347      iPhone_iPad_Mac_apple

How to get rid of malware crusher pop up

malware crusher keeps popping up in the upper right corner. Not sure how it got on the computer. Can't find it on the laptop. Any help is appreciated.

Hi,

See if Malwarebytes will take care of it. Don't worry, it's safe: run Malwarebytes: https://www.malwarebytes.com/mac/

Hi,

See if Malwarebytes will take care of it. Don't worry, it's safe: run Malwarebytes: https://www.malwarebytes.com/mac/

Hello jmelvinthree,

Are these notifications? What do they say? Can you click on them? What happens when you do that?

This sounds like another case of notification SPAM. I recently added this to my adware removal app EtreCheck, but it isn't released yet. If you want to try the beta version, you can download EtreCheck 3.4 from https://www.etrecheck.com/download/EtreCheck_beta.zip and run it. EtreCheck is perfectly safe to run, does not ask for your password to install, and is signed with my Apple Developer ID.

I have tested this new feature on a couple of apps that I know will load up your notification queue with ads. But there are always new scam apps being developed. I would like to know if EtreCheck can detect your notification spam and remove it.

Disclaimer: Although EtreCheck is free, there are other links on my site that could give me some form of compensation, financial or otherwise.

I searched on google and found one blog may be helpful

https://www.makeyourmacbetter.com/2017/06/03/malware-crusher-virus-removal-from-m ac-os-x/

Unfortunately, your can't use Google for suggestions. The internet is just covered with ads for "clean up" apps. The link you posted is just an ad for one of those "clean up" tools that is likely made by the same company that developed "Malware Crusher".

I know this may look sketchy, but I am just an average computer user.

Download Malwarebytes | Malwarebytes Anti-Malware for Mac

It worked. It asked me to restart my computer, which made me nervous, but I did it.

Malware Crusher is gone and then I deleted the Malwarebytes program.

Chris

MalwareBytes is an effective tool for removing adware. But it sounds like jmelvinthree is talking about notification SPAM. Even if the adware is removed, those notifications are still sitting in a database and will keep demanding attention. Maybe there are only 4 notifications pending. Maybe there are 12 pending. There is no limit really.

The big danger here is that someone might think that MalwareBytes didn't work when the next notification pops up in two days. Then they might try to download some other anti-malware tool. But that might lead them right back to some scamware program that just does a fake antivirus scan and then, wait for it, fills the notification queue full of ads for their "pro" antivirus version.

It is important to identify exactly what the symptoms are. Pop-ups in a web browser might very well be adware. But notification pop-ups are different and need a different approach.

I was having the EXACT issue. I ended up finding the app that was causing this notification to pop up and delete the file. It was in my Application folder. 2 of them actually. One named "Malware Crusher" and then I also had a folder named "_MacOSx" (if you open the folder you will see another app called malware crusher). I deleted both and now I am not having the issue any more. I haven't had the notification pop up for over 2 days now so if you had this then you know how many times a day it would pop up.

Any advice I see recommending to download another app to delete an app, I treat as advertisement or just more spam.

Hello Fishin301,

I thought this was a case of notification SPAM. Deleting a non-Mac App Store app will not remove any pending notifications. There are some apps that will fill up your notification queue with ads so that, even if you delete the app, the ads will live on. The soon-to-be-released EtreCheck 3.4 is the only way to remove these notifications without resorting to Terminal commands and SQL. A week ago I posted instructions on how to use those manual techniques in this thread: Re: Annoying PDF Expert 'TRY NOW' Pop up. Since then, I've added this as a feature to EtreCheck and thought this would be a good chance to test it in the wild.

From the description of the problem, I thought Malware Crusher was doing the same thing. I just tried it, however, and it didn't create any notifications on my test system. It did immediately display a number of harmless cache files as "infections". Ironically, one of those "infections" that it reported was a file that it created.

For the record, EtreCheck will not delete any apps at all. It will disable adware so that it doesn't run an inject ads, but that is it. MalwareBytes will actually delete any adware (or Potentially Unwanted Programs) that it recognizes. But EtreCheck can detect and disable even brand new adware that no other app can detect. Both EtreCheck and MalwareBytes were developed to help other Mac users here on Apple Support Communities. Manual instructions such as what I posted above can be dangerous. On more than one occasion, I have been helping someone here on Apple support communities try to manually delete some app and saw them get confused and start randomly deleting other, important files. This has happened to other helpers as well. So, I am trying to add features to EtreCheck that will safely perform low-level operations like this without the need for UNIX commands. But if you really want the UNIX commands, I'm happy to help with those too.

Adware is designed to avoid deletion. It is unusual to be able to go into the Applications folder and just delete it. And after testing Malware Crusher, I can confirm that your instructions are not adequate. You still have parts of Malware Crusher running. I don't know what is going on with your "_MacOSx" folder. That sounds like a Mac zip file decompressed on a PC or something. It shouldn't be in your Applications folder and Malware Crusher didn't create it. It sounds like you have other problems that need to be addressed. I suggest you run MalwareBytes to completely remove Malware Crusher. If you have other problems, start a new thread and mention that "_MacOSx" folder. Someone might recommend you run an EtreCheck report. I wouldn't disagree with that advice.

You may be correct in saying what I did is not adequate but.... I did not have to download and install a 3rd party app to delete another app I never wanted. "EtreCheck" may be an effective program but I am not looking to install, purchase, download or use another application to remove one I never wanted. I believe the "_MacOSx" folder was just a sneaky way to hide the malware crusher app. I have seen malware hide their apps in folders named completely different in what seems to be legit systems folders. Either way, the notifications has stopped and I did not have to download any malware detector/remover program.

I used etrecheck and the following is posted under user launch agents:

[running]    com.techyutils.mchlpr.plist (Techyutils Software Private Limited - installed 2017-06-02)

I had already removed the application.  I cannot remove the library entry because it's "in use".  Still getting notifications.  Now what?

Hello aoberg88,

How did you remove it? I suggest using MalwareBytes via the link above. Apps like this are firmly in the grey area. They are signed with a valid developer ID so EtreCheck won't automatically flag them. They aren't actually adware so I don't flag them that way. But they may be considered "Potentially Unwanted" by apps like MalwareBytes.

I plan to have a future version of EtreCheck provide more direct control over disabling any and all background tasks like this. But this would be just "disabling", not uninstalling. Unfortunately, many modern apps simply cannot be uninstalled by the user without help. I do not have the resources to build an "app zapper" for every 3rd party program in the world. Maybe companies like MalwareBytes can manage that.

I had run MalwareBytes without success a few days ago.  I ran it again just now and several "Malware Crusher"-tagged items showed up and were removed.  Fingers Crossed.  Thanks so much!

Thanks for that. I had the exact same issue. Did as you suggested and works like a champ. Again thanks and kudos to you.

最后更新：2017-08-31 15:12:41

  上一篇： Looking for DEVELOPER SYSTEM STATUS and it is n...

  下一篇： Why do MacBook power cords fray so easily?