Malwarebytes persistent pop-up even after uninstall
I uninstalled Malwarebytes, but a pop-up offer for an update keeps showing on my screen. How do I get rid of it?
OS X Yosemite (10.10), Problem with Safari
download and run Etrecheck. Copy and paste the results into your reply. Etrecheck is a diagnostic tool that was developed by one of the most respected users here in the ASC and recommended by Apple Support to provide a snapshot of the system and help identify the more obvious culprits that can adversely affect a Mac's performance.
It will show you where, if any, Malwarebytes files are located on your Mac. You can then manually remove any that remain.
Etrecheck will also give those who know how to read it an idea of the state of your Mac, software wise. It's a great diagnostic tool.
I see Malwarebytes in Launch Agents and in Launch Daemonds. And it is "running" What action can I take?
EtreCheck version: 4.1.3 (4A188)
Report generated: 2018-03-16 13:35:42
Download EtreCheck from https://etrecheck.com
Runtime: 3:28
Performance: Good
Problem: Other problem
Description:
Malwarebytes pop-up continues after uninstall
Major Issues: None
Minor Issues:
These issues do not need immediate attention but they may indicate future problems.
Clean up - There are orphan files that could be removed.
Unsigned files - There is unsigned software installed. They appear to be legitimate but should be reviewed.
32-bit Apps - This machine has 32-bits apps that may have problems in the future.
Hardware Information:
iMac (Retina 4K, 21.5-inch, Late 2015)
iMac Model: iMac16,2
1 3.1 GHz Intel Core i5 (i5-5675R) CPU: 4-core
8 GB RAM Not upgradeable
BANK 0/DIMM0
4 GB DDR3 1867 ok
BANK 1/DIMM0
4 GB DDR3 1867 ok
Video Information:
Intel Iris Pro Graphics 6200 - VRAM: 1536 MB
iMac 4096 x 2304
Drives:
disk0 - APPLE HDD HTS541010A9E662 1.00 TB (Mechanical)
Internal SATA 3 Gigabit Serial ATA
disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB
disk0s2 [Core Storage Container] 999.35 GB
disk1 - S*******2 (Journaled HFS+) 998.98 GB
disk0s3 - Recovery HD (HFS+) [Recovery] 650 MB
disk2 - Seagate BUP Slim Mac SL 2.00 TB
External USB 5 Gbit/s
disk2s1 - EFI (MS-DOS FAT32) [EFI] 210 MB
disk2s2 - S***********************e (Journaled HFS+) 2.00 TB
Mounted Volumes:
disk1 - S*******2 998.98 GB (910.67 GB free)
Journaled HFS+
Mount point: /
disk2s2 - S***********************e 2.00 TB (1.45 TB free)
Journaled HFS+
Mount point: /Volumes/S*************************3
Network:
Interface en0: Ethernet
Interface en5: iPhone
Interface en1: Wi-Fi
802.11 a/b/g/n/ac
One IPv4 address
Interface en4: Bluetooth PAN
Interface bridge0: Thunderbolt Bridge
iCloud Quota: 4.45 GB available
System Software:
macOS High Sierra 10.13.3 (17D102)
Time since boot: About 5 hours
System Load: 2.03 (1 min ago) 1.93 (5 min ago) 1.86 (15 min ago)
Security:
System | Status |
---|---|
Gatekeeper | Mac App Store and identified developers |
System Integrity Protection | Enabled |
Unsigned Files:
Launchd: ~/Library/LaunchAgents/jp.co.canon.Inkjet_Extended_Survey_Agent.plist
Executable: /Applications/Canon Utilities/Inkjet Extended Survey Program/Inkjet Extended Survey Program.app/Contents/Resources/Canon_Inkjet_Extended_Survey_Agent
Details: Exact match found in the whitelist - probably OK
Launchd: /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist
Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper
Details: Exact match found in the whitelist - probably OK
Launchd: ~/Library/LaunchAgents/com.adobe.ARM.925793fb327152fd34795896fa1fb9ffa268b2a8522 56fe56609efa3.plist
Executable: /Applications/Adobe Reader 9/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper
32-bit Applications:
Name | Version |
RealPlayer Converter | 1.0 |
PhotoStitch Launcher | 1.2.1.9 |
Adobe AIR Uninstaller | 1.5.0 |
Microsoft Document Connection | 14.7.2 |
Adobe Reader | 9.5.5 |
ExtendScript Toolkit 2 | 2.0.2 . 77 |
DVD Player | 5.8 |
Microsoft Alerts Daemon | 14.7.2 |
Install | 8.0.0.147 |
InkServer | 10.9 |
Microsoft Error Reporting | 2.2.9 |
Open XML for Excel | 14.7.2 |
CIGUpload | 3.2.1.9 |
Microsoft Word | 14.7.2 |
PhotoStitch | 3.2.1.20 |
RealPlayer | 12.0.0 |
Uninstall Product | 5.0.65.0 |
Microsoft Chart Converter | 14.7.2 |
GoogleVoiceAndVideoUninstaller | 5.41.3.0 |
Microsoft Database Utility | 14.7.2 |
AAM Registration Notifier | 7.0.0.481 |
Microsoft Ship Asserts | 1.1.4 |
Adobe Updater | Adobe Updater 5.1.1.1113 |
TomTomHOMERunner | 2.7.2.598 |
GoogleTalkPlugin | 5.41.3.0 |
iDVD | 7.1.2 |
SLLauncher | 1.0 |
Microsoft Graph | 14.7.2 |
AdobeIPCBroker | 5.0.0.76 |
EOS Utility | 1.1.1 |
Microsoft Outlook | 14.7.2 |
iWeb | 2.0.4 |
AAMLauncherUtil | 8.0.0.147 |
Microsoft Query | 12.0.0 |
Remote Desktop Connection | 2.1.1 |
iWeb Getting Started | 1.0.2 |
Viewer | 3.2.1.14 |
AAM Updates Notifier | 8.0.0.144 |
Equation Editor | 14.2.0 |
quicklookd32 | 5.0 |
Microsoft Upload Center | 14.7.2 |
MovieFrame Task | 1.5.0.2 |
CanoScan Toolbox 5.0 | 5.0.1.2 |
GarageBand Getting Started | 1.0.2 |
StuffIt Expander | 14.0.1 |
Apple Hardware Test Read Me | 1.1 |
Google Updater | 1.0.7 |
ReadMe(MovieEdit Task) | 2.0.0.1 |
ReadMe(ImageBrowser) | 2.0.0.1 |
Microsoft Office Reminders | 14.7.2 |
iMovie 08 Getting Started | 1.0.2 |
Setup Utility 2.4 | 2.4.1 |
MP Navigator EX 4.0 | Version 4.0.5 |
Kindle | 1.21.1 |
ImageBrowser | 6.1.2.18 |
Template | 1.5.0 |
Microsoft Excel | 14.7.2 |
Adobe Application Manager | 8.0.0.147 |
ReadMe(PhotoStitch) | 2.0.0.1 |
RealPlayer Downloader Agent | 12.0.0 |
Audacity | 1.2.5 |
Quicken 2007 | 16.2.4 |
Microsoft Office Setup Assistant | 14.2.0 |
Solitaire Plus! | 2.1.1 |
MP Navigator EX 4.0 Opener | 1.0.0 |
Adobe AIR Application Installer | 1.5.0 |
iMovie | 7.1.4 |
Easy-PhotoPrint EX | Version 4.0.6 |
Microsoft Database Daemon | 14.7.2 |
Canon IJ Printer Utility | 4.8.0 |
Solver | 1.0 |
Canon IJ On-screen Manual | Version 1.4.0 |
Microsoft Messenger | 8.0.2 |
Setup | 1.1.8.0 |
Canon Solution Menu EX | 1.3.0 |
Microsoft Clip Gallery | 14.7.2 |
MCU | 1.1.0.6 |
{63DD14A6-1791-4A23-B0A3-D93881BF1B09} | 8.0.0.17 |
My Day | 14.7.2 |
SyncServicesAgent | 14.7.2 |
MovieEdit Task | 2.6.0.2 |
GarageBand | 4.1.2 |
StuffIt User Guide | 14.0.1 |
Adobe AIR Updater | 1.5.0 |
Office365Service | 14.7.2 |
iPhoto Library Upgrader | 8.1 |
Microsoft PowerPoint | 14.7.2 |
Microsoft Help Viewer | 1.1.1 |
Bluetooth Firmware Update | 2.0 |
Microsoft Language Register | 14.7.2 |
Hearts V2 | 2.820 |
Kernel Extensions:
/Applications/TechTool Pro 9.app
[Not Loaded] spdKernel.kext (Micromat, Inc., 1.0 - SDK 10.11)
[Not Loaded] spdKernel_10.8.kext (Micromat, Inc., 1.0 - SDK 10.8)
/Library/Extensions
[Loaded] com.malwarebytes.mbam.rtprotection.kext (Malwarebytes Corporation, 3.1 - SDK 10.12)
/System/Library/Extensions
[Not Loaded] iavkfs.kext (1.0.1)
System Launch Agents:
[Not Loaded] | 8 Apple tasks |
[Loaded] | 172 Apple tasks |
[Running] | 110 Apple tasks |
System Launch Daemons:
[Not Loaded] | 34 Apple tasks |
[Loaded] | 189 Apple tasks |
[Running] | 108 Apple tasks |
[Other] | One Apple task |
Launch Agents:
[Not Loaded] | com.adobe.AAM.Updater-1.0.plist (? ffb65062 - installed 2015-06-08) |
[Running] | com.micromat.TechToolProAgent.plist (Micromat, Inc. - installed 2018-01-23) |
[Loaded] | com.google.keystone.agent.plist (Google, Inc. - installed 2018-02-03) |
[Other] | com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a2 3d420d.plist (Adobe Systems, Inc. - installed 2018-02-15) |
[Running] | com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2017-10-24) |
Launch Daemons:
[Loaded] | com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2018-02-15) |
[Running] | com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2017-10-24) |
[Loaded] | com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2017-04-11) |
[Loaded] | com.apple.installer.osmessagetracing.plist (Apple, Inc. - installed 2018-02-16) |
[Running] | com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2017-10-24) |
[Running] | com.micromat.TechToolProDaemon.plist (Micromat, Inc. - installed 2018-01-23) |
[Loaded] | com.adobe.fpsaud.plist (Adobe Systems, Inc. - installed 2018-02-23) |
[Loaded] | com.microsoft.office.licensing.helper.plist (? 6d8cb30e - installed 2012-04-02) |
[Loaded] | com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2018-02-15) |
[Loaded] | com.google.keystone.daemon.plist (Google, Inc. - installed 2018-03-05) |
User Launch Agents:
[Running] | com.ecamm.printopia.plist (? 0 - installed 2014-06-23) |
[Loaded] | com.adobe.ARM.925793fb327152fd34795896fa1fb9ffa268b2a852256fe56609efa3.plist (? 0 - installed 2013-06-10) |
[Not Loaded] | jp.co.canon.Inkjet_Extended_Survey_Agent.plist (? 0 - installed 2011-07-25) |
[Not Loaded] | com.avast.MacAvast.plist (? 0 - installed ) |
[Loaded] | com.adobe.AAM.Updater-1.0.plist (? 0 - installed 2015-06-08) |
[Other] | com.adobe.ARM.202f4087f2bbde52e3ac2df389f53a4f123223c9cc56a8fd83a6f7ae.plist (? 0 - installed ) |
User Login Items:
SpeechSynthesisServer Application
(/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks /SpeechSynthesis.framework/Versions/A/SpeechSynthesisServer.app)
VirusBarrier Express Agent SMLoginItem (Mac App Store - installed 2016-09-18)
(/Applications/VirusBarrier Express.app/Contents/Library/LoginItems/VirusBarrier Express Agent.app)
Internet Plug-ins:
o1dbrowserplugin: 5.41.3.0 (installed 2016-09-17)
Flip4Mac WMV Plugin: 3.2.0.16 (installed 2016-09-17)
RealPlayer Plugin: Unknown (installed 2016-09-17)
AdobePDFViewerNPAPI: 17.012.20098 (installed 2018-02-25)
FlashPlayer-10.6: 29.0.0.113 (installed 2018-03-13)
Silverlight: 5.1.20**3.0 (installed 2016-09-17)
QuickTime Plugin: 7.7.3 (installed 2018-01-28)
Flash Player: 29.0.0.113 (installed 2018-03-13)
googletalkbrowserplugin: 5.41.3.0 (installed 2016-09-17)
SharePointBrowserPlugin: 14.7.2 (installed 2017-03-19)
AdobePDFViewer: 18.011.20038 (installed 2018-02-25)
EPPEX Plugin: 3.0.5.0 (installed 2016-09-17)
JavaAppletPlugin: 15.0.1 (installed 2016-09-17)
User Internet Plug-ins:
BlueStacks Install Detector: Unknown
Safari Extensions:
Better Facebook.safariextz - Matt Kruse - http://BetterFacebook.net (installed 2012-07-29) |
GMail Counter.safariextz - Elia Cereda - http://elix14.altervista.org/ (installed 2011-08-04) |
Adblock Plus.safariextz - Eyeo GmbH - https://adblockplus.org/ (installed 2016-08-03) |
Bing Highlights.safariextz - Microsoft - http://go.microsoft.com/fwlink/?LinkId=198222 (installed 2012-07-26) |
AdBlock.safariextz - Michael Gundlach - http://safariadblock.com (installed 2015-06-08) |
Translate.safariextz - SideTree.com - Apps for Mac - http://SideTree.com/extensions.html#Translate (installed 2017-11-12) |
1-ClickWeather.safariextz - TWCi - http://www.weather.com/ (installed 2011-01-19) |
3rd Party Preference Panes:
Flash Player (installed 2018-02-23)
Flip4Mac WMV (installed 2013-03-29)
Printopia (installed 2016-09-17)
TechTool Protection (installed 2018-01-23)
Time Machine:
Skip System Files: No
Mobile backups: No
Auto backup: Yes
Volumes being backed up:
S*******2: Disk size: 998.98 GB - Disk used: 88.31 GB
Destinations:
S***********************e [Local] (Last used)
Total size: 2.00 TB
Total number of backups: 116
Oldest backup: 2016-09-21 12:14:48
Last backup: 2018-03-16 12:53:20
Top Processes by CPU:
Process (count) | Source | % of CPU |
WindowServer | Apple | 4 |
kernel_task | Apple | 2 |
plugin-container (3) | Mozilla Corporation | 1 |
sandboxd | Apple | 1 |
coresymbolicationd | Apple | 0 |
Top Processes by Memory:
Process (count) | Source | RAM usage |
plugin-container (3) | Mozilla Corporation | 1.65 GB |
firefox | Mozilla Corporation | 953 MB |
kernel_task | Apple | 737 MB |
WindowServer | Apple | 173 MB |
mdworker (7) | Apple | 172 MB |
Top Processes by Network Use:
Process | Source | Input | Output |
ocspd | Apple | 36 MB | 396 B |
mDNSResponder | Apple | 1 MB | 80 KB |
firefox | Mozilla Corporation | 115 KB | 72 KB |
apsd | Apple | 29 KB | 29 KB |
Top Processes by Energy Use:
Process (count) | Source | Energy usage (0-100) |
WindowServer | Apple | 3 |
firefox | Mozilla Corporation | 1 |
plugin-container (3) | Mozilla Corporation | 1 |
hidd | Apple | 0 |
opendirectoryd | Apple | 0 |
Virtual Memory Information:
Available RAM | 1.52 GB |
Free RAM | 26 MB |
Used RAM | 6.48 GB |
Cached files | 1.49 GB |
Swap Used | 0 B |
Clean up:
~/Library/LaunchAgents/com.avast.MacAvast.plist
/Applications/avast!.app/Contents/MacOS/avast!
Executable not found
~/Library/LaunchAgents/com.adobe.ARM.202f4087f2bbde52e3ac2df389f53a4f123223c9cc5 6a8fd83a6f7ae.plist
/Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper
Executable not found
Diagnostics Information (past 7 days):
2018-03-10 07:09:35 mds_stores Crash (once)
Initializing |
End of report
Rerun Etrecheck and in the Software Section look for the Malwarebytes entires, click on the Reveal in Finder button and move them to the Trash bin in the Dock.
Or you can download the latest free version of Malwarebytes and install. That will get rid of the update message and give you an excellent tool to check occasionally for malware.
Did you run their uninstaller or just delete the App?
I first deleted the app, but later I reinstalled the app and ran their uninstaller.
Malwarebytes persistent pop-up even after uninstall