e.tre456_worm_osx again and again ...

Question

e.tre456_worm_osx again and again ...

Hi everyone.

I'm aware this should be an old adware prob, but I'm not able to definitely cancel it from my systems, Mojave 10.14.6, and iOS 12.4.1.

I suddenly got (on iPhone, at first) a msg with the 'usual' apple care suggestion to install the appropriate antivirus to get rid of the infections I got.

After canceling that session, I 'cleaned' safari data.

I restarted, and for a couple of days no problems.

Then I got the same message but only on macbook where I also observed adsco.re presence among web sites data panel.

So I cleaned safari again (web sites data + cache).

I got the message again, and always only on OSX-MacBook Pro.

I installed malwarebytes, bitdefender and Kaspersky to solve, but no way.

So I re-installed both macbook and iPhone and I get this message ONLY on macbook again.

Is there anyone really (and definitely) solved the problem ?

Thanks in advance

MacBook

Posted on Sep 24, 2019 8:02 AM

Reply

Answer 1

Eric Root

Level 10

685,221 points

Sep 25, 2019 10:28 AM in response to Community User

Go to Finder and select your user/home folder. With that Finder window as the front window, either select Finder/View/Show View options or go command - J. When the View options opens, check ’Show Library Folder’. That should make your user library folder visible in your user/home folder. Select Library. You should then be able to look for the 2 files. The Safari.plist is in - Containers/com.apple.Safari/Data/Library/Preferences/com.apple.Safari.plist. I'm running High Sierra, so I don't know where the saved state file is.

Reply

Answer 2

Eric Root

Level 10

685,221 points

Sep 24, 2019 12:51 PM in response to Community User

See if anything here helps.

Safari – Popup takes over

Safari – Popup takes over (2)

Popup remover – Scam Zapper

If the pop-up reloads, force quit Safari (command - option/alt - esc) and reopen with the shift key held down. If that doesn't work, disconnect from the Internet, go to Safari/History and delete the website. Quit and reopen with the shift key held down. Then reconnect to the Internet.

Safari -Tech support scam pop-ups

Reply

Answer 3

Eric Root

Level 10

685,221 points

Sep 24, 2019 8:43 AM in response to Community User

Have you tried Malwarebytes again? You may need to run several scans and then restart the computer.

Please do not download nay programs from the websites.

https://www.2-spyware.com/remove-e-tre456_worm_osx-virus.html

https://howtoremove.guide/e-tre456_worm_osx/

https://topvirusremoval.com/how-to-remove-e-tre456_worm_osx-virus-from-mac

Reply

Answer 4

Eric Root

Level 10

685,221 points

Sep 24, 2019 11:48 AM in response to Community User

Malwarebytes isn't anti- virus software. You don't need any anti-virus software. They tend to interfere with the computer's operation while providing minimal to no benefit unless you work with Windows files. Most long time posters recommend not using antivirus software or cleaning software such as CleanMyMac.

Did you try the manual removal instructions?

Reply

Answer 5

solomare

Level 1

24 points

Oct 3, 2019 5:35 AM in response to Community User

Hi

I'm in the same position as Igeb63: could not get rid of this malware. I tried everything found online, but nothing worked.

Now, it looks like from Luca's post that even scam zapper doesn't do the job. Igeb63, con you confirm, please?

Have you ever tried Malawabytes? I'm a bit reluctant to install this kind of sw as often they hide malicious threats.

Thank you.

Reply

Answer 6

solomare

Level 1

24 points

Oct 3, 2019 6:08 AM in response to Community User

Hi Igeb63

thanks for your kind comments. Yes, I'll let the community know if I find something that works.

Some time ago (one or two years, I don't remember exactly) I had the same issue. Also that time I tried several ways to "kill" this malware, and also in that case I did not find anything really effective. But, at a certain point, the issue disappeared on its own, no idea why it disappeared. Now it has come back. Maybe we have to wait for the new macOS that is going to be delivered in a few days???

The point is that several apps on my iMac won't work with Catalina and I'm not sure whether it makes sense to update. But that's another question...

Thanks for writing me in Italian.

Reply

Answer 7

Eric Root

Level 10

685,221 points

Sep 24, 2019 9:40 AM in response to Community User

You are welcome. I don't understand the last line of your post. You need to actively run Malwarebytes for the best results.

Reply

Answer 8

Sep 24, 2019 9:19 AM in response to Eric Root

Hi Eric and thanks for your reply.

Honestly not so many times.

Malwarebytes has been active on my system for a week more or less, with for sure more than one run.

Not able to say how many times, but surely more than one.

No downloads from those 'sites' ...

Reply

Answer 9

Sep 24, 2019 11:43 AM in response to Community User

Honestly, I never used any anti-virus/adware/...

I'm the only owner/user of the mentioned 'machines', and I had in mind the best antivirus is an appropriate use.

It seems I'm wrong ...

So, Malwarebytes (and the others I'm testing) is a sort of challenge.

If the problem persist the a.virus doesn't perform the correct job. Testing next ...

Reply

Answer 10

Sep 25, 2019 12:37 AM in response to Eric Root

Eric, thanks for suggestions.

I'll let you know if any of them really fix the problem.

I've been reading about Malwarebytes. Good feeling, even if the iOS support isn't available everywhere...

Honestly don't know which operating system was the primary 'nest', and I suspect I shared the problem between Mac and iPhone !

Take care,

Luca

Reply

Answer 11

Sep 25, 2019 2:29 AM in response to Eric Root

Hi again Eric.

1) The scamzapper you mentioned above does not have a proper extension for the safari version I've installed.

2) I also tried the fulfill all the manual steps presented into the mentioned links, but both the '...safari.savedstate' both the '...safari.plist' are on my system.

Obviously, problem is recurring ... and more than ones.

Don't know how to fix !

As I told in past comments, I also re-installed both OSX both iOS: I definitely am not a technician but I cannot realize how this problem is recurring ...

Reply

Answer 12

Oct 1, 2019 10:34 PM in response to Eric Root

Eric, first of all I would like to thank you for all support you've been providing me with.

I really appreciated.

On the other way round, to me, it is almost incredible I cannot eradicate this 'problem'.

I tried the suggestions, I re-installed OSX and iOS, no way.

With different behaviors and screens, I often get these messages.

Since my first mac I never used a sw to fight viruses or similar problems.

Today, I have to coexist with this problem ? Seems impossible, in 2019.

Reply

Answer 13

Oct 3, 2019 5:54 AM in response to solomare

Hi SoloMare, continuo in italiano più oltre.

I more or less confirm everything you wrote down.

The scamzapper I know does not work on recent SAFARI versions.

I tried Malwarebytes and BitDefender solutions, but no way. This perhaps due to the fact the infection we're facing is not a proper virus/malware or similar.

Almost incredible but It seems there is not a proper solution.

Non saprei cosa dire di MalwareBytes: ne ho sentite di tutti i colori, ma resta il fatto che non c'è modo di venire a capo di questa cosa. Almeno in base a quanto ne so io.

Fammi sapere, per favore, se trovassi una soluzione.

A presto.

Reply

Answer 14

Sep 24, 2019 11:54 AM in response to Eric Root

I tried the manual approach.

On safari at first.

I also re-installed both Mojave both iOS.

Same results ...

Have a look at the attached file I got few minutes ago !

Reply

Answer 15

Sep 24, 2019 11:30 AM in response to Eric Root

The meaning was that I used Malwarebytes until the problem occurred again.

Perhaps I was wrong, but I assumed that antivirus was not helping in solving ...

Reply