Toggle sidebar Toggle sidebar
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

Cant get rid of BeeAware malware

jwolf6589

jwolf6589

macrumors 603
Original poster
Have followed the instructions on two websites to no success. I have no Safari/Chrome/FF extensions installed, no sign of this virus in the apps folder, and a finder search shows no results. This malware seems to show a popup once a week to upgrade and I always click no. So how can I get rid of it when no trace of it exists? Its really hidden.
 
malwarebytes. otherwise, you gotta check the HD>Library, (so many places), ie launchdaemons, launch agents; the user library. system preferences>users & groups>login items. download easyfind (on the appstore), and search everywhere...

do some more googling, this info is out there. but yes, try malwarebytes first...
 
In the future, make sure you use a good adblocker and don't click on any pop-ups, download or open any file that may automatically get downloaded as a dmg file.

Malwarebytes should be able to help.
 
jwolf6589 said:
Have followed the instructions on two websites to no success. I have no Safari/Chrome/FF extensions installed, no sign of this virus in the apps folder, and a finder search shows no results. This malware seems to show a popup once a week to upgrade and I always click no. So how can I get rid of it when no trace of it exists? Its really hidden.
Click to expand...

When you do the Finder search, are you making sure 'system files' are included?
 
Can you really assume that malware/adware uses the name of the malware to identify the app, or other support extensions? Could be named something else entirely. AND, also is even more reason to use something like Malwarebytes as a chance of identifying the REAL culprit here.
 
  • Like
Reactions: crjackson2134
DeltaMac said:
Can you really assume that malware/adware uses the name of the malware to identify the app, or other support extensions? Could be named something else entirely. AND, also is even more reason to use something like Malwarebytes as a chance of identifying the REAL culprit here.
Click to expand...

not sure if that's addressed to me? i agree, malwarebytes is the place to start. but you can also google these things, and find the names of actual files needed to be deleted (i did that for a client just recently)...

EDIT: also important, in a manual search, to search in Activity Monitor, so if said app is running, ..you can force-quit it before deleting.
 
Agreed... The so-called removal instructions that I could find for the BeeAware malware don't give you any indication of the name of the malware, and gives only generic directions to look for "new" apps, nothing that actually tells you what name to look for.
My post was simply asking how to search for the app or support software for the malware, if you may not be sure of the name of those malware files. In other words - How does one search for a file if you are not sure of the file name?
 
  • Like
Reactions: crjackson2134
FNH15 said:
Have you tried the instructions here: https://www.pcrisk.com/removal-guides/14241-beeaware-adware-mac ?
Click to expand...
Yes, that's like the other supposedly helpful malware removal guides that I have seen. It appears to offer specific information, showing names in "screenshots", which are actually very un-helpful.
for example:
In the applications folder, look for "MPlayerX", "NicePlayer", or other suspicious applications and drag them to the Trash.
Click to expand...
and other generic suggestions. How is the casual Mac user supposed to know if an app is "suspicious"? The main thing that "removal guide" tells you is to download the "free cleaning software". Yes, it's free, but you have to purchase that software if it finds items that need to be removed.

@jwolf6589 - What did Malwarebytes find, if anything?
 
I would skip that part and go directly to the steps which involve going into your library folder & LaunchAgents folders. That might help.

Alternatively, you could screenshot those two folders (omitting any personal info of course) and post them here; I'm sure some of us could ID "suspicious" folders.
 
😱 Malware on a Mac?

I have several friends in recent years who also got infections on their Macs... Then I was berated and attacked in my thread for over a week when I posted that AVAST for Mac blocked a threat from downloading onto my Mac (however I determined that one was not likely to be a MacOS related infection). I recommended in my thread that using some type of Mac Security with email and browser protection should be considered to protect common Mac users. My post was for Mac users like you who could be effected by these types of vulnerabilities.

You should read my previous thread named... Another infection blocked from downloading onto Mac ... that I started for some suggestions on future prevention and possible help using Mac security software to remove the infection your Mac seems to have acquired.

There are many options for Mac security software. Other Mac users might have there own suggestions. Malwarebytes for Mac and AVAST Security for Mac might be able to help detect and block future infections. I also recommend using a third party browser such as Firefox (and under browser privacy settings I would recommend turning off sharing telemetry data).

Hopefully you can install software to detect and remove the infection. If you need to take your Mac in for diagnostics at a professional Mac services center then you might consider doing that as well. That is what one of my friends ended up ultimately doing and they were able to remove the infection. Another friend with a different type of infection ended up wiping his entire drive, low level formatting and then reinstalling everything but hopefully you won't need to go that far.
 
Last edited:
  • Like
Reactions: nouveau_redneck
SoCalReviews said:
😱 Malware on a Mac?

I have several friends in recent years who also got infections on their Macs... Then I was berated and attacked in my thread for over a week when I posted that AVAST for Mac blocked a threat from downloading onto my Mac (however I determined that one was not likely to be a MacOS related infection). I recommended in my thread that using some type of Mac Security with email and browser protection should be considered to protect common Mac users. My post was for Mac users like you who could be effected by these types of vulnerabilities.

You should read my previous thread named... Another infection blocked from downloading onto Mac ... that I started for some suggestions on future prevention and possible help using Mac security software to remove the infection your Mac seems to have acquired.

There are many options for Mac security software. Other Mac users might have there own suggestions. Malwarebytes for Mac and AVAST Security for Mac might be able to help detect and block future infections. I also recommend using a third party browser such as Firefox (and under browser privacy settings I would recommend turning off sharing telemetry data).

Hopefully you can install software to detect and remove the infection. If you need to take your Mac in for diagnostics at a professional Mac services center then you might consider doing that as well. That is what one of my friends ended up ultimately doing and they were able to remove the infection. Another friend with a different type of infection ended up wiping his entire drive, low level formatting and then reinstalling everything but hopefully you won't need to go that far.
Click to expand...
You seem to be very determined to promote using some kind of virus protection software. Please stop propagating such misinformed guidance. You are not doing anyone a favour.

Basic principles on Mac are: Do not download and install software from dubious sources. If you do get some adware, or less common malware, on your Mac then Malwarebytes should be able to remove it.

There is no good reason to clog up your Mac with any virus or anti malware software.
 
  • Like
Reactions: 09872738, fisherking, Jayderek and 1 other person
TinHead88 said:
You seem to be very determined to promote using some kind of virus protection software. Please stop propagating such misinformed guidance. You are not doing anyone a favour.

Basic principles on Mac are: Do not download and install software from dubious sources. If you do get some adware, or less common malware, on your Mac then Malwarebytes should be able to remove it.

There is no good reason to clog up your Mac with any virus or anti malware software.
Click to expand...

You are stating the obvious. Of course I advocate the use of Mac security software. I devoted an entire thread that that effect after a type of infection (not MacOS related) was detected and blocked by the Mac AV I am using. It's not propaganda or misguidance in any way. Trying to discourage discussion about it is doing a disservice to Mac users who otherwise want more information from those who are using it.
 
Last edited:
  • Like
Reactions: nouveau_redneck
DeltaMac said:
I agree with your decision on Malwarebytes.
Do you need any help with finding the right download?
Malwarebytes can remain free. It initially installs as the full app, and downgrades to the free version after 14 days, if you choose not to purchase it.
Click to expand...

It found a bunch of Malware and at the moment these are in the Quarantine folder. Should I delete them? The app also may be slowing down my Mac. Does it? Remember I have an older machine.
[doublepost=1549871775][/doublepost]
DeltaMac said:
I agree with your decision on Malwarebytes.
Do you need any help with finding the right download?
Malwarebytes can remain free. It initially installs as the full app, and downgrades to the free version after 14 days, if you choose not to purchase it.
Click to expand...

Deleted the Quarantine files and uninstalled malawarebytes and my Mac appears to be back to normal speed.
 
jwolf6589 said:
It found a bunch of Malware and at the moment these are in the Quarantine folder. Should I delete them? The app also may be slowing down my Mac. Does it? Remember I have an older machine.
[doublepost=1549871775][/doublepost]

Deleted the Quarantine files and uninstalled malawarebytes and my Mac appears to be back to normal speed.
Click to expand...
There’s no reason to uninstall MB, especially if you had “a bunch of malware.”
 
  • Like
Reactions: SoCalReviews
Malwarebytes automatically downgrades to the free version after 14 days, if you choose not to purchase it. Part of what that means, is that Malwarebytes does not run, and does not use system resources - unless YOU run the app. So, in normal use, the app just sits there, and does nothing until you run the app (and run a scan as a check of your system)
I expect that, even if you leave Malwarebytes installed, you will not likely notice any difference in performance.

Your present return to good performance is because Malwarebytes did its job, and removed whatever malware that it found.
You may have noticed that somewhere in the "quarantined" files would have been the remnants of the BeeAware files.
The only reason I might keep anything in the "quarantined" folder would be simple curiosity. But, you also shouldn't actually do anything that might cause any of those quarantined files to inadvertantly open (and reinstall themselves). Deleting anything that appears in that folder is the best step. Good job! 😎

Wait a week or two, and run Malwarebytes again. (If malware has found you once, it's likely the same, or other malware will find you again.)
 
  • Like
Reactions: SoCalReviews and willmtaylor
DeltaMac said:
Malwarebytes automatically downgrades to the free version after 14 days, if you choose not to purchase it. Part of what that means, is that Malwarebytes does not run, and does not use system resources - unless YOU run the app. So, in normal use, the app just sits there, and does nothing until you run the app (and run a scan as a check of your system)
I expect that, even if you leave Malwarebytes installed, you will not likely notice any difference in performance.

Your present return to good performance is because Malwarebytes did its job, and removed whatever malware that it found.
You may have noticed that somewhere in the "quarantined" files would have been the remnants of the BeeAware files.
The only reason I might keep anything in the "quarantined" folder would be simple curiosity. But, you also shouldn't actually do anything that might cause any of those quarantined files to inadvertantly open (and reinstall themselves). Deleting anything that appears in that folder is the best step. Good job! 😎

Wait a week or two, and run Malwarebytes again. (If malware has found you once, it's likely the same, or other malware will find you again.)
Click to expand...

Perhaps I need to reinstall it and run the free version.
 
You must log in or register to reply here.
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.
Top Bottom
Back