Corel Update Helper Malware - I can manually run a process from Terminal but I can't find it through Finder

Hi,

I'm facing a lot of problems lately on my mac, no thanks to Corel and their adware/malware. The biggest one is Corel's Update Helper, which every few minutes steals window focus and prevents me from working efficiently on my computer.

I ran a python script to find the focus stealer and this is what the process is: CUH [/Library/Preferences/com.corel.CUH/CUH.app/Contents/MacOS/CUH]


But here's the thing, I've uninstalled Corel and deleted every Corel-related file/folder I could find, including in the hidden Library folder. But somehow CUH keeps popping back up like a pesky fungus.


When I go looking for the process I can't find it, as if even in Library it's hidden somewhere.


I have no problems running it from Terminal, however. So it IS there and I just can't see it to delete it. Corel really is the worst.


I'm so close to factory-resetting my computer and starting over... but I'd lose too much (since if I take a backup I'm sure Corel will find a way in)


Any chance anyone else has this problem? How did you find an un-find-able process and kill it once and for all?

Posted on Feb 2, 2022 1:28 AM

Reply

Similar questions

4 replies

Feb 2, 2022 1:57 AM in response to st448

This Application comes suggested by a Senior Contributor on these ASC Forums >> Find Any File (FAF).


Have not had need to use it personally


It is suggested to Restart in Safe Mode to run the Application. Doing so will pretty sure not allow the Corel Process from running this way.


Then us the File name associated with the process or Application to search for the file. This FAF can look in most every place including Hidden files - so I am told.


Feb 2, 2022 4:57 AM in response to Owl-53

Wow, this worked — using FAF (in Safe Mode) I found a bunch of files Corel hid from me (admin!) in the hidden Library, including in the location I'd searched fruitlessly before!


Deleting every single trace of CUH and Corel (except the ineradicable .aot files...) seems to have worked for now, touch wood.


Thank you so much for your answer! Really hadn't expected to find a solution to a problem that'd been frustrating me forever!

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Corel Update Helper Malware - I can manually run a process from Terminal but I can't find it through Finder

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.