Malware developed for the Apple system is contaminating Macbooks worldwide. The plague, which was discovered by a user of the Reddit forum, is called "mshelper"and consumes a large amount of computer processing, compromising machine performance and battery life. The computer is slowed as a result of the mining of Monero-type cryptocurrencies, which occurs without user consent.
Fortunately, it is very easy to find out if your Mac is contaminated and just delete some files to get rid of the virus. Find out, in the following tutorial, how to check and remove the "mshelper"from macOS.
How to block websites that use your PC to mine bitcoin or monero
Malware for macOS slows down your computer; learn how to check and remove Photo: Divulgao / Apple
How to tell if your Mac is infected
Step 1. First, I need to access the "Activity Monitor". So, press "command + space bar" to open the Spotlight search and search for the application in the search bar;
Open the macOs Activity Monitor Photo: Reproduo / Helito Bijora
Step 2. Now, in the "CPU" tab, click on the "% CPU" column to sort the processes in descending order. Check if there is a process called "mshelper" that consumes a lot of processing from your PC;
Order the processes using CPU Photo: Reproduo / Helito Bijora
Step 3. You can also use the search bar in the upper right corner of the window to search for the process. If you find one with this name, it means that your Mac has been contaminated.
Search by malware name Photo: Reproduo / Helito Bijora
Ending the malware process by the activity monitor, unfortunately, does not solve the problem. This will only make it run again a few seconds later. To get rid of the cryptocurrency miner, it is necessary to delete two files. Check out how to perform the procedure in the following step by step.
Step 1. Press "Command + Shift + G" and, in the next window, type "/ Library / LaunchDaemons" (without quotes) and press "Go";
Open the folder indicated Photo: Reproduo / Helito Bijora
Step 2. Locate and delete the file called "com.pplauncher.plist";
Delete the malware file Photo: Reproduo / Helito Bijora
Step 3. Again press "Command + Shift + G" and now type "/ Library / Application Support" (without quotes) and click "Go";
Open the folder indicated Photo: Reproduo / Helito Bijora
Step 4. Locate and delete the folder called "pplauncher".
Delete the malware folder Foto: Reproduo / Helito Bijora
Step 5. Return to the "Activity Monitor" and finish the "mshelper" process. To do this, just select it and click on the "X" button in the upper left corner of the window.
End the malware process Photo: Reproduo / Helito Bijora
Ready. That way, your computer will be free of the "mshelper" malware. However, it is important to monitor your Mac's processes in the coming days to make sure that the malware has not returned.