Mac Viruses

Spreediscount.com is advertising website, that is used by malefactors to display pop-ups and create redirects in Safari or Chrome browsers on MacOS or iOS. Usually, pop-up from Spreediscount.com imitates Amazon storefront page, with messages like: "You've won a free Iphone X!", "You are lucky today". This scam page offers $1000 Gift Card, iPhone X or Samsung S9 for completing simple survey. Of course, in the end all that user gets is malicious download. Those ads can be result of Mac/iPhone/iPad infection, or they can appear on some infected websites you visit.

Mac Clean Pro is rogue application for Mac OS, promoted as effective system optimization and cleanup utility. Although, it performs a scan and finds some, probably, unnecessary files - it is impossible to verify whether those files will be removed as it demands $49.95 for removal. If user won't buy the licence, Mac Clean Pro will bombard the desktop with alerts and messages in the right-bottom corner, saying your Mac needs optimization or heavily infected. Such statements are false, as our team tested application on brand new MacBook Pro and Mac Clean Pro still detects numerous perfomance issues. Either found problems are non-existent or hugely exaggerated, which puts Mac Clean Pro in the category of potentially unwanted apps (PUA or PUP).

Mac Mechanic is potentially unwanted program for Mac OS, that looks like legitimate application for system optimization and virus removal. It originates from India. After the test on new MacBook Mac Mechanic finds several "high-risk" problems and demands from 19.95 to 49.95 Euros for solving. However, some of the results are false, which puts the program to the category of rogue software. When users try to uninstall Mac Mechanic by moving it to trash it says "application cannot be deleted".

Mac Tonic, similar to Win Tonic, is rogue optimization and security application for Mac OS. Although, it has look and feel of a legitimate program, Mac Tonic was designed to earn money on unnecessary Mac tweaks, pseudo-optimization and other features, that can be achieved by means of operating system options itself or by using free programs. It is installed on computers without users consent and adds itself to Mac startup. After installation Mac Tonic scans your system for viruses and errors, and always finds something even on brand new machines. Then it offers to purchase it to fix the issues. If users ignore it, program starts displaying alerts on the desktop.

Trovi.com by Conduit Ltd is very wide-spread browser search hijacker that infects Google Chrome, Mozilla Firefox, Internet Explorer. It originates from Israel. Trovi.com infiltrates into browsers and replaces default search, homepage to http://www.trovi.com, http:/labs.trovi.com, http://search.trovi.com.

Search.lavradoor.com is precarious search engine, that is installed in Safari, Google Chrome and Mozilla Firefox on Mac computers. Hijackers installs extension called "Lavradoor" in your browsers and this add-on controls and modifies your search and homepage settings. Settings cannot be changed unless extension is removed. Search.lavradoor.com redirects user queries to search.yahoo.com. Programs like this make your browsing history, search queries an open book to advertisers.

Home.searchpulse.net or Search.searchpulse.net is bogus third-party search engine, that installs in Safari, Google Chrome and Mozilla Firefox. Web application Search Pulse and company with the same name originated from Israel. Hijacker replaces homepage, default search engine and new tab settings in your browsers. Searches from Home.searchpulse.net can be redirected to Yahoo, Bing or Google. Malefactors gain advertising revenue from traffic driven to any of this search engine. However, along with redirection, Home.searchpulse.net can collect browser data and search history from users and share it with advertisers.

Chumsearch.com is unwanted search engine for Safari, Google Chrome and Mozilla Firefox browsers running on Mac. It is installed by browser hijacker along with freeware. This webpage is associated with famous Safe Finder malware and search queries, that user types on Chumsearch.com are redirected to search.safefinder.com and then to search.yahoo.com. This website overrides search and homepage settings in browsers, and hijacker module does not allow user to revert this settings.