It’s been a long time since Apple could claim its computers were really virus-free. Even mighty Mac owners have to keep an eye out for the latest vulnerabilities and malware , just like everyone else, and there’s some new malicious Mac software making the rounds that you should know about.
Spotted by Reddit user BackwardsBinary, “mshelper” is malware that’s designed to hog your Mac’s resources, causing your battery life to plummet (and your laptop to likely get a little warmer and louder). It’s unclear where this malicious code came from or what it’s doing, but one popular theory is that it’s cryptojacking software designed to mine cryptocurrency on your computer without your knowledge. Yuck.
Cryptojacking can push your processor to overwork itself, potentially causing permanent damage to your computer or mobile device. So, if that’s what we’re dealing with, you’ll want to clean up your Mac as soon as possible. Thankfully, it’s pretty easy to identify and eradicate mshelper.
The first thing you’ll want to do is confirm whether mshelper is installed on your Mac. To find out, open Activity Monitor and click on the CPU tab. You should see a list of all the apps and software running on your computer. Make sure they’re organized by the amount of resources they’re using (% CPU). If it’s present, mshelper should show up at the top of the list. If it doesn’t show up, you can also reorder the list by name alphabetically to double-check that it’s really not there.
If you do find the malware on your Mac, you’ll have to go in and delete a few files on your system to remove it. Open Macintosh HD (if you can’t find it, just do a Spotlight search). Then, head to Library, click on LaunchDaemons, find the file labeled “com.pplauncher.plist,” and delete it. Next, head back to Library, click on Application Support, and delete the file labeled “pplauncher.” Finally, restart your Mac.
With that out of the way, you should be safe from the latest Mac malware. Just be careful not to download any suspicious files in the future so you can avoid whatever terrible software comes next.