You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Malware Removal

Hi,


I am using the Clean My Mac X to remove malware on my computer and I got the following notification:


Errors:

The operation couldn’t be completed. (kCMMalwareLaunchAgentModelDomain error 101.)

"/Library/Application Support/com.ExploreSearchResultsDaemon/ExploreSearchResults" couldn’t be removed, because you didn't authorize this operation.


What should I do? How do i authorize the operation?


Thank you!

MacBook Pro 13″, macOS 10.14

Posted on Sep 9, 2020 4:57 AM

Reply
Question marked as Top-ranking reply

Posted on Sep 9, 2020 3:37 PM

Getting rid of "ExploreSearchResults" is simple and does not require the use of any ill-conceived "cleaning" products. All those things are scams that will only add to your miseries. We can address getting rid of "CleanMyMac" later.



To ascertain the cause so that you can eliminate it, start by inspecting the contents of the following folder:


~/Library/LaunchAgents


To open that folder, copy the entire line above and paste it in the Finder's Go menu > Go to Folder... field. Make it look like this:



... and click the Go button.


A Finder window will open. Make sure all its file names are readable by selecting View > as List or other selection that shows that folder's complete contents. Then, take a screenshot of that Finder window.



Often, there is nothing in that Launch Agents folder so don't be surprised to find it empty.


In the same manner as the above, navigate to this next folder:


/Library/LaunchDaemons


The Finder's Go menu > Go to Folder... field should look like this:



... and click the Go button once again.


Once again ensure all its files and their names are readable and capture a screenshot.


Then, repeat that exercise with the following folder:


/Library/LaunchAgents


Notice its pathname is different than the other two. The Finder's Go menu > Go to Folder... field should look like this:



In the end, you will have captured the contents of the following three separate folders:


~/Library/LaunchAgents

/Library/LaunchDaemons

/Library/LaunchAgents


All three will be saved to your Mac's Desktop with names "Screen Shot... " followed by the date and time they were captured. Please be sure to include or otherwise indicate the name of the folder that corresponds to each screenshot, so that you and I can keep track of which ones they are.


Post the entire contents of all three windows, one at a time, using the "picture" icon that appears below your reply text:


8 replies
Question marked as Top-ranking reply

Sep 9, 2020 3:37 PM in response to safia32

Getting rid of "ExploreSearchResults" is simple and does not require the use of any ill-conceived "cleaning" products. All those things are scams that will only add to your miseries. We can address getting rid of "CleanMyMac" later.



To ascertain the cause so that you can eliminate it, start by inspecting the contents of the following folder:


~/Library/LaunchAgents


To open that folder, copy the entire line above and paste it in the Finder's Go menu > Go to Folder... field. Make it look like this:



... and click the Go button.


A Finder window will open. Make sure all its file names are readable by selecting View > as List or other selection that shows that folder's complete contents. Then, take a screenshot of that Finder window.



Often, there is nothing in that Launch Agents folder so don't be surprised to find it empty.


In the same manner as the above, navigate to this next folder:


/Library/LaunchDaemons


The Finder's Go menu > Go to Folder... field should look like this:



... and click the Go button once again.


Once again ensure all its files and their names are readable and capture a screenshot.


Then, repeat that exercise with the following folder:


/Library/LaunchAgents


Notice its pathname is different than the other two. The Finder's Go menu > Go to Folder... field should look like this:



In the end, you will have captured the contents of the following three separate folders:


~/Library/LaunchAgents

/Library/LaunchDaemons

/Library/LaunchAgents


All three will be saved to your Mac's Desktop with names "Screen Shot... " followed by the date and time they were captured. Please be sure to include or otherwise indicate the name of the folder that corresponds to each screenshot, so that you and I can keep track of which ones they are.


Post the entire contents of all three windows, one at a time, using the "picture" icon that appears below your reply text:


Sep 9, 2020 6:00 AM in response to safia32

The free Malwarebytes may take care of it...

https://www.malwarebytes.com/mac/


Or, EtreCheck is a FREE simple little diagnostic tool to display the important details of your system configuration and allow you to copy that information to the Clipboard. It is meant to be used with Apple Support Communities to help people help you with your Mac. It will not display any personal info.

https://www.etrecheck.com/


Pastebin is a good place to paste the whole report if you capture the URL while there…

https://pastebin.com/

Whew, they've changed pastebin & made it harder, but after pasting in, click Create new paste button, then Embed button, then copy the URL...

<script src="https://pastebin.com/embed_js/KuvnghqA"></script>


The important part is...


https://pastebin.com/embed_js/KuvnghqA


Workable but harder for me to work with...the Note tool on the bottom of this editor's toolbar, as shown in the image, to copy and paste the output from EtreCheck. In a Reply before you click post, look for this to add longer texts...


On CMM…

https://discussions.apple.com/thread/251370955?answerId=252661013022#252661013022

https://discussions.apple.com/thread/251442443?answerId=252814053022#252814053022

https://discussions.apple.com/thread/251464557?answerId=252841819022#252841819022

Sep 10, 2020 5:31 AM in response to safia32

Could you please open CleanMyMac X - Action menu and check whether you have Authenticate or Deauthenticate there?


In case you have Deauthenticate, press it. After that it will switch to Authenticate. Then hit Authenticate and enter your system password.


If you have the Authenticate option from the start, hit it and enter the system password.


This will restart the Helper tool — the part of CleanMyMac X that is responsible for making changes on users' computers.

Run the Malware Removal scan after that, remove the threats and check if the notifications reappear.

Malware Removal

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.