What is ApolloSearchDaemon?

EtreCheck discovered this adware on my Mac, causing problems with websites loading. Is anyone familiar with it?


    Adware - Adware detected.

    

Adware:

    Launchd: ~/Library/LaunchAgents/com.ApolloSearch.plist

        Reason: Adware pattern match

        Executable: ~/Library/Application Support/com.ApolloSearch/ApolloSearch r

    Launchd: /Library/LaunchDaemons/com.ApolloSearchDaemon.plist

        Reason: Adware pattern match

        Executable: /Library/Application Support/com.ApolloSearchDaemon/ApolloSearch r


Unsigned Files:

    Launchd: /Library/LaunchDaemons/com.ApolloSearchP.plist

        Executable: /var/root/.ApolloSearch/ApolloSearchDaemon

        Details: Domain name invalid - possibly adware


    Launchd: ~/Library/LaunchAgents/com.13127022313839422592.7812475685.plist

        Executable: ~/Library/Application Support/com.5796894859182956240/1458863757181035320 86C51296-4012-43FB-BFB0-2CE748D7E852 478CE290-C73E-4111-A4B0-F8F47138817B

        Details: Domain name invalid - possibly adware


    Launchd: ~/Library/LaunchAgents/com.google.keystone.xpcservice.plist

        Executable: ~/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode xpchost

        Details: Exact match found in the whitelist - probably OK


    Launchd: ~/Library/LaunchAgents/com.google.keystone.agent.plist

        Executable: ~/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftwareUpdateAgent -runMode ifneeded

        Details: Exact match found in the whitelist - probably OK


System Launch Agents:

    [Not Loaded] 15 Apple tasks

    [Loaded] 176 Apple tasks

    [Running] 109 Apple tasks


System Launch Daemons:

    [Not Loaded] 36 Apple tasks

    [Loaded] 180 Apple tasks

    [Running] 118 Apple tasks


Launch Agents:

    [Other] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a23d420d.plist (Adobe Systems, Inc. - installed 2019-08-09)

    [Loaded] com.microsoft.OneDriveStandaloneUpdater.plist (Microsoft Corporation - installed 2019-12-23)

    [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2019-12-23)


Launch Daemons:

    [Loaded] com.ApolloSearchDaemon.plist (Adware - installed 2019-10-03)

    [Running] com.ApolloSearchP.plist (? 7e21f6d - installed 2019-10-03)

    [Loaded] com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2019-08-09)

    [Loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2019-08-09)

    [Loaded] com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2019-11-22)

    [Loaded] com.apple.installer.osmessagetracing.plist (Apple - installed 2019-12-04)

    [Loaded] com.microsoft.OneDriveStandaloneUpdaterDaemon.plist (Microsoft Corporation - installed 2019-12-23)

    [Loaded] com.microsoft.OneDriveUpdaterDaemon.plist (Microsoft Corporation - installed 2019-12-23)

    [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2019-12-23)

    [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2019-12-08)


User Launch Agents:

    [Other] com.13127022313839422592.7812475685.plist (? 0 - installed 2019-09-24)

    [Loaded] com.ApolloSearch.plist (Adware - installed 2019-09-15)

    [Loaded] com.google.keystone.agent.plist (? 0 - installed 2019-12-14)

    [Loaded] com.google.keystone.xpcservice.plist (? 0 - installed 2019-12-14)



MacBook

Posted on Dec 24, 2019 8:05 AM

Reply

Similar questions

2 replies

Dec 24, 2019 8:54 AM in response to csburrell

csburrell wrote:

What is ApolloSearchDaemon?

EtreCheck discovered this adware on my Mac, causing problems with websites loading. Is anyone familiar with it?

    Adware - Adware detected.
    
Adware:
    Launchd: ~/Library/LaunchAgents/com.ApolloSearch.plist
        Reason: Adware pattern match
        Executable: ~/Library/Application Support/com.ApolloSearch/ApolloSearch r
    Launchd: /Library/LaunchDaemons/com.ApolloSearchDaemon.plist
        Reason: Adware pattern match
        Executable: /Library/Application Support/com.ApolloSearchDaemon/ApolloSearch r

Unsigned Files:
    Launchd: /Library/LaunchDaemons/com.ApolloSearchP.plist
        Executable: /var/root/.ApolloSearch/ApolloSearchDaemon
        Details: Domain name invalid - possibly adware

 

Adware.


You can use the links provided in the Etrecheck and/or course of action to remove,


or to remove adware/malware you can try running this trusted utility https://www.malwarebytes.com/mac/

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

What is ApolloSearchDaemon?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.