has anyone encountered a virus using the name "gukur.sbs"?

macOK Sequoia 15.2 appeared to be receiving many notifications. Bought Norton and ran it. Norton did not see any serious problems, but quite a few that it "resolved". One notification received since then:




MacBook Pro 16″, macOS 15.2

Posted on Jan 9, 2025 11:14 AM

Reply
Question marked as Top-ranking reply

Posted on Jan 9, 2025 1:54 PM

That sure looks like an advertisement sent via notification, as was included above. Notification spam.


Here are some directions on removal, for those that like pictures:


Stop unwanted Notifications - Apple Community


In addition to the instructions around checking for and removing unrecognized notifications included in that tip, that tip also describes how to prevent web sites from ever soliciting permission to send notifications and notification spam.


mac-uptodate·com is a valid and registered domain, and is apparently hosted at (behind) Cloudflare.


14 replies
Question marked as Top-ranking reply

Jan 9, 2025 1:54 PM in response to Craig MacKenna

That sure looks like an advertisement sent via notification, as was included above. Notification spam.


Here are some directions on removal, for those that like pictures:


Stop unwanted Notifications - Apple Community


In addition to the instructions around checking for and removing unrecognized notifications included in that tip, that tip also describes how to prevent web sites from ever soliciting permission to send notifications and notification spam.


mac-uptodate·com is a valid and registered domain, and is apparently hosted at (behind) Cloudflare.


Jan 9, 2025 1:55 PM in response to Craig MacKenna

Craig MacKenna wrote:

Mac Jim ID: I think I used the uninstallers. Please tell me how to see whether I got all such demons.

The easiest way to post the free EtreCheck report using the Additional Text option when posting. This will not only show the files in your Launch Folders, but also any Extensions that may be remaining. The report contains no personal information and instructions for downloading and posting the report can be found here:

How to use the Add Text Feature When Post… - Apple Community


P.S. Sorry John Galt, I had not seen you posted the same thing.

Jan 9, 2025 3:06 PM in response to Craig MacKenna

You can check to see if you've removed all of the supporting files by downloading and running the shareware app Find Any File to search for any files with the application's or the developer's name in the file name.  For the Norton and MacKeeper software you'd do the following search(es): 


1 - Name contains norton

2 - Name contains mackeeper

3 - Name contains macaw


Any files that are found can be dragged from the search results window to the Desktop or Trash bin in the Dock for deletion.


FAF can search areas that Spotlight can't like invisible folders, system folders and packages.  


If you get warnings that the file can't be deleted because it is in use or used by another app boot into Safe Mode according to How to use safe mode on your Mac and delete from there.


Note:  if you have a wireless keyboard with rechargeable batteries connect it with its charging cable before booting into Safe Mode.  This makes it act as a wired keyboard as will assure a successful boot into Safe Mode.


Malwarebytes is the one app that is good to have. It was developed by a long time contributor to these forums and a highly respected member of the computer security community.  The free version is sufficient.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

has anyone encountered a virus using the name "gukur.sbs"?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.