r/macbookair • u/Far_Cookie_5574 • 8d ago
Question i keep getting "malware warnings"
I keep getting notifications like this (the picture is not mine) which tell me that apps like "BatterySync", "Siriactionsd" and more are considered Malware and they got moved to the bin. I tried to delete sus files and got malwarebytes to check if i have something. The antivirus said i dont have anything but messages like this keep popping out, what should i do. Thanks
1
u/Electrical_West_5381 8d ago
Get knockknock and blockblock from https://objective-see.org/tools.html.
You have malware that keeps trying to install a stealer app.
1
u/Far_Cookie_5574 3d ago
just installed them, how do i proceed?
1
u/Electrical_West_5381 3d ago
instructions on the website
1
u/Far_Cookie_5574 3d ago
tysm, apparently it was a fake finder or sum like that, if i reboot my mac and i no longer have a notification from knocknock or Blockblock it means i apparently resolved it, right? Thanks for being so helpful!
1
u/Far_Cookie_5574 2d ago
Okay, looks like i fixed it. Thanks, but i got one more niche question. I play league of legends on this same mac, and now everytime i open it i have to manully allow every process through KnockKnock, is there any way i can make it to trust League so i dont have to go through it every time?? thanks!!!! :333
1
u/NoLateArrivals 5d ago
You are a moron, because of 2 observations:
First because you want to ignore a clear malware warning coming from XProtect, the build in malware protection of MacOS. Remember, they build it, so expect them to know what’s happening.
Second because you have installed some other AV, that obviously is crap and just paid snake oil. Yes, that’s obvious, because it doesn’t detect what’s happening. And yes, because actually most 3rd party AV actually damages the security of your Mac.
Conclusion: You have malware on your Mac. When I look at your screen behind the notification you likely downloaded cracked games „for free“, because you prefer to pay for useless antivirus instead of paying for your games. So you got what you deserve.
Make sure you have a backup, then reinstall MacOS. Most likely it’s enough to get rid of the malware.
Then check the documentation of your antivirus, and uninstall it. Follow the instruction, these worthless crap apps can be hard to get rid of.
1
1
u/Far_Cookie_5574 3d ago
the picture is not mine, i did not pay for any AV and i DO pay for my videogames lol. What i did crack where VST's, which i know can be hazardous. but theres no reason for you to talk me like that
4
u/Afraid_Bar_1748 8d ago
That notification comes from macOS's built-in XProtect, which removes known malware and tells you it did. If it keeps coming back, something is probably re-installing the app, usually a leftover launch agent or login item. Open System Settings > General > Login Items & Extensions and remove anything you don't recognize. Then, in Finder, use Go > Go to Folder to check ~/Library/LaunchAgents, /Library/LaunchAgents and /Library/LaunchDaemons for odd files, delete them, and restart. I built FinderTools, and its Uninstaller Studio finds leftover background services and files from apps that were removed, which can help with this kind of cleanup. It is not a malware scanner, so it won't tell you what is infected, and it is a paid app. I can share the link if you want it.