Macosx.flashPlayer.trojan

[bobbobbob]

Hi,

can anybody explain why MalwareBytes would be unable to have detected these 4 items, returning a 'no threats found'' instead?

[treed]

For more information about this kind of thing, see:

https://support.malwarebytes.com/customer/en/portal/articles/2218654-why-does-another-anti-virus-app-find-things-malwarebytes-anti-malware-for-mac-misses-?b_id=9511

Can I ask what app you're scanning with in that screenshot? It looks nearly identical to some known scam apps rather than a legitimate anti-virus program to me.

[bobbobbob]

Hi. Sorry for delay.

Antivirus program is "Thor" (unpaid ver.)

(shown in lower window of screenshot)

[treed]

Ahh, that is a wonderful example of the failure of the Mac App Store. Antivirus Thor is one of the top paid products in the store, yet it is a scam. It does not actually detect malware, and in fact, in our testing, it detected three supposed Windows viruses on a clean Mac system, and it did not detect any of the malware or adware that we loaded the system with in later testing.

Malwarebytes Anti-Malware for Mac should detect that as a PUP. If it's not detecting the latest version of Antivirus Thor, we'll need to look into that and find out what they have done to evade detection.

[Popeye]

I looked this product up in the Apple Store. Why are the customer ratings so high with this product?

 

[treed]

Some of those are fake, and others are from users who thought it helped (because it will delete all browser extensions regardless of whether they are good or bad). After all, most people don't actually have a repository of malware and adware to test the app's claims against.