I keep getting a warning from MacKeeper telling me to run a scan

Several days ago I contacted Best Buy GeekSquad for support on my MacBook Pro. The problem I was having was that I would continuously get a window opening up saying that I had 3 viruses in my computer. They transferred me to a Mac technician. I allowed the technician to access my computer and after approximately an hour he finished getting rid of unwanted files, etc. Today I noticed that I keep getting a warning from MacKeeper telling me to run a scan. I did not press the "scan" button but I would like to know why and how to get rid of this warning window.

MacBook Pro (13-inch Mid 2010), OS X Yosemite (10.10.1)

Posted on Jul 22, 2018 7:22 AM

Reply
27 replies

Jul 22, 2018 7:29 AM in response to gaucho10

MacKeeper is as bad as Malware, do NOT let it scan.

Force Quit Safari ( command + option + esc keys).Then restart Safari holding the Shift key. If you still have problems Empty Caches (Safari menu > Preferences > Privacy > Remove all website data. (This will also remove history if you do not want to remove History open Safari Preferences > Advanced and check mark “Show Develop Menu” then choose “Empty Caches” from Develop Menu ).

Then go to Safari Preferences > Extensions and check there. If there is an extension delete it.

If the problem persists then download and run Malwarebytes. It will detect MacKeeper as PUP (Potentially Unwanted Program) and will remove the app and all of its components.

Also for future reference do not use GeekSquad for problems with your Mac. Check here first.

Jul 22, 2018 10:59 AM in response to gaucho10

I suggest you use the program created by Etresoft, a frequent contributor. It will provide a snapshot of your system which we can analyze to possibly determine the cause of your problem. Please use copy and paste as screen shots can be hard to read. On the screen with Options, please open Options and check the bottom 2 boxes before running. Click “Share Report” button in the toolbar, select “Copy to Clipboard” and then paste into a reply. This will show what is running on your computer. No personal information is shown.


Etrecheck – System Information


Jul 22, 2018 7:26 AM in response to gaucho10

system preferences > users and groups log in items

highlight and remove ( - ) . anything that your do not want the computer to start automatically or has a warning sign

open finder and applications, and look for and remove (trash) mac keeper

install free trial for malwarebytes for mac . Malwarebytes for Mac — Mac Antivirus Replacement | Malwarebytes

make sure to be update to current version of mac os

Jul 22, 2018 10:23 AM in response to macjack

Thanks for the info macjack.

#1-I restarted Safari while holding the shift key.

#2-I went to "Privacy" and I emptied everything.

#3-The "show develop menu" box was already checked. I emptied the cache.

#4-I went to "Manage Website Data" and I deleted all, including one item named "WeKnow.AC" which I previously could not remove from my applications menu.

#5-There was nothing in the "Extensions".

#6-I was still getting the pop-up window for "MacKeeper" so I DL "Malwarebytes".

#7-After scanning my drive with "Malwarebytes" it quarantined 4 threats. No "MacKeeper" found but it did quarantined another file "MyMacUpdater" that I could not remove from my Applications folder before. So I guess it was worthwile DL the "Malwarebytes" program.


Thanks again...

Jul 23, 2018 6:24 PM in response to gaucho10

There are several good Windows anti-virus packages, but none of them translate to the Mac. In general all the anti-virus packages for the Mac either directly cause problems (kernel panics, deleting files it shouldn't, false positives, do not actually detect issues that affect your Mac) or rob your Macs performance.


So far the only package that has helped on Mac is MalwareBytes, and that is most likely because the author has been a long time forum contributor and has a clue about what are real threats to the macOS and not imagined. And even then I'm of the opinion you should ONLY run it after you have installed something, but not run it all the time, as today there is no self-propagating malware, and only arrives when you install something from a questionable source.

Jul 23, 2018 12:40 PM in response to Eric Root

Thanks Eric Root. Whatever I was trying before, including clicking on the "Share report" button, was not working. Here it is if anyone would like to respond. I went over the information and there is too much "no good stuff" for me to figure out.

Thanks in advance,

EtreCheck version: 4.3.6 (4D041)

Report generated: 2018-07-23 08:17:02

Download EtreCheck from https://etrecheck.com

Runtime: 11:44

Performance: Poor


Problem: Other problem

Description:

I keep getting a “MacKeeper” window opening up every time I either use Chrome or Safari.


Major Issues:

Anything that appears on this list needs immediate attention.


System Integrity Protection disabled - System Integrity Protection is disabled. This computer is at risk of malware infection.

Poor performance - EtreCheck report took over 10 minutes to run. This is very unusual.

More than one antivirus app - This machine has multiple antivirus apps installed.


Minor Issues:

These issues do not need immediate attention but they may indicate future problems.


Configuration profiles present - This machine has configuration profiles. These are sometimes used by adware and malware.

Upgradeable RAM - This machine has upgradeable RAM that would help its performance.

Heavy network usage - This machine has recently restarted and has high network usage.

Apps crashing - There have been numerous app crashes.

Apps with heavy CPU usage - There have been numerous cases of apps with heavy CPU usage.

Unsigned files - There are unsigned software file installed. They appear to be legitimate but should be reviewed.

Vintage hardware - This machine may be considered vintage.

32-bit Apps - This machine has 32-bits apps that may have problems in the future.

Abnormal shutdown - Your machine shut down abnormally.


Hardware Information:

MacBook Pro (13-inch, Mid 2010) - Vintage!

MacBook Pro Model: MacBookPro7,1

1 2.66 GHz Intel Core 2 Duo (Duo) CPU: 2-core

4 GB RAM - Upgradeable

BANK 0/DIMM0 - 2 GB DDR3 1067 ok

BANK 1/DIMM0 - 2 GB DDR3 1067 ok

Battery: Health = Normal - Cycle count = 31


Video Information:

NVIDIA GeForce 320M - VRAM: 256 MB

Color LCD 1280 x 800


Drives:

disk0 - SanDisk SDSSDHII480G 480.10 GB (Solid State - TRIM: No)

Internal SATA 3 Gigabit Serial ATA

disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk0s2 479.89 GB

disk1s1 - U*********S (APFS) 479.89 GB (330.49 GB used)

disk1s2 - Preboot (APFS) [APFS Preboot] 479.89 GB (21 MB used)

disk1s3 - Recovery (APFS) [Recovery] 479.89 GB (516 MB used)

disk1s4 - VM (APFS) [APFS VM] 479.89 GB (3.22 GB used)


disk2 - Disk Image 2.00 TB (Disk Image)

External Disk Image

disk2s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk2s2 - T******************s (Case-Sensitive Journaled HFS+) 2.00 TB


Mounted Volumes:

disk1s1 - U*********S 479.89 GB (145.49 GB free)

APFS

Mount point: /


disk1s4 - VM [APFS VM] 479.89 GB (145.49 GB free)

APFS

Mount point: /private/var/vm


disk2s2 - T******************s 2.00 TB (1.53 TB free)

Case-Sensitive Journaled HFS+

Mount point: /Volumes/T******************s


Network:

Interface usbmodemf16b6562: SAMSUNG_Android_SCH-I200

Interface en0: Ethernet

Interface fw0: FireWire

Interface en1: Wi-Fi

802.11 a/b/g/n

One IPv4 address

Interface en2: Bluetooth PAN

iCloud Quota: 5.00 GB available


System Software:

macOS High Sierra 10.13.6 (17G65)

Time since boot: About 16 hours

System Load: 1.51 (1 min ago) 1.66 (5 min ago) 1.69 (15 min ago)


Configuration Profiles:

com.google.Chrome - NewTabPageLocation

com.google.Chrome - DefaultSearchProviderSearchURL

com.google.Chrome - HomepageIsNewTabPage

com.google.Chrome - HomepageLocation

com.google.Chrome - DefaultSearchProviderEnabled


Security:

System Status
Gatekeeper Mac App Store and identified developers
System Integrity Protection disabled


Unsigned Files:

Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck

Details: Exact match found in the whitelist - probably OK


32-bit Applications:

10 32-bit apps


Kernel Extensions:

/Library/Extensions

[Loaded] kimul.kext (Kaspersky Lab UK Limited, 46)

[Loaded] mark.kext (Kaspersky Lab UK Limited, 1.0.6)

[Loaded] MB_MBAM_Protection.kext (Malwarebytes Corporation, 3.3 - SDK 10.13)


/System/Library/Extensions

[Loaded] klif.kext (3.3.0d1)

[Loaded] klnke.kext (2.1.0)


System Launch Agents:

[Not Loaded] 10 Apple tasks
[Loaded] 161 Apple tasks
[Running] 122 Apple tasks
[Other] One Apple task


System Launch Daemons:

[Not Loaded] 31 Apple tasks
[Loaded] 177 Apple tasks
[Running] 127 Apple tasks


Launch Agents:

[Running] com.kaspersky.kav.gui.plist (Kaspersky Lab UK Limited - installed 2018-05-07)
[Loaded] com.oracle.java.Java-Updater.plist (? 9b2d3405 - installed 2018-07-19)
[Running] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2018-05-22)


Launch Daemons:

[Running] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2018-05-22)
[Running] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2018-05-22)
[Loaded] com.oracle.java.Helper-Tool.plist (? e3fefdd2 - installed 2018-07-19)
[Running] com.kaspersky.kav.plist (Kaspersky Lab UK Limited - installed 2018-05-07)


User Launch Agents:

[Other] com.google.keystone.agent.plist (Google, Inc. - installed 2018-07-22)


User Login Items:

Wondershare Helper Compact Application (? - installed 2016-11-24)

(~/Library/Application Support/Helper/Wondershare Helper Compact.app)

App Cleaner Helper SMLoginItem (Mac App Store - installed 2018-06-23)

(/Applications/App Cleaner.app/Contents/Library/LoginItems/App Cleaner Helper.app)


Internet Plug-ins:

iPhotoPhotocast: (installed 2012-03-31)

QuickTime Plugin: (installed 2018-07-17)

AdobePDFViewer: (installed 2016-12-02)

o1dbrowserplugin: (installed 2015-12-11)

AmazonMP3DownloaderPlugin101750:

googletalkbrowserplugin: (installed 2015-12-11)

npcloudfs:

JavaAppletPlugin: (installed 2018-07-19)


Safari Extensions:

Kaspersky Security - Mac App Store (installed 2018-05-07)


3rd Party Preference Panes:

Flash Player (installed 2018-06-25)

Java (installed 2018-07-07)


Time Machine:

Skip System Files: No

Mobile backups: Yes

Auto backup: Yes

Volumes being backed up:

U*********S: Disk size: 479.89 GB - Disk used: 334.41 GB

Destinations:

W************t [Local]

Total size: 2.00 TB

Total number of backups: 11

Oldest backup: 2018-02-20 21:34:04

Last backup: 2018-07-07 12:07:51

D**a [Network] (Last used)

Total size: 2.00 TB

Total number of backups: 54

Oldest backup: 2018-02-23 13:11:41

Last backup: 2018-07-22 22:42:18


Top Processes by CPU:

Process (count) Source % of CPU Location
kernel_task Apple 22
WindowServer Apple 7
kav Kaspersky Lab UK Limited 3
sandboxd Apple 1
launchd Apple 0


Top Processes by Memory:

Process (count) Source RAM usage Location
kernel_task Apple 508 MB
Google Chrome Helper (8) Google, Inc. 411 MB
mdworker (20) Apple 326 MB
kav Kaspersky Lab UK Limited 204 MB
Google Chrome Google, Inc. 125 MB


Top Processes by Network Use:

Process Source Input Output Location
kernel_task Apple 1.65 GB 1.07 GB
kav Kaspersky Lab UK Limited 1 MB 9 KB
mDNSResponder Apple 164 KB 152 KB
netbiosd Apple 56 KB 38 KB
apsd Apple 17 KB 22 KB


Top Processes by Energy Use:

Process (count) Source Energy (0-100) Location
WindowServer Apple 4
ScreenSaverEngine Apple 1
backupd Apple 0
diskimages-helper Apple 0
Google Chrome Helper (8) Google, Inc. 0


Virtual Memory Information:

Available RAM 1.12 GB
Free RAM 18 MB
Used RAM 2.88 GB
Cached files 1.10 GB
Swap Used 90 MB


Software Installs (past 30 days):

Name Version Install Date
iTunes 12.8 2018-07-10
Adobe Flash Player 30.0.0.134 2018-07-11
Adobe Pepper Flash Player 30.0.0.134 2018-07-11
Gatekeeper Configuration Data 148 2018-07-16
Kaspersky Internet Security 18.0 2018-07-19
Java 8 Update 181 1.0 2018-07-19
Malwarebytes for Mac 1.0 2018-07-22


Diagnostics Information (past 7 days):

2018-07-23 03:02:46 Numbers.app Crash

/Applications/Numbers.app


2018-07-22 15:14:00 Last Shutdown Cause: 3 - Hard shutdown


2018-07-22 10:51:21 Wondershare Video Converter Ultimate 2.app CPU

/Applications/Wondershare Video Converter Ultimate 2.app


2018-07-21 18:09:29 ImTOO Video Converter Ultimate.app Crash (18 times)

/Applications/ImTOO Video Converter Ultimate.app


2018-07-19 19:33:13 Support-LogMeInRescue.app Crash

/private/var/tmp/*/Support-LogMeInRescue.app

*** Terminating app due to uncaught exception 'NSInvalidArgumentException', reason: '-[_NSObserverList baseURL]: unrecognized selector sent to instance 0x7a2f7320'


2018-07-16 20:21:57 backupd CPU (9 times)

/System/Library/CoreServices/backupd.bundle/Contents/Resources/backupd



End of report

Jul 23, 2018 1:38 PM in response to Allan Eckert

That is not what I was told at GeekSquad. Thanks for the info. I believe you. For several years I though of Kasperski as being the best protection since it was taking care of incidents that were regularly popping up on my screen without it.


Thanks for advising on uninstall. I was already having a problem with a link to do exactly that (uninstall).


As far as increasing memory, are we talking about a new hard drive? I don't believe I can just increase memory with what I have. If that is the case I would have done it some time ago. You have to understand that I am not computer literate...or at least partially literate. :-)

Jul 23, 2018 1:46 PM in response to gaucho10

No. I am not talking about disk space. What I am talking about is the fact that your Mac only has 4 GB of RAM install. That is memory it uses for the data it need to execute the programs and operating system. 4 GB is enough to run macOS but just about nothing else.


"That is not what I was told at GeekSquad. "


Personally I find them to be wrong more often then not. I recommend just about anyone else rather then GeekSquad as a source of information.

Jul 24, 2018 1:18 AM in response to macjack

I have uninstalled Kaspersky

Booted into "recovery mode"

Utilities-terminal-"csrutil enable"

Restarted Mac


I still have the MacKeeper window but only on my starting page of the browser.

Now I have an additional problem. After reboot small windows started opening up one on top of the other. They all wanted to add extensions and all from the same developer "Legacy Developer:Hp". If I click on "OK" for all of them, they reappear within seconds.


Is this a major problem?


User uploaded file

Jul 24, 2018 6:14 PM in response to gaucho10

By memory he means the amount of RAM installed, not the size of your storage/drives. Your laptop has 4GB of RAM, not enough to run any recent Mac OS well. Going to at least 8 would help. You can find how-to videos as well as compatible RAM at OWC (macsales.com); have a look at what’s involved to see if you think you can do this yourself. It’s a fairly easy upgrade, as long as you do it exactly as shown in the videos. OWC also sells a useful, inexpensive set of tools.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

I keep getting a warning from MacKeeper telling me to run a scan

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.