How do I know if my Mac has been infected with the virus
I recently was asked to download an Adobe Acrobat reader update but before I was made aware that the current virus was contained in a similar request, I downloaded what I assumed to be a legit update. I currently do not use my mail program on my Mac so am unaware of any spam being distributed from the computer. How can I identify if my computer has been infected with this Trojan Horse virus?
Two Helpful Links Regarding Flashback Trojan
A link to a great User Tip about the trojan: Flashback Trojan User Tip
A related link in the tip to a checker: Malware Checker Dowload Link
A Google search can reveal a variety of alternatives on how the remove the trojan should your computer get infected. This can get you started.
For now I recommend the User Tip from etressoft to detect and remove:
Checking for and removing the "Flashback" trojan
Similar Messages
-
HT5228 How can I tell if my computer has been infected with the Trojan?
How can I tell if my computer has been infected with this latest Trojan (or with any Trojan)? I did install the latest update to Java when I was told by my iMac that new software was available for my computer, which was just 2 or 3 days ago (first week of April). Now it is being said that there was a Java Trojan.
Many thanks for any replies!Log out and log back in, if you haven’t done so recently. Launch the Terminal application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ If you’re running Mac OS X 10.7 or later, open LaunchPad. Click Utilities, then Terminal in the page that opens.
Step 1
Copy or drag — do not type — the line below into the Terminal window, then press return:
launchctl getenv DYLD_INSERT_LIBRARIES
Post the lines of output, if any, that appear below what you just entered (the text, please, not a screenshot.)
Step 2
Repeat with this line (triple-click anywhere in it to select the whole line):
find /Applications /System/Library/CoreServices -type d -name *.app -exec defaults read {}/Contents/Info LSEnvironment \; 2> /dev/null | grep DYLD_INSERT_LIBRARIES
The command will take a noticeable amount of time to run. Wait for a new line ending in a dollar sign (“$”) to appear.
If you get no output from either step, you're not infected with any variant of Flashback that I know of. -
how do i know if my iphone has been syncronize with other device and how to remove it.?, cuz. I had found out that one of my co-work who was updatinng my phone was syncronizing to his name..in this case my photos is been syncronize to his acount.pls help...
thanksHey Cherielly,
Thanks for using Apple Support Communities.
Since you are having an issue with syncing to a different apple id. You may want to make sure you are signing in with the correct apple id.
iOS: Sign in with a different Apple ID in the iTunes Store, App Store, and iBooks Store
http://support.apple.com/kb/ht1311
Have a nice day,
Mario -
Is this a genuine error message 'ipad has been infected with potential virus'
II was just about to watch a film through my iPad and a new screen opened 'phone updating.com' and the message read 'Virus warning, ipad has been infected with potential virus. Click the ok button to scan your iPhone now.'
I didn't press ok and it wouldn't let me cross out so I checked and updated to the latest version (8.2) and when my ipad restarted, safari opened it on the same error page. I then went to settings and cleared my Safari history which thankfully clearly the page.
My concern now is what if I have something bad (virus?) on my iPad? Or im hoping that because I didn't click okay that all is okay again.
can anyone advise if they have come across anything similar or if I need to do something else?
MAny ThanksThanks, that's what I thought. Do you know if there was any other way that I could have cleared the message other than by clearing my safari history, and more importantly, as I didn't click okay, would this have stopped anything else happening to my ipad?
-
How can i copy a picture that has been installed with the flash player
how can i copy a picture that has been installed using the flash player
You can't. You can take a screen cap of it, but the container doesn't allow access to the individual images used in a SWF or FLV.
-
My internet will be cut off in 48 hours unless I remove this virus. I got an e-mail saying I was infected with this flashback virus. I called Rogers to confirm that it wasn't a phishing e-mail and it is legitimate. The only thing they did was give me numbers to a paid technical support line, I'd prefer not to call and pay. I went online and found a tutorial for removing it using Terminal, which I tried and got the error messages which apparently means I'm not affected. Help! How do I remove this virus before my internet gets cut off?
I am operating a MAC OSX 10.5.8 software system on my macbookMaybe
F-Secure's Flashback removal tool - http://www.f-secure.com/v-descs/trojan-downloader_osx_flashback_k.shtml - supposedly also works on OSX 10.5 and earlier.
Something you should consider is upgrading to Snow Leopard since then you (for at least a few more months) will still get security updates from Apple which would cover this issue.
Snow Leopard 10.6 Technical Requirements - http://support.apple.com/kb/SP575 - note by K Shaffer - http://discussions.apple.com/message/12921514 : "Some early Intel-based Macs can't use Snow Leopard 10.6 installers; of those, the Core Duo (not 2 duo) were suspect and had issues." - and a qualifier by "a brody" http://discussions.apple.com/message/13028822 : "I think that refers to the ones without at least 1 GB of RAM."
Macs and Software that will run with Snow Leopard (Mac OS X 10.6.x) - https://discussions.apple.com/docs/DOC-2455
A Mac OS X 10.6 Snow Leopard Application Compatibility List - http://snowleopard.wikidot.com/ -
After I installed Lion OS, my mac has been crashing with the following message.
Interval Since Last Panic Report: 38342 sec
Panics Since Last Report: 4
Anonymous UUID: B997CC08-BD38-425F-82A0-827B5C4D51AA
Sat Oct 15 16:02:36 2011
panic(cpu 1 caller 0xffffff80002c266d): Kernel trap at 0xffffff80005577a4, type 14=page fault, registers:
CR0: 0x000000008001003b, CR2: 0x0000000000000008, CR3: 0x0000000000100000, CR4: 0x0000000000000660
RAX: 0x0000000000000000, RBX: 0x0000000000000008, RCX: 0x0000000000000020, RDX: 0xffffff8003b75790
RSP: 0xffffff807887af10, RBP: 0xffffff807887af10, RSI: 0xffffff800b5ed760, RDI: 0x0000000000000008
R8: 0xffffff807887aee8, R9: 0xffffff80008d8d40, R10: 0x0000000000002710, R11: 0xffffff80002d8220
R12: 0x0000000000000246, R13: 0xffffff807887af10, R14: 0x0000000000000001, R15: 0xffffff807887b020
RFL: 0x0000000000010282, RIP: 0xffffff80005577a4, CS: 0x0000000000000008, SS: 0x0000000000000010
CR2: 0x0000000000000008, Error code: 0x0000000000000000, Faulting CPU: 0x1
Backtrace (CPU 1), Frame : Return Address
0xffffff807887abd0 : 0xffffff8000220702
0xffffff807887ac50 : 0xffffff80002c266d
0xffffff807887adf0 : 0xffffff80002d7a1d
0xffffff807887ae10 : 0xffffff80005577a4
0xffffff807887af10 : 0xffffff7f8186142b
0xffffff807887af60 : 0xffffff8000344daa
0xffffff807887b070 : 0xffffff80003c331d
0xffffff807887b2e0 : 0xffffff80003cae99
0xffffff807887b380 : 0xffffff80003cb38e
0xffffff807887b570 : 0xffffff80003c85b7
0xffffff807887bbc0 : 0xffffff80003bda3e
0xffffff807887bc10 : 0xffffff80003bf585
0xffffff807887bdb0 : 0xffffff80003bf6fd
0xffffff807887bdd0 : 0xffffff8000361f90
0xffffff807887be00 : 0xffffff8000346860
0xffffff807887be90 : 0xffffff8000341221
0xffffff807887bec0 : 0xffffff8000345b86
0xffffff807887bf60 : 0xffffff8000340e79
0xffffff807887bfb0 : 0xffffff8000820057
Kernel Extensions in backtrace:
com.eltima.ElmediaPlayer.kext(1.0)[B9CBA7AD-5027-7325-7145-E860E49C0C58]@0xffff ff7f81860000->0xffffff7f81862fff
BSD process name corresponding to current thread: kernel_task
Mac OS version:
11C74
Kernel version:
Darwin Kernel Version 11.2.0: Tue Aug 9 20:54:00 PDT 2011; root:xnu-1699.24.8~1/RELEASE_X86_64
Kernel UUID: 59275DFA-10C0-30B3-9E26-F7B5DFB1A432
System model name: MacBookPro5,4 (Mac-F22587A1)
System uptime in nanoseconds: 17593566646205
last loaded kext at 13642661130876: com.apple.iokit.IOAVBFamily 1.0.0d22 (addr 0xffffff7f80878000, size 36864)
last unloaded kext at 13702669586573: com.apple.iokit.IOEthernetAVBController 1.0.0d5 (addr 0xffffff7f80873000, size 20480)
loaded kexts:
com.symantec.kext.fw 1.0.3f5
com.symantec.kext.filesecurity 1.3.3f65
com.eltima.ElmediaPlayer.kext 1.0
com.symantec.kext.pf 4.1.1f13
com.symantec.kext.internetSecurity 1.3.2f5
com.apple.filesystems.smbfs 1.7.0
com.apple.driver.AppleHWSensor 1.9.4d0
com.apple.driver.AudioAUUC 1.59
com.apple.driver.AGPM 100.12.42
com.apple.filesystems.autofs 3.0
com.apple.driver.AppleHDA 2.1.3f7
com.apple.driver.AppleMikeyHIDDriver 122
com.apple.driver.AppleUpstreamUserClient 3.5.9
com.apple.driver.AppleMCCSControl 1.0.26
com.apple.iokit.IOUserEthernet 1.0.0d1
com.apple.driver.AppleBacklight 170.1.9
com.apple.Dont_Steal_Mac_OS_X 7.0.0
com.apple.driver.AudioIPCDriver 1.2.1
com.apple.driver.AppleMikeyDriver 2.1.3f7
com.apple.GeForce 7.1.2
com.apple.driver.SMCMotionSensor 3.0.1d2
com.apple.driver.AppleSMCLMU 2.0.1d2
com.apple.driver.ACPI_SMC_PlatformPlugin 4.7.5d4
com.apple.driver.AppleLPC 1.5.3
com.apple.driver.AppleUSBTCButtons 225.2
com.apple.driver.AppleUSBTCKeyboard 225.2
com.apple.driver.AppleIRController 312
com.apple.AppleFSCompression.AppleFSCompressionTypeDataless 1.0.0d1
com.apple.AppleFSCompression.AppleFSCompressionTypeZlib 1.0.0d1
com.apple.BootCache 33
com.apple.iokit.SCSITaskUserClient 3.0.1
com.apple.driver.AppleUSBCardReader 3.0.1
com.apple.iokit.IOAHCIBlockStorage 2.0.1
com.apple.driver.AirPort.Brcm4331 512.20.18
com.apple.driver.AppleFWOHCI 4.8.9
com.apple.driver.AppleSmartBatteryManager 161.0.0
com.apple.driver.AppleHPET 1.6
com.apple.driver.AppleUSBHub 4.5.0
com.apple.driver.AppleAHCIPort 2.2.0
com.apple.nvenet 2.0.17
com.apple.driver.AppleUSBEHCI 4.5.0
com.apple.driver.AppleUSBOHCI 4.4.5
com.apple.driver.AppleEFINVRAM 1.5.0
com.apple.driver.AppleRTC 1.4
com.apple.driver.AppleACPIButtons 1.4
com.apple.driver.AppleSMBIOS 1.7
com.apple.driver.AppleACPIEC 1.4
com.apple.driver.AppleAPIC 1.5
com.apple.driver.AppleIntelCPUPowerManagementClient 167.0.0
com.apple.nke.applicationfirewall 3.2.30
com.apple.security.quarantine 1
com.apple.driver.AppleIntelCPUPowerManagement 167.0.0
com.apple.kext.triggers 1.0
com.apple.driver.DspFuncLib 2.1.3f7
com.apple.driver.AppleHDAController 2.1.3f7
com.apple.iokit.IOHDAFamily 2.1.3f7
com.apple.iokit.IOSurface 80.0
com.apple.iokit.IOBluetoothSerialManager 4.0.1f4
com.apple.iokit.IOSerialFamily 10.0.5
com.apple.iokit.IOAudioFamily 1.8.3fc11
com.apple.kext.OSvKernDSPLib 1.3
com.apple.driver.ApplePolicyControl 3.0.16
com.apple.nvidia.nv50hal 7.1.2
com.apple.NVDAResman 7.1.2
com.apple.iokit.IOFireWireIP 2.2.4
com.apple.driver.AppleBacklightExpert 1.0.3
com.apple.driver.AppleGraphicsControl 3.0.16
com.apple.iokit.IONDRVSupport 2.3.2
com.apple.iokit.IOGraphicsFamily 2.3.2
com.apple.driver.AppleSMBusController 1.0.10d0
com.apple.driver.AppleSMC 3.1.1d8
com.apple.driver.IOPlatformPluginFamily 4.7.5d4
com.apple.driver.AppleSMBusPCI 1.0.10d0
com.apple.driver.AppleUSBMultitouch 227.1
com.apple.driver.BroadcomUSBBluetoothHCIController 4.0.1f4
com.apple.driver.AppleUSBBluetoothHCIController 4.0.1f4
com.apple.iokit.IOBluetoothFamily 4.0.1f4
com.apple.iokit.IOUSBHIDDriver 4.4.5
com.apple.iokit.IOSCSIMultimediaCommandsDevice 3.0.1
com.apple.iokit.IOBDStorageFamily 1.6
com.apple.iokit.IODVDStorageFamily 1.7
com.apple.iokit.IOCDStorageFamily 1.7
com.apple.iokit.IOSCSIBlockCommandsDevice 3.0.1
com.apple.iokit.IOUSBMassStorageClass 3.0.0
com.apple.driver.AppleUSBMergeNub 4.5.3
com.apple.driver.AppleUSBComposite 3.9.0
com.apple.driver.XsanFilter 403
com.apple.iokit.IOAHCISerialATAPI 2.0.1
com.apple.iokit.IOSCSIArchitectureModelFamily 3.0.1
com.apple.iokit.IO80211Family 411.1
com.apple.iokit.IOFireWireFamily 4.4.5
com.apple.iokit.IOUSBUserClient 4.5.3
com.apple.iokit.IOAHCIFamily 2.0.7
com.apple.iokit.IONetworkingFamily 2.0
com.apple.iokit.IOUSBFamily 4.5.3
com.apple.driver.NVSMU 2.2.9
com.apple.driver.AppleEFIRuntime 1.5.0
com.apple.iokit.IOHIDFamily 1.7.1
com.apple.iokit.IOSMBusFamily 1.1
com.apple.security.sandbox 165.3
com.apple.kext.AppleMatch 1.0.0d1
com.apple.security.TMSafetyNet 7
com.apple.driver.DiskImages 331
com.apple.iokit.IOStorageFamily 1.7
com.apple.driver.AppleKeyStore 28.18
com.apple.driver.AppleACPIPlatform 1.4
com.apple.iokit.IOPCIFamily 2.6.7
com.apple.iokit.IOACPIFamily 1.4
Model: MacBookPro5,4, BootROM MBP53.00AC.B03, 2 processors, Intel Core 2 Duo, 2.53 GHz, 4 GB, SMC 1.49f2
Graphics: NVIDIA GeForce 9400M, NVIDIA GeForce 9400M, PCI, 256 MB
Memory Module: BANK 0/DIMM0, 2 GB, DDR3, 1067 MHz, 0x80AD, 0x484D54313235533642465238432D47372020
Memory Module: BANK 1/DIMM0, 2 GB, DDR3, 1067 MHz, 0x80AD, 0x484D54313235533642465238432D47372020
AirPort: spairport_wireless_card_type_airport_extreme (0x14E4, 0x8D), Broadcom BCM43xx 1.0 (5.100.98.75.18)
Bluetooth: Version 4.0.1f4, 2 service, 11 devices, 1 incoming serial ports
Network Service: AirPort, AirPort, en1
Serial ATA Device: FUJITSU MJA2250BH FFS G1, 250.06 GB
Serial ATA Device: MATSHITADVD-R UJ-868
USB Device: Built-in iSight, apple_vendor_id, 0x8507, 0x24400000 / 2
USB Device: Internal Memory Card Reader, apple_vendor_id, 0x8403, 0x26500000 / 2
USB Device: Apple Internal Keyboard / Trackpad, apple_vendor_id, 0x0236, 0x04600000 / 3
USB Device: IR Receiver, apple_vendor_id, 0x8242, 0x04500000 / 2
USB Device: BRCM2046 Hub, 0x0a5c (Broadcom Corp.), 0x4500, 0x06100000 / 2
USB Device: Bluetooth USB Host Controller, apple_vendor_id, 0x8217, 0x06110000 / 5Most likely culprit is the com.eltima.ElmediaPlayer.kext(1.0)
Others are these:
com.symantec.kext.fw 1.0.3f5
com.symantec.kext.filesecurity 1.3.3f65
com.eltima.ElmediaPlayer.kext 1.0
com.symantec.kext.pf 4.1.1f13
com.symantec.kext.internetSecurity 1.3.2f5
See:
What is a kernel panic,
Technical Note TN2063: Understanding and Debugging Kernel Panics,
Mac OS X Kernel Panic FAQ,
Resolving Kernel Panics, and
Tutorial: Avoiding and eliminating Kernel panics for more details. -
I have a Macbook and as usual, I was notified of a Firefox update, which I accepted. Since uploading the new version, when I type a search into the usual box and click enter or on search button, nothing happens at all. This is very annoying! I would appreciate any help.
Thanks.I just went to the Help>Troubleshooting Information>Open Containing Folder>Organize>Select All then deleted everything. When I reopened Firefox my homepage asked for my password, the option for Firefox to remember, I clicked remember and now it is working.
By the way the previous post was me as well. Just a typo, should have been stlblues1226 as well. -
In Firefox I did a search for Alaksen ( wildlife refuge). The search results were appropriate. Clicking on any site in the Google search diverted me to various commercial websites that were completely unrelated to Alaksen.
Try running several malware scanners. It is best to run several as each will pick up things that the others miss. Some scanners you can try are:
* Malwarebytes - http://www.malwarebytes.org/mbam.php
* SuperAntiSpyware - http://www.superantispyware.com/
* Ad-Aware - http://www.lavasoft.com/products/ad_aware_free.php
* Windows Defender - http://www.microsoft.com/windows/products/winfamily/defender/default.mspx
* Spybot S&D - http://www.safer-networking.org/en/home/index.html
This link may also be of use - http://deletemalware.blogspot.com/2010/02/remove-google-redirect-virus.html
If the above malware scanners do not find any malware or can not clear it, you should consider posting in one of these forums for specialized malware removal help:
* http://forums.spybot.info/
* http://www.spywarewarrior.com/index.php
* http://forum.aumha.org/
* http://www.bleepingcomputer.com/forums/
* http://www.spywareinfoforum.com/ -
How do I know if my iPad has been virus infected through an attachment in an email opened
How do I know if my iPad has been infected by a virus through opening an email attachment
Read http://en.wikipedia.org/wiki/IOS_jailbreaking
It will void your warranty and cause Apple to no longer support your mobile device.
Allan -
My Mac Book Pro says it has been infected with viruses. How do I clean them up?
My Macbook Pro says it has been infected with viruses. How do I clean it up?
There are different variants of names for this malware but the steps of removal should be the same unless it has advanced.
http://www.securemac.com/MAC-Defender-Rouge-Anti-Virus-Analysis-Removal.php
https://discussions.apple.com/thread/3032201?start=0&tstart=0
https://discussions.apple.com/thread/3042885?start=0&tstart=0
http://www.reedcorner.net/news.php/news.php?s=macdefender -
hi....i m very blur at this...not sure if i have used icloud before...how do i know if my iphone has been backed up ?
it all happened 2 days ago when my iphone lost everything after updating to ios7. I couldn't even restore back up even i have done my back up before updating...
just trying my luck here , if anyone can help he to retrieve my photos and notes.Access iCloud.com on a computer to check
http://support.apple.com/kb/PH2702
Lost or Stolen iOS device > http://support.apple.com/kb/HT5668 -
Project Managers to know when a task has been updated for the last time
Hi,
I would like know if there is any timestamp feature in Project Server 2007, so that it can be possible for Project Managers to know when a task has been updated for the last time.
Thanks in advanceHi,
If you are using the My Tasks to drive the task updates then you can use the 'Applied Requests and Errors' available under 'Go To' in the Task Updates area. Here the PM can find when requests have been approved and how many updates he/she received for a
particular task (by clicking the task name) etc.
Hope this helps
Paul -
HT201343 How can I make my 2013 Mac Pro been compatible with airplay & mirroring display
How can I make my 2013 Mac Pro been compatible with airplay & mirroring display ?
Thanks for any help !2013 Mac Pro would be compatible
http://support.apple.com/kb/ht5404 -
How can I count time that a computer has been connectted with the internet
I want to count the time which a computer has been connectted with the internet?
I had already tried several times,
one is socket,
second is Runtime.exec("ping -n 1"+ip)
I don't think they are better;
do you have another idea?The internet is a conceptual entity not a physical entity so you are never connected to it.
As a conceptual entity the internet is represented by a cloud of computing devices (computers, gateways, routers, etc.)
Your computer connects to a another computer by being routed through various devices and then finally connecting to that remote computer.
Depending on various thing you can measure the time that you can connect to other devices by either pinging a common IP in the internet (such as yahoo.com) or by pinging the router that that represents the entry point for your cloud (such as the router/gateway of your ISP.)
If you are concerned about a particular connection, such a specific remote computer, then using a socket and sending a 'keep-alive' message and recieving the response is the best way to track that.
Maybe you are looking for
-
Cannot create a Sharepoint meeting workspace in a Outlook 2010 meeting request
I am using Sharepoint 2010 and Outlook 2010. I am trying to create a meeting request and also create a sharepoint workspace attach to that meeting request in Outlook. First I click Create button and then it would let me cho
-
Hi, Is there a way to call an abap object oriented method asynchronously which would further help in parallel processing? Thanks, Subhrendu
-
Hi all! I'm a new to ejb, just started, for the beginning got an exception: javax.naming.NoInitialContextException: Need to specify class name in environment or system property, or as an applet parameter, or in an application resource file: java.nam
-
Hi Guys, I'm using the command line, air sdk tools to package my air app. I can do everything except select the destination where the packaged app should be placed. I have read the documentation; http://help.adobe.com/en_US/AIR/1.1/devappshtml/WS5b3c
-
How to make the following JOIN
I have a table called STG_CALL. In it there are are 3 columns viz. acct_id, contact_id and call_type. If call type is 'ATTENDEE' or 'PROFESSIONAL' then need to join STG_CALL with table CONT_XREF ON CONTACT_ID. If call type is 'ACCOUNT' then need to j