Mac Mechanic - how to eliminate ?

Download and run Malwarebytes. Malwarebytes was developed by one of our own colleagues here in ASC and is about the most proven anti-malware software for Mac.

It will detect Mac Mechanic and remove the app and all of its components.

This is a typical potentially unwanted program that can renew its malicious activities until you remove the program and all additional pieces from the device completely. This intruder comes from software bundles or deceptive ads, in most cases, so this is not that easy to do manually. You can't find all related files all over the system.

You should download an anti-malware program and perform a full system scan on your device. This can detect malicious program, files, and applications. It helps with elimination too.

One suggestion was try try Malwarebytes. Malwarebytes.

Please use the manual method or Malwarebytes as suggested by macjack. Do not download any other programs.

Mac Mechanic uninstall

Mac Mechanic uninstall (2)

Please use the manual method or Malwarebytes as suggested by macjack. Do not download any other programs.

Mac Mechanic uninstall

Mac Mechanic uninstall (2)

I just had this same problem, screen popped up as I was getting on a conference call saying that my flash player was out of date. It looked legit, I know better than to click on just anything. But it installed Mac Mechanic. Online it said to just move to trash, so I did that. But am I safe with that or do I need to do something else?

Same thing happened to me, FLASH PLAYER said out of date, to update. I keep it disabled but installed. However, it had the Mac Mechanic as a piggyback rider. Now it is open on my iMac screen and I cannot close it.

I am not sure if I am seeing all the suggestions in this topic or not. I do not see all replies.

Sorry , Atkinsj, if I seem to hijack your topic. I cannot find the whole thread to write my information one MacMechanic any other way. Perhaps some experienced person can move this post where it belongs later? I hope?

All this happened this afternoon, Sept 22, 2018...

I installed and ran MalwareBytes to remove MacMechanic, as explained in several posts here.

In the process of checking all of my iMac System Preferences, changing passwords, etc, I discovered something that was very unsettling.

First off, I had NO GUEST USER enabled. However, there was a signin option for one on my iMac found after I did a shutdown and restarted the computer. What with setting new passwords and such, it took me more than an hour to reach in settings "Users & Groups"

I went to USERS & GROUPS. There was an unidentified "Guest User" enabled. My setting had been changed to "Allow guests to log in to this computer" plus "Allow guest users to connect to shared folders."

FURTHER, under log in items:

"These items will open automatically when you log in." Listed were:

iTunes Helper. Application. []

Mac Mechanic. Unknown. [] (followed by a yellow triangle)

Printer.... Application. []

Garmin .... Application. []

The symbol I used for the check box []. should be CHECKED to HIDE THE ITEM

My PROBLEM IS, DO I REALLY WANT TO HIDE Mac Mechanic? IS HIDING THE RIGHT MOVE?

This was not removed by MalwareBytes.

I'm sure it was how "guest user" got enabled, because I allow no one to use my computer.

I wanted to report this so that those people who know things I don't can look into it, and share a solution to this invasion of privacy....and stop some computer piracy as well. This goes further than PUP, in my estimation. It is theft.

What must I do now with this seed of MacMechanic essentially in my "start up" folder? Hide it? OR????

Thanks for any help.

What is the "manual method" to uninstall MacMechanic?

I posted just a few minutes ago that I ran MalwareBytes and then found it enabled still with a "guest user" and MacMechanic was set to open at login. It was not removed is my conclusion.

I'd appreciate it if you could revisit this question, with the manual method explained. I'm pretty distraught right now about the whole thing. I thought damage was under control.

Thanks.

BJ

Did you follow the uninstall instructions I posted? Dragging it to the Trash doesn't always remove all associated files.

Click on the 3rd and 4th lines of my last post. They are links to articles that contain manual uninstall instructions.

bj mobile al wrote:

The symbol I used for the check box []. should be CHECKED to HIDE THE ITEM

My PROBLEM IS, DO I REALLY WANT TO HIDE Mac Mechanic? IS HIDING THE RIGHT MOVE?

Hiding is not what you want. Hiding does not stop the item running, it just makes it start with no window open.

Instead, select the unwanted item, then click the "-" below the list to remove the item.

I'm sure it was how "guest user" got enabled, because I allow no one to use my computer.

If "Find My Mac" is enabled in iCloud system preference, it will create the Guest account.