how to get rid of MacBooster mini software?

Thomas_r, I could KISS you.

I long ago deleted the files mentioned earlier in this thread, but Macbooster mini was still appearing and disappearing in my activity monitor every few seconds. This post, and the one you made before it, were the info I needed to finally get this d@mn process off my iMac.

And here I was trying to figure out how to do a nuke and pave, because Finder wasn't showing results for searches that *should* have included the folders I just deleted. It has acted funny ever since I managed to get this malware on my machine, back in November. Here's to hoping that I shouldn't have to spend hours doing a fresh OSX install.)

Thank you!

I faced the similar problem with MacBooster...

Thanks a media_lush.. Thank you so much.. The hard work you had put, saved my life too.. Thanks a million 🙂

Please forgive me but I am completely computer illiterate and I have tried everything that I could find on this forum and I am still having trouble removing macbooster or any other potentially problematic programs from my computer. Any assistance would be greatly appreciated!

EtreCheck version: 2.2 (132)

Report generated 5/30/15, 1:04 PM

Download EtreCheck from http://etresoft.com/etrecheck

Click the [Click for support] links for help with non-Apple products.

Click the [Click for details] links for more information about that line.

Hardware Information: ℹ️

MacBook Pro (13-inch, Mid 2010) (Technical Specifications)

MacBook Pro - model: MacBookPro7,1

1 2.4 GHz Intel Core 2 Duo CPU: 2-core

4 GB RAM Upgradeable

BANK 0/DIMM0

2 GB DDR3 1067 MHz ok

BANK 1/DIMM0

2 GB DDR3 1067 MHz ok

Bluetooth: Old - Handoff/Airdrop2 not supported

Wireless: en1: 802.11 a/b/g/n

Battery: Health = Normal - Cycle count = 450 - SN = 9G04105UVD3NB

Video Information: ℹ️

NVIDIA GeForce 320M - VRAM: 256 MB

Color LCD 1280 x 800

System Software: ℹ️

OS X 10.10.3 (14D136) - Time since boot: 0:14:41

Disk Information: ℹ️

Hitachi HTS545025B9SA02 disk0 : (250.06 GB)

EFI (disk0s1) <not mounted> : 210 MB

Macintosh HD (disk0s2) / : 249.20 GB (50.33 GB free)

Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB

MATSHITADVD-R UJ-898

USB Information: ℹ️

Apple Inc. Built-in iSight

Apple Internal Memory Card Reader

Apple Inc. BRCM2046 Hub

Apple Inc. Bluetooth USB Host Controller

Apple Computer, Inc. IR Receiver

Apple Inc. Apple Internal Keyboard / Trackpad

Gatekeeper: ℹ️

Mac App Store and identified developers

Kernel Extensions: ℹ️

/Library/Extensions

[not loaded] com.leapfrog.driver.LfConnectDriver (1.11.1 - SDK 10.10) [Click for support]

/System/Library/Extensions

[not loaded] com.leapfrog.codeless.kext (2) [Click for support]

Startup Items: ℹ️

cma: Path: /Library/StartupItems/cma

HP Trap Monitor: Path: /Library/StartupItems/HP Trap Monitor

Startup items are obsolete in OS X Yosemite

Problem System Launch Daemons: ℹ️

[failed] com.apple.mtrecorder.plist

Launch Agents: ℹ️

[loaded] com.google.keystone.agent.plist [Click for support]

[loaded] com.hp.help.tocgenerator.plist [Click for support]

[loaded] com.mcafee.menulet.plist [Click for support]

[loaded] com.mcafee.reporter.plist [Click for support]

Launch Daemons: ℹ️

[loaded] com.adobe.fpsaud.plist [Click for support]

[failed] com.apple.spirecorder.plist

[loaded] com.google.keystone.daemon.plist [Click for support]

[loaded] com.leapfrog.connect.authdaemon.plist [Click for support]

[loaded] com.mcafee.ssm.Eupdate.plist [Click for support]

[loaded] com.mcafee.ssm.ScanManager.plist [Click for support]

[failed] com.mcafee.virusscan.fmpd.plist [Click for support] [Click for details]

[loaded] com.microsoft.office.licensing.helper.plist [Click for support]

User Launch Agents: ℹ️

[loaded] com.adobe.ARM.[...].plist [Click for support]

[running] com.iobit.MacBoosterMini.plist [Click for support]

[running] com.leapfrog.connect.monitor.plist [Click for support]

[running] com.spotify.webhelper.plist [Click for support]

User Login Items: ℹ️

AdobeResourceSynchronizer Application Hidden (/Applications/Adobe Reader.app/Contents/Support/AdobeResourceSynchronizer.app)

HPEventHandler UNKNOWN (missing value)

Internet Plug-ins: ℹ️

DirectorShockwave: Version: 11.6.0r626 [Click for support]

o1dbrowserplugin: Version: 5.41.0.0 - SDK 10.8 [Click for support]

Default Browser: Version: 600 - SDK 10.10

Flip4Mac WMV Plugin: Version: 2.4.4.2 [Click for support]

AdobePDFViewerNPAPI: Version: 10.1.9 [Click for support]

FlashPlayer-10.6: Version: 17.0.0.188 - SDK 10.6 [Click for support]

Silverlight: Version: 4.1.10329.0 [Click for support]

Flash Player: Version: 17.0.0.188 - SDK 10.6 [Click for support]

QuickTime Plugin: Version: 7.7.3

googletalkbrowserplugin: Version: 5.41.0.0 - SDK 10.8 [Click for support]

iPhotoPhotocast: Version: 7.0 - SDK 10.7

AdobePDFViewer: Version: 10.1.9 [Click for support]

SharePointBrowserPlugin: Version: 14.3.9 - SDK 10.6 [Click for support]

MeetingJoinPlugin: Version: Unknown - SDK 10.6 [Click for support]

User internet Plug-ins: ℹ️

CitrixOnlineWebDeploymentPlugin: Version: 1.0.105 [Click for support]

3rd Party Preference Panes: ℹ️

Flash Player [Click for support]

Flip4Mac WMV [Click for support]

Tuxera NTFS [Click for support]

Time Machine: ℹ️

Time Machine not configured!

Top Processes by CPU: ℹ️

28% ReportCrash

8% WindowServer

4% coresymbolicationd

4% fmpd

1% diagnosticd

Top Processes by Memory: ℹ️

422 MB kernel_task

156 MB com.apple.WebKit.WebContent

90 MB Finder

90 MB WindowServer

57 MB Safari

Virtual Memory Information: ℹ️

1.66 GB Free RAM

2.34 GB Used RAM

0 B Swap Used

Diagnostics Information: ℹ️

May 30, 2015, 01:04:08 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130408_[redacted].crash

May 30, 2015, 01:03:57 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130357_[redacted].crash

May 30, 2015, 01:03:47 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130347_[redacted].crash

May 30, 2015, 01:03:36 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130336_[redacted].crash

May 30, 2015, 01:03:26 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130326_[redacted].crash

May 30, 2015, 01:03:15 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130315_[redacted].crash

May 30, 2015, 01:03:05 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130305_[redacted].crash

May 30, 2015, 01:02:55 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130255_[redacted].crash

May 30, 2015, 01:02:44 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130244_[redacted].crash

May 30, 2015, 01:02:34 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130234_[redacted].crash

May 30, 2015, 01:02:23 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130223_[redacted].crash

May 30, 2015, 01:02:13 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130213_[redacted].crash

May 30, 2015, 01:02:02 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130202_[redacted].crash

May 30, 2015, 01:01:52 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130152_[redacted].crash

May 30, 2015, 01:01:41 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130141_[redacted].crash

May 30, 2015, 01:01:31 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130131_[redacted].crash

May 30, 2015, 01:01:20 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130120_[redacted].crash

May 30, 2015, 01:01:10 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130110_[redacted].crash

May 30, 2015, 01:00:59 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130059_[redacted].crash

May 30, 2015, 01:00:49 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-130049_[redacted].crash

May 30, 2015, 12:48:06 PM Self test - passed

May 30, 2015, 12:15:29 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121529_[redacted].crash

May 30, 2015, 12:15:19 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121519_[redacted].crash

May 30, 2015, 12:15:09 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121509_[redacted].crash

May 30, 2015, 12:14:58 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121458_[redacted].crash

May 30, 2015, 12:14:48 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121448_[redacted].crash

May 30, 2015, 12:14:38 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121438_[redacted].crash

May 30, 2015, 12:14:27 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121427_[redacted].crash

May 30, 2015, 12:14:06 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121406_[redacted].crash

May 30, 2015, 12:13:56 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121356_[redacted].crash

May 30, 2015, 12:13:46 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121346_[redacted].crash

May 30, 2015, 12:13:35 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121335_[redacted].crash

May 30, 2015, 12:13:25 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121325_[redacted].crash

May 30, 2015, 12:13:14 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121314_[redacted].crash

May 30, 2015, 12:13:04 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121304_[redacted].crash

May 30, 2015, 12:12:54 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121254_[redacted].crash

May 30, 2015, 12:12:43 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121243_[redacted].crash

May 30, 2015, 12:12:33 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121233_[redacted].crash

May 30, 2015, 12:12:22 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121222_[redacted].crash

May 30, 2015, 12:12:12 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121212_[redacted].crash

May 29, 2015, 12:23:05 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122305_[redacted].crash

May 29, 2015, 12:22:55 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122255_[redacted].crash

May 29, 2015, 12:22:34 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122234_[redacted].crash

May 29, 2015, 12:22:23 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122223_[redacted].crash

May 29, 2015, 12:22:13 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122213_[redacted].crash

May 29, 2015, 12:22:02 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122202_[redacted].crash

May 29, 2015, 12:21:52 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122152_[redacted].crash

May 29, 2015, 12:21:41 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122141_[redacted].crash

May 29, 2015, 12:21:29 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122129_[redacted].crash

May 29, 2015, 12:21:19 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122119_[redacted].crash

May 29, 2015, 12:21:09 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122109_[redacted].crash

May 29, 2015, 12:20:58 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122058_[redacted].crash

May 29, 2015, 12:20:47 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122047_[redacted].crash

May 29, 2015, 12:20:37 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122037_[redacted].crash

May 29, 2015, 12:20:26 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122026_[redacted].crash

May 30, 2015, 12:14:17 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-30-121417_[redacted].crash

May 29, 2015, 12:22:44 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122244_[redacted].crash

May 29, 2015, 12:20:16 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122016_[redacted].crash

May 29, 2015, 12:20:05 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-29-122005_[redacted].crash

May 29, 2015, 12:19:55 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-29-121955_[redacted].crash

May 29, 2015, 12:19:44 PM /Library/Logs/DiagnosticReports/fmpd_2015-05-29-121944_[redacted].crash

Hi,

I came across this problem. I would start from deleting all files that may refer to MacBooster:

sudo find / -iname "macbooster"

hi everybody

i read the whole thread and still have problems to remove macbooster mini. it appears still in the activity monitor.

but i can not find any of the mentioned plist files in the folder launchagents or anywhere. also not with finder or by the terminal command like konradz suggested.

(everything is made by a normal user not he admin. as admin everything is fine. nothing found with etrecheck or finder or activity monitor)

i find something with etrecheck but still have no solution:

EtreCheck version: 2.6.6 (226)

Report generated 05.12.15 11:27

Runtime 3:32

Download EtreCheck from http://etrecheck.com

Click the [Click for support] links for help with non-Apple products.

Click the [Click for details] links for more information about that line.

Hardware Information: (What does this mean?)

MacBook Intel Core 2 Duo (white, Early 2009)

[Click for Technical Specifications]

[Click for User Guide]

MacBook - model: MacBook5,2

1 2 GHz Intel Core 2 Duo CPU: 2-core

4 GB RAM Upgradeable

[Click for upgrade instructions]

BANK 0/DIMM0

2 GB DDR2 SDRAM 667 MHz ok

BANK 1/DIMM0

2 GB DDR2 SDRAM 667 MHz ok

Bluetooth: Old - Handoff/Airdrop2 not supported

Wireless: en1: 802.11 a/b/g/n

Battery: Health = Normal - Cycle count = 18 - SN = 9G925P26G4M0A

Video Information: (What does this mean?)

NVIDIA GeForce 9400M - VRAM: 256 MB

Color LCD 1280 x 800

System Software: (What does this mean?)

OS X Mavericks 10.9.5 (13F1134) - Time since boot: less than an hour

Disk Information: (What does this mean?)

Hitachi HTS725050A7E630 disk0 : (500,11 GB) (Rotational)

EFI (disk0s1) <not mounted> : 210 MB

SYSTEM (disk0s2) / : 74.65 GB (28.49 GB free)

MATERIAL (disk0s3) /Volumes/MATERIAL : 424.47 GB (13.85 GB free)

HL-DT-ST DVDRW GS22N ()

USB Information: (What does this mean?)

Micron Built-in iSight

Apple Inc. BRCM2046 Hub

Apple Inc. Bluetooth USB Host Controller

Apple Inc. Apple Internal Keyboard / Trackpad

Apple Computer, Inc. IR Receiver

Configuration files: (What does this mean?)

/etc/hosts - Count: 576

Gatekeeper: (What does this mean?)

Mac App Store and identified developers

Kernel Extensions: (What does this mean?)

/Applications/Capture One.app

[not loaded] com.Leaf.driver.LeafFwXDriverMatcher (1.2.0d1) [Click for support]

/Applications/Toast 14 Titanium/Toast Audio Assistant.app

[not loaded] com.Cycling74.driver.Soundflower (1.6.7 - SDK 10.7) [Click for support]

/Library/Extensions

[loaded] at.obdev.nke.LittleSnitch (4240 - SDK 10.8) [Click for support]

[loaded] org.virtualbox.kext.VBoxDrv (4.2.10) [Click for support]

[not loaded] org.virtualbox.kext.VBoxNetAdp (4.2.10) [Click for support]

[not loaded] org.virtualbox.kext.VBoxNetFlt (4.2.10) [Click for support]

[loaded] org.virtualbox.kext.VBoxUSB (4.2.10) [Click for support]

/System/Library/Extensions

[not loaded] com.cisco.nke.ipsec (2.0.1) [Click for support]

~/Library/Services/ToastIt.service/Contents/MacOS

[not loaded] com.roxio.TDIXController (2.0) [Click for support]

Startup Items: (What does this mean?)

AdobeVersionCueCS2: Path: /Library/StartupItems/AdobeVersionCueCS2

VirtualBox: Path: /Library/StartupItems/VirtualBox

Startup items are obsolete in OS X Yosemite

Launch Agents: (What does this mean?)

[running] at.obdev.LittleSnitchUIAgent.plist [Click for support]

[loaded] com.adobe.AAM.Updater-1.0.plist [Click for support]

[running] com.canon.MFManager.plist [Click for support]

[loaded] com.divx.dms.agent.plist [Click for support]

[loaded] com.divx.update.agent.plist [Click for support]

[loaded] com.teamviewer.teamviewer.plist [Click for support]

[loaded] com.teamviewer.teamviewer_desktop.plist [Click for support]

[loaded] org.macosforge.xquartz.startx.plist [Click for support]

Launch Daemons: (What does this mean?)

[running] at.obdev.littlesnitchd.plist [Click for support]

[loaded] com.adobe.SwitchBoard.plist [Click for support]

[loaded] com.adobe.fpsaud.plist [Click for support]

[loaded] com.adobe.versioncueCS3.plist [Click for support]

[loaded] com.bombich.ccc.plist [Click for support]

[failed] com.crashplan.engine.plist [Click for support]

[loaded] com.oracle.java.JavaUpdateHelper.plist [Click for support]

[loaded] com.skype.skypeinstaller.plist [Click for support]

[loaded] com.teamviewer.Helper.plist [Click for support]

[loaded] com.teamviewer.teamviewer_service.plist [Click for support]

[loaded] org.macosforge.xquartz.privileged_startx.plist [Click for support]

User Launch Agents: (What does this mean?)

[loaded] com.adobe.AAM.Updater-1.0.plist [Click for support]

[loaded] com.adobe.ARM.[...].plist [Click for support]

[loaded] com.adobe.ARM.[...].plist [Click for support]

[failed] com.apple.CSConfigDotMacCert-[...]@me.com-SharedServices.Agent.plist - /System/Library/Frameworks/CoreServices.framework/Frameworks/OSServices.framewo rk/Versions/A/Support/CSConfigDotMacCert: Executable not found!

[failed] com.iobit.MacBoosterMini.plist [Click for support]

[loaded] com.linotype.FontFolderProtector.plist [Click for support]

[loaded] com.macpaw.CleanMyMac.helperTool.plist [Click for support]

[loaded] com.valvesoftware.steamclean.plist [Click for support]

[loaded] org.virtualbox.vboxwebsrv.plist [Click for support]

User Login Items: (What does this mean?)

FontExplorerXAutoload Programm Hidden (~/Library/Application Support/Linotype/FontExplorer X/FontExplorerXAutoload.app)

Spyder3Utility Programm (~/Applications/Datacolor/Spyder3Elite/Spyder3Utility.app)

Other Apps: (What does this mean?)

[running] [0x0-0x12012].at.obdev.LittleSnitchNetworkMonitor

[running] [0x0-0xf40f4].com.etresoft.EtreCheck

[running] org.mozilla.firefox.10240

[running] org.mozilla.thunderbird.10768

Internet Plug-ins: (What does this mean?)

Flip4Mac WMV Plugin: Version: 3.2.0.16 - SDK 10.8 [Click for support]

FlashPlayer-10.6: Version: 19.0.0.245 - SDK 10.6 [Click for support]

DivX Web Player: Version: 3.4.1.14 - SDK 10.10 [Click for support]

Flash Player: Version: 19.0.0.245 - SDK 10.6 Cannot contact Adobe

AdobePDFViewer: Version: 11.0.0 - SDK 10.6 [Click for support]

Default Browser: Version: 537 - SDK 10.9

OVSHelper: Version: 1.1 [Click for support]

QuickTime Plugin: Version: 7.7.3

Silverlight: Version: 5.1.10411.0 - SDK 10.6 [Click for support]

DirectorShockwave: Version: 11.5.0r595 [Click for support]

JavaAppletPlugin: Version: 14.9.0 - SDK 10.7 Check version

Audio Plug-ins: (What does this mean?)

DVCPROHDAudio: Version: 1.3.2

3rd Party Preference Panes: (What does this mean?)

Flash Player [Click for support]

Flip4Mac WMV [Click for support]

Growl [Click for support]

hueyPRO [Click for support]

MacFUSE [Click for support]

Time Machine: (What does this mean?)

Skip System Files: NO

Mobile backups: OFF

Auto backup: NO - Auto backup turned off

Volumes being backed up:

SYSTEM: Disk size: 74.65 GB Disk used: 46.16 GB

Destinations:

SICHERUNG [Local]

Total size: 944.86 GB

Total number of backups: 26

Oldest backup: 30.01.15 12:04

Last backup: 18.11.15 19:36

Size of backup disk: Excellent

Backup size 944.86 GB > (Disk size 74.65 GB X 3)

Top Processes by CPU: (What does this mean?)

68% MacBooster mini

8% firefox

4% WindowServer

2% kernel_task

1% coreaudiod

Top Processes by Memory: (What does this mean?)

537 MB firefox

417 MB kernel_task

213 MB thunderbird

213 MB iTunes

147 MB com.apple.IconServicesAgent

Virtual Memory Information: (What does this mean?)

805 MB Free RAM

3.19 GB Used RAM (940 MB Cached)

0 B Swap Used

Diagnostics Information: (What does this mean?)

Dec 5, 2015, 11:26:49 AM ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112649_[redacted].crash

Dec 5, 2015, 11:26:38 AM ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112638_[redacted].crash

Dec 5, 2015, 11:26:28 AM ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112628_[redacted].crash

Dec 5, 2015, 11:26:17 AM ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112617_[redacted].crash

Dec 5, 2015, 11:26:09 AM ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112609_[redacted].crash

Dec 5, 2015, 11:25:57 AM ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112557_[redacted].crash

Dec 5, 2015, 11:25:45 AM ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112545_[redacted].crash

Dec 5, 2015, 11:25:35 AM ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112535_[redacted].crash

Dec 5, 2015, 11:25:25 AM ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112525_[redacted].crash

Dec 5, 2015, 11:25:20 AM ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112520_[redacted].crash

Dec 5, 2015, 11:25:03 AM ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112503_[redacted].crash

Dec 5, 2015, 11:24:52 AM ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112452_[redacted].crash

Dec 5, 2015, 11:24:43 AM ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112443_[redacted].crash

Dec 5, 2015, 11:24:31 AM ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112431_[redacted].crash

Dec 5, 2015, 11:24:20 AM ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112420_[redacted].crash

Dec 5, 2015, 11:24:10 AM ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112410_[redacted].crash

Dec 5, 2015, 11:23:59 AM ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112359_[redacted].crash

Dec 5, 2015, 11:23:49 AM ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112349_[redacted].crash

Dec 5, 2015, 11:23:38 AM ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112338_[redacted].crash

Dec 5, 2015, 11:23:28 AM ~/Library/Logs/DiagnosticReports/MacBooster mini_2015-12-05-112328_[redacted].crash

Dec 5, 2015, 10:48:10 AM ~/Library/Logs/DiagnosticReports/Spyder3Utility_2015-12-05-104810_[redacted].cr ash

Dec 5, 2015, 10:45:39 AM Self test - passed

Dec 4, 2015, 06:35:22 PM ~/Library/Logs/DiagnosticReports/Finder_2015-12-04-183522_[redacted].crash

Standard users cannot read /Library/Logs/DiagnosticReports.

Run as an administrator account to see more information.

I had a message pop up after a power outage that MacBooster mini "Quit Unexpectedly". Being aware that more or less any "App" that claims to "Speed Up", "Boost", or "Clean" your Mac is at best junk if not malware or spyware, I followed the convenient filepath shown in the "Unexpectedly Quit" window and located it in the /Users/USER/Library/Application Support/MacBooster/XXX file and did a quick Get Info on it to determine it it was some obscure Apple file before I deleted it. It showed up as being created by "iObit". I took a screenshot of the "Unexpectedly Quit" window for future reference (below) and deleted it, then emptied the trash.

Next issue was to find any remaining bits. Since it was self opening at startup and running invisibly in the background, I had a look in /LibraryLaunchDaemons, /Library LaunchAgents, and /Library/StartupItems for MacBooster or iObit. I located an iObit file and deleted that, then checked the hidden (by Apple) User Library via the Finder/Go Menu with Option key held down/Library and checked the LaunchAgents, LaunchDaemons, and StartupItems there also. I found another iObit file lurking in there and deleted it. Finally I checked the ~User/Library/Preferences and deleted three more iObit preference files.

I suspect it came in via either a VLC auto-update as noted in the original enquiry, or via an Adobe Flash Player or Adobe Reader update, which I have found to have pre-checked junkware piggybacked on them also. DIVX is another serial offender in that regard. I deleted it and all of it's related crap off some time back and never missed it. This piggybacked junkware has been a common problem on PCs for years, and is increasingly becoming an issue on Macs.

If this "App" wasn't up to no good, it would be installed in Applications where it belongs, not hiding in the Application Support files.

I have also occasionally found malware hiding in the hidden /Private/VAR folder or the /Private/Etc. folder in a few of my client's computers. Some of my clients have fallen victim to a malware Popup that freezes a web browser, usually Safari or Firefox, with a 1-800 number to call to a supposed "Security Expert" purporting to be from Microsoft or an "Internet Security" outfit of some kind. The "Security Expert" then convinces the victim to download and install a version of LogMeIn that lets them take control of the computer, do some damage, and then demand a ransom payment to "remove the malware he found" and restore the function of the computer, leaving the LogMeIn behind for future use. Usually LogMeIn is installed in Applications, but the smarter criminals are starting to use an installer which installs it in a subfolder, usually VAR or Etc. of the hidden /Private folder. I use Marcel Bresink's free TinkerTool's Finder Options to Show Invisible Files to render them visible when tracking down this sort of malware. Thanks, Marcel.

I suspect it came in via either a VLC auto-update as noted in the original enquiry, or via an Adobe Flash Player or Adobe Reader update, which I have found to have pre-checked junkware piggybacked on them also.

I have to wonder where you're getting your apps and updates from. Adobe never, ever tags extra junk in with their Flash Player or Acrobat Reader downloads or updates. If VLC is obtained directly from their site, it is also always free of garbage, as are the auto updates. Downloaded from the videolan.org web site, the VLC app doesn't even include an installer. You open the .dmg file and then drag and drop the app into the Applications folder.

I can only guess you're using aggregate sites like C|NET's www.downloads.com, or www.softonic.com. You're pretty much guaranteed to get unwanted extras from them.

18 months later... try here:

~/Library/Application Support/MacBooster/MacBooster mini.app

For those coming across this that can't seem to kill the process MacBooster mini in Activity Monitor, here's what I did. This is my first time posting on the forums I believe but I was pretty excited to find this, so here goes.

I opened up Terminal and typed "launchctl list" which lists all the processes that launch automatically, i think.

I scrolled through and found one for MacBooster-mini. It was named "com.iobit.MacBooster-mini" This didn't come up anywhere in Spotlight or when searching in the Library Application Support folders, nothing that was mentioned in this thread found any mention of iobit on my system, other than seeing it in Activity Monitor. If I double clicked it in that list and looked at the info it would show it in a folder, but that folder didn't exist and where it should have been, it wasn't.

I also ran this in Terminal, "launchctl list |grep iobit" to find any other mention of iobit, and there was none.

I typed "launchctl remove com.iobit.MacBooster-mini" and then it terminated that Process,

At some point I had used "Go To Folder" and typed "/Users/UserName/Library/Application Support/MacBooster" and actually got that to open up, but if I looked in Application Support, MacBooster folder was not there.

So then I dropped the MacBooster program icon from there into App Cleaner, it found a few files, I dumped them adn deleted the Trash before I could reference them for this post. Sorry, but not really.

So now the plist file is in the trash but I can't empty that out because it's still in use. Trying to work that last part out but at least the app is gone and so is the process. edit: Finder/Secure Empty Trash did the trick