You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

I have a small icon on the top right of the screen with System scan recommended. What is this?? is it from apple??

I have a small robot icon on the top right of the screen with System scan recommended. What is this?? is it from apple??

MacBook Pro with Retina display, Mac OS X (10.7.5)

Posted on Dec 20, 2015 3:22 PM

Reply
14 replies

Dec 20, 2015 3:38 PM in response to kjmw46

You may have installed "MacKeeper."

"MacKeeper" is a scam with only one useful feature: it deletes itself.

If you have incompletely removed MacKeeper—for example, by dragging the application to the Trash and immediately emptying—then you'll have to reinstall it and start over.

Note: These instructions apply to the version of the product that I downloaded and tested in early 2012. I can't be sure that they apply to other versions.

IMPORTANT: "MacKeeper" has what the developer calls an “encryption” feature. In my tests, I didn't try to verify what this feature really does. If you used it to “encrypt” any of your files, “decrypt” them before you uninstall, or (preferably) restore the files from backups made before they were “encrypted.” As the developer is not trustworthy, you should assume that the "decrypted" files are corrupt unless proven otherwise.

Please back up all data before making any changes.

In the Finder, select

Go Applications

from the menu bar, or press the key combination shift-command-A. The "MacKeeper" application is in the folder that opens. Quit it if it's running, then drag it to the Trash. You'll be prompted for your login password. Click the Uninstall MacKeeper button in the dialog that appears. All the other functional components of the software will be deleted. Restart the computer and empty the Trash.

Quit MacKeeper before dragging it to the Trash.

Let MacKeeper delete its other components before you empty the Trash.

Don't try to drag MacKeeper from the Dock or the Launchpad to the Trash.

Don't try to remove MacKeeper while running in safe mode.

Dec 21, 2015 2:36 AM in response to Linc Davis

Hi Link Davis. Thank you. Yes, I have found the App but do not know how it was downloaded. I have tried what you suggested and dragging the App to the trash and OK'ing the 'do you want to delete' just results in the following - 'cannot be deleted as ZBAnalytics is running'. There was no prompt for login password?


I have tried deleting from the Cache but this will not work either. It simply says cannot be deleted as 'cache db is in use'

any ideas?

I do not know what version this is and I do not want to open it either. Thank you kjmw46

Dec 21, 2015 2:51 PM in response to Linc Davis

Thanks Linc. I did but the same thing happens. Is it possible that the latest version of this App needs a different approach? you mentioned that your experience was with a 2012 version?

I can't believe that this App cannot be removed without some software download?

What is the ZBAnalytics I described?

What is resisting the Cache from being deleted?

This Mackeeper software seems to be common on the Web. is it so resistant to removal?

Dec 21, 2015 2:54 PM in response to kjmw46

As well as "MacKeeper," you may have installed ad-injection malware ("adware").

Don't use any kind of "anti-virus" or "anti-malware" product on a Mac. There is never a need for it, and relying on it for protection makes you more vulnerable to attack, not less.

Some of the most common types of adware can be removed by following Apple's instructions.

If you're not already running the latest version of OS X ("El Capitan"), updating or upgrading in the App Store may cause the adware to be removed automatically. Back up all data before taking that step. If you're already running the latest version of El Capitan, you can nevertheless download the current updater from the Apple Support Downloads page and run it. Again, some kinds of malware will be removed. That may be all you need to do as far as removal is concerned, but you'll still need to make changes to the way you use the computer to protect yourself from further attacks.

If the above steps don't work for you, see below.

This easy procedure will detect any kind of adware that I know of. Deactivating it is a separate, and even easier, procedure.

Some legitimate software is ad-supported and may display ads in its own windows or in a web browser while it's running. That's not malware and it may not show up. Also, some websites carry intrusive popup ads that may be mistaken for adware.

If none of your web browsers is working well enough to carry out these instructions, restart the computer in safe mode. That will disable the malware temporarily.

Step 1

Please triple-click the line below on this page to select it, then copy the text to the Clipboard by pressing the key combination command-C:

~/Library/LaunchAgents

In the Finder, select

Go Go to Folder...

from the menu bar and paste into the box that opens by pressing command-V. Press return. Either a folder named "LaunchAgents" will open, or you'll get a notice that the folder can't be found. If the folder isn't found, go to the next step.

If the folder does open, press the key combination command-2 to select list view, if it's not already selected. Please don't skip this step.

There should be a column in the Finder window headed Date Modified. Click that heading twice to sort the contents by date with the newest at the top. If necessary, enlarge the window so that all of the contents are showing.

Follow the instructions in this support article under the heading "Take a screenshot of a window." An image file with a name beginning in "Screen Shot" should be saved to the Desktop. Open the screenshot and make sure it's readable. If not, capture a smaller part of the screen showing only what needs to be shown.

Start a reply to this message. Drag the image file into the editing window to upload it. You can also include text in the reply.

Leave the folder open for now.

Step 2

Do as in Step 1 with this line:

/Library/LaunchAgents

The folder that may open will have the same name, but is not the same, as the one in Step 1. As in that step, the folder may not exist.

Step 3

Repeat with this line:

/Library/LaunchDaemons

This time the folder will be named "LaunchDaemons."

Step 4

Open the Safari preferences window and select the Extensions tab. If any extensions are listed, post a screenshot. If there are no extensions, or if you can't launch Safari, skip this step.

Step 5

If you use the Firefox or Chrome browser, open its extension list and do as in Step 4.

I have a small icon on the top right of the screen with System scan recommended. What is this?? is it from apple??

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.