# MacSweeper

> Mediated Wiki article. Canonical URL: https://mediated.wiki/source/MacSweeper
> Markdown URL: https://mediated.wiki/source/MacSweeper.md
> Source: https://en.wikipedia.org/wiki/MacSweeper
> Source revision: 1346727794
> License: Creative Commons Attribution-ShareAlike 4.0 International (https://creativecommons.org/licenses/by-sa/4.0/)

Rogue security software

Not to be confused with [Minesweeper](/source/Minesweeper).

Screenshot from MacSweeper's Software

**MacSweeper** is a [rogue application](/source/Rogue_software) that misleads users by exaggerating reports about [spyware](/source/Spyware), adware or viruses on their computer.[1] It is the first known "rogue" application for the [Mac OS X](/source/Mac_OS_X) operating system. The software was discovered by [F-Secure](/source/F-Secure), a Finland-based [computer security](/source/Computer_security) software company, on January 17, 2008.[2]

As of 2009[\[update\]](https://en.wikipedia.org/w/index.php?title=MacSweeper&action=edit), the official website for the application, macsweeper.com, was shut down, as was the website for KiVVi Software shortly after.

## Problems caused by MacSweeper

MacSweeper could be downloaded through KiVVi software's (the company that makes the "rogue") website, as a [drive-by download](/source/Drive-by_download), or silently downloaded with another application. Once automatically installed, MacSweeper scans the computer and informs the user that many applications on their computer (such as [iCal](/source/ICal) or [Dashboard](/source/Dashboard_(Mac_OS)), safe pre-installed Apple applications) are "fat binaries or trash" and must be slimmed immediately. When the unsuspecting user tries to "Remove Objects", they are told that the trial version downloaded cannot delete the supposed trash. Then the user must provide credit card details to the company for a $39.99 "lifetime subscription serial key".[3]

## Clones

MacSweeper's [graphical user interface](/source/Graphical_user_interface) and behaviour is almost identical to another program that is published by KiVVi Software, Cleanator. Cleanator, however is designed for Windows operating systems. It is also very similar to the [SpySheriff](/source/SpySheriff) and [SpyAxe](https://en.wikipedia.org/w/index.php?title=SpyAxe&action=edit&redlink=1) applications, infamous for [typosquatting](/source/Typosquatting) [Google](/source/Google). A paragraph from within the software that encourages users to purchase the full version is identical to that of SpySheriff.[4]

## Removal

Companies including [McAfee](/source/McAfee), [Symantec](/source/NortonLifeLock) and [Sunbelt Software](/source/Sunbelt_Software) have identified the threat and have posted removal instructions on their websites. [Intego](/source/Intego) [VirusBarrier](/source/VirusBarrier) and [iAntivirus](/source/IAntivirus) are capable of removing it too. [SiteAdvisor](/source/SiteAdvisor), a division of [McAfee](/source/McAfee) has controversially given the site a green rating. However, SiteAdvisor's tests are conducted on PCs, that cannot recognise [.dmg](/source/.dmg), the file format of MacSweeper.

## Media attention

MacSweeper has received much media attention from websites including [CNET](/source/CNET)[5] as well as others,[6] as it is considered to be one of the first instances of malware designed for the Mac OS X operating system.

### MacSweeper's response

After F-Secure alerted Macintosh users about the rogue, MacSweeper responded on F-Secure's website, saying

I would like to explain all the situation, about MacSweeper.

We are really trying to make a good software, and you wont find any viruses/spyware/trojans/malware in MacSweeper (test it your self, if you don't believe me, you can use any type of firewalls, dissemblers, or other tools) .

The problem is that we are using selling partners that forces us to use this marketing type. We would like to leave them, we don't want to completely destroy Good Name of MacSweeper application.

Personally I adore Mac Platform, and it hurts to hear that the program you wrote is said to be some kind of "Rogue application" , i wouldn't like to destroy good manners of software written for it :((

I would like to say sorry for all inconveniences that we could bring to you, but believe MacSweeper is meant to be a useful application. You can ask Questions, and i will try to answer them!

Thank You![7]

## References

1. **[^](#cite_ref-1)** ["Macsweeper - Symantec.com : Summary"](http://www.symantec.com/security_response/writeup.jsp?docid=2008-011613-5206-99&tabid=1). 2008-01-17.{{[cite web](https://en.wikipedia.org/wiki/Template:Cite_web)}}: CS1 maint: deprecated archival service ([link](https://en.wikipedia.org/wiki/Category:CS1_maint:_deprecated_archival_service))

1. **[^](#cite_ref-2)** ["First Rogue Cleaning Tool for Mac"](http://www.f-secure.com/weblog/archives/00001362.html). *F-Secure Weblog : News from the Lab*. 2007-01-15.

1. **[^](#cite_ref-3)** ["Macsweeper - Symantec.com : Technical Details"](https://web.archive.org/web/20091006135200/http://www.symantec.com/security_response/writeup.jsp?docid=2008-011613-5206-99&tabid=2). 2008-01-17. Archived from [the original](http://www.symantec.com/security_response/writeup.jsp?docid=2008-011613-5206-99&tabid=2) on October 6, 2009.

1. **[^](#cite_ref-AAA_4-0)** Vincentas (9 July 2013). ["MacSweeper in SpyWareLoop.com"](http://www.spywareloop.com/infections/m/macsweeper). *Spyware Loop*. Retrieved 28 July 2013.

1. **[^](#cite_ref-5)** Kawamoto, Dawn (2008-01-15). ["Security researcher issues warns against rogue MacSweeper"](http://www.news.com/8301-10784_3-9850942-7.html). *News Blog*. CNET News.

1. **[^](#cite_ref-6)** ["MacSweeper - Google News"](https://news.google.com/news?q=MacSweeper).

1. **[^](#cite_ref-7)** ["MacSweeper Responds"](http://www.f-secure.com/weblog/archives/00001365.html). *F-Secure Weblog : News from the Lab*. 2008-01-16.

[http://blog.intego.com/index.php?s=macsweeper](http://blog.intego.com/index.php?s=macsweeper)

## See also

- [Computer Security](/source/Computer_Security)

---
Adapted from the Wikipedia article [MacSweeper](https://en.wikipedia.org/wiki/MacSweeper) by Wikipedia contributors ([contributor history](https://en.wikipedia.org/wiki/MacSweeper?action=history)). Available under [Creative Commons Attribution-ShareAlike 4.0 International](https://creativecommons.org/licenses/by-sa/4.0/). Changes may have been made.
