Unknown URL in Screen Time

Question

Level 1

4 points

Unknown URL in Screen Time

I have recently discovered a malware in my device after looking at my screen time in which an unknown program known as thaudray.com is running at all times even if my Mac is off. This is also paired with the use of rapid-cloud.co which I do not use. After some research I have discovered it is a malware that is monitoring and sharing my screen to a hacker. I have tried to remove it using CleanMyMac x but it says there is no malware found. Is there any way to remove it as I have currently put a app limit on the programs in hopes that it would slow it down while I ask for help

[Edited by Moderator]

MacBook Air

Posted on Jan 5, 2023 06:32 PM

Reply

Answer 1

BDAqua

Level 10

250,091 points

Jan 6, 2023 07:38 AM in response to ainzOoalGown

OK, let's try this route...

We need to see what all is running, a report from this will not display any personal info...

EtreCheck is a FREE simple little diagnostic tool to display the important details of your system configuration and allow you to copy that information to the Clipboard. It is meant to be used with Apple Support Communities to help people help you with your Mac. It will not display any personal info.

https://www.etrecheck.com/

Pastebin is a good place to paste the whole report if you capture the URL while there…

https://pastebin.com/

Workable but harder for me to work with...the Note tool on the bottom of this editor's toolbar, as shown in the image, to copy and paste the output from EtreCheck. In a Reply before you click post, look for this to add longer texts...

Reply

Answer 2

ainzOoalGown Author

Level 1

4 points

Jan 6, 2023 07:22 AM in response to BDAqua

I have tried both cleanmymac X and MalwareBytes but I'm afraid it comes up without any found malware or viruses. Which is odd as I can see in my screen time that someone is using a screens sharer and the malware bot to see my screen in case I use any sensitive information.

Reply

Answer 3

ainzOoalGown Author

Level 1

4 points

Jan 6, 2023 12:48 PM in response to BDAqua

I have checked again and it seems that they have stopped running the unknown programs on my Mac, however the data showing that they were monitoring previously 24/7 has disappeared and it now only shows them being active for 10/11 seconds, I had a previous screenshot showing that it was not the case on my original post but a moderator has apparently deleted it.

Here is the link to the paste

https://pastebin.com/TG7TMNif

Reply

Answer 4

BDAqua

Level 10

250,091 points

Jan 6, 2023 07:21 PM in response to ainzOoalGown

Or ...the Note tool on the bottom of this editor's toolbar, as shown in the image, to copy and paste the output from EtreCheck. In a Reply before you click post, look for this to add longer texts...

Reply

Answer 5

BDAqua

Level 10

250,091 points

Jan 5, 2023 07:13 PM in response to ainzOoalGown

Yes indeed...

Remove Thaudray.com from Mac

To remove Thaudray.com from Mac, follow these steps:

Remove Thaudray.com Ads (Virus Removal Guide) (malwaretips.com)

Reply

Answer 6

ainzOoalGown Author

Level 1

4 points

Jan 6, 2023 06:23 AM in response to BDAqua

I have tried to do the following instructions in the link you have sent me but when I used the antivirus and used its scan feature it came up with no threats.

Reply