Reappearing Malware

I continue to have malware that installs itself as an application.

To ascertain the cause so that you can eliminate it, start by inspecting the contents of the following folder:

~/Library/LaunchAgents

To open that folder, copy the entire line above and paste it in the Finder's Go menu > Go to Folder... field. Make it look like this:

... and click the Go button.

A Finder window will open. Make sure all its file names are readable by selecting View > as List or other selection that shows that folder's complete contents. Then, take a screenshot of that Finder window.

• To learn how to capture a screenshot please read the Appendix in the following User Tip: Writing an effective Apple Support Communities question. It also includes instructions for posting a screenshot in a reply to this Discussion, so keep that Safari window open for now.

Often, there is nothing in that Launch Agents folder so don't be surprised to find it empty.

In the same manner as the above, navigate to this next folder:

/Library/LaunchDaemons

The Finder's Go menu > Go to Folder... field should look like this:

... and click the Go button once again.

Once again ensure all its files and their names are readable and capture a screenshot.

Then, repeat that exercise with the following folder:

/Library/LaunchAgents

Notice its pathname is different than the other two. The Finder's Go menu > Go to Folder... field should look like this:

In the end, you will have captured the contents of the following three separate folders:

~/Library/LaunchAgents

/Library/LaunchDaemons

/Library/LaunchAgents

All three will be saved to your Mac's Desktop with names "Screen Shot... " followed by the date and time they were captured. Please be sure to include or otherwise indicate the name of the folder that corresponds to each screenshot, so that you and I can keep track of which ones they are.

Post the entire contents of all three windows, one at a time, using the "picture" icon that appears below your reply text:

Yes, that is very irritating.

What you could do is following:

Shut down the Mac

Startup while holding the Shift key

it starts very slow and ends up in the SafeMode, login

(practically all caches are cleared in the process)

when logged in run Malwarebytes again.

then Apple menu-> shutdown.

startup again and hopefully the malware does not come back

I don't know what you talk about. I have 3 MacBook Pro. HighSierra, and Mojave 2012 2015 2018. All do the Safe mode. Safe mode differs from normal startup in that it clears also caches in the startup "hardware".

Perhaps there is something wrong with your Mac or you don't know what you are talking about.

Safe Mode was removed in HS (High Sierra)

MY GOD I AM SO DUMB