====== MacOS Malware removal ======

===== Apps you certainly shouldn't have on your computer =====
  * Dr. Antivirus
  * MacKeeper
  * TotalAV

===== Re-install Mac OS X =====
Save all files in `/Users` to an external hard disk. Do not copy ''/Library'' as it can contain malicious software. Press Command+R while booting.

([[https://support.apple.com/en-gb/HT204904|source]])

===== Manually remove malware =====
Don't do this. Re-install Mac OS X instead.

==== Kill processes ====
  - Open Activity Monitor (type its name in the Launchpad).
  - Locate the problematic app in the Processes.
  - Use [x] button to quit the process

==== Login items ====
  - Apple menu → System Preferences
  - Choose Users & Groups section
  - Make sure your username is highlighted
  - Open //Login Items// tab

Now use the – sign to disable all suspicious apps that you'll find. Restart your Mac for the changes to take place.

==== Launch agents/daemons ====
  - Open Finder
  - Choose Go → Go to Folder
    - daemons: ''/Library/LaunchDaemons''
    - agents: ''/Library/LaunchAgents'' and ''~/Library/LaunchAgents''

===== Further information =====
  * https://www.macworld.co.uk/how-to/mac-software/clean-install-macos-3637409/
  * https://www.macobserver.com/tips/quick-tip/macos-check-launchagents-malicious-software/
  * https://support.home.sophos.com/hc/en-us/articles/360000555626-Manual-malware-cleanup-on-a-Mac-computer
  * https://macpaw.com/how-to/remove-malware-from-mac