PUP.MacOS.ExtInstallTool
Threat Scorecard
EnigmaSoft Threat Scorecard
EnigmaSoft Threat Scorecards are assessment reports for different malware threats which have been collected and analyzed by our research team. EnigmaSoft Threat Scorecards evaluate and rank threats using several metrics including real-world and potential risk factors, trends, frequency, prevalence, and persistence. EnigmaSoft Threat Scorecards are updated regularly based on our research data and metrics and are useful for a wide range of computer users, from end users seeking solutions to remove malware from their systems to security experts analyzing threats.
EnigmaSoft Threat Scorecards display a variety of useful information, including:
Ranking: The ranking of a particular threat in EnigmaSoft’s Threat Database.
Severity Level: The determined severity level of an object, represented numerically, based on our risk modeling process and research, as explained in our Threat Assessment Criteria.
Infected Computers: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
See also Threat Assessment Criteria.
| Threat Level: | 10 % (Normal) |
| Infected Computers: | 169 |
| First Seen: | January 4, 2021 |
| Last Seen: | August 30, 2023 |
ExtInstallTool is a Potentially Unwanted Application detection for macOS computers. As a PUA-type of threat, ExtInstallTool enters devices without the user’s notice and manifests itself as an unknown app, browser extension, or another tool, for which the user cannot remember having installed willingly. That happens because, typically, PUAs come as drive-by downloads included in the installers of other programs that users install deliberately. Yet, macOS computers can also get infected with ExtInstallTool through fake Flash Player updates when users click on random pop-ups, which claim that Flash Player is out-of-date and requires updating. Another method is particularly popular for distributing Mac viruses - fake messages which claim the Mac device has unspecified cybersecurity issues and prompts the user to download some rogue anti-malware application.
In general, PUAs do not count as hazardous malware threats; yet, it does not mean they can do no harm. Their activities and processes can cause PC performance issues while generating and displaying numerous ads and banners. These unsolicited pop-ups may show up on top of any other content, also reducing the quality of the user’s browsing experience. Also, any advertising content displayed by ExtInstallTool can contain links and redirects to potentially malicious websites of services, which spread destructive malware threats like Trojans and Ransomware. ExtInstallTool can also be a risk for the user’s online identity and finances: it may also have data-collecting features that monitor the browsing history, various system details, or even personal information.
It is recommended to use a certified anti-malware application for Mac to detect and completely remove ExtInstallTool from your system.
