This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How do you manually clean Bundlore from iMac?

Recently Sophos Anti-Virus for Mac detected the threat Bundlore on my iMac. Automatic cleanup was not successful and now a manual cleanup is required. The location of the threat according to the Quarantine Manager is: /Volumes/installer/installer.app/Contents/MacOS/installer

The Cleanup button is grayed out and only options left are either Authorize or Clear From List. I tried locating this path in the Finder using the command "Go To Folder" without any luck.

Can someone please tell me how to manually remove this? My daughter frequently plays Minecraft on this computer and I'm guessing that's where this adware came from.

Thanks in advance for the help!

-Al

iMac 2.7 GHz Intel Core i5

OS X 10.9.5. 



This thread was automatically locked due to age.
  • Hi ,

    I have this issue also and would be interested in a solution.

    Many thanks,

    David

  • I have the same issue, although my file is /Volumes/Installer/Installer.app/Contents/MacOS/monetizer.

    It's not in quarantine - came across as PUA. I asked Sophos to clean this up anyways.  It just hangs on the "Removing the potentially unwanted applications.

    Tried to go into that directory and delete the file myself, but get rejected, and told "read only file system."  Tried chmod and rm -rf with same result.  If it's a read only filesystem, how did it get there in the first place??

    Macbook Air 1.4 GHz Intel Core i5

     

    OS X 10.11.6

  • Ok feeling a bit foolish here.  Turns out I had "Installer" as a mounted volume. Once I unmounted, the whole file chain disappeared.  Looks like nothing ever got installed.  Running a full scan.

  • Hi Jim,

    I am having the same issue, with a slightly different file location (/Volumes/Install BitLord/Install BitLord.app/Contents/MacOS/monetizer). Would you mind explaining how you manually unmounted "Installer"?

    Thanks so much!