Cant get rid of BeeAware malware

Discussion in 'macOS Mojave (10.14)' started by jwolf6589, Feb 3, 2019.

  1. jwolf6589 macrumors 65816

    jwolf6589

    Joined:
    Dec 15, 2010
    Location:
    Colorado
    #1
    Have followed the instructions on two websites to no success. I have no Safari/Chrome/FF extensions installed, no sign of this virus in the apps folder, and a finder search shows no results. This malware seems to show a popup once a week to upgrade and I always click no. So how can I get rid of it when no trace of it exists? Its really hidden.
     
  2. DeltaMac macrumors G3

    DeltaMac

    Joined:
    Jul 30, 2003
    Location:
    Delaware
    #2
    Does Malwarebytes remove that BeeAware adware?
     
  3. fisherking macrumors 603

    fisherking

    Joined:
    Jul 16, 2010
    Location:
    ny somewhere
    #3
    malwarebytes. otherwise, you gotta check the HD>Library, (so many places), ie launchdaemons, launch agents; the user library. system preferences>users & groups>login items. download easyfind (on the appstore), and search everywhere...

    do some more googling, this info is out there. but yes, try malwarebytes first...
     
  4. BasicGreatGuy Contributor

    BasicGreatGuy

    Joined:
    Sep 21, 2012
    Location:
    In the middle of several books.
    #4
    In the future, make sure you use a good adblocker and don't click on any pop-ups, download or open any file that may automatically get downloaded as a dmg file.

    Malwarebytes should be able to help.
     
  5. Zenithal macrumors 604

    Joined:
    Sep 10, 2009
    #5
    I look forward to Revmacian's post on your issue.


    In any case, MalwareBytes is a safe bet.
     
  6. willmtaylor macrumors G3

    willmtaylor

    Joined:
    Oct 31, 2009
    Location:
    A Natural State
    #6
    If I recall corectly, you used to defend MacDefender. Did it not protect you?
     
  7. Modernape macrumors regular

    Joined:
    Jun 21, 2010
    #7
    When you do the Finder search, are you making sure 'system files' are included?
     
  8. fisherking macrumors 603

    fisherking

    Joined:
    Jul 16, 2010
    Location:
    ny somewhere
    #8
    use 'easyfind'... you can search the entire hard drive in depth (there's lots of options). but again, try malwarebytes first... & let us know how that goes...
     
  9. DeltaMac macrumors G3

    DeltaMac

    Joined:
    Jul 30, 2003
    Location:
    Delaware
    #9
    Can you really assume that malware/adware uses the name of the malware to identify the app, or other support extensions? Could be named something else entirely. AND, also is even more reason to use something like Malwarebytes as a chance of identifying the REAL culprit here.
     
  10. fisherking macrumors 603

    fisherking

    Joined:
    Jul 16, 2010
    Location:
    ny somewhere
    #10
    not sure if that's addressed to me? i agree, malwarebytes is the place to start. but you can also google these things, and find the names of actual files needed to be deleted (i did that for a client just recently)...

    EDIT: also important, in a manual search, to search in Activity Monitor, so if said app is running, ..you can force-quit it before deleting.
     
  11. DeltaMac macrumors G3

    DeltaMac

    Joined:
    Jul 30, 2003
    Location:
    Delaware
    #11
    Agreed... The so-called removal instructions that I could find for the BeeAware malware don't give you any indication of the name of the malware, and gives only generic directions to look for "new" apps, nothing that actually tells you what name to look for.
    My post was simply asking how to search for the app or support software for the malware, if you may not be sure of the name of those malware files. In other words - How does one search for a file if you are not sure of the file name?
     
  12. DeltaMac macrumors G3

    DeltaMac

    Joined:
    Jul 30, 2003
    Location:
    Delaware
    #13
    Yes, that's like the other supposedly helpful malware removal guides that I have seen. It appears to offer specific information, showing names in "screenshots", which are actually very un-helpful.
    for example:
    and other generic suggestions. How is the casual Mac user supposed to know if an app is "suspicious"? The main thing that "removal guide" tells you is to download the "free cleaning software". Yes, it's free, but you have to purchase that software if it finds items that need to be removed.

    @jwolf6589 - What did Malwarebytes find, if anything?
     
  13. FNH15 macrumors 6502

    Joined:
    Apr 19, 2011
    #14
    I would skip that part and go directly to the steps which involve going into your library folder & LaunchAgents folders. That might help.

    Alternatively, you could screenshot those two folders (omitting any personal info of course) and post them here; I'm sure some of us could ID "suspicious" folders.
     
  14. SoCalReviews, Feb 7, 2019
    Last edited: Feb 7, 2019

    SoCalReviews macrumors 6502a

    Joined:
    Dec 31, 2012
    #15
    :eek: Malware on a Mac?

    I have several friends in recent years who also got infections on their Macs... Then I was berated and attacked in my thread for over a week when I posted that AVAST for Mac blocked a threat from downloading onto my Mac (however I determined that one was not likely to be a MacOS related infection). I recommended in my thread that using some type of Mac Security with email and browser protection should be considered to protect common Mac users. My post was for Mac users like you who could be effected by these types of vulnerabilities.

    You should read my previous thread named... Another infection blocked from downloading onto Mac ... that I started for some suggestions on future prevention and possible help using Mac security software to remove the infection your Mac seems to have acquired.

    There are many options for Mac security software. Other Mac users might have there own suggestions. Malwarebytes for Mac and AVAST Security for Mac might be able to help detect and block future infections. I also recommend using a third party browser such as Firefox (and under browser privacy settings I would recommend turning off sharing telemetry data).

    Hopefully you can install software to detect and remove the infection. If you need to take your Mac in for diagnostics at a professional Mac services center then you might consider doing that as well. That is what one of my friends ended up ultimately doing and they were able to remove the infection. Another friend with a different type of infection ended up wiping his entire drive, low level formatting and then reinstalling everything but hopefully you won't need to go that far.
     
  15. jwolf6589 thread starter macrumors 65816

    jwolf6589

    Joined:
    Dec 15, 2010
    Location:
    Colorado
    #16
    I need to download this app.
     
  16. TinHead88 macrumors regular

    TinHead88

    Joined:
    Oct 30, 2008
    #17
    You seem to be very determined to promote using some kind of virus protection software. Please stop propagating such misinformed guidance. You are not doing anyone a favour.

    Basic principles on Mac are: Do not download and install software from dubious sources. If you do get some adware, or less common malware, on your Mac then Malwarebytes should be able to remove it.

    There is no good reason to clog up your Mac with any virus or anti malware software.
     
  17. fisherking macrumors 603

    fisherking

    Joined:
    Jul 16, 2010
    Location:
    ny somewhere
    #18
    it's been a week since your original post. what are you waiting for?
     
  18. SoCalReviews, Feb 10, 2019
    Last edited: Feb 10, 2019

    SoCalReviews macrumors 6502a

    Joined:
    Dec 31, 2012
    #19
    You are stating the obvious. Of course I advocate the use of Mac security software. I devoted an entire thread that that effect after a type of infection (not MacOS related) was detected and blocked by the Mac AV I am using. It's not propaganda or misguidance in any way. Trying to discourage discussion about it is doing a disservice to Mac users who otherwise want more information from those who are using it.
     
  19. DeltaMac macrumors G3

    DeltaMac

    Joined:
    Jul 30, 2003
    Location:
    Delaware
    #20
    I agree with your decision on Malwarebytes.
    Do you need any help with finding the right download?
    Malwarebytes can remain free. It initially installs as the full app, and downgrades to the free version after 14 days, if you choose not to purchase it.
     
  20. jwolf6589 thread starter macrumors 65816

    jwolf6589

    Joined:
    Dec 15, 2010
    Location:
    Colorado
    #21
    It found a bunch of Malware and at the moment these are in the Quarantine folder. Should I delete them? The app also may be slowing down my Mac. Does it? Remember I have an older machine.
    --- Post Merged, Feb 10, 2019 ---
    Deleted the Quarantine files and uninstalled malawarebytes and my Mac appears to be back to normal speed.
     
  21. willmtaylor macrumors G3

    willmtaylor

    Joined:
    Oct 31, 2009
    Location:
    A Natural State
    #22
    There’s no reason to uninstall MB, especially if you had “a bunch of malware.”
     
  22. DeltaMac macrumors G3

    DeltaMac

    Joined:
    Jul 30, 2003
    Location:
    Delaware
    #23
    Malwarebytes automatically downgrades to the free version after 14 days, if you choose not to purchase it. Part of what that means, is that Malwarebytes does not run, and does not use system resources - unless YOU run the app. So, in normal use, the app just sits there, and does nothing until you run the app (and run a scan as a check of your system)
    I expect that, even if you leave Malwarebytes installed, you will not likely notice any difference in performance.

    Your present return to good performance is because Malwarebytes did its job, and removed whatever malware that it found.
    You may have noticed that somewhere in the "quarantined" files would have been the remnants of the BeeAware files.
    The only reason I might keep anything in the "quarantined" folder would be simple curiosity. But, you also shouldn't actually do anything that might cause any of those quarantined files to inadvertantly open (and reinstall themselves). Deleting anything that appears in that folder is the best step. Good job! :cool:

    Wait a week or two, and run Malwarebytes again. (If malware has found you once, it's likely the same, or other malware will find you again.)
     
  23. jwolf6589 thread starter macrumors 65816

    jwolf6589

    Joined:
    Dec 15, 2010
    Location:
    Colorado
    #24
    Perhaps I need to reinstall it and run the free version.
     
  24. nouveau_redneck macrumors regular

    nouveau_redneck

    Joined:
    Sep 16, 2017
    Location:
    Deep in the desert
    #25
    Given that you have a history of picking up malware, which primarily, but not exclusively, happens from risky behavior on the internet, you should not only install Malwarebytes, but also purchase it for real time protection.
     

Share This Page