Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.


Question: Malwarebytes persistent pop-up even after uninstall

I uninstalled Malwarebytes, but a pop-up offer for an update keeps showing on my screen. How do I get rid of it?

User uploaded file

OS X Yosemite (10.10), Problem with Safari

Posted on


Page content loaded

Mar 16, 2018 9:36 AM in response to HarlanOklahoma In response to HarlanOklahoma

download and run Etrecheck. Copy and paste the results into your reply. Etrecheck is a diagnostic tool that was developed by one of the most respected users here in the ASC and recommended by Apple Support to provide a snapshot of the system and help identify the more obvious culprits that can adversely affect a Mac's performance.

It will show you where, if any, Malwarebytes files are located on your Mac. You can then manually remove any that remain.

Etrecheck will also give those who know how to read it an idea of the state of your Mac, software wise. It's a great diagnostic tool.

User uploaded file

Mar 16, 2018 9:36 AM

Reply Helpful

Mar 16, 2018 12:11 PM in response to Old Toad In response to Old Toad

I see Malwarebytes in Launch Agents and in Launch Daemonds. And it is "running" What action can I take?

EtreCheck version: 4.1.3 (4A188)

Report generated: 2018-03-16 13:35:42

Download EtreCheck from https://etrecheck.com

Runtime: 3:28

Performance: Good

Problem: Other problem


Malwarebytes pop-up continues after uninstall

Major Issues: None

Minor Issues:

These issues do not need immediate attention but they may indicate future problems.

Clean up - There are orphan files that could be removed.

Unsigned files - There is unsigned software installed. They appear to be legitimate but should be reviewed.

32-bit Apps - This machine has 32-bits apps that may have problems in the future.

Hardware Information:

iMac (Retina 4K, 21.5-inch, Late 2015)

iMac Model: iMac16,2

1 3.1 GHz Intel Core i5 (i5-5675R) CPU: 4-core

8 GB RAM Not upgradeable


4 GB DDR3 1867 ok


4 GB DDR3 1867 ok

Video Information:

Intel Iris Pro Graphics 6200 - VRAM: 1536 MB

iMac 4096 x 2304


disk0 - APPLE HDD HTS541010A9E662 1.00 TB (Mechanical)

Internal SATA 3 Gigabit Serial ATA

disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk0s2 [Core Storage Container] 999.35 GB

disk1 - S*******2 (Journaled HFS+) 998.98 GB

disk0s3 - Recovery HD (HFS+) [Recovery] 650 MB

disk2 - Seagate BUP Slim Mac SL 2.00 TB

External USB 5 Gbit/s

disk2s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk2s2 - S***********************e (Journaled HFS+) 2.00 TB

Mounted Volumes:

disk1 - S*******2 998.98 GB (910.67 GB free)

Journaled HFS+

Mount point: /

disk2s2 - S***********************e 2.00 TB (1.45 TB free)

Journaled HFS+

Mount point: /Volumes/S*************************3


Interface en0: Ethernet

Interface en5: iPhone

Interface en1: Wi-Fi

802.11 a/b/g/n/ac

One IPv4 address

Interface en4: Bluetooth PAN

Interface bridge0: Thunderbolt Bridge

iCloud Quota: 4.45 GB available

System Software:

macOS High Sierra 10.13.3 (17D102)

Time since boot: About 5 hours

System Load: 2.03 (1 min ago) 1.93 (5 min ago) 1.86 (15 min ago)


System Status
Gatekeeper Mac App Store and identified developers
System Integrity Protection Enabled

Unsigned Files:

Launchd: ~/Library/LaunchAgents/jp.co.canon.Inkjet_Extended_Survey_Agent.plist

Executable: /Applications/Canon Utilities/Inkjet Extended Survey Program/Inkjet Extended Survey Program.app/Contents/Resources/Canon_Inkjet_Extended_Survey_Agent

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist

Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/com.adobe.ARM.925793fb327152fd34795896fa1fb9ffa268b2a8522 56fe56609efa3.plist

Executable: /Applications/Adobe Reader 9/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper

32-bit Applications:

Name Version
RealPlayer Converter 1.0
PhotoStitch Launcher
Adobe AIR Uninstaller 1.5.0
Microsoft Document Connection 14.7.2
Adobe Reader 9.5.5
ExtendScript Toolkit 2 2.0.2 . 77
DVD Player 5.8
Microsoft Alerts Daemon 14.7.2
InkServer 10.9
Microsoft Error Reporting 2.2.9
Open XML for Excel 14.7.2
Microsoft Word 14.7.2
RealPlayer 12.0.0
Uninstall Product
Microsoft Chart Converter 14.7.2
Microsoft Database Utility 14.7.2
AAM Registration Notifier
Microsoft Ship Asserts 1.1.4
Adobe Updater Adobe Updater
iDVD 7.1.2
SLLauncher 1.0
Microsoft Graph 14.7.2
EOS Utility 1.1.1
Microsoft Outlook 14.7.2
iWeb 2.0.4
Microsoft Query 12.0.0
Remote Desktop Connection 2.1.1
iWeb Getting Started 1.0.2
AAM Updates Notifier
Equation Editor 14.2.0
quicklookd32 5.0
Microsoft Upload Center 14.7.2
MovieFrame Task
CanoScan Toolbox 5.0
GarageBand Getting Started 1.0.2
StuffIt Expander 14.0.1
Apple Hardware Test Read Me 1.1
Google Updater 1.0.7
ReadMe(MovieEdit Task)
Microsoft Office Reminders 14.7.2
iMovie 08 Getting Started 1.0.2
Setup Utility 2.4 2.4.1
MP Navigator EX 4.0 Version 4.0.5
Kindle 1.21.1
Template 1.5.0
Microsoft Excel 14.7.2
Adobe Application Manager
RealPlayer Downloader Agent 12.0.0
Audacity 1.2.5
Quicken 2007 16.2.4
Microsoft Office Setup Assistant 14.2.0
Solitaire Plus! 2.1.1
MP Navigator EX 4.0 Opener 1.0.0
Adobe AIR Application Installer 1.5.0
iMovie 7.1.4
Easy-PhotoPrint EX Version 4.0.6
Microsoft Database Daemon 14.7.2
Canon IJ Printer Utility 4.8.0
Solver 1.0
Canon IJ On-screen Manual Version 1.4.0
Microsoft Messenger 8.0.2
Canon Solution Menu EX 1.3.0
Microsoft Clip Gallery 14.7.2
My Day 14.7.2
SyncServicesAgent 14.7.2
MovieEdit Task
GarageBand 4.1.2
StuffIt User Guide 14.0.1
Adobe AIR Updater 1.5.0
Office365Service 14.7.2
iPhoto Library Upgrader 8.1
Microsoft PowerPoint 14.7.2
Microsoft Help Viewer 1.1.1
Bluetooth Firmware Update 2.0
Microsoft Language Register 14.7.2
Hearts V2 2.820

Kernel Extensions:

/Applications/TechTool Pro 9.app

[Not Loaded] spdKernel.kext (Micromat, Inc., 1.0 - SDK 10.11)

[Not Loaded] spdKernel_10.8.kext (Micromat, Inc., 1.0 - SDK 10.8)


[Loaded] com.malwarebytes.mbam.rtprotection.kext (Malwarebytes Corporation, 3.1 - SDK 10.12)


[Not Loaded] iavkfs.kext (1.0.1)

System Launch Agents:

[Not Loaded] 8 Apple tasks
[Loaded] 172 Apple tasks
[Running] 110 Apple tasks

System Launch Daemons:

[Not Loaded] 34 Apple tasks
[Loaded] 189 Apple tasks
[Running] 108 Apple tasks
[Other] One Apple task

Launch Agents:

[Not Loaded] com.adobe.AAM.Updater-1.0.plist (? ffb65062 - installed 2015-06-08)
[Running] com.micromat.TechToolProAgent.plist (Micromat, Inc. - installed 2018-01-23)
[Loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2018-02-03)
[Other] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a2 3d420d.plist (Adobe Systems, Inc. - installed 2018-02-15)
[Running] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2017-10-24)

Launch Daemons:

[Loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2018-02-15)
[Running] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2017-10-24)
[Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2017-04-11)
[Loaded] com.apple.installer.osmessagetracing.plist (Apple, Inc. - installed 2018-02-16)
[Running] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2017-10-24)
[Running] com.micromat.TechToolProDaemon.plist (Micromat, Inc. - installed 2018-01-23)
[Loaded] com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2018-02-23)
[Loaded] com.microsoft.office.licensing.helper.plist (? 6d8cb30e - installed 2012-04-02)
[Loaded] com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2018-02-15)
[Loaded] com.google.keystone.daemon.plist (Google, Inc. - installed 2018-03-05)

User Launch Agents:

[Running] com.ecamm.printopia.plist (? 0 - installed 2014-06-23)
[Loaded] com.adobe.ARM.925793fb327152fd34795896fa1fb9ffa268b2a852256fe56609efa3.plist (? 0 - installed 2013-06-10)
[Not Loaded] jp.co.canon.Inkjet_Extended_Survey_Agent.plist (? 0 - installed 2011-07-25)
[Not Loaded] com.avast.MacAvast.plist (? 0 - installed )
[Loaded] com.adobe.AAM.Updater-1.0.plist (? 0 - installed 2015-06-08)
[Other] com.adobe.ARM.202f4087f2bbde52e3ac2df389f53a4f123223c9cc56a8fd83a6f7ae.plist (? 0 - installed )

User Login Items:

SpeechSynthesisServer Application

(/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks /SpeechSynthesis.framework/Versions/A/SpeechSynthesisServer.app)

VirusBarrier Express Agent SMLoginItem (Mac App Store - installed 2016-09-18)

(/Applications/VirusBarrier Express.app/Contents/Library/LoginItems/VirusBarrier Express Agent.app)

Internet Plug-ins:

o1dbrowserplugin: (installed 2016-09-17)

Flip4Mac WMV Plugin: (installed 2016-09-17)

RealPlayer Plugin: Unknown (installed 2016-09-17)

AdobePDFViewerNPAPI: 17.012.20098 (installed 2018-02-25)

FlashPlayer-10.6: (installed 2018-03-13)

Silverlight: 5.1.20**3.0 (installed 2016-09-17)

QuickTime Plugin: 7.7.3 (installed 2018-01-28)

Flash Player: (installed 2018-03-13)

googletalkbrowserplugin: (installed 2016-09-17)

SharePointBrowserPlugin: 14.7.2 (installed 2017-03-19)

AdobePDFViewer: 18.011.20038 (installed 2018-02-25)

EPPEX Plugin: (installed 2016-09-17)

JavaAppletPlugin: 15.0.1 (installed 2016-09-17)

User Internet Plug-ins:

BlueStacks Install Detector: Unknown

Safari Extensions:

Better Facebook.safariextz - Matt Kruse - http://BetterFacebook.net (installed 2012-07-29)
GMail Counter.safariextz - Elia Cereda - http://elix14.altervista.org/ (installed 2011-08-04)
Adblock Plus.safariextz - Eyeo GmbH - https://adblockplus.org/ (installed 2016-08-03)
Bing Highlights.safariextz - Microsoft - http://go.microsoft.com/fwlink/?LinkId=198222 (installed 2012-07-26)
AdBlock.safariextz - Michael Gundlach - http://safariadblock.com (installed 2015-06-08)
Translate.safariextz - SideTree.com - Apps for Mac - http://SideTree.com/extensions.html#Translate (installed 2017-11-12)
1-ClickWeather.safariextz - TWCi - http://www.weather.com/ (installed 2011-01-19)

3rd Party Preference Panes:

Flash Player (installed 2018-02-23)

Flip4Mac WMV (installed 2013-03-29)

Printopia (installed 2016-09-17)

TechTool Protection (installed 2018-01-23)

Time Machine:

Skip System Files: No

Mobile backups: No

Auto backup: Yes

Volumes being backed up:

S*******2: Disk size: 998.98 GB - Disk used: 88.31 GB


S***********************e [Local] (Last used)

Total size: 2.00 TB

Total number of backups: 116

Oldest backup: 2016-09-21 12:14:48

Last backup: 2018-03-16 12:53:20

Top Processes by CPU:

Process (count) Source % of CPU
WindowServer Apple 4
kernel_task Apple 2
plugin-container (3) Mozilla Corporation 1
sandboxd Apple 1
coresymbolicationd Apple 0

Top Processes by Memory:

Process (count) Source RAM usage
plugin-container (3) Mozilla Corporation 1.65 GB
firefox Mozilla Corporation 953 MB
kernel_task Apple 737 MB
WindowServer Apple 173 MB
mdworker (7) Apple 172 MB

Top Processes by Network Use:

Process Source Input Output
ocspd Apple 36 MB 396 B
mDNSResponder Apple 1 MB 80 KB
firefox Mozilla Corporation 115 KB 72 KB
apsd Apple 29 KB 29 KB

Top Processes by Energy Use:

Process (count) Source Energy usage (0-100)
WindowServer Apple 3
firefox Mozilla Corporation 1
plugin-container (3) Mozilla Corporation 1
hidd Apple 0
opendirectoryd Apple 0

Virtual Memory Information:

Available RAM 1.52 GB
Free RAM 26 MB
Used RAM 6.48 GB
Cached files 1.49 GB
Swap Used 0 B

Clean up:



Executable not found

~/Library/LaunchAgents/com.adobe.ARM.202f4087f2bbde52e3ac2df389f53a4f123223c9cc5 6a8fd83a6f7ae.plist

/Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper

Executable not found

Diagnostics Information (past 7 days):

2018-03-10 07:09:35 mds_stores Crash (once)


End of report

Mar 16, 2018 12:11 PM

Reply Helpful

Mar 16, 2018 1:24 PM in response to HarlanOklahoma In response to HarlanOklahoma

Rerun Etrecheck and in the Software Section look for the Malwarebytes entires, click on the Reveal in Finder button and move them to the Trash bin in the Dock.

Or you can download the latest free version of Malwarebytes and install. That will get rid of the update message and give you an excellent tool to check occasionally for malware.

Mar 16, 2018 1:24 PM

Reply Helpful
User profile for user: HarlanOklahoma

Question: Malwarebytes persistent pop-up even after uninstall