Suspicious Folder
I am helping someone clean up after some malware called MacCleanUpPro found its way onto her MacBook. I have removed all the usual detritus associated with this sort of infection - files in LaunchAgents etc.
The malware had installed the MacCleanUpPro application in the ~/Applications folder rather than the /Applications folder - so we removed that. Next to malware app in ~/Applications was folder called SecuremacUpdates. In that folder there were two executable files called "SecuremacUpdates" and "enc_file". See below for a screenshot.
I was fairly confident, but not absolutely certain that this was also part of the malware. So rather than delete it altogether I moved the folder elsewhere and compressed it into a zip.
So my questions are:
- has anyone come across this "SecureMacUpdates" folder in ~/Application?
- If so was it associated with MacCleaner/MacDefender/MacCleanUp type malware?
- Or is it associated with some legitimate software?
Thanks for any feedback.