Files I deleted prior to backup showed up in the data migration

Hello,

I had a couple of smokyashan files in the launchAgent folder which I deleted. I just migrated to a new Mac pro using Time Machine backup from my old Mac Pro. And was surprised to find this smokyashan files.

So just want to get my Mac checked up from fellow users. Am attached screen shots of launchDaemon, launchAgent and launchAgent.

  1. Do you see anything untoward that I should get rid of?
  2. What is the best to check for any malwares/adwares etc on mac pro? would like to cleanup my new Mac.


Thank so much


[Re-titled by Moderator]

MacBook Pro 13″, macOS 13.5

Posted on Dec 3, 2023 10:19 PM

Reply
Question marked as Top-ranking reply

Posted on Dec 4, 2023 6:19 PM

I don't see anything wrong in those screenshots, although the middle one is hard to tell since I don't know where that one is located and the names of the files are not complete (Adobe, one is maybe Amazon, not sure about the other two). A better way for us to check your system is by posting an EtreCheck report here since it will list all third party software that is launching during boot & login, plus it provide a summary of the system logs.


There is no need to use any cleaners or optimizers since they usually cause more problems than they solve, plus they impact system performance. There is also no need for any anti-virus apps and third party security software for the same reason. If you feel you have malware installed, then you can run MalwareBytes to scan the system (this is the exception to the rule), but there is no need to keep it installed.

https://discussions.apple.com/docs/DOC-8841


As for those LaunchAgents being deleted on the old system, are you sure they were completely removed? And was a TM backup made after those LaunchAgents were deleted? Due to how APFS file systems and APFS snapshots work, maybe you did not get a good backup after removing those LaunchAgents. TM may have made a new APFS snapshot, but that snapshot without the Launch Agents may not have been transferred to external media.


I don't think you have anything to worry about on your system.


3 replies
Question marked as Top-ranking reply

Dec 4, 2023 6:19 PM in response to beegee18

I don't see anything wrong in those screenshots, although the middle one is hard to tell since I don't know where that one is located and the names of the files are not complete (Adobe, one is maybe Amazon, not sure about the other two). A better way for us to check your system is by posting an EtreCheck report here since it will list all third party software that is launching during boot & login, plus it provide a summary of the system logs.


There is no need to use any cleaners or optimizers since they usually cause more problems than they solve, plus they impact system performance. There is also no need for any anti-virus apps and third party security software for the same reason. If you feel you have malware installed, then you can run MalwareBytes to scan the system (this is the exception to the rule), but there is no need to keep it installed.

https://discussions.apple.com/docs/DOC-8841


As for those LaunchAgents being deleted on the old system, are you sure they were completely removed? And was a TM backup made after those LaunchAgents were deleted? Due to how APFS file systems and APFS snapshots work, maybe you did not get a good backup after removing those LaunchAgents. TM may have made a new APFS snapshot, but that snapshot without the Launch Agents may not have been transferred to external media.


I don't think you have anything to worry about on your system.


Dec 17, 2023 5:12 PM in response to beegee18

beegee18 wrote:

I ran etrecheck and it is reporting 2 malwares. How do I attach the PDF report here? I dont see any options.

You don't attach the .pdf. Within the EtreCheck app you need to click the "Share" or "Share Report" button, then select "Copy" or "Copy Report" in order to copy the report into the system clipboard. Then click on the "Additional Text" icon which looks like a piece of paper on the forum editing toolbar so you can then Paste the contents of the system clipboard into the "Additional Text" field. The EtreCheck should have these instructions listed when you first ran the app ,or it should be available on the Help menu.


Dec 16, 2023 11:07 PM in response to HWTech

"As for those LaunchAgents being deleted on the old system, are you sure they were completely removed? And was a TM backup made after those LaunchAgents were deleted? "


I discovered the smokyashan files only after i used the old Mac TM to update the new Mac. And so deleted the 2 files from the new Mac. The old still has it.


I ran etrecheck and it is reporting 2 malwares. How do I attach the PDF report here? I dont see any options.


This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Files I deleted prior to backup showed up in the data migration

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.