Mac Mouse Fix Malware? [other]

[ghost]

Edit by Noah: The issue has since been resolved! See this comment for an explanation.

---

Hey Noah,

I'm writing to you because I have a question about your app.
I really like your app and use it quite often!

Let me get to my problem. Yesterday, I downloaded your app again. However, macOS says that your app contains malware. I was wondering why. I mean you published the source code, why would you put malware in the code? Do you have any idea why macOS says your app contains or is malware?

An answer from you would be greatly appreciated!

Kind regards,
Tobias

[nbeirao]

Hi,

I'm having the same problem on Big Sur 11.3. None of the available versions work.

[italomlp]

I was hitting this problem today. I managed to fix it by following the instructions on this link to re-sign the app.

[ghost]

I was hitting this problem today. I managed to fix it by following the instructions on this link to re-sign the app.

But is it really because the app is not signed? Maybe it uses a bad or malicious API or something.

[italomlp]

Well, the code is publicly available to we check it by our hand. I'm using Mac Mouse Fix for about 3 months, and I never had issues with security.

[ghost]

I was hitting this problem today. I managed to fix it by following the instructions on this link to re-sign the app.

I tried the upx variant but it says Unpacked 0 files and the program won't open. Which way did work for you?

[italomlp]

I tried the upx variant but it says Unpacked 0 files and the program won't open. Which way did work for you?

Try the codesign method from the AlinNereid response

[ghost]

I get: /Applications/Mac Mouse Fix.app: replacing existing signature but it sill won't open.

[ghost]

Now it worked. I already moved it to the Applications folder before I ran the command. I had to run the command first, and then move it to the applications folder. Thanks!

[noah-nuebling]

Hey guys thanks for reaching out about this,

The certificate I used to sign the app until now seems to indeed have been revoked.
I have very strong reasons to believe that that's what has been causing these error messages, and not that Mac Mouse Fix is malicious in any way.

I'm not sure why the certificate has been revoked. Maybe I did that accidentally, but I tried to replicate it and I couldn't manage to delete old certificates at all in Xcode. So that would be quite impressive if I did it accidentally without any memory of it.
Or maybe it was revoked by Apple because they think that Mac Mouse Fix is doing something wrong. I wouldn't know what that would be though. Mac Mouse Fix's source code is freely available so you'd think someone else would have noticed at this point.
Maybe they're afraid that Mac Mouse Fix is infringing on their Magic Mouse sales because it's so awesome, who knows ;)

I'll publish new versions of the stable Mac Mouse Fix 1 release as well as the Mac Mouse Fix 2 Beta today which I'll sign with a new certificate. Hopefully that will make the app work again for everybody.

If that certificate is revoked again, we can see further.

Until then, re-signing the app yourself like @italomlp suggested should be a good solution. Thanks @italomlp!

[noah-nuebling]

New versions of the app which are signed with a new certificate are now available!

• 1.0.4
• 2.0.0 Beta 8

Edit: The certificate for these versions has also been revoked. But the latest version should work.

[noah-nuebling]

Hey @mactoby I edited your original post a little, because I plan on linking to it from the website as an explanation for what's going on at the moment.

I hope you don't mind and if you have any ideas for improvement let me know.

[Eitot]

1.0.4 still does not open for me.

~ % spctl --assess ~/Applications/Mac\ Mouse\ Fix.app  
/Users/[user]/Applications/Mac Mouse Fix.app: rejected

[mjenkins9605]

Running into same issue as Eitot is.

[Eitot]

The app presumably isn’t notarised:

~ % codesign --verify --test-requirement "=notarized" --verbose ~/Applications/Mac\ Mouse\ Fix.app
/Users/[user]/Applications/Mac Mouse Fix.app: valid on disk
/Users/[user]/Applications/Mac Mouse Fix.app: satisfies its Designated Requirement
test-requirement: code failed to satisfy specified code requirement(s)

[jansedlon]

Or you can guys just enable it in System Preferences -> Security & Privacy?

[noah-nuebling]

@Eitot you're correct. The app isn't notarised because I don't have a developer account.

Can you guys open the app when you right-click the app and then choose 'Open'?

[Eitot]

I can override it, but I thought that it worked without an override before. I must have been mistaken then, in that case it should be fine. Thanks for addressing the issue so quickly!

[noah-nuebling]

Cool, glad that's cleared up! :)

[airjohnpro]

Thanks for being on top of this so quickly!

[kode54]

Now it refuses to stay enabled.

[SarahReyes]

I am still seeing the warning today, after downloading the software for the first time. I wasn't able to open it and found this thread. I attached an image to show the warning I receive.

I did try right clicking the file, like the dev mentioned in this thread. When I right clicked and then selected 'open', I still saw the warning, however it gave me the option now to select 'open', which is not an option if you just double click to open the file. When I select 'open' it did let me open the file.
Just a heads up since this thread is pretty fresh, thought I'd let you know. Thanks!

[sergpryimachuk]

Have the same problem even with the newest version of the app.

[Of1mjkee]

xattr -d com.apple.quarantine Mac\ Mouse\ Fix.app

[ghost]

Today I got this message on startup:

Deleted the program and downloaded it from the website, now it works again. I had it installed through Homebrew: https://formulae.brew.sh/cask/mouse-fix#default

The old file comes back clean on VirusTotal, just like the new one.