McAfee Security Deleting BetterTouchTool

Our corporate McAfee started eating BTT this morning. I am seeing the following error in the logs:

Jun 1 09:00:52 XXXXXXXXXXXX McAfee: [231]: Info: LogTime: 2020-Jun-01 09:00:52 AVAS: PID: 93141 : Selection criteria 10 matched for: - /Users/XXXXXXXX/Downloads/BetterTouchTool.app/Contents/Frameworks/MIKMIDI.framework/Versions/A/MIKMIDI
Jun 1 09:00:52 XXXXXXXXXXXX McAfee: [231]: Alert: LogTime: 2020-Jun-01 09:00:52 AVAS: PID: 93141 : curl_easy_perform() failed: SSL peer certificate or SSH remote key was not OK, CurlErrorNo: 60,HttpErrCode: 0

Any idea what call out is being made and if there is a way to stop it before launch?

Jeff

sounds like a false positive for the midi framework used in BTT. I’ll report it to McAfee. The certificate thing seems unrelated, I worked on my update server earlier today.

1 Like

Do you know which BTT version you were running? (I need to submit a binary sample to McAfee)

I re-downloaded it this morning to try and install again so it would be whatever the latest is.

Jeff

1 Like

Appears to be working again.