Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

mund

macrumors member
Original poster
May 7, 2012
61
0
Great Lake State
I have an old Early 2011 MBP that is still running fine (fully handing over to my son shortly) I just wanted to check things out in terms of virus, malware, as I pull things off it to my New Late 2016 MBP.

So... if you dig, you will always find SOMETHING Right?...

I have installed Malwarebytes & Webroot to check things out (I have a teen son, not always picky of where he goes online, or apps downloaded.. )

So I wanted to check things out. Malwarebytes found a couple of minimal things and resolved, but as I read on about Malwarebytes it's not antivirus, so antivirus should be used to thoroughly check along with. In comes Webroot. With Webroot, I also checked the external drive which is partitioned as 1 & 2 and contains CCC 5 clone of each MBP. Running Webroot to check attached drive, found the following. This MRT App concerns me.

p.s. I have not clicked on next steps because I don't know if doing so, will corrupt my clones of each MBP.

Apologize for the length...

MRT app concern.png
 
Since there are no true viruses in the wild that can infect your Macs, you don't need to install AV software. And it appears that "Webroot" has found some Windows exe files and some Mac malware (Genieo). Just remove them and press on. Just continue to run Malwarebytes. AV software not needed.
 
Since there are no true viruses in the wild that can infect your Macs, you don't need to install AV software. And it appears that "Webroot" has found some Windows exe files and some Mac malware (Genieo). Just remove them and press on. Just continue to run Malwarebytes. AV software not needed.

Thank You, what about addressing the "MRT" ?... if it's flagged in my clone, it would be flagged on my MBP's ?
 
Well, as you can see from your screenshot, "MRT" here refers to the Genieo malware threat. So yes, you should also check your MBP machines for the same threat and remove them.
 
I ran Malwarebytes on the new MBP... that showed NOTHING in terms of the Genieo threat! Just like on the old MBP.

It is Webroot that found it on the external drives ONLY, (the clones) not ON the actual MBP's.... Baffles Me!!!

Unless it flags it as being foreign in some way being on an external drive... ?!?! Confusing!
 
Run EtreCheck on your Mac.
That wil key on certain kinds of "mystery" software that often will be adware or malware. EtreCheck will usually show a note that some files known to be adware can be deleted by EtreCheck (which is a Good Thing™)
 
  • Like
Reactions: mund
Run EtreCheck on your Mac.
That wil key on certain kinds of "mystery" software that often will be adware or malware. EtreCheck will usually show a note that some files known to be adware can be deleted by EtreCheck (which is a Good Thing™)

I ran Malwarebytes on the oldest Mac, 2009 iMac that showed some maleware, pup, genieo (see pic). Got rid of that.. was it transferred to the other systems ?... I read something about latching onto keychain I believe.


EtreCheck then ran on all.
Thank You, I did just that, on all (3) mac's, * old 2009 iMac, * 2011 MBP, * 2016 MBP... Nothing Major, the Minor is just clutter, progressively more on older of course. Nothing shown for malware / virus, all processes running match white papers - "probably ok".
 

Attachments

  • genieo 3-10-18 from.png
    genieo 3-10-18 from.png
    670.1 KB · Views: 173
I have an old Early 2011 MBP that is still running fine (fully handing over to my son shortly) I just wanted to check things out in terms of virus, malware, as I pull things off it to my New Late 2016 MBP.

So... if you dig, you will always find SOMETHING Right?...

I have installed Malwarebytes & Webroot to check things out (I have a teen son, not always picky of where he goes online, or apps downloaded.. )

So I wanted to check things out. Malwarebytes found a couple of minimal things and resolved, but as I read on about Malwarebytes it's not antivirus, so antivirus should be used to thoroughly check along with. In comes Webroot. With Webroot, I also checked the external drive which is partitioned as 1 & 2 and contains CCC 5 clone of each MBP. Running Webroot to check attached drive, found the following. This MRT App concerns me.

p.s. I have not clicked on next steps because I don't know if doing so, will corrupt my clones of each MBP.

Apologize for the length...

View attachment 753945
The MRT warning is a false positive. MRT is Apple's Malware Removal Tool.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.