Mac Viruses

Search.yourmapsnow.com or Your Maps Now is misleading browser hijacker, that replaces default search engine and homepage in Safari, Google Chrome or Mozilla Firefox on Windows or Mac. Often, it is accompanied with browser extension or application called "Your Maps Now". This add-on sneaks in browsers and takes control over main browser settings. Of course, it installs without user permission using the deceptive tactic. After installation, user search queries are redirected to query.yourmapsnow.com and then to search.yahoo.com. This allows the hijacker to collect private browser data and share it with advertising companies. The homepage also changes to Search.yourmapsnow.com and, besides search, provides quick links to main map resources such as Google Maps and Bing Maps. Page looks similar to normal search engine page, and some users don't even see the difference until they start searching for something.

PDF Converter Hub (a.k.a. PDF Converter Hub New Tab, Search.hpdfconverterhub.com) is potentially unwanted browser extension for Google Chrome, Mozilla Firefox and Safari. Malware originates from Cyprus and was developed by Eightpoint Technologies Ltd. (some sources indicate SpringTech Ltd.) It modifies search and homepage settings in these browsers and controls them not allowing users to make changes. Hijacker sets search.hpdfconverterhub.com as default search engine, new tab and home page. However, search queries typed in the search box are redirected to search.yahoo.com, so there can be some kind of affiliation or partnership between large search provider and developer of the add-on. PDF Converter Hub also constantly offers users to subscribe to its notifications, which will lead to getting unwanted advertising as desktop notifications. Main page itself consists of toolbar, search box, informational links and shortcuts to popular shopping sites and social networks. PDF Converter Hub is promoted as convenient tool for converting various file formats to PDF and vice versa.

MacAppExtensions (Adware.MAC.Linkury.C) is malware related to Search.tapufind.com hijacker, that we described in some of our earlier articles. It works in MacOS and targets Safari, Google Chrome and Mozilla Firefox browsers. The main symptom is, that your browsers search and homepage settings change to search.tapufind.com, and this setting cannot be modified until MacAppExtensions is removed. However, this virus not only hijacks the browser, but also gathers private information about its user (collects data related to browsing activity: geolocations, entered search queries, URLs of visited websites, IP addresses etc.).

Robotcaptcha.info is adverse domain, that may show unwanted pop-ups and ads in Google Chrome, Mozilla Firefox, Internet Explorer Safari or Edge browsers on Windows, Mac or Android operating systems. Landing pages from Robotcaptcha.info appear from nowhere and offer users to subscribe to notifications. This is feature in modern browsers, that help users get actual news in faster and convenient way. However, on the other side of this, when website is of advertising nature, users start receiving ads, pop-ups, tech support scam messages on their desktops. This is an element of social engineering, and clicking "Allow" button, actually, subscribes users to notifications. At the same time, Robotcaptcha.info initiates standard dialog box window with option to allow or block notifications from site you are visiting. If person clicks on the "Allow" button, users will start receiving unwanted pop-up ads from Robotcaptcha.info directly on the desktop even when browser is closed.

If you receive Deceptive Website Warning pop-up, that looks like on the first picture below, in Safari, when visiting well-known, reputable websites, searching in Google, Yahoo or Bing, it means your browser or computer is infected. On this page you will learn how to deal with this problem. If you are sure, that you were able to visit websites, where you now see "Deceptive Website Warning" pop-up, earlier, or you get it on websites like Google.com, Facebook.com, Amazon.com and others, go on reading this article. Here we give detailed tutorial to remove virus, that causes scam messages in Safari in Mac, including "Deceptive Website Warning".

MyShopcoupon is potentially unwanted browser add-on, that displays fake system alerts, tech support scam ads and pop-ups in Safari, Google Chrome or Mozilla Firefox on Mac. It mainly offers CleanMyMac for download, to solve nonexistent problems. Advertisements delivered by this adware are usually signed like: Powered by MyShopcoupon, Brought to you by MyShopcoupon, You’ve received a premium offer from MyShopcoupon or just Ads by MyShopcoupon. MyShopcoupon can also display price comparison ads, coupons, discount offers on shopping websites like eBay, Amazon, BestBuy and others.

Weknow.start.me is unsafe search engine, related to Weknow company, that is notorious for its Weknow.ac hijacker. Hijacker can modify search engine and homepage settings in Safari, Google Chrome and Mozilla Firefox on Mac. This one is built on another platform (start.me) and redirects user's queries to find.coinup.org. After some investigation, it turns out, that coinup.org is a platform, that allows search providers earn money on using user's computer power by mining cryptocurrency. So, after Weknow.start.me installs in browsers, it may use special JavaScripts or install certain browser extensions (like CoinUp add-on) to mine crypto-coins.

BeeAware is adware or potentially unwanted application for Mac, that displays fake pop-ups and system messages, encouraging users to download malware disguised as necessary updates. Dialog boxes look like system alerts and, sometimes, make users reflexively click on "OK" button. BeeAware often can be seen in Activity Monitor, eating up CPU and memory resources. Developers advertise BeeAware as utility, that "can convert over 30 file formats into PDF". In exchange it generates ads, pop-ups, banners in browsers and messages, alerts and dialog boxes in MacOS. Follow instructions in this article to remove BeeAware adware and get rid of alerts, pop-ups and ads.