MacPerformance

[worldomination]

Question, everyone.

I woke up my Mac today to find this message:

"MacPerformance" wants access to control "Safari". Allowing control will provide access to documents and data in "Safari", and to perform actions within that app.

I like that Mojave provides warning messages. That said, what the heck is "MacPerformance"? I wish macOS provided more information.

The app EasyFind discovered four files with the name MacPerformance, each residing in my home folder. Here are two:

The other two are plists, found in my home folder's Preferences folder, the other in the home folder's LaunchAgents folder.

Looking through the files all I could find was this:

www.loadingpagesson.club

Would anyone know what MacPerformance is?

 

[worldomination]

I wonder if this is malware.

Google turns up few, inconclusive results. Malwarebytes detects nothing wrong. My friend's Mac doesn't have MacPerformance.

Huh.

Well, I've deleted all traces of MacPerformance. I'd still like to know what it is, though.

 

[MSastre]

Question, everyone.

I woke up my Mac today to find this message:

"MacPerformance" wants access to control "Safari". Allowing control will provide access to documents and data in "Safari", and to perform actions within that app.

I like that Mojave provides warning messages. That said, what the heck is "MacPerformance"? I wish macOS provided more information.

The app EasyFind discovered four files with the name MacPerformance, each residing in my home folder. Here are two:

The other two are plists, found in my home folder's Preferences folder, the other in the home folder's LaunchAgents folder.

Looking through the files all I could find was this:

www.loadingpagesson.club

Would anyone know what MacPerformance is?

Have no idea what it is, but the name sounds like it is meant to mislead you. Wise not to give any control from a prompt you don't know the origin.

 

[FudgeSlapp]

I made an account just now trying to find out what it is. I didn't do anything to the prompt until I came to this thread. I didn't allow it and right after I opened up MalwareBytes and indeed it found malicious software and removed it. I restarted and everything seems fine.

DO NOT GIVE ACCESS TO THIS AND GET RID OF IT WITH ANTIVIRUS SOFTWARE!!!

 

[worldomination]

Thanks for the reply, guys.

Huh... Malwarebytes didn't identify it as malware.

Wonder why?

FudgeSlapp... where did you find MacPerformance? How did you install it?

It might give me a clue as to how it got onto my Mac.

 

[throwaway128212]

Question, everyone.

I woke up my Mac today to find this message:

"MacPerformance" wants access to control "Safari". Allowing control will provide access to documents and data in "Safari", and to perform actions within that app.

I like that Mojave provides warning messages. That said, what the heck is "MacPerformance"? I wish macOS provided more information.

I just got the message like 15 minute ago... Please let me know when you figure it out. It sounds like a new virus... wonder how it got into my computer... =/

 

[FudgeSlapp]

Thanks for the reply, guys.

Huh... Malwarebytes didn't identify it as malware.

Wonder why?

FudgeSlapp... where did you find MacPerformance? How did you install it?

It might give me a clue as to how it got onto my Mac.

I honestly have no idea how it got on my Mac. I denied it access to Safari controls and immediately did a scan with MalwareBytes and managed to get rid of it.

 

[ribbo1939]

I just opened up Safari on my iMac and I too got the window saying MacPerformance wants access to control Safari.
Using Activity Monitor, I was able to find all the files located in my Library (of my home folder) and deleted them.

It wasn't there last night and I've only in the last couple of hours opened up my iMac.
Have no idea what it is or does.

PS. Using Malwarebytes also found in my;
users/name/Library/LaunchAgents/com.MacPerformance.plist
" " " /walleva
and deleted with a restart

 

[worldomination]

I manually deleted MacPerformance.

I hope I found everything...

• plist --> home folder --> Preferences
• plist --> home folder --> LaunchAgents
• various files ---> home folder --> UpdateMac

Guys, did I miss anything?

 

[macdos]

I manually deleted MacPerformance.

I hope I found everything...

• plist --> home folder --> Preferences
• plist --> home folder --> LaunchAgents
• various files ---> home folder --> UpdateMac

Guys, did I miss anything?

You forgot to tell us what you did to get pwned. Doing so may help others.

 

[worldomination]

You forgot to tell us what you did to get pwned. Doing so may help others.

As I wrote earlier, I have no idea how it got onto my Mac. I wish I knew... not only for myself, but for my friends and family with Macs.

 

[MyMacintosh]

I got this asking for permission twice. First time I realized it as malware and hit dont, then accidentally selected yes today. I went ahead and used malwarebytes to clean up my mac incase. No idea if Malwarebytes detected it because I just had it delete whatever it found.

 

[whoisyourdaddy]

Most likely you have some cracked software which came with this particular executable. It's possible you visited a site with scripts. However, this is unlikely with macOS sand boxed environment or even with third-party browsers. Too many permissions to bypass.

 

[Mick-Mac]

I just got home from work and I see the same dialog box on my Mac. I keep a clean ship, so no cracked software here. I'm running Safari Version 12.0.2 (14606.3.4)

 

[whoisyourdaddy]

I just got home from work and I see the same dialog box on my Mac. I keep a clean ship, so no cracked software here. I'm running Safari Version 12.0.2 (14606.3.4)

This wasn't installed by Apple or known and validated software with the current version of macOS or prior. You weren't targeted by anyone in particular. So, it was distributed by other methods which are usually via malicious scripts on pages or infected software. So, if you have this particular dialog for this specific "MacPerformance", then you installed it in some way.

 

[worldomination]

Damn.

MacPerformance appeared again.

How the @$%*! did it get onto my Mac? I haven't installed anything recently...

 

[allan.nyholm]

https://malwaretips.com/blogs/remove-macperformance/

Just throwing out a link to a website that describes how a user might have gotten themselves in the MacPerformance adware business. And instructions on how to remove.