Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Question:

Question: Adware installed but not running -- should I be concerned?

I am in a group responsible for several thousand macs, and some of them have Smokyashan.app in their (Standard privs) '~user/Library/Application Support' directory. But there doesn't appear to be any active smokyashan processes. I also have seen a Useaget uninstaller in a user's Applications folder. These users' browsers look fine, with none of the underlines and rollover popups that come from running malware.


It would be a major big hassle to go searching for these adware programs on all of the various computers, and the question is -- do I need to do this? What sort of damage can the files do without Administrator privileges?

Posted on

Reply

Page content loaded

Nov 13, 2017 9:43 AM in response to cathy fasano In response to cathy fasano

The adware might interrupt/affect normal computer operations if it somehow gets invoked. You could try to use Malwarebytes to remove it.


Download this program which was written by Thomas Reed, a long time poster. The program will do the work for you which makes it easy.


Malwarebytes Anti-Malware for Mac 10.9 and later

Nov 13, 2017 9:43 AM

Reply Helpful

Nov 13, 2017 10:19 AM in response to cathy fasano In response to cathy fasano

Adware or other unwanted apps & add-ons won't necessarily be so blatantly obvious that users quickly complain about underlined links etc & seek to have it 'fixed.


The related processes might also not be so helpful as to have a well known name, or one that's even vaguely related to the problem. Smokyashan uses (or did) /Library/ApplicationSupport/Smokyashan/Smokyashan.app/Contents/MacOS/AppNOS


which might not jump out; and this is one that hardly tries to hide itself. Browser extensions might not readily show up at all, without checking to see what's enabled.

Nov 13, 2017 10:19 AM

Reply Helpful
User profile for user: cathy fasano

Question: Adware installed but not running -- should I be concerned?