Do I have a virus in my email?
Do I have a virus in my email?
A mail message I forwarded to a friend with a Mac contained a warning that stated: "is a web application which is attached to a mail message. Are you sure you want to open it? ATT53556133.HTM" She didn't open it. The message I forwarded did not have any attachments to it except my logo.
I also sent a regular mail message to another friend (Windows user) where the body of the message was delivered blank. When I checked in my send box, the message I sent did, indeed, have words written in the body of the message so I know I didn't make the mistake of sending a blank email.
Recently, I sent a mail to someone using Hotmail. The message came back to me as undeliverable because Hotmail was showing 'name mining behavior'.
Putting these three things together in the space of two days, makes me wonder if I have a virus. If so, what do I do about it?
Thanks to anyone who can help!
If you compose a message as Rich Text, some receiving email applications will show that text as an HTML attachment rather than showing the text as part of the body. This will always happen if the receiving email app can't handle HTML messages. For best compatibility, set the Mail Composing preferences to compose messages as Plain Text.
And no, you almost certainly don't have a virus. There have to date been no confirmed reports of a true virus or worm infecting Mac OS X other than the Word Macro virus that could infect early versions of Microsoft Word for Mac.
Regards.
Similar Messages
-
I have a virus within my email how do I fix it
I have a virus within my email on my iPad how can I fix this.
There is no anti-virus for the iPad because, as of now, there is no known virus. It's not the machine itself that's infected but, in this case, the webmail/mailbox that's infected. Very possibly the mail server the ISP uses.
iOS is its own separate operating system. Stuff that runs on PC's won't run on Macs and won't run on OS....in fact none of them will run on each other. You can't put a mac program on a PC and you can't run an App on a Mac.
However, while they can't get viruses, malware and browser hijacks do seem to happen. get a cookie from a 'naughty' place on your device and you'll be served ads that come from that 'naughty' place. they are also just as vulnerable to sites being hacked as any browser (such as a recent example of people that'd use google but instead of getting results for....Gardening for example, all the results would be directed towards virus and malware sites. It's not the iPad that was hacked, it's the google page.)
In the case cited above there is likely nothing wrong in the iPad itself, but a mail sitting on a mail server was able to make things happen.
Likely as more and more users catch onto popular virus techniques (like that pesky e-mail lotto promising me millions or that poor Nigerian Prince that's STILL trying to give me his money), the miscreants keep coming up with other ways to spread their junk. And that other way very well could be unopened mail or unopened attachments maliciously 'zombieing' a mailbox.
For the OP, delete the mail from your device, choose to delete it from the server (depends on if you have your mail set up to delete from server when deleted from device or if it just sits out there until you delete it with your computer) and you should be okay.
This is kinda of when using pure webmail can be a good thing. For example I use Yahoo. I dont' pay for the pop 3 version so I dont' download anything. My mail stays out on yahoo's servers and there's nothing on my computer. I do, apparently, download it onto the iPad, but most of the bad things stay in my spam folder that don't download. My PC is a bit safer because those attachments are never downloaded. If I wanted to do the same with my iPad, then I'd not use the mail app, I'd only access Yahoo via the web and I'd never download anything.
So, you really can't (as of now and as of anyone knowing) get a virus ON your iPad. But things accessed by it are just as vulnerable as anything else. -
HT1338 what should I do if I think I may have a virus from an email I received?
I opened an email from my sister which had a link on it. I click on the link which brought me to a site. My sister later sent me an email that her computer had a virus and that the email was NOT from her. What can I do to see if I have the virus? I do not have an anti-virus installed on my Mac. Thank You for any help you can give me.
You don't have the virus. If you supplied a password to the site which you clicked the link to, change it immediately. If you supplied a credit card number or anything similar, that information may be in the hands of a hacker.
(78529) -
I have a virus hacking my email
My email just started getting hacked a few days ago. I havent been on the laptop in weeks so it has to be coming from the mobile devices.
I changed my email password and now my phone and ipad are constantly asking for a new password without me trying to access the email account.
Any ideas on how I can get rid of this without doing a total restore?BadSanta wrote:
My email just started getting hacked a few days ago. I havent been on the laptop in weeks so it has to be coming from the mobile devices.
I changed my email password and now my phone and ipad are constantly asking for a new password without me trying to access the email account.
Any ideas on how I can get rid of this without doing a total restore?
If your email was compromised, deleting and reinstalling on the iPad won't do a **** thing. The problem isn't on your iPad. -
I have recently had a problem with one of my hotmail accounts, some sort of virus sending random emails from my address book. Hotmail advised me to delete all contacts and change the password for that account, which I did on my laptop running windows XP. The change was successful and I was able to send and receive emails with no problem. I then had to change the account password on my iPhone 4s, which I did and it too was successful but when I came to change the password on my iMac, running the latest version of Lion it would not recognise the new password. I have tried to remove the account details and re-install but every time I go to add new account my old details are in the box. This is very frustrating as I use my iMac for all my profects and I need to access my email. Please help.
hi guys,
I had already deleted all reference to the hotmail account in question from the keychain access app, I have also tried to delete and re-instal the account details from within mail. The icon in the side bar dissapears but when I go to Add Account, the old account details are in the new account box. I then input my new password but am told that the server does not recognise it. If I access hotmail via google on the iMac I can get into my account with no problems. I am thinking there must be some other form of security system within the mac software that is blocking the new password. This is driving me nuts. I have been trying to resolve this for the last two days. Thank you for your advise anyway. -
I have a virus on my iPad that sends out bogus emails (no subj and an URL that goes nowhere) to everyone in my contact list. I don't know how it got on my machine (email, non-iTunes apps, etc.) Does any one know of a scanning app that can find this virus and eliminate it? I have an iPad version 3 (WIFI) with 6.0.2 IOS. This scanner should be capable of running on my iPhone as well -- just in case it made it to to my other IOS machine. Thanks for your help! Steve
The chances that it's a virus on your iPad or iPhone is very slim. Who is your mail provider? it's far more likely that your address has been spoofed and it's your mail service that has been compromised not your iDevice. I know my Yahoo mail was hacked and people in my address book received spam mails that I didn't send.
have you changed the address on your e-mail account? -
i have a virus - or something where someone is getting into my mail and sending out spam email to everyone on my mail list - people who i hardly even know. how do i get this to stop?
thanks.this is the message that is going out:
Subject: (no subject)
http://sharedimage.net/httq59foldroot2.php?subpage234
Make seri0us m0ney 0nline
Gone to see a friend is all right, but I wont have my love given tothem. marcylyn aethelwine
Mon, 2 Apr 2012 18:04:48
This mail has originated outside your organization, either from an external partner or the Global Internet.
Keep this in mind if you answer this message.
it is not going to my address book because a lot of these people are not in there. it is going to people that i emailed from years ago....and it IS connected to either my me.com email or a cox.net email - these are both connected. i'll try the password change on both of these mail accounts and see if that works. a lot of these people are getting three and four emails every day.... -
I can't open or receive hotmail emails on my macbrook pro, but i can on other devices. i changed my password, emptied the cache, tried using a different browser, etc. i think i have a virus. help!
Thanks for your help. that's not working either! ugh!!
I can open hotmail, but it's not formatting right, i can't open emails, nor send them.
Thank you so much for trying to help. I really appreciate it.
I understand that you can't get a virus by opening an email, but it seems way too circumstancial! This is my third mac -- because unlike PC -- I never had a problem. I understand this problem is not with my macbook, because every other website works fine -- it's hotmail! -
I use my iPad exclusively for email. How can I resolve a virus on the iPad. Internet provider says an Apple product should not have a virus, but it seems to.
Can anyone help me?There's one possibility. If you are forwarding emails that contain attachments like photos, videos, documents, etc. These emails may have a virus or malware embedded in the attachments, especially if the email came from a person using a PC.
Do the bounceback messages contain attachments.
Do the bouceback message emails you get from Mediacom say why they are being bounced?
FYI - Even if the attachments contain a virus, they will not infect an iOS device or a Mac computer.
Cheers, Tom -
Occasssionally over the last couple months while on the internet I notice this alert box that shows up it usually reads "about/blank.." followed by different combinations of numbers. It doesn't remain there long (i've tried to screen shot it) then dissapears. It will reappear and dissapear a couple more times and if I don't turn off my Airport controls and sever the internet connection it will eventually freeze my computer and I will have to power it off manually. I was told when purchasing the MacBook Pro that it did not need any virus protection software, however, now-a-days I realize Macs are more popular, therefore having a greater possiblity to be suseptable to newly developing viruses. My friend said I should download some AVG for Macs, which sounds good, but he's a PC man and I just wanted to check with you Mac professionals first!
Thank you, Tasha6797You probably don't have a virus - what you may have are 'browser redirects' and you can read about them and how to prevent them at -> http://www.reedcorner.net/eliminating-browser-redirects-and-advertisements/.
Just in case you want to give your drive aa 'one-over' virus scan, I would recommend Sophos for Mac. It's good, free and comes with an uninstaller that actually works. Stay away from any commercial AV software as it tends to batter your system and can actually cause damage.
After you've done a one-time scan of your hard drive you can keep Sophos running or uninstall it - it's your call. I keep it installed just to scan my Downloads and email folders.
Good luck,
Clinton -
Question
I have one out of five email address's with coxmail that opens with a blank inbox. Other browsers like opera or IE show the content of the same inbox. I've contacted cox but they tell me the problem is on my computer. I've used three different anti virus/malware scanners to eliminate all the bugs they can find. I need a firefox guru with suggestions. Thanks, CharlesYou can undo your permission changes. Probably the most relevant one is cookies. Try one or both of these methods:
(1) Page Info > Permissions tab
While viewing a page on the site:
* right-click and choose View Page Info > Permissions
* Alt+t (open the classic Tools menu) > Page Info > Permissions
(2) about:permissions
In a new tab, type or paste '''about:permissions''' and press Enter. Allow a few moments for the list on the left to populate, as this information needs to be extracted from a database.
Then type or paste ''rcn''' in the search box above the list to filter it to the most relevant domains. When you highlight a domain, you can adjust its permissions in the right pane.
Any luck? -
How to tell if you have a virus on imac
I sent an email with a word document attachment created by myself and was told by the recipient that it contained a virus. how are we able to see if we have a virus or Trojan we have an imac. can we carry out some system check?
I suspect your recipient's computer is in error.
Helpful Links Regarding Malware Protection
An excellent link to read is Tom Reed's Mac Malware Guide.
Also, visit The XLab FAQs and read Detecting and avoiding malware and spyware.
See these Apple articles:
Mac OS X Snow Leopard and malware detection
OS X Lion- Protect your Mac from malware
OS X Mountain Lion- Protect your Mac from malware
About file quarantine in OS X
If you require anti-virus protection I recommend using VirusBarrier Express 1.1.6 or Dr.Web Light both from the App Store. They're both free, and since they're from the App Store, they won't destabilize the system. (Thank you to Thomas Reed for these recommendations.) -
Have been advised by my email provider (recently blocked account requiring password reset) that they will only reset the password after a proven anti virus and malware scan has been done on ipad and iphone. Is this necessary and if so what do i use
As KP has pointed out, there actually aren't any anti-virus programs in the App Store. There are a few that allow you to scan e-mail or stuff like that, and a few that provide you with information about malware and new threats for other systems. But none are available that can scan your iOS device for malware, because the security restrictions in iOS do not permit any apps to have that kind of access to anything. Which means that you also cannot be infected with a virus (unless you have jailbroken your device).
If your account got compromised, that had nothing whatsoever to do with your iPad. Someone simply hacked it remotely. Happens all the time. It's really amazing that, in this day and age, e-mail providers are so ignorant of technology and how their own systems get compromised that they would try to require you to run software that does not exist! -
Unknown User Error Message, Do I have a Virus?
Today I checked my AOL email and had over 40 messages in my inbox all within a very short time frame. I recognize most of the email addresses that came back with the Unknown User messages. I did not send any emails out and there is no record in my sent box that says that I send those emails. Could I have a Virus? I always thought mac computers don't get viruses. I am concern that I have one and if I do what should I do. I did change my password to my email after it happen. Here is a copy of one of the email error messages that I got. For the protection of my friends email and mine I changed it in this copy of the email. Friends email- [email protected], My email- [email protected]. I also got one additional email that was sent to me, from me that I never sent. Again no email in my sent box and of course I did not click on the link that was in that email. I will also post that email but will change only my email. Please do not click on the link since I am thinking it might be a virus but I wanted to include it, hoping it will help. Thank you in advance for your help.
ERROR MESSAGE:
* ATTENTION *
Your e-mail is being returned to you because there was a problem with its
delivery. The address which was undeliverable is listed in the section
labeled: "----- The following addresses had permanent fatal errors -----".
The reason your mail is being returned to you is listed in the section
labeled: "----- Transcript of Session Follows -----".
The line beginning with "<<<" describes the specific reason your e-mail could
not be delivered. The next line contains a second error message which is a
general translation for other e-mail servers.
Please direct further questions regarding this message to the e-mail
administrator or Postmaster at that destination.
--AOL Postmaster
----- The following addresses had permanent fatal errors -----
<[email protected]>
(reason: 550 5.0.0 <[email protected]>... User unknown)
----- Transcript of session follows -----
... while talking to mx1.webexone.com.:
DATA
<<< 550 5.0.0 <[email protected]>... User unknown
550 5.1.1 <[email protected]>... User unknown
<<< 503 5.0.0 Need RCPT (recipient)
Final-Recipient: RFC822; [email protected]
Action: failed
Status: 5.0.0
Remote-MTA: DNS; mx1.webexone.com
Diagnostic-Code: SMTP; 550 5.0.0 <[email protected]>... User unknown
Last-Attempt-Date: Thu, 7 Oct 2010 18:27:52 -0400
Return-Path: <[email protected]>
Received: from imo-ma04.mx.aol.com (imo-ma04.mx.aol.com [64.12.78.139])
by imr-da06.mx.aol.com (8.14.1/8.14.1) with ESMTP id o97MRjkm008439
for <[email protected]>; Thu, 7 Oct 2010 18:27:45 -0400
Received: from [email protected]
by imo-ma04.mx.aol.com (mailoutv42.9.) id z.ee2.72ae6c8 (43849)
for <[email protected]>; Thu, 7 Oct 2010 18:27:41 -0400 (EDT)
Received: from smtprly-mc01.mx.aol.com (smtprly-mc01.mx.aol.com [64.12.95.97]) by cia-dc04.mx.aol.com (v129.4) with ESMTP id MAILCIADC046-d3c94cae49563c4; Thu, 07 Oct 2010 18:27:37 -0400
Received: from webmail-d010 (webmail-d010.sim.aol.com [205.188.181.34]) by smtprly-mc01.mx.aol.com (v129.4) with ESMTP id MAILSMTPRLYMC013-d3c94cae49563c4; Thu, 07 Oct 2010 18:27:34 -0400
To: [email protected]
Content-Transfer-Encoding: quoted-printable
Subject:
Date: Thu, 07 Oct 2010 18:27:34 -0400
X-MB-Message-Source: WebUI
X-AOL-IP: 41.215.217.83
X-MB-Message-Type: User
MIME-Version: 1.0
From: [email protected]
Content-Type: text/plain; charset="us-ascii"; format=flowed
X-Mailer: AOL Webmail 32761-PHONE
Received: from 41.215.217.83 by webmail-d010.sysops.aol.com (205.188.181.34) with HTTP (WebMailUI); Thu, 07 Oct 2010 18:27:34 -0400
Message-Id: <[email protected]>
X-Spam-Flag:NO
X-AOL-SENDER: [email protected]
The email that I got that was from me, to me. Again do not open the link, I would feel horrible if caused anyones computer harm, again I also changed my email address for the posting.
hi! Jen!http://made-of.fr/to.php Best regards, ,[email protected]The emails are almost certainly coming from someone else's computer, not from your account. This will be definite if you can't see any of these emails in any of your "sent mail" folders and only are finding out about it by mail bouncing back or someone telling you that they've received such an email from your email address.
This type of infection, which exclusively infests Windows systems, uses a technique known as "spoofing," (mentioned by the other posters) by which the virus or worm randomly selects an email address it finds on an infected computer. The virus/worm uses this address as the "From" address when it performs its mass-mailing routine rather than using the real email address of the user of the infected system. If your address happens to be the one randomly chosen, then anyone receiving one of these emails sees your email address as the apparent sender. In addition, if any messages bounce back (either because the address is no longer valid or the mail server finds the virus and rejects the message), you get hit with the bounce rather than the actual (unknowing) sender, even though the messages didn't come from your system and may be from addresses you've never heard of.
Here's an example; Jane is using a computer infected with a Windows email virus or worm. Jane is either not using an antivirus program or does not have current virus definitions. When the virus/worm activates and runs, it randomly searches the Windows address book and finds the email address of Bill. The worm inserts Bill's email address into the "From" portion of an infected message, which it then sends to Janet. Janet then contacts Bill and complains that he sent her an infected message. When Bill scans his computer, the virus checker does not find anything, because his computer is not infected.
There's nothing you can do if, as appears to be the case, the emails aren't coming from you. All you can do is notify all your friends and colleagues who have Windows systems and who would know your email address and get them to update their antivirus protection.
Regards. -
How do I know if I have a virus on my iMac?
Today when I was browsing in safari, some ads popped up, and I thought maybe that could be a sign I got a virus. sorry for my ignorance about all these virus stuff
So, how can I know if a have a virus?
im using an iMac mid-2011, os x yosemite1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.
Don't be put off by the complexity of these instructions. The process is much less complicated than the description. You do harder tasks with the computer all the time.
2. If you don't already have a current backup, back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.
There are ways to back up a computer that isn't fully functional. Ask if you need guidance.
3. Below are instructions to run a UNIX shell script, a type of program. As I wrote above, it changes nothing. It doesn't send or receive any data on the network. All it does is to generate a human-readable report on the state of the computer. That report goes nowhere unless you choose to share it. If you prefer, you can act on it yourself without disclosing the contents to me or anyone else.
You should be wondering whether you can believe me, and whether it's safe to run a program at the behest of a stranger. In general, no, it's not safe and I don't encourage it.
In this case, however, there are a couple of ways for you to decide whether the program is safe without having to trust me. First, you can read it. Unlike an application that you download and click to run, it's transparent, so anyone with the necessary skill can verify what it does.
You may not be able to understand the script yourself. But variations of the script have been posted on this website thousands of times over a period of years. The site is hosted by Apple, which does not allow it to be used to distribute harmful software. Any one of the millions of registered users could have read the script and raised the alarm if it was harmful. Then I would not be here now and you would not be reading this message.
Nevertheless, if you can't satisfy yourself that these instructions are safe, don't follow them. Ask for other options.
4. Here's a summary of what you need to do, if you choose to proceed:
☞ Copy a line of text in this window to the Clipboard.
☞ Paste into the window of another application.
☞ Wait for the test to run. It usually takes a few minutes.
☞ Paste the results, which will have been copied automatically, back into a reply on this page.
The sequence is: copy, paste, wait, paste again. You don't need to copy a second time. Details follow.
5. You may have started the computer in "safe" mode. Preferably, these steps should be taken in “normal” mode, under the conditions in which the problem is reproduced. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual. If you can only test in safe mode, do that.
6. If you have more than one user, and the one affected by the problem is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.
7. The script is a single long line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, though you may not see all of it in the browser window, and you can then copy it. If you try to select the line by dragging across the part you can see, you won't get all of it.
Triple-click anywhere in the line of text below on this page to select it:
PATH=/usr/bin:/bin:/usr/sbin:/sbin:/usr/libexec;clear;cd;p=(Software Hardware Memory Diagnostics Power FireWire Thunderbolt USB Fonts SerialATA 4 1000 25 5120 KiB/s 1024 85 \\b%% 20480 1 MB/s 25000 ports ' com.clark.\* \*dropbox \*genieo\* \*GoogleDr\* \*k.AutoCAD\* \*k.Maya\* vidinst\* ' DYLD_INSERT_LIBRARIES\ DYLD_LIBRARY_PATH -86 "` route -n get default|awk '/e:/{print $2}' `" 25 N\\/A down up 102400 25600 recvfrom sendto CFBundleIdentifier 25 25 25 1000 MB ' com.adobe.fpsaud com.apple.AirPortBaseStationAgent com.apple.installer.osmessagetracing ' ' 1274181950 464843899 1233118628 ' 51 5120 files );N5=${#p[@]};p[N5]=` networksetup -listnetworkserviceorder|awk ' NR>1 { sub(/^\([0-9]+\) /,"");n=$0;getline;} $NF=="'${p[26]}')" { sub(/.$/,"",$NF);print n;exit;} ' `;f=('\n%s: %s\n' '\n%s\n\n%s\n' '\nRAM details\n%s\n' %s\ %s '%s\n-\t%s\n' );S0() { echo ' { q=$NF+0;$NF="";u=$(NF-1);$(NF-1)="";gsub(/^ +| +$/,"");if(q>='${p[$1]}') printf("%s (UID %s) is using %s '${p[$2]}'",$0,u,q);} ';};s=(' s/[0-9A-Za-z._]+@[0-9A-Za-z.]+\.[0-9A-Za-z]{2,4}/EMAIL/g;/\/Shared/!s/(\/Users\/)[^ /]+/\1USER/g;s/[-0-9A-Fa-f]{22,}/UUID/g;' ' s/^ +//;/de: S|[nst]:/p;' ' {sub(/^ +/,"")};/er:/;/y:/&&$2<'${p[10]} ' 1s/://;3,6d;/[my].+:/d;s/^ {4}//;H;${ g;s/\n$//;/s: [^EO]|x([^08]|02[^F]|8[^0])/p;} ' ' 5h;6{ H;g;/P/!p;} ' ' ($1~/^Cy/&&$3>'${p[11]}')||($1~/^Cond/&&$2!~/^N/) ' ' /:$/{ N;/:.+:/d;s/ *://;b0'$'\n'' };/^ *(V.+ [0N]|Man).+ /{ s/ 0x.... //;s/[()]//g;s/(.+: )(.+)/ (\2)/;H;};$b0'$'\n'' d;:0'$'\n'' x;s/\n\n//;/Apple[ ,]|Genesy|Intel|SMSC/d;s/\n.*//;/\)$/p;' ' s/^.*C/C/;H;${ g;/No th|pms/!p;} ' '/= [^GO]/p' '{$1=""};1' ' /Of/!{ s/^.+is |\.//g;p;} ' ' $0&&!/ / { n++;print;} END { split("'"${p[41]}"'",b);for(i in b) print b[i];if(n<10) print "com.apple.";} ' ' $3~/[0-9]:[0-9]{2}$/ { gsub(/:[0-9:a-f]{14}/,"");} { print|"tail -n'${p[12]}'";} ' ' NR==2&&$4<='${p[13]}' { print $4;} ' ' END { $2/=256;if($2>='${p[15]}') print int($2) } ' ' NR!=13{next};{sub(/[+-]$/,"",$NF)};'"`S0 21 22`" 'NR!=2{next}'"`S0 37 17`" ' NR!=5||$8!~/[RW]/{next};{ $(NF-1)=$1;$NF=int($NF/10000000);for(i=1;i<=3;i++){$i="";$(NF-1-i)="";};};'"`S0 19 20`" 's:^:/:p' '/\.kext\/(Contents\/)?Info\.plist$/p' 's/^.{52}(.+) <.+/\1/p' ' /Launch[AD].+\.plist$/ { n++;print;} END { split("'"${p[41]}"'",b);for(i in b) print b[i]".plist";if(n<200) print "/System/";} ' '/\.xpc\/(Contents\/)?Info\.plist$/p' ' NR>1&&!/0x|\.[0-9]+$|com\.apple\.launchctl\.(Aqua|Background|System)$/ { print $3;} ' ' /\.(framew|lproj)|\):/d;/plist:|:.+(Mach|scrip)/s/:[^:]+//p ' '/^root$/p' ' !/\/Contents\/.+\/Contents|Applic|Autom|Frameworks/&&/Lib.+\/Info.plist$/ { n++;print;} END { if(n<1100) print "/System/";} ' '/^\/usr\/lib\/.+dylib$/p' ' /Temp|emac/{next};/(etc|Preferences|Launch[AD].+)\// { sub(".(/private)?","");n++;print;} END { split("'"${p[41]}"'",b);split("'"${p[42]}"'",c);for(i in b) print b[i]".plist\t"c[i];if(n<500) print "Launch";} ' ' /\/(Contents\/.+\/Contents|Frameworks)\/|\.wdgt\/.+\.([bw]|plu)/d;p;' 's/\/(Contents\/)?Info.plist$//;p' ' { gsub("^| |\n","\\|\\|kMDItem'${p[35]}'=");sub("^...."," ") };1 ' p '{print $3"\t"$1}' 's/\'$'\t''.+//p' 's/1/On/p' '/Prox.+: [^0]/p' '$2>'${p[43]}'{$2=$2-1;print}' ' BEGIN { i="'${p[26]}'";M1='${p[16]}';M2='${p[18]}';M3='${p[31]}';M4='${p[32]}';} !/^A/{next};/%/ { getline;if($5<M1) a="user "$2"%, system "$4"%";} /disk0/&&$4>M2 { b=$3" ops/s, "$4" blocks/s";} $2==i { if(c) { d=$3+$4+$5+$6;next;};if($4>M3||$6>M4) c=int($4/1024)" in, "int($6/1024)" out";} END { if(a) print "CPU: "a;if(b) print "I/O: "b;if(c) print "Net: "c" (KiB/s)";if(d) print "Net errors: "d" packets/s";} ' ' /r\[0\] /&&$NF!~/^1(0|72\.(1[6-9]|2[0-9]|3[0-1])|92\.168)\./ { print $NF;exit;} ' ' !/^T/ { printf "(static)";exit;} ' '/apsd|BKAg|OpenD/!s/:.+//p' ' (/k:/&&$3!~/(255\.){3}0/ )||(/v6:/&&$2!~/A/ ) ' ' $1~"lR"&&$2<='${p[25]}';$1~"li"&&$3!~"wpa2";' ' BEGIN { FS=":";p="uniq -c|sed -E '"'s/ +\\([0-9]+\\)\\(.+\\)/\\\2 x\\\1/;s/x1$//'"'";} { n=split($3,a,".");sub(/_2[01].+/,"",$3);print $2" "$3" "a[n]$1|p;b=b$1;} END { close(p);if(b) print("\n\t* Code injection");} ' ' NR!=4{next} {$NF/=10240} '"`S0 27 14`" ' END { if($3~/[0-9]/)print$3;} ' ' BEGIN { L='${p[36]}';} !/^[[:space:]]*(#.*)?$/ { l++;if(l<=L) f=f"\n "$0;} END { F=FILENAME;if(!F) exit;if(!f) f="\n [N/A]";"file -b "F|getline T;if(T!~/^(AS.+ (En.+ )?text$|(Bo|PO).+ sh.+ text ex)/) F=F" ("T")";printf("\nContents of %s\n%s\n",F,f);if(l>L) printf("\n ...and %s more line(s)\n",l-L);} ' ' s/^ ?n...://p;s/^ ?p...:/-'$'\t''/p;' 's/0/Off/p' ' END{print NR} ' ' /id: N|te: Y/{i++} END{print i} ' ' / / { print "'"${p[28]}"'";exit;};1;' '/ en/!s/\.//p' ' NR!=13{next};{sub(/[+-M]$/,"",$NF)};'"`S0 39 40`" ' $10~/\(L/&&$9!~"localhost" { sub(/.+:/,"",$9);print $1": "$9;} ' '/^ +r/s/.+"(.+)".+/\1/p' 's/(.+\.wdgt)\/(Contents\/)?Info\.plist$/\1/p' 's/^.+\/(.+)\.wdgt$/\1/p' ' /l: /{ /DVD/d;s/.+: //;b0'$'\n'' };/s: /{ /V/d;s/^ */- /;H;};$b0'$'\n'' d;:0'$'\n'' x;/APPLE [^:]+$/d;p;' ' /^find: /d;p;' "`S0 44 45`" ' BEGIN{FS="= "} /Path/{print $2} ' ' /^ *$/d;s/^ */ /;' '/\./p' '/\.appex\/Contents\/Info\.plist$/p' );c1=(system_profiler pmset\ -g nvram fdesetup find syslog df vm_stat sar ps sudo\ crontab sudo\ iotop top pkgutil 'PlistBuddy 2>&1 -c "Print' whoami cksum kextstat launchctl sudo\ launchctl crontab 'sudo defaults read' stat lsbom mdfind ' for i in ${p[24]};do ${c1[18]} ${c2[27]} $i;done;' defaults\ read scutil sudo\ dtrace sudo\ profiles sed\ -En awk /S*/*/P*/*/*/C*/*/airport networksetup mdutil sudo\ lsof test osascript\ -e );c2=(com.apple.loginwindow\ LoginHook '" /L*/P*/loginw*' "'tell app \"System Events\" to get properties of login items'|tr , \\\n" 'L*/Ca*/com.ap*.Saf*/E*/* -d 1 -name In*t -exec '"${c1[14]}"' :CFBundleDisplayName" {} \;|sort|uniq' '~ $TMPDIR.. \( -flags +sappnd,schg,uappnd,uchg -o ! -user $UID -o ! -perm -600 \)' '.??* -path .Trash -prune -o -type d -name *.app -print -prune' :${p[35]}\" :Label\" '{/,}L*/{Con,Pref}* -type f ! -size 0 -name *.plist -exec plutil -s {} \;' "-f'%N: %l' Desktop L*/Keyc*" therm sysload boot-args status " -F '\$Time \$Message' -k Sender kernel -k Message Req 'bad |Beac|caug|corru|dead[^bl]|FAIL|fail|GPU |hfs: Ru|inval|jnl:|last value [1-9]|n Cause: -|NVDA\(|pagin|proc: t|Roamed|rror|ssert|Thrott|tim(ed? ?|ing )o|WARN' -k Message Rne 'Goog|ksadm|SMC:|suhel| VALI|ver-r|xpma' -o -k Sender fseventsd -k Message Req 'SL' " '-du -n DEV -n EDEV 1 10' 'acrx -o comm,ruid,%cpu' '-t1 10 1' '-f -pfc /var/db/r*/com.apple.*.{BS,Bas,Es,J,OSXU,Rem,up}*.bom' '{/,}L*/Lo*/Diag* -type f -regex .\*[cght] ! -name .?\* ! -name \*ag \( -exec grep -lq "^Thread c" {} \; -exec printf \* \; -o -true \) -execdir stat -f:%Sc:%N -t%F {} \;|sort -t: -k2 |tail -n'${p[38]} '/S*/*/Ca*/*xpc* >&- ||echo No' '-L /{S*/,}L*/StartupItems -type f -exec file {} +' '-L /S*/L*/{C*/Sec*A,Ex}* {/,}L*/{A*d,Ca*/*/Ex,Co{mpon,reM},Ex,In{p,ter},iTu*/*P,Keyb,Mail/B,Pr*P,Qu*T,Scripti,Sec,Servi,Spo,Widg}* -path \\*s/Resources -prune -o -type f -name Info.plist' '/usr/lib -type f -name *.dylib' `awk "${s[31]}"<<<${p[23]}` "/e*/{auto,{cron,fs}tab,hosts,{[lp],sy}*.conf,mach_i*/*,pam.d/*,ssh{,d}_config,*.local} {,/usr/local}/etc/periodic/*/* /L*/P*{,/*}/com.a*.{Bo,sec*.ap}*t {/S*/,/,}L*/Lau*/*t .launchd.conf" list getenv /Library/Preferences/com.apple.alf\ globalstate --proxy '-n get default' -I --dns -getdnsservers\ "${p[N5]}" -getinfo\ "${p[N5]}" -P -m\ / '' -n1 '-R -l1 -n1 -o prt -stats command,uid,prt' '--regexp --only-files --files com.apple.pkg.*|sort|uniq' -kl -l -s\ / '-R -l1 -n1 -o mem -stats command,uid,mem' '+c0 -i4TCP:0-1023' com.apple.dashboard\ layer-gadgets '-d /L*/Mana*/$USER&&echo On' '-app Safari WebKitDNSPrefetchingEnabled' "+c0 -l|awk '{print(\$1,\$3)}'|sort|uniq -c|sort -n|tail -1|awk '{print(\$2,\$3,\$1)}'" 'L*/P*/com.ap*.p*.ext*.*.*t -exec '"${c1[14]}"' :displayOrder" {} \;' );N1=${#c2[@]};for j in {0..9};do c2[N1+j]=SP${p[j]}DataType;done;N2=${#c2[@]};for j in 0 1;do c2[N2+j]="-n ' syscall::'${p[33+j]}':return { @out[execname,uid]=sum(arg0) } tick-10sec { trunc(@out,1);exit(0);} '";done;l=(Restricted\ files Hidden\ apps 'Elapsed time (s)' POST Battery safariexts Bad\ plists 'High file counts' User Heat System\ load boot\ args FileVault Diagnostic\ reports Log 'Free space (MiB)' 'Swap (MiB)' Activity 'CPU per process' Login\ hook 'I/O per process' Mach\ ports kexts Daemons Agents XPC\ cache Startup\ items Admin\ access Root\ access Bundles dylibs Apps Font\ issues Inserted\ dylibs Firewall Proxies DNS TCP/IP Wi-Fi Profiles Root\ crontab User\ crontab 'Global login items' 'User login items' Spotlight Memory Listeners Widgets Parental\ Controls Prefetching SATA Descriptors appexes );N3=${#l[@]};for i in 0 1 2;do l[N3+i]=${p[5+i]};done;N4=${#l[@]};for j in 0 1;do l[N4+j]="Current ${p[29+j]}stream data";done;A0() { id -G|grep -qw 80;v[1]=$?;((v[1]==0))&&sudo true;v[2]=$?;v[3]=`date +%s`;clear >&-;date '+Start time: %T %D%n';};for i in 0 1;do eval ' A'$((1+i))'() { v=` eval "${c1[$1]} ${c2[$2]}"|'${c1[30+i]}' "${s[$3]}" `;[[ "$v" ]];};A'$((3+i))'() { v=` while read i;do [[ "$i" ]]&&eval "${c1[$1]} ${c2[$2]}" \"$i\"|'${c1[30+i]}' "${s[$3]}";done<<<"${v[$4]}" `;[[ "$v" ]];};A'$((5+i))'() { v=` while read i;do '${c1[30+i]}' "${s[$1]}" "$i";done<<<"${v[$2]}" `;[[ "$v" ]];};';done;A7(){ v=$((`date +%s`-v[3]));};B2(){ v[$1]="$v";};for i in 0 1;do eval ' B'$i'() { v=;((v['$((i+1))']==0))||{ v=No;false;};};B'$((3+i))'() { v[$2]=`'${c1[30+i]}' "${s[$3]}"<<<"${v[$1]}"`;} ';done;B5(){ v[$1]="${v[$1]}"$'\n'"${v[$2]}";};B6() { v=` paste -d: <(printf "${v[$1]}") <(printf "${v[$2]}")|awk -F: ' {printf("'"${f[$3]}"'",$1,$2)} ' `;};B7(){ v=`grep -Fv "${v[$1]}"<<<"$v"`;};C0() { [[ "$v" ]]&&sed -E "$s"<<<"$v";};C1() { [[ "$v" ]]&&printf "${f[$1]}" "${l[$2]}" "$v"|sed -E "$s";};C2() { v=`echo $v`;[[ "$v" != 0 ]]&&C1 0 $1;};C3() { v=`sed -E "${s[63]}"<<<"$v"`&&C1 1 $1;};for i in 1 2;do for j in 0 2 3;do eval D$i$j'(){ A'$i' $1 $2 $3; C'$j' $4;};';done;done;{ A0;D20 0 $((N1+1)) 2;D10 0 $N1 1;B0;C2 27;B0&&! B1&&C2 28;D12 15 37 25 8;A1 0 $((N1+2)) 3;C0;D13 0 $((N1+3)) 4 3;D23 0 $((N1+4)) 5 4;D13 0 $((N1+9)) 59 50;for i in 0 1 2;do D13 0 $((N1+5+i)) 6 $((N3+i));done;D13 1 10 7 9;D13 1 11 8 10;D22 2 12 9 11;D12 3 13 10 12;D23 4 19 44 13;D23 5 14 12 14;D22 6 36 13 15;D22 7 37 14 16;D23 8 15 38 17;D22 9 16 16 18;B1&&{ D22 35 49 61 51;D22 11 17 17 20;for i in 0 1;do D22 28 $((N2+i)) 45 $((N4+i));done;};D22 12 44 54 45;D22 12 39 15 21;A1 13 40 18;B2 4;B3 4 0 19;A3 14 6 32 0;B4 0 5 11;A1 17 41 20;B7 5;C3 22;B4 4 6 21;A3 14 7 32 6;B4 0 7 11;B3 4 0 22;A3 14 6 32 0;B4 0 8 11;B5 7 8;B1&&{ A2 19 26 23;B7 7;C3 23;};A2 18 26 23;B7 7;C3 24;D13 4 21 24 26;B4 4 12 26;B3 4 13 27;A1 4 22 29;B7 12;B2 14;A4 14 6 52 14;B2 15;B6 14 15 4;B3 0 0 30;C3 29;A1 4 23 27;B7 13;C3 30;B3 4 0 65;A3 14 6 32 0;B4 0 16 11;A1 4 50 64;B7 16;C3 52;D13 24 24 32 31;D13 25 37 32 33;A2 23 18 28;B2 16;A2 16 25 33;B7 16;B3 0 0 34;B2 21;A6 47 21&&C0;B1&&{ D13 21 0 32 19;D13 10 42 32 40;D22 29 35 46 39;};D23 14 1 62 42;D12 34 43 53 44;D12 22 20 32 25;D22 0 $((N1+8)) 51 32;D13 4 8 41 6;D12 26 28 35 34;D13 27 29 36 35;A2 27 32 39&&{ B2 19;A2 33 33 40;B2 20;B6 19 20 3;};C2 36;D23 33 34 42 37;B1&&D23 35 45 55 46;D23 32 31 43 38;D12 36 47 32 48;D13 20 42 32 41;D13 37 2 48 43;D13 4 5 32 1;D13 4 3 60 5;D12 26 48 49 49;B3 4 22 57;A1 26 46 56;B7 22;B3 0 0 58;C3 47;D22 4 4 50 0;D23 22 9 37 7;A7;C2 2;} 2>/dev/null|pbcopy;exit 2>&-
Copy the selected text to the Clipboard by pressing the key combination command-C.
8. Launch the built-in Terminal application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.
Click anywhere in the Terminal window and paste by pressing command-V. The text you pasted should vanish immediately. If it doesn't, press the return key.
9. If you see an error message in the Terminal window such as "Syntax error" or "Event not found," enter
exec bash
and press return. Then paste the script again.
10. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. In most cases, the difference is not important. If you don't know the password, or if you prefer not to enter it, press the key combination control-C or just press return three times at the password prompt. Again, the script will still run.
If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.
11. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, there will be nothing in the Terminal window and no indication of progress. Wait for the line
[Process completed]
to appear. If you don't see it within half an hour or so, the test probably won't complete in a reasonable time. In that case, close the Terminal window and report what happened. No harm will be done.
12. When the test is complete, quit Terminal. The results will have been copied to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.
At the top of the results, there will be a line that begins with the words "Start time." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "Process completed" message to appear in the Terminal window. Please wait for it and try again.
If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.
13. When you post the results, you might see an error message on the web page: "You have included content in your post that is not permitted," or "You are not authorized to post." That's a bug in the forum software. Please post the test results on Pastebin, then post a link here to the page you created.
14. This is a public forum, and others may give you advice based on the results of the test. They speak only for themselves, and I don't necessarily agree with them.
Copyright © 2014 by Linc Davis. As the sole author of this work, I reserve all rights to it except as provided in the Use Agreement for the Apple Support Communities website ("ASC"). Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.
Maybe you are looking for
-
JSP-Editor not working properly
Hi everybody, I am working with ISA5.0 and NWDI. I have checked out the Web-Module Project crm/isa/web/b2b. Now I would like to modify JSP-Files. Unfortonately the JSP-Editor is not working properly. The JSP-Editor cannot resolve references to Tag-Li
-
JDEV 10.1.3 EA1 - Error in running Imported war file (war file is correct)
Hi Thank you for reading my post. I have an Odd problem with Jdev EA1 I have a war file , I import it into Jdev (new /project/projects from war file) I should mention that this war file developed in Rational application developer (Struts based ,datab
-
My itunes video purchase will not transfer to my mini for viewing
I have recently purcahsed a few movies from Itunes to view on my mini, but will not download and allow viewing....any suggestions?
-
In one of our project we need to define audit trail for all transaction tables As per the requirements, we need to log in some audit trail table the following information - Old and New value of the column - userid who executed the SQL - Transaction t
-
How to set a default folder for Live Bookmarks ( instead of the bookmarks toolbar folder ) ?
When I subscribe to a RSS feed, Live Bookmarks put these in the "Bookmarks Toolbar" folder by default. I'll like to change this default folder to another one into the bookmarks ( like the firefox : "Subcribed Feeds" folder ) Thanks