Threat Explorer

The Threat Explorer is a comprehensive resource consumers can turn to for daily, accurate, up-to-date information on the latest threats, risks and vulnerabilities.



03 June 2016
Infection Length:
Just Cloud
JDI Backup Ltd
Risk Impact:
Systems Affected:


OSX.JustCloud is a potentially unwanted application for Mac OS X that does not revert system changes when it's uninstalled.

Antivirus Protection Dates

  • Initial Rapid Release version 03 June 2016
  • Latest Rapid Release version 22 September 2016 revision 024
  • Initial Daily Certified version 03 June 2016
  • Latest Daily Certified version 22 September 2016 revision 025
  • Initial Weekly Certified release date 08 June 2016
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
When the program is installed, it creates the following folders:
  • /Applications/
  • /Applications/
  • /Applications/

The program then creates the following files:
  • /Applications/
  • /Applications/
  • ~/Library/LaunchAgents/com.jdibackup.JustCloud.notify.plist
  • ~/Library/LaunchAgents/com.jdibackup.JustCloud.autostart.plist
  • ~/Library/LaunchAgents/com.jdibackup.JustCloud.backupstart.plist

The program is a cloud storage platform that lets users back up their files. When it's uninstalled, it does not remove ~/Library/LaunchAgents/com.jdibackup.JustCloud.autostart.plist, which is responsible for loading the application when the user logs into their computer.
The following instructions pertain to all current and recent Symantec antivirus products for Macintosh.
  1. Update the virus definitions.
  2. Run a full system scan and repair or delete all the files detected.
For specific details on each of these steps, read the following instructions.

1. To update the virus definitions
To obtain the most recent virus definitions run LiveUpdate: These virus definitions are posted to the LiveUpdate servers regularly. To determine whether definitions for this threat are available by LiveUpdate, refer to the Virus Definitions (LiveUpdate) .

2. To scan for and delete the infected files
  • Start your Norton AntiVirus or Symantec Endpoint Protection for Macintosh program and make sure that it is configured to scan all files.
  • Run a full system scan.
  • If any files are detected, click Repair (if available) or Delete.