Cant get rid of BeeAware malware

jwolf6589

macrumors 68000
Original poster
Dec 15, 2010
1,894
295
Colorado
Have followed the instructions on two websites to no success. I have no Safari/Chrome/FF extensions installed, no sign of this virus in the apps folder, and a finder search shows no results. This malware seems to show a popup once a week to upgrade and I always click no. So how can I get rid of it when no trace of it exists? Its really hidden.
 

fisherking

macrumors 604
Jul 16, 2010
7,108
2,044
ny somewhere
malwarebytes. otherwise, you gotta check the HD>Library, (so many places), ie launchdaemons, launch agents; the user library. system preferences>users & groups>login items. download easyfind (on the appstore), and search everywhere...

do some more googling, this info is out there. but yes, try malwarebytes first...
 

Zenithal

macrumors G3
Sep 10, 2009
9,598
10,709
I look forward to Revmacian's post on your issue.


In any case, MalwareBytes is a safe bet.
 

Modernape

macrumors regular
Jun 21, 2010
192
12
Have followed the instructions on two websites to no success. I have no Safari/Chrome/FF extensions installed, no sign of this virus in the apps folder, and a finder search shows no results. This malware seems to show a popup once a week to upgrade and I always click no. So how can I get rid of it when no trace of it exists? Its really hidden.
When you do the Finder search, are you making sure 'system files' are included?
 

DeltaMac

macrumors G4
Jul 30, 2003
10,229
2,688
Delaware
Can you really assume that malware/adware uses the name of the malware to identify the app, or other support extensions? Could be named something else entirely. AND, also is even more reason to use something like Malwarebytes as a chance of identifying the REAL culprit here.
 
  • Like
Reactions: crjackson2134

fisherking

macrumors 604
Jul 16, 2010
7,108
2,044
ny somewhere
Can you really assume that malware/adware uses the name of the malware to identify the app, or other support extensions? Could be named something else entirely. AND, also is even more reason to use something like Malwarebytes as a chance of identifying the REAL culprit here.
not sure if that's addressed to me? i agree, malwarebytes is the place to start. but you can also google these things, and find the names of actual files needed to be deleted (i did that for a client just recently)...

EDIT: also important, in a manual search, to search in Activity Monitor, so if said app is running, ..you can force-quit it before deleting.
 

DeltaMac

macrumors G4
Jul 30, 2003
10,229
2,688
Delaware
Agreed... The so-called removal instructions that I could find for the BeeAware malware don't give you any indication of the name of the malware, and gives only generic directions to look for "new" apps, nothing that actually tells you what name to look for.
My post was simply asking how to search for the app or support software for the malware, if you may not be sure of the name of those malware files. In other words - How does one search for a file if you are not sure of the file name?
 
  • Like
Reactions: crjackson2134

DeltaMac

macrumors G4
Jul 30, 2003
10,229
2,688
Delaware
Yes, that's like the other supposedly helpful malware removal guides that I have seen. It appears to offer specific information, showing names in "screenshots", which are actually very un-helpful.
for example:
In the applications folder, look for "MPlayerX", "NicePlayer", or other suspicious applications and drag them to the Trash.
and other generic suggestions. How is the casual Mac user supposed to know if an app is "suspicious"? The main thing that "removal guide" tells you is to download the "free cleaning software". Yes, it's free, but you have to purchase that software if it finds items that need to be removed.

@jwolf6589 - What did Malwarebytes find, if anything?
 

FNH15

macrumors 6502
Apr 19, 2011
325
236
I would skip that part and go directly to the steps which involve going into your library folder & LaunchAgents folders. That might help.

Alternatively, you could screenshot those two folders (omitting any personal info of course) and post them here; I'm sure some of us could ID "suspicious" folders.
 

SoCalReviews

macrumors 6502a
Dec 31, 2012
582
202
:eek: Malware on a Mac?

I have several friends in recent years who also got infections on their Macs... Then I was berated and attacked in my thread for over a week when I posted that AVAST for Mac blocked a threat from downloading onto my Mac (however I determined that one was not likely to be a MacOS related infection). I recommended in my thread that using some type of Mac Security with email and browser protection should be considered to protect common Mac users. My post was for Mac users like you who could be effected by these types of vulnerabilities.

You should read my previous thread named... Another infection blocked from downloading onto Mac ... that I started for some suggestions on future prevention and possible help using Mac security software to remove the infection your Mac seems to have acquired.

There are many options for Mac security software. Other Mac users might have there own suggestions. Malwarebytes for Mac and AVAST Security for Mac might be able to help detect and block future infections. I also recommend using a third party browser such as Firefox (and under browser privacy settings I would recommend turning off sharing telemetry data).

Hopefully you can install software to detect and remove the infection. If you need to take your Mac in for diagnostics at a professional Mac services center then you might consider doing that as well. That is what one of my friends ended up ultimately doing and they were able to remove the infection. Another friend with a different type of infection ended up wiping his entire drive, low level formatting and then reinstalling everything but hopefully you won't need to go that far.
 
Last edited:
  • Like
Reactions: nouveau_redneck

TinHead88

macrumors regular
Oct 30, 2008
192
25
:eek: Malware on a Mac?

I have several friends in recent years who also got infections on their Macs... Then I was berated and attacked in my thread for over a week when I posted that AVAST for Mac blocked a threat from downloading onto my Mac (however I determined that one was not likely to be a MacOS related infection). I recommended in my thread that using some type of Mac Security with email and browser protection should be considered to protect common Mac users. My post was for Mac users like you who could be effected by these types of vulnerabilities.

You should read my previous thread named... Another infection blocked from downloading onto Mac ... that I started for some suggestions on future prevention and possible help using Mac security software to remove the infection your Mac seems to have acquired.

There are many options for Mac security software. Other Mac users might have there own suggestions. Malwarebytes for Mac and AVAST Security for Mac might be able to help detect and block future infections. I also recommend using a third party browser such as Firefox (and under browser privacy settings I would recommend turning off sharing telemetry data).

Hopefully you can install software to detect and remove the infection. If you need to take your Mac in for diagnostics at a professional Mac services center then you might consider doing that as well. That is what one of my friends ended up ultimately doing and they were able to remove the infection. Another friend with a different type of infection ended up wiping his entire drive, low level formatting and then reinstalling everything but hopefully you won't need to go that far.
You seem to be very determined to promote using some kind of virus protection software. Please stop propagating such misinformed guidance. You are not doing anyone a favour.

Basic principles on Mac are: Do not download and install software from dubious sources. If you do get some adware, or less common malware, on your Mac then Malwarebytes should be able to remove it.

There is no good reason to clog up your Mac with any virus or anti malware software.
 

SoCalReviews

macrumors 6502a
Dec 31, 2012
582
202
You seem to be very determined to promote using some kind of virus protection software. Please stop propagating such misinformed guidance. You are not doing anyone a favour.

Basic principles on Mac are: Do not download and install software from dubious sources. If you do get some adware, or less common malware, on your Mac then Malwarebytes should be able to remove it.

There is no good reason to clog up your Mac with any virus or anti malware software.
You are stating the obvious. Of course I advocate the use of Mac security software. I devoted an entire thread that that effect after a type of infection (not MacOS related) was detected and blocked by the Mac AV I am using. It's not propaganda or misguidance in any way. Trying to discourage discussion about it is doing a disservice to Mac users who otherwise want more information from those who are using it.
 
Last edited:
  • Like
Reactions: nouveau_redneck

jwolf6589

macrumors 68000
Original poster
Dec 15, 2010
1,894
295
Colorado
I agree with your decision on Malwarebytes.
Do you need any help with finding the right download?
Malwarebytes can remain free. It initially installs as the full app, and downgrades to the free version after 14 days, if you choose not to purchase it.
It found a bunch of Malware and at the moment these are in the Quarantine folder. Should I delete them? The app also may be slowing down my Mac. Does it? Remember I have an older machine.
[doublepost=1549871775][/doublepost]
I agree with your decision on Malwarebytes.
Do you need any help with finding the right download?
Malwarebytes can remain free. It initially installs as the full app, and downgrades to the free version after 14 days, if you choose not to purchase it.
Deleted the Quarantine files and uninstalled malawarebytes and my Mac appears to be back to normal speed.
 

willmtaylor

macrumors G4
Oct 31, 2009
10,300
8,165
Here(-ish)
It found a bunch of Malware and at the moment these are in the Quarantine folder. Should I delete them? The app also may be slowing down my Mac. Does it? Remember I have an older machine.
[doublepost=1549871775][/doublepost]

Deleted the Quarantine files and uninstalled malawarebytes and my Mac appears to be back to normal speed.
There’s no reason to uninstall MB, especially if you had “a bunch of malware.”
 
  • Like
Reactions: SoCalReviews

DeltaMac

macrumors G4
Jul 30, 2003
10,229
2,688
Delaware
Malwarebytes automatically downgrades to the free version after 14 days, if you choose not to purchase it. Part of what that means, is that Malwarebytes does not run, and does not use system resources - unless YOU run the app. So, in normal use, the app just sits there, and does nothing until you run the app (and run a scan as a check of your system)
I expect that, even if you leave Malwarebytes installed, you will not likely notice any difference in performance.

Your present return to good performance is because Malwarebytes did its job, and removed whatever malware that it found.
You may have noticed that somewhere in the "quarantined" files would have been the remnants of the BeeAware files.
The only reason I might keep anything in the "quarantined" folder would be simple curiosity. But, you also shouldn't actually do anything that might cause any of those quarantined files to inadvertantly open (and reinstall themselves). Deleting anything that appears in that folder is the best step. Good job! :cool:

Wait a week or two, and run Malwarebytes again. (If malware has found you once, it's likely the same, or other malware will find you again.)
 

jwolf6589

macrumors 68000
Original poster
Dec 15, 2010
1,894
295
Colorado
Malwarebytes automatically downgrades to the free version after 14 days, if you choose not to purchase it. Part of what that means, is that Malwarebytes does not run, and does not use system resources - unless YOU run the app. So, in normal use, the app just sits there, and does nothing until you run the app (and run a scan as a check of your system)
I expect that, even if you leave Malwarebytes installed, you will not likely notice any difference in performance.

Your present return to good performance is because Malwarebytes did its job, and removed whatever malware that it found.
You may have noticed that somewhere in the "quarantined" files would have been the remnants of the BeeAware files.
The only reason I might keep anything in the "quarantined" folder would be simple curiosity. But, you also shouldn't actually do anything that might cause any of those quarantined files to inadvertantly open (and reinstall themselves). Deleting anything that appears in that folder is the best step. Good job! :cool:

Wait a week or two, and run Malwarebytes again. (If malware has found you once, it's likely the same, or other malware will find you again.)
Perhaps I need to reinstall it and run the free version.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.