Difference between revisions of "Macintosh Malware Removal"

From Free Knowledge Base- The DUCK Project: information for everyone
Jump to: navigation, search
Line 1: Line 1:
Macintosh software is installed and removed differently than Microsoft Windows software.  Macintosh programs tend to be packages that can be uninstalled by simply dragging the application to the Trash.  Applications may create preference files that are stored in the /Home/Library/Preferences folder.  The benign remnants orphaned in the Preferences folder can be removed manually to recover disk space.
+
Macintosh software is installed and removed differently than Microsoft Windows software.  Macintosh programs tend to be packages that can be uninstalled by simply dragging the application to the Trash.   
  
 +
Applications may create preference files that are stored in the /Home/Library/Preferences directory.  The benign remnants orphaned in the Preferences folder can be removed manually to recover disk space.
 +
* /Home/Library/Preferences
 +
 +
Application components may place files in the /Home/Library/Applications Support directory.  These will also become orphaned if the package is removed.  Delete these files to recover disk space.
 +
* /Home/Library/Applications
 +
* /Library/Receipts
 +
 +
Check for "StartupItems" and "LoginItems"
 +
* /Library/StartupItems
 +
* /Home/Library/StartupItems
 +
 +
Check for startup services
 +
* /Library/LaunchAgents
 +
* /Library/LaunchDaemons
 +
* /Home/Library/LaunchAgents
 +
 +
Commercial software typically comes with an uninstall utility that is responsible for removing all orphaned files.  The thoroughness of the uninstaller may vary from one package to another.
 +
 +
Malware does not follow these conventions.  The malware developer makes effort to conceal the malware as to be installed in places which are difficult to locate and remove. 
  
 
== Advanced Mac Cleaner (Malware) ==
 
== Advanced Mac Cleaner (Malware) ==
  
 
Software that identifies itself as Advanced Mac Cleaner is not antivirus and is not a security tool, it is actually malware.  This software is installed by the user inadvertently as it piggy-backs with other software, and is classified as a PUP (Potentially Unwanted Program) as well as Malware, as it has poses a threat to system security and stability.
 
Software that identifies itself as Advanced Mac Cleaner is not antivirus and is not a security tool, it is actually malware.  This software is installed by the user inadvertently as it piggy-backs with other software, and is classified as a PUP (Potentially Unwanted Program) as well as Malware, as it has poses a threat to system security and stability.

Revision as of 12:52, 20 June 2016

Macintosh software is installed and removed differently than Microsoft Windows software. Macintosh programs tend to be packages that can be uninstalled by simply dragging the application to the Trash.

Applications may create preference files that are stored in the /Home/Library/Preferences directory. The benign remnants orphaned in the Preferences folder can be removed manually to recover disk space.

  • /Home/Library/Preferences

Application components may place files in the /Home/Library/Applications Support directory. These will also become orphaned if the package is removed. Delete these files to recover disk space.

  • /Home/Library/Applications
  • /Library/Receipts

Check for "StartupItems" and "LoginItems"

  • /Library/StartupItems
  • /Home/Library/StartupItems

Check for startup services

  • /Library/LaunchAgents
  • /Library/LaunchDaemons
  • /Home/Library/LaunchAgents

Commercial software typically comes with an uninstall utility that is responsible for removing all orphaned files. The thoroughness of the uninstaller may vary from one package to another.

Malware does not follow these conventions. The malware developer makes effort to conceal the malware as to be installed in places which are difficult to locate and remove.

Advanced Mac Cleaner (Malware)

Software that identifies itself as Advanced Mac Cleaner is not antivirus and is not a security tool, it is actually malware. This software is installed by the user inadvertently as it piggy-backs with other software, and is classified as a PUP (Potentially Unwanted Program) as well as Malware, as it has poses a threat to system security and stability.