Threat Explorer

The Threat Explorer is a comprehensive resource consumers can turn to for daily, accurate, up-to-date information on the latest threats, risks and vulnerabilities.



27 April 2016
Infection Length:
Advance Mac Cleaner
Advance Mac Cleaner
Risk Impact:
Systems Affected:


PUA.Advmaccleaner is a potentially unwanted application that displays misleading information about the computer's performance. It then asks the user to pay to fix the issues.

Antivirus Protection Dates

  • Initial Rapid Release version 27 April 2016
  • Latest Rapid Release version 19 March 2018 revision 037
  • Initial Daily Certified version 27 April 2016
  • Latest Daily Certified version 20 March 2018 revision 003
  • Initial Weekly Certified release date 27 April 2016
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Once executed, the application creates the following file:
  • [PATH TO PUA]/amc_msite.pkg

The application will then perform a scan of the computer.

The application displays a list of software and system issues, and displays misleading information about how the issues affect the computer's performance.

If the user chooses to fix the issues, the application opens a web page on the computer which asks the user to pay to get the full version.

The following instructions pertain to all current and recent Symantec antivirus products for Macintosh.
  1. Update the virus definitions.
  2. Run a full system scan and repair or delete all the files detected.
For specific details on each of these steps, read the following instructions.

1. To update the virus definitions
To obtain the most recent virus definitions run LiveUpdate: These virus definitions are posted to the LiveUpdate servers regularly. To determine whether definitions for this threat are available by LiveUpdate, refer to the Virus Definitions (LiveUpdate) .

2. To scan for and delete the infected files
  • Start your Norton AntiVirus or Symantec Endpoint Protection for Macintosh program and make sure that it is configured to scan all files.
  • Run a full system scan.
  • If any files are detected, click Repair (if available) or Delete.