IS "Mac Optimizer" a harmful app?

Question

Level 1

8 points

IS "Mac Optimizer" a harmful app?

Hi guys,

I was going to download an application from http://download.cnet.com/but unwanted another app "mac optimizer"was downloaded. (with google chrome on my macbook pro 2009 El Capitan 10.11.3 ) I didn't notice that it's not the app I was going to download. I installed it. The installation process looked like windows software installation! It opened automatically after installation and started to give me alarms to fix my system errors and optimize the system. I searched for this app on the web but it is suspiciously unknown. I found the source website address inside the application. But it seems really unofficial. This is the address: http://www.optimizeyourmac.com/

I just deleted it from the application folder but now I'm really worried about my system security. please let me know if possibly it could access my passwords or other information. and what should I do right now? and how can I get sure about my macbook security?

Thank you

MacBook Pro, 10.11.3

Posted on Mar 18, 2016 5:58 PM

Reply

Answer 1

ckuan

Level 10

120,968 points

Mar 18, 2016 6:02 PM in response to SohoSoho

Do not download anything from cnet, they alway include other payload which is what you experiencing now.

You also do not need any Mac Optimiser, Cleaner, Keeper or something similar for your Mac

If you do need to download an app, alway go directly to the developer website.

Reply

Answer 2

SohoSoho Author

Level 1

8 points

Mar 18, 2016 6:05 PM in response to ckuan

Yeah. that's right. But how harmful may be this app? What should I do right now?

Reply

Answer 3

ckuan

Level 10

120,968 points

Mar 18, 2016 6:08 PM in response to SohoSoho

SohoSoho wrote:

Yeah. that's right. But how harmful may be this app? What should I do right now?

Delete the app(s).

Restore from your last backup.

Reply

Answer 4

SohoSoho Author

Level 1

8 points

Mar 18, 2016 6:22 PM in response to ckuan

Isn't any other way to clean it? I don't have a back up and there are a lot of applications on the system. I prefer not to reinstall it.

Reply

Answer 5

Csound1

Level 9

60,063 points

Mar 18, 2016 6:24 PM in response to SohoSoho

There is a right way, and then there are the quick ways. I don't advise them.

Reply

Answer 6

SohoSoho Author

Level 1

8 points

Mar 18, 2016 6:27 PM in response to Csound1

You mean the only way is reinstalling mac os?

Reply

Answer 7

Csound1

Level 9

60,063 points

Mar 18, 2016 6:29 PM in response to SohoSoho

I said the right way, not the only, there are others, but I do not recommend them.

Reply

Answer 8

ckuan

Level 10

120,968 points

Mar 18, 2016 6:29 PM in response to SohoSoho

First of all, you should alway make backups.

There are many cheap USB hard drive so there's no reason to take risk with your data.

Things that can happen will happen.

Search this forum for cleaner, keeper for manual instructions.

Reply

Answer 9

SohoSoho Author

Level 1

8 points

Mar 18, 2016 6:39 PM in response to ckuan

Thank you, But I couldn't find any instructions. Can you help me please?

Reply

Answer 10

ckuan

Level 10

120,968 points

Mar 18, 2016 6:49 PM in response to SohoSoho

Download EtreCheck from Etrecheck.com to see what apps are running on your Mac.

Reply

Answer 11

SohoSoho Author

Level 1

8 points

Mar 18, 2016 7:00 PM in response to ckuan

Thank you. I download EtreCheck and this is the report:

(some unknown files are reported, and some apps are running that I'm not sure about)

Gatekeeper:ⓘ

Anywhere

Unknown Files:ⓘ

~/Library/LaunchAgents/com.techy.mohlp.plist

~/Library/Application Support/mo/mohlp.app/Contents/MacOS/mohlp

One unknown file found. [Check files]

Kernel Extensions:ⓘ

/Applications/VMware Fusion.app

[not loaded] com.vmware.kext.vmci (90.6.3 - 2015-02-07) [Support]

[not loaded] com.vmware.kext.vmioplug.14.1.3 (14.1.3 - 2015-02-07) [Support]

[not loaded] com.vmware.kext.vmnet (0249.89.30 - 2015-02-07) [Support]

[not loaded] com.vmware.kext.vmx86 (0249.89.30 - 2015-02-07) [Support]

[not loaded] com.vmware.kext.vsockets (90.6.0 - 2015-02-07) [Support]

System Launch Agents:ⓘ

[not loaded] 7 Apple tasks

[loaded] 158 Apple tasks

[running] 71 Apple tasks

System Launch Daemons:ⓘ

[not loaded] 46 Apple tasks

[loaded] 157 Apple tasks

[running] 84 Apple tasks

Launch Agents:ⓘ

[not loaded] com.adobe.AAM.Updater-1.0.plist (2015-11-10) [Support]

[loaded] com.oracle.java.Java-Updater.plist (2016-02-17) [Support]

Launch Daemons:ⓘ

[loaded] com.adobe.fpsaud.plist (2016-03-07) [Support]

[loaded] com.microsoft.office.licensingV2.helper.plist (2015-07-01) [Support]

[loaded] com.oracle.java.Helper-Tool.plist (2016-02-17) [Support]

User Launch Agents:ⓘ

[loaded] com.adobe.AAM.Updater-1.0.plist (2015-11-10) [Support]

[loaded] com.google.keystone.agent.plist (2016-03-01) [Support]

[running] com.techy.mohlp.plist (2016-03-18) [Support]

User Login Items:ⓘ

iTunesHelper Application (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

JalaliCalendar Application (/Applications/Utilities/JalaliCalendar.app)

VMware Fusion Start Menu Application (/Applications/VMware Fusion.app/Contents/Library/VMware Fusion Start Menu.app)

Mac Optimizer UNKNOWN (missing value)

Other Apps:ⓘ

[running] com.coppertino.VOXAgent

[running] com.google.Chrome.135712

[running] com.vmware.fusionStartMenu.89952

[running] org.objectfarm.JalaliCalendar.61792

[loaded] 400 Apple tasks

[running] 177 Apple tasks

Reply

Answer 12

ckuan

Level 10

120,968 points

Mar 18, 2016 7:15 PM in response to SohoSoho

Change your GateKeeper to a more secure option.

Delete Mac Optimiser from User login items.

What apps are you sure and what apps you are not sure?

Reply

Answer 13

kahjot

Level 4

2,469 points

Mar 18, 2016 7:30 PM in response to SohoSoho

ckuanwrote:

Do not download anything from cnet, they alway include other payload which is what you experiencing now.

You also do not need any Mac Optimiser, Cleaner, Keeper or something similar for your Mac

If you do need to download an app, always go directly to the developer website.

Follow that advice!! And note that cnet is not the only site that bundles crapware with what appear to be legitimate software downloads. Softonic is another, and, sadly, Macupdate has begun to add things to some of its downloads. Get apps from the developer's site whenever you can.

Reply

Answer 14

SohoSoho Author

Level 1

8 points

Mar 18, 2016 7:57 PM in response to ckuan

Thank you, I'm going to delete it from user login items. I guess two unknown files are suspicious. I mean "mohlp"

in other apps I don't know what app "com.coppertino.VOXAgent" is for. in user launch agent there is "com.techy.mohlp.plist" again.

In "Mac Optimizer" web site they put a uninstaller app for it. (it may be another malware) what do you think about it? I just delete it from application folder. do you think the uninstaller app can help?

Reply

Answer 15

ckuan

Level 10

120,968 points

Mar 18, 2016 8:03 PM in response to SohoSoho

Sorry, maybe someone can jump in, I don't use those products.

Reply