Adware.Shlayer

Short bio

Adware.Shlayer is Malwarebytes’ detection name for a family of adware bundlers that target macOS systems.

Symptoms

Adware.Shlayer, like most adware, is software that displays unwanted advertising on your computer device.

Type and source of infection

Adware.Shlayer use shell scripts to install their adware payload. And they do this only once per installer, probably to hinder analysis. Even when run on a different machine an installer that has already been run will not drop the payload again.
Adware.Shlayer are typically distributed in the form of fake Adobe Flash Player installers.

Protection

Malwarebytes for Mac detects and removes Adware.Shlayer.

Remediation

Malwarebytes for Mac will detect and remove the components of this malware.

1. Download and install the latest version of Malwarebytes for Mac.
2. Click the “Scan Now” button to perform a system scan.
3. If threats are detected during the scan, a count of detected threats is displayed. More detailed threat information is displayed after the scan completes.
4. Click “Confirm” to move the detected threats to Quarantaine.
5. If a restart is required to complete remediation of threats detected during a scan, you will be notified. When a restart is required, please remember to save all work before clicking “Restart”.