that is why it is important to notify them of a problem.


Not really since I, for one, would not let such an app near any of my Macs.


I am now unsubscribing to this thread.

Aug 17, 2019 6:40 PM in response to etresoft


No, it is a 4th party and absolute junk.

4th party? You might as well have said 37th party to really drive the hyperbole home!

There are some legitimate antivirus apps and those do tend to report PCVARK and similar apps as PUP (Potentially Unwanted Programs).

Yes, and glad we are for them.

There are large number of scam apps in the Mac App Store and it would not be surprising if many of them set off various antivirus apps, legitimately or not.

In the world of technology, "legitimately" is a fairly flexible term. Some people would call Apple's actions as predatory as any virus and they'd have a point, but here we are.

Apple provide antivirus software with the operating system.

That would be news. I shudder to think what that would look like.


Apple's approach to security is to build a "trust fortress" that you need to be in the secret club to enter, unless you decide to let them in anyway. Ideally, third party software runs in "sandboxes", but if you stray into using software that hasn't been blessed by Cupertino, there ye be dragons, and you could easily run software that does the nasty to your system software. Be advised the App Store has its share of this kind of software.


While sandboxing is not a bad approach, the "unknown software publisher" warnings are pointless because if you just obeyed them you'd be unable to write your own software, for instance.

You don’t need anything else. If you do find yourself regularly getting tricked into installing adware, then you might benefit from a legitimate antivirus app like MalwareBytes. Otherwise, your just wasting your money and cpu.

As much as I hate virus software, you still need it. A manual Malwarebytes scan should really all you need though, especially since commercial tools like Norton are completely useless when it comes to PUP-installed malware. (That's the real virus software if you ask me, but you probably won't. In any case, as long as Apple allows software from sleazeworks like SysTweak- a vendor long held in ill repute- don't depend on the App Store or "Apple provided virus software" to protect you.


While constant virus scanning and running all of the extra rubbish to "protect" you from viruses will generally render your computer slow and crippled just badly as any malware could, you'd be wise to give your machine a check once if you ever install software you think might have been shady. There is plenty out there from allegedly trustworthy outlets.

Aug 17, 2019 7:49 PM in response to hinder90

hinder90 wrote:

4th party? You might as well have said 37th party to really drive the hyperbole home!

I was specifically talking about virustotal. The first party is Apple, the vendor. The second party is the customer. Third party is Mac software that is neither Apple nor the user. Virustotal doesn’t qualify for as any of that. It is often cited as a source of evidence of malware or malware activity by people who completely misunderstand it or are using it for malicious ends themselves. It should not be relied upon for any reason.


Some people would call Apple's actions as predatory as any virus

Anyone doing that would be so far outside reality that any attempt at rational discussion would be pointless.


Apple provide antivirus software with the operating system.
That would be news. I shudder to think what that would look like.

It wouldn’t be news because Apple has provided antivirus software as part of the operating system for several years now. Apple’s software usually does not flag any PUP (Potentially Unwanted Programs) like some 3rd party antivirus apps. Legitimate software (software distributed by a company, with lawyers) usually has to do something egregious for Apple to block it. Personally, I think that’s a shame.


While sandboxing is not a bad approach, the "unknown software publisher" warnings are pointless because if you just obeyed them you'd be unable to write your own software, for instance.

Sorry, but that statement is wrong and betrays a fundamental misunderstanding of how Apple’s security works.


While constant virus scanning and running all of the extra rubbish to "protect" you from viruses will generally render your computer slow and crippled just badly as any malware could, you'd be wise to give your machine a check once if you ever install software you think might have been shady. There is plenty out there from allegedly trustworthy outlets.

Most people have no idea if the software they have installed might be shady. Most people have no idea what software they have installed.


You are welcome to continue the fight against software you think is shady. Unfortunately, you are just one voice on a very big forum, on an even bigger internet. You can’t ever hope to reach the same audience as even a minor scam-ware developer. All you need is a little bit of money to blanket a few shady sites with scam ads. People will click through and install. In many cases, they already have MalwareBytes installed. But you have to pay for the active protection. I think Apple realizes the futility better than most. Good luck!

Malware found on app Duplicates cleaner

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.