BugsFighter

Facebook.com (a.k.a Facebook App or just Facebook) is advertising application for Mac, that opens Facebook.com website on MacOS startup and adds itself to the Dock. At a first sight, it seems harmless, however with this application malefactors can get access to browser data and settings, and use it to display targeted advertising, pop-ups in Safari or Google Chrome. We recommend you to remove Facebook.com virus application from Mac and remove residual data.

Olpair.com is domain, that belongs to OpenCloud.co - legitimate online cloud hosting service. According to our research, promblems with ads, pop-ups and redirects related to Olpair.com come from Kodi Player. Kodi Player is multi-platform media player with access to huge database of movies, music, pictures and TV and radio streaming services. This player uses OpenCloud.co resources and in exchange for free 4 hours streaming redirects users browsers to Olpair.com (or OpenCloud.co/pair). In pursuit of profit, and wanting to "squeeze all the juice" on ads revenue OpenCloud.co generates numerous ads, pop-ups and redirects during one session. The quality of these advertisements also poor and sometimes is on the verge of outright scam and fraud.

Safesearch.trustnav.com or Trustnav Safesearch is dangerous browser hijacker, that mostly targets Google Chrome, but can also be installed in Mozilla Firefox and Internet Explorer. It comes in a form of extension for browsers called Trustnav Safesearch and it takes over browser settings, such as default search engine or homepage. Developers promote it as utility to secure your browser, that will show if certain site is dangerous, safe or unknown. In fact, its purpose is to make user use their search and earn on advertising. User's search queries are redirected to safesearch.trustnav.com and then to g.results.supply, homepage changes to search.trustnav.com. Those settings cannot be modified until complete removal of maliciois extension.

Malware Crusher is deceptive security application for Windows or MacOS. It sneaks into users computers without asking and performs scan of the system. If user ignores the program signals, Malware Crusher starts generating warnings and alerts, accompanying this with voice comments. Such intrusive and unfriendly marketing methods along with low-quality results of malware detection and protection puts Malware Crusher in the category of potentially unwanted applications (PUA). This badware also puts obstacles when users try to uninstall it.

CleanMyMac by Kromtech is one of the most wide-spread and controversial optimisation and security applications for Mac OS. Currently it is considered legitimate and practicable program for performing Mac OS maintenance. However, due to questionable methods of distribution and obsessive behaviour when installed on Mac machines, it is determined by some reputable antivirus products as potentially unwanted application (PUA) or rogue program. For example, BitDefender Antivirus for Mac and Malwarebytes Anti-Malware for Mac detect and offer to remove CleanMyMac on our test MacBook Pro. After installing CleanMyMac starts showing alerts, reminders and warnings, claiming, that your Mac is "severely infected", "has serious performance issues", or "needs deep cleanup". Annoying windows force some users to buy this application. The scale of the problems is exaggerated, CleanMyMac is acting as "scareware".

Chromium is browser similar to Google Chrome. It is built on open source platform called Chromium. Many adware developers use it to develop Chrome-like browsers and install them using "bundle" along with free programs. Chromium sets itself as default browser for internet surfing and replaces Google Chrome icons on the desktop and pinned icons on taskbar. Users sometimes do not recognize the change.

Snap Media Player is advertising application for Mac developed by New Media Holdings. The player itself is not dangerous, but useless as it doesn't provide functionality other than MacOS preinstalled apps. However, its installer is based on the InstallCore advertising platform. During installation, you will be offered to download different third-party programs. For example, Avira, Facebook (fake), Booking (fake), CleanMyMac, and others. Some of these programs are classified as potentially unwanted applications (PUA) because they were not developed by companies, that own brands (Facebook app, Booking app).

"YOUR COMPUTER HAS BEEN BLOCKED" is fake pop-ups alert or message, that may appear in Google Chrome, Mozilla Firefox, Edge or Internet Explorer. It is categorized as Tech support scam, as in many cases it compels or provokes users to dial some "toll free" number. Virus can imitate virus infection or Windows error directly in browser. On the other end of the line you will hear an experienced Indian fraudster, who will introduce himeself as "technical support specialist", who will encourage you to pay cetain fee to fix problems with your computer, that did not ever existed. "YOUR COMPUTER HAS BEEN BLOCKED" pop-up has many variations of design, texts and reasons of its appearance can also be different. In some cases, such alerts may offer some rubbish "windows optimization" software for download.