Could I have a virus

Well - having had a virus myself all Christmas I am wondering whether my Mac also has one. This morning, before heading back home, my son (a complete mac head) decided that I should have the most up to date flash player downloaded onto my imac. Did a repair disk permissions following this. I was then using Firefox on the highways agency website when everything froze and I had to force quit. Both Safari and Firefox now seem to have slowed right down and when quitting Firefox a few minutes ago found a popup on my desktop. This was again after quitting the highways agency traffic information website. This has never happened before.
Is there a possibility that when downloading the flash player my son also downloaded something else as well. I think he downloaded it from macupdate.com.
In any case, is there any way I can check if something is amiss or can anyone recommend a virus scanner?
Thanks
Ann

I think a virus is unlikely. If the version he installed is the one listed here:
http://search.macupdate.com/search.php?keywords=flash&os=mac
it is a beta version.
You could uninstall it using this link: http://kb2.adobe.com/cps/141/tn_14157.html
then download the latest stable version following this link:
http://get.adobe.com/flashplayer/otherversions/

Similar Messages

When i login to yahoo, my first click results in the spinning wheel. Could i have a virus Or why does it only happen when i login to yahoo?

When i login to yahoo, my first click results in the spinning wheel. Could i have a virus? Or why does it only happen when i login to yahoo?

Firefox allows to select part of a word. You can select a word with a double click and use Shift + left click to set the end of the selection, so you need to click at the end of the last word instead of in it.

Unknown User Error Message, Do I have a Virus?

Today I checked my AOL email and had over 40 messages in my inbox all within a very short time frame. I recognize most of the email addresses that came back with the Unknown User messages. I did not send any emails out and there is no record in my sent box that says that I send those emails. Could I have a Virus? I always thought mac computers don't get viruses. I am concern that I have one and if I do what should I do. I did change my password to my email after it happen. Here is a copy of one of the email error messages that I got. For the protection of my friends email and mine I changed it in this copy of the email. Friends email- [email protected], My email- [email protected]. I also got one additional email that was sent to me, from me that I never sent. Again no email in my sent box and of course I did not click on the link that was in that email. I will also post that email but will change only my email. Please do not click on the link since I am thinking it might be a virus but I wanted to include it, hoping it will help. Thank you in advance for your help.
ERROR MESSAGE:
* ATTENTION *
Your e-mail is being returned to you because there was a problem with its
delivery. The address which was undeliverable is listed in the section
labeled: "----- The following addresses had permanent fatal errors -----".
The reason your mail is being returned to you is listed in the section
labeled: "----- Transcript of Session Follows -----".
The line beginning with "<<<" describes the specific reason your e-mail could
not be delivered. The next line contains a second error message which is a
general translation for other e-mail servers.
Please direct further questions regarding this message to the e-mail
administrator or Postmaster at that destination.
--AOL Postmaster
----- The following addresses had permanent fatal errors -----
<[email protected]>
(reason: 550 5.0.0 <[email protected]>... User unknown)
----- Transcript of session follows -----
... while talking to mx1.webexone.com.:
DATA
<<< 550 5.0.0 <[email protected]>... User unknown
550 5.1.1 <[email protected]>... User unknown
<<< 503 5.0.0 Need RCPT (recipient)
Final-Recipient: RFC822; [email protected]
Action: failed
Status: 5.0.0
Remote-MTA: DNS; mx1.webexone.com
Diagnostic-Code: SMTP; 550 5.0.0 <[email protected]>... User unknown
Last-Attempt-Date: Thu, 7 Oct 2010 18:27:52 -0400
Return-Path: <[email protected]>
Received: from imo-ma04.mx.aol.com (imo-ma04.mx.aol.com [64.12.78.139])
by imr-da06.mx.aol.com (8.14.1/8.14.1) with ESMTP id o97MRjkm008439
for <[email protected]>; Thu, 7 Oct 2010 18:27:45 -0400
Received: from [email protected]
by imo-ma04.mx.aol.com (mailoutv42.9.) id z.ee2.72ae6c8 (43849)
for <[email protected]>; Thu, 7 Oct 2010 18:27:41 -0400 (EDT)
Received: from smtprly-mc01.mx.aol.com (smtprly-mc01.mx.aol.com [64.12.95.97]) by cia-dc04.mx.aol.com (v129.4) with ESMTP id MAILCIADC046-d3c94cae49563c4; Thu, 07 Oct 2010 18:27:37 -0400
Received: from webmail-d010 (webmail-d010.sim.aol.com [205.188.181.34]) by smtprly-mc01.mx.aol.com (v129.4) with ESMTP id MAILSMTPRLYMC013-d3c94cae49563c4; Thu, 07 Oct 2010 18:27:34 -0400
To: [email protected]
Content-Transfer-Encoding: quoted-printable
Subject:
Date: Thu, 07 Oct 2010 18:27:34 -0400
X-MB-Message-Source: WebUI
X-AOL-IP: 41.215.217.83
X-MB-Message-Type: User
MIME-Version: 1.0
From: [email protected]
Content-Type: text/plain; charset="us-ascii"; format=flowed
X-Mailer: AOL Webmail 32761-PHONE
Received: from 41.215.217.83 by webmail-d010.sysops.aol.com (205.188.181.34) with HTTP (WebMailUI); Thu, 07 Oct 2010 18:27:34 -0400
Message-Id: <[email protected]>
X-Spam-Flag:NO
X-AOL-SENDER: [email protected]
The email that I got that was from me, to me. Again do not open the link, I would feel horrible if caused anyones computer harm, again I also changed my email address for the posting.
hi! Jen!http://made-of.fr/to.php Best regards, ,[email protected]

The emails are almost certainly coming from someone else's computer, not from your account. This will be definite if you can't see any of these emails in any of your "sent mail" folders and only are finding out about it by mail bouncing back or someone telling you that they've received such an email from your email address.
This type of infection, which exclusively infests Windows systems, uses a technique known as "spoofing," (mentioned by the other posters) by which the virus or worm randomly selects an email address it finds on an infected computer. The virus/worm uses this address as the "From" address when it performs its mass-mailing routine rather than using the real email address of the user of the infected system. If your address happens to be the one randomly chosen, then anyone receiving one of these emails sees your email address as the apparent sender. In addition, if any messages bounce back (either because the address is no longer valid or the mail server finds the virus and rejects the message), you get hit with the bounce rather than the actual (unknowing) sender, even though the messages didn't come from your system and may be from addresses you've never heard of.
Here's an example; Jane is using a computer infected with a Windows email virus or worm. Jane is either not using an antivirus program or does not have current virus definitions. When the virus/worm activates and runs, it randomly searches the Windows address book and finds the email address of Bill. The worm inserts Bill's email address into the "From" portion of an infected message, which it then sends to Janet. Janet then contacts Bill and complains that he sent her an infected message. When Bill scans his computer, the virus checker does not find anything, because his computer is not infected.
There's nothing you can do if, as appears to be the case, the emails aren't coming from you. All you can do is notify all your friends and colleagues who have Windows systems and who would know your email address and get them to update their antivirus protection.
Regards.

I think I might have a virus or malware

I know that the likelihood is very slim that I have a virus but I have been having some problems lately. Earlier I had my laptop on and then I closed it and when I opened it back up and typed my password in it kept saying it was wrong. I even checked to see if caps lock was on and it was not. I had to restart my laptop for it to work. I also opened firefox today and it said that it was the first time I used it when it was not. The "you have never used this application before." message popped up. My Internet has also been slow. Graphics/images have not been loading on the Internet or they're pixilated and take a long time to become the resolution the image is at. I also have been having trouble with charging. I will leave it unplugged and then I'll charge it but it will say "battery not charging" but it is plugged in and it shows that it is plugged in it is just not charging but it is still not decreasing in battery power. If it is not a virus what is it and how could I stop these glitches from happening? Thank you.

Hi...
Doubtfull it's a virus or malware.
"battery not charging" but it is plugged in and it shows that it is plugged in it is just not charging but it is still not decreasing in battery power
Try troubleshooting the MagSafe adapter
If that didn't help, try Resetting the System Management Controller (SMC)
And since there are numerous issues, the startup disk may need repairing.
If you have Lion v10.7 insatlled, use Lion Recovery to repair the startup disk or reinstall the Mac OS X.
If you have a prior Mac OS X installed, help here > Using Disk Utility to verify or repair disks
And make sure there's enough free space on the startup disk. Right or control click the MacintoshHD icon on your Desktop.
Click Get Info. In the Get Info window you will see Capacity and Available. Make sure there's a minimum of 15% free disk space.

Is there an anti virus program for mac 9.1? Think I have a virus

I don't use an anti virus - using outlook express I got a strange message with no subject or sender - just a blank line. I tried deleting it but it wouldn't be deleted. Since then every time I try to delete it - it crashes the system. Same with Internet Explorer. And now my main screen icons will just 'disappear' from the screen then it crashes.
I tried looking for an antivirus but all of them seem to be for 9.2 or higher and I don't know what to do - if I upload to 9.2 will I loose any programs or files - new to this from the PC world. Thanks
G4 Mac OS 9.1.x

Hi, debbieM -
Welcome to Apple's Discussions.
It is doubtful that you have a virus - no virus which can harm OS 9 has been released in well over 10 years.
Getting a message every now and then with no subject and no body is not unusual. There are a couple of ways to get rid of a message without opening it.
Click on an adjacent message which is okay to delete, then hold down the Shift key and select the blank messages - none of them will open. Once you have selected all the ones for deletion, press the Delete key.
Or, click and hold on a message; or press the Control key and click and hold on a message. A contextual menu should appear; one of the choices in that menu shuld be to delete the messge. If you choose that, it should happen without the message ever opening.
Things you can do to make Outlook Express run smoother -
• Increase the Preferred memory allocation for it. Adding 20 or 30 thousand to the original Preferred amount, or even more if you have sufficient RAM, is not excessive.
Article #18278 - Assigning More Memory to an Application
• Compact the databases. To do that - with OE not running, hold down the Option key and start up OE. A splash screen will open, asking if you want to compact the database files - click okay, and follow the prompts.
For Internet Explorer, increase its Preferred memory, a lot. Adding 30 to 50 thousand is not excessive.
And now my main screen icons will just 'disappear' from the screen then it crashes.
That could indicate one or more other problems.
• How full is your hard drive? It is good practice to not allow your hard drive to get more than 85% full. When it does get more full than that, odd behaviors including an unstable OS begin occuring.
• Try rebuilding the desktop file (note that the desktop file has very little to do with the desktop). To rebuild the desktop safely, restart - immediately hold down the Shift key until you get the "Extensions Off" message; then release Shift and hold down the Command and Option keys until you get the splash screen asking if you want to rebuild the desktop; click yes (or okay). Once that's done, restart to turn your extensions back on.
• Boot to your most recent OS 9 Install CD, one valid for that machine - ideally it would be OS 9.1, the same as is on the machine. Once booted to the CD, run Disk First Aid from the Utilities folder on the CD. Let DFA have a look at your hard drive, and allw it to repair what it can - it may take more than one pass to do this, especially if the drive is rather full.
If DFA finds things it just can't fix, post back with the description of the problems found.
if I upload to 9.2 will I loose any programs or files....
Updating the OS from OS 9.1 to OS 9.2.1 should not cause any loss of files.
However, in general updating an OS is not a fix for a damaged or unstable OS. It is better to get the OS now on the drive healthy before updating it.
When the machine goes unstable (icons begin disappearing, etc.) are there any error messages?

New to Macs..how to tell if you have a virus or not?

I'm used to PCs which are virus ridden and sometimes you don't even know you have a virus on a PC. I was wondring if Macs have the same problem and if there is a way to tell if you have a virus or not. Anyone know?

Jack Q,
Like almost every operating system, OS X is vulnerable to viruses:
It's just not as vulnerable or attacked nearly as often as, ahem, Brand X.
What could you do if you suspect attack?
You could report your symptoms in this forum after the fact.
You could download a good antivirus scanner and check your machine for viruses.
Or...
You could take the preventive measures of:
1. creating a separate administrator account and making the account you use a normal user account,
2. locking down your OS X firewall,
3. using a properly configured NAT router between your computer and the Internet,
4. oh, and downloading and installing a good antivirus scanner (like this one),
since Apple recommends using antivirus software, and turning on Folder Sentry.
-Wayne

There is Red Icon at the top bar and it says I have a virus and things keep popping up saying I have a virus and need to do a scan and pay for some sort of software to complete the scan, someone told me that this is a virus in. How do I get rid of it?

There is Red Icon at the top bar and it says I have a virus and things keep popping up saying I have a virus and need to do a scan and pay for some sort of software to complete the scan, someone told me that this is a virus in. How do I get rid of it?

This could well be the notorious Mac Defender - which is an annoying program that tricks you into thinking that your Mac is infected with a virus, when the only infection is Mac Defender itself.
When surfing the web never EVER click on a link that says "Free anti-virus scan" or "Scan now" - they are nearly always scams which will end up infecting your computer. Although Macs are resistant to viruses, they're not resistant to user stupidity.
If you Google "Mac defender" then you'll find plenty of sites with instructions on how to remove this minor nuisance. Take this as a warning that you need to be more careful in your surfing habits.
Bob

I think I may have a virus on my MacBook laptop, ran disk utility, "filesystem verify failed." Help!

I'm running a MacBook laptop and thought I might have a virus b/c i was browsing online a couple of days ago when i clicked on a link that appeared to automatically start downloading a file. I tried to stop it from downloading by clicking "cancel" in the downloads box that came up, but it compleatly downloaded before i could hit cancel. No programs automatically opened and started runnning (that i could see), but I've noticed slow browsing since then.
I ran the disk utility, "verify disk," to see if there were any problems. It came back with this error message: "First aid failed: Disk Utility stopped verifying "Macintosh HD" because the following error was encountered:
Filesystem verify or repair failed"
The text is black inside the verifying history box until the last three lines, which say in red:
"Invalid node structure
Volume check failed
Error: Filesystem verify or repair failed."
Does this mean I have a virus? Are there other things I can do to confirm that I do or do not have a virus? How do I fix this problem?
I'm running Mac OS X 10.5.8.
Many thanks for your advice/comments in advance.

Probably because the directory on the disk is corrupt.
The error "invalid node structure" is one that will take either DiskWarrior or a reformat to fix.
It has not to with any malware.
Allan

How do i get rid of the pop ups that are constantly popping up on my mac. Everytime i search for anything on google an ad for mac keeper comes up and every time i access Netflix another stream of ads pop up... Do i have a virus HELPPPPPP

How do i get rid of the pop ups that are constantly popping up on my mac. Everytime i search for anything on google an ad for mac keeper comes up and every time i access Netflix another stream of ads pop up... Do i have a virus HELPPPPPP

You may have installed the "VSearch" trojan, perhaps under a different name. Remove it as follows.
Malware is constantly changing to get around the defenses against it. The instructions in this comment are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
Back up all data before proceeding.
Triple-click anywhere in the line below on this page to select it:
/Library/LaunchAgents/com.vsearch.agent.plist
Right-click or control-click the line and select
          Services ▹ Reveal in Finder (or just Reveal)
from the contextual menu.* A folder should open with an item named "com.vsearch.agent.plist" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
Repeat with each of these lines:
/Library/LaunchDaemons/com.vsearch.daemon.plist
/Library/LaunchDaemons/com.vsearch.helper.plist
/Library/LaunchDaemons/Jack.plist
Restart the computer and empty the Trash. Then delete the following items in the same way:
/Library/Application Support/VSearch
/Library/PrivilegedHelperTools/Jack
/System/Library/Frameworks/VSearch.framework
~/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
Some of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
From the Safari menu bar, select
          Safari ▹ Preferences... ▹ Extensions
Uninstall any extensions you don't know you need, including any that have the word "Spigot," "Trovi," or "Conduit" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
Reset the home page and default search engine in all the browsers, if it was changed.
This trojan is distributed on illegal websites that traffic in pirated content. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect much worse to happen in the future.
You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that this Internet criminal has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing, has not done so, even though it's aware of the problem. This failure of oversight has compromised both Gatekeeper and the Developer ID program. You can't rely on Gatekeeper alone to protect you from harmful software.
*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select
          Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.

How do I know if I have a virus on my iMac?

Today when I was browsing in safari, some ads popped up, and I thought maybe that could be a sign I got a virus. sorry for my ignorance about all these virus stuff
So, how can I know if a have a virus?
im using an iMac mid-2011, os x yosemite

1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.
Don't be put off by the complexity of these instructions. The process is much less complicated than the description. You do harder tasks with the computer all the time.
2. If you don't already have a current backup, back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.
There are ways to back up a computer that isn't fully functional. Ask if you need guidance.
3. Below are instructions to run a UNIX shell script, a type of program. As I wrote above, it changes nothing. It doesn't send or receive any data on the network. All it does is to generate a human-readable report on the state of the computer. That report goes nowhere unless you choose to share it. If you prefer, you can act on it yourself without disclosing the contents to me or anyone else.
You should be wondering whether you can believe me, and whether it's safe to run a program at the behest of a stranger. In general, no, it's not safe and I don't encourage it.
In this case, however, there are a couple of ways for you to decide whether the program is safe without having to trust me. First, you can read it. Unlike an application that you download and click to run, it's transparent, so anyone with the necessary skill can verify what it does.
You may not be able to understand the script yourself. But variations of the script have been posted on this website thousands of times over a period of years. The site is hosted by Apple, which does not allow it to be used to distribute harmful software. Any one of the millions of registered users could have read the script and raised the alarm if it was harmful. Then I would not be here now and you would not be reading this message.
Nevertheless, if you can't satisfy yourself that these instructions are safe, don't follow them. Ask for other options.
4. Here's a summary of what you need to do, if you choose to proceed:
☞ Copy a line of text in this window to the Clipboard.
☞ Paste into the window of another application.
☞ Wait for the test to run. It usually takes a few minutes.
☞ Paste the results, which will have been copied automatically, back into a reply on this page.
The sequence is: copy, paste, wait, paste again. You don't need to copy a second time. Details follow.
5. You may have started the computer in "safe" mode. Preferably, these steps should be taken in “normal” mode, under the conditions in which the problem is reproduced. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual. If you can only test in safe mode, do that.
6. If you have more than one user, and the one affected by the problem is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.
7. The script is a single long line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, though you may not see all of it in the browser window, and you can then copy it. If you try to select the line by dragging across the part you can see, you won't get all of it.
Triple-click anywhere in the line of text below on this page to select it:
PATH=/usr/bin:/bin:/usr/sbin:/sbin:/usr/libexec;clear;cd;p=(Software Hardware Memory Diagnostics Power FireWire Thunderbolt USB Fonts SerialATA 4 1000 25 5120 KiB/s 1024 85 \\b%% 20480 1 MB/s 25000 ports ' com.clark.\* \*dropbox \*genieo\* \*GoogleDr\* \*k.AutoCAD\* \*k.Maya\* vidinst\* ' DYLD_INSERT_LIBRARIES\ DYLD_LIBRARY_PATH -86 "` route -n get default|awk '/e:/{print $2}' `" 25 N\\/A down up 102400 25600 recvfrom sendto CFBundleIdentifier 25 25 25 1000 MB ' com.adobe.fpsaud com.apple.AirPortBaseStationAgent com.apple.installer.osmessagetracing ' ' 1274181950 464843899 1233118628 ' 51 5120 files );N5=${#p[@]};p[N5]=` networksetup -listnetworkserviceorder|awk ' NR>1 { sub(/^$[0-9]+$ /,"");n=$0;getline;} $NF=="'${p[26]}')" { sub(/.$/,"",$NF);print n;exit;} ' `;f=('\n%s: %s\n' '\n%s\n\n%s\n' '\nRAM details\n%s\n' %s\ %s '%s\n-\t%s\n' );S0() { echo ' { q=$NF+0;$NF="";u=$(NF-1);$(NF-1)="";gsub(/^ +| +$/,"");if(q>='${p[$1]}') printf("%s (UID %s) is using %s '${p[$2]}'",$0,u,q);} ';};s=(' s/[0-9A-Za-z._]+@[0-9A-Za-z.]+\.[0-9A-Za-z]{2,4}/EMAIL/g;/\/Shared/!s/(\/Users\/)[^ /]+/\1USER/g;s/[-0-9A-Fa-f]{22,}/UUID/g;' ' s/^ +//;/de: S|[nst]:/p;' ' {sub(/^ +/,"")};/er:/;/y:/&&$2<'${p[10]} ' 1s/://;3,6d;/[my].+:/d;s/^ {4}//;H;${ g;s/\n$//;/s: [^EO]|x([^08]|02[^F]|8[^0])/p;} ' ' 5h;6{ H;g;/P/!p;} ' ' ($1~/^Cy/&&$3>'${p[11]}')||($1~/^Cond/&&$2!~/^N/) ' ' /:$/{ N;/:.+:/d;s/ *://;b0'$'\n'' };/^ *(V.+ [0N]|Man).+ /{ s/ 0x.... //;s/[()]//g;s/(.+: )(.+)/ (\2)/;H;};$b0'$'\n'' d;:0'$'\n'' x;s/\n\n//;/Apple[ ,]|Genesy|Intel|SMSC/d;s/\n.*//;/\)$/p;' ' s/^.*C/C/;H;${ g;/No th|pms/!p;} ' '/= [^GO]/p' '{$1=""};1' ' /Of/!{ s/^.+is |\.//g;p;} ' ' $0&&!/ / { n++;print;} END { split("'"${p[41]}"'",b);for(i in b) print b[i];if(n<10) print "com.apple.";} ' ' $3~/[0-9]:[0-9]{2}$/ { gsub(/:[0-9:a-f]{14}/,"");} { print|"tail -n'${p[12]}'";} ' ' NR==2&&$4<='${p[13]}' { print $4;} ' ' END { $2/=256;if($2>='${p[15]}') print int($2) } ' ' NR!=13{next};{sub(/[+-]$/,"",$NF)};'"`S0 21 22`" 'NR!=2{next}'"`S0 37 17`" ' NR!=5||$8!~/[RW]/{next};{ $(NF-1)=$1;$NF=int($NF/10000000);for(i=1;i<=3;i++){$i="";$(NF-1-i)="";};};'"`S0 19 20`" 's:^:/:p' '/\.kext\/(Contents\/)?Info\.plist$/p' 's/^.{52}(.+) <.+/\1/p' ' /Launch[AD].+\.plist$/ { n++;print;} END { split("'"${p[41]}"'",b);for(i in b) print b[i]".plist";if(n<200) print "/System/";} ' '/\.xpc\/(Contents\/)?Info\.plist$/p' ' NR>1&&!/0x|\.[0-9]+$|com\.apple\.launchctl\.(Aqua|Background|System)$/ { print $3;} ' ' /\.(framew|lproj)|\):/d;/plist:|:.+(Mach|scrip)/s/:[^:]+//p ' '/^root$/p' ' !/\/Contents\/.+\/Contents|Applic|Autom|Frameworks/&&/Lib.+\/Info.plist$/ { n++;print;} END { if(n<1100) print "/System/";} ' '/^\/usr\/lib\/.+dylib$/p' ' /Temp|emac/{next};/(etc|Preferences|Launch[AD].+)\// { sub(".(/private)?","");n++;print;} END { split("'"${p[41]}"'",b);split("'"${p[42]}"'",c);for(i in b) print b[i]".plist\t"c[i];if(n<500) print "Launch";} ' ' /\/(Contents\/.+\/Contents|Frameworks)\/|\.wdgt\/.+\.([bw]|plu)/d;p;' 's/\/(Contents\/)?Info.plist$//;p' ' { gsub("^| |\n","\\|\\|kMDItem'${p[35]}'=");sub("^...."," ") };1 ' p '{print $3"\t"$1}' 's/\'$'\t''.+//p' 's/1/On/p' '/Prox.+: [^0]/p' '$2>'${p[43]}'{$2=$2-1;print}' ' BEGIN { i="'${p[26]}'";M1='${p[16]}';M2='${p[18]}';M3='${p[31]}';M4='${p[32]}';} !/^A/{next};/%/ { getline;if($5<M1) a="user "$2"%, system "$4"%";} /disk0/&&$4>M2 { b=$3" ops/s, "$4" blocks/s";} $2==i { if(c) { d=$3+$4+$5+$6;next;};if($4>M3||$6>M4) c=int($4/1024)" in, "int($6/1024)" out";} END { if(a) print "CPU: "a;if(b) print "I/O: "b;if(c) print "Net: "c" (KiB/s)";if(d) print "Net errors: "d" packets/s";} ' ' /r\[0\] /&&$NF!~/^1(0|72\.(1[6-9]|2[0-9]|3[0-1])|92\.168)\./ { print $NF;exit;} ' ' !/^T/ { printf "(static)";exit;} ' '/apsd|BKAg|OpenD/!s/:.+//p' ' (/k:/&&$3!~/(255\.){3}0/ )||(/v6:/&&$2!~/A/ ) ' ' $1~"lR"&&$2<='${p[25]}';$1~"li"&&$3!~"wpa2";' ' BEGIN { FS=":";p="uniq -c|sed -E '"'s/ +\$[0-9]+\$\$.+\$/\\\2 x\\\1/;s/x1$//'"'";} { n=split($3,a,".");sub(/_2[01].+/,"",$3);print $2" "$3" "a[n]$1|p;b=b$1;} END { close(p);if(b) print("\n\t* Code injection");} ' ' NR!=4{next} {$NF/=10240} '"`S0 27 14`" ' END { if($3~/[0-9]/)print$3;} ' ' BEGIN { L='${p[36]}';} !/^[[:space:]]*(#.*)?$/ { l++;if(l<=L) f=f"\n "$0;} END { F=FILENAME;if(!F) exit;if(!f) f="\n [N/A]";"file -b "F|getline T;if(T!~/^(AS.+ (En.+ )?text$|(Bo|PO).+ sh.+ text ex)/) F=F" ("T")";printf("\nContents of %s\n%s\n",F,f);if(l>L) printf("\n ...and %s more line(s)\n",l-L);} ' ' s/^ ?n...://p;s/^ ?p...:/-'$'\t''/p;' 's/0/Off/p' ' END{print NR} ' ' /id: N|te: Y/{i++} END{print i} ' ' / / { print "'"${p[28]}"'";exit;};1;' '/ en/!s/\.//p' ' NR!=13{next};{sub(/[+-M]$/,"",$NF)};'"`S0 39 40`" ' $10~/\(L/&&$9!~"localhost" { sub(/.+:/,"",$9);print $1": "$9;} ' '/^ +r/s/.+"(.+)".+/\1/p' 's/(.+\.wdgt)\/(Contents\/)?Info\.plist$/\1/p' 's/^.+\/(.+)\.wdgt$/\1/p' ' /l: /{ /DVD/d;s/.+: //;b0'$'\n'' };/s: /{ /V/d;s/^ */- /;H;};$b0'$'\n'' d;:0'$'\n'' x;/APPLE [^:]+$/d;p;' ' /^find: /d;p;' "`S0 44 45`" ' BEGIN{FS="= "} /Path/{print $2} ' ' /^ *$/d;s/^ */ /;' '/\./p' '/\.appex\/Contents\/Info\.plist$/p' );c1=(system_profiler pmset\ -g nvram fdesetup find syslog df vm_stat sar ps sudo\ crontab sudo\ iotop top pkgutil 'PlistBuddy 2>&1 -c "Print' whoami cksum kextstat launchctl sudo\ launchctl crontab 'sudo defaults read' stat lsbom mdfind ' for i in ${p[24]};do ${c1[18]} ${c2[27]} $i;done;' defaults\ read scutil sudo\ dtrace sudo\ profiles sed\ -En awk /S*/*/P*/*/*/C*/*/airport networksetup mdutil sudo\ lsof test osascript\ -e );c2=(com.apple.loginwindow\ LoginHook '" /L*/P*/loginw*' "'tell app \"System Events\" to get properties of login items'|tr , \\\n" 'L*/Ca*/com.ap*.Saf*/E*/* -d 1 -name In*t -exec '"${c1[14]}"' :CFBundleDisplayName" {} \;|sort|uniq' '~ $TMPDIR.. $ -flags +sappnd,schg,uappnd,uchg -o ! -user $UID -o ! -perm -600 $' '.??* -path .Trash -prune -o -type d -name *.app -print -prune' :${p[35]}\" :Label\" '{/,}L*/{Con,Pref}* -type f ! -size 0 -name *.plist -exec plutil -s {} \;' "-f'%N: %l' Desktop L*/Keyc*" therm sysload boot-args status " -F '\$Time \$Message' -k Sender kernel -k Message Req 'bad |Beac|caug|corru|dead[^bl]|FAIL|fail|GPU |hfs: Ru|inval|jnl:|last value [1-9]|n Cause: -|NVDA$|pagin|proc: t|Roamed|rror|ssert|Thrott|tim(ed? ?|ing )o|WARN' -k Message Rne 'Goog|ksadm|SMC:|suhel| VALI|ver-r|xpma' -o -k Sender fseventsd -k Message Req 'SL' " '-du -n DEV -n EDEV 1 10' 'acrx -o comm,ruid,%cpu' '-t1 10 1' '-f -pfc /var/db/r*/com.apple.*.{BS,Bas,Es,J,OSXU,Rem,up}*.bom' '{/,}L*/Lo*/Diag* -type f -regex .\*[cght] ! -name .?\* ! -name \*ag \( -exec grep -lq "^Thread c" {} \; -exec printf \* \; -o -true $ -execdir stat -f:%Sc:%N -t%F {} \;|sort -t: -k2 |tail -n'${p[38]} '/S*/*/Ca*/*xpc* >&- ||echo No' '-L /{S*/,}L*/StartupItems -type f -exec file {} +' '-L /S*/L*/{C*/Sec*A,Ex}* {/,}L*/{A*d,Ca*/*/Ex,Co{mpon,reM},Ex,In{p,ter},iTu*/*P,Keyb,Mail/B,Pr*P,Qu*T,Scripti,Sec,Servi,Spo,Widg}* -path \\*s/Resources -prune -o -type f -name Info.plist' '/usr/lib -type f -name *.dylib' `awk "${s[31]}"<<<${p[23]}` "/e*/{auto,{cron,fs}tab,hosts,{[lp],sy}*.conf,mach_i*/*,pam.d/*,ssh{,d}_config,*.local} {,/usr/local}/etc/periodic/*/* /L*/P*{,/*}/com.a*.{Bo,sec*.ap}*t {/S*/,/,}L*/Lau*/*t .launchd.conf" list getenv /Library/Preferences/com.apple.alf\ globalstate --proxy '-n get default' -I --dns -getdnsservers\ "${p[N5]}" -getinfo\ "${p[N5]}" -P -m\ / '' -n1 '-R -l1 -n1 -o prt -stats command,uid,prt' '--regexp --only-files --files com.apple.pkg.*|sort|uniq' -kl -l -s\ / '-R -l1 -n1 -o mem -stats command,uid,mem' '+c0 -i4TCP:0-1023' com.apple.dashboard\ layer-gadgets '-d /L*/Mana*/$USER&&echo On' '-app Safari WebKitDNSPrefetchingEnabled' "+c0 -l|awk '{print(\$1,\$3)}'|sort|uniq -c|sort -n|tail -1|awk '{print(\$2,\$3,\$1)}'" 'L*/P*/com.ap*.p*.ext*.*.*t -exec '"${c1[14]}"' :displayOrder" {} \;' );N1=${#c2[@]};for j in {0..9};do c2[N1+j]=SP${p[j]}DataType;done;N2=${#c2[@]};for j in 0 1;do c2[N2+j]="-n ' syscall::'${p[33+j]}':return { @out[execname,uid]=sum(arg0) } tick-10sec { trunc(@out,1);exit(0);} '";done;l=(Restricted\ files Hidden\ apps 'Elapsed time (s)' POST Battery safariexts Bad\ plists 'High file counts' User Heat System\ load boot\ args FileVault Diagnostic\ reports Log 'Free space (MiB)' 'Swap (MiB)' Activity 'CPU per process' Login\ hook 'I/O per process' Mach\ ports kexts Daemons Agents XPC\ cache Startup\ items Admin\ access Root\ access Bundles dylibs Apps Font\ issues Inserted\ dylibs Firewall Proxies DNS TCP/IP Wi-Fi Profiles Root\ crontab User\ crontab 'Global login items' 'User login items' Spotlight Memory Listeners Widgets Parental\ Controls Prefetching SATA Descriptors appexes );N3=${#l[@]};for i in 0 1 2;do l[N3+i]=${p[5+i]};done;N4=${#l[@]};for j in 0 1;do l[N4+j]="Current ${p[29+j]}stream data";done;A0() { id -G|grep -qw 80;v[1]=$?;((v[1]==0))&&sudo true;v[2]=$?;v[3]=`date +%s`;clear >&-;date '+Start time: %T %D%n';};for i in 0 1;do eval ' A'$((1+i))'() { v=` eval "${c1[$1]} ${c2[$2]}"|'${c1[30+i]}' "${s[$3]}" `;[[ "$v" ]];};A'$((3+i))'() { v=` while read i;do [[ "$i" ]]&&eval "${c1[$1]} ${c2[$2]}" \"$i\"|'${c1[30+i]}' "${s[$3]}";done<<<"${v[$4]}" `;[[ "$v" ]];};A'$((5+i))'() { v=` while read i;do '${c1[30+i]}' "${s[$1]}" "$i";done<<<"${v[$2]}" `;[[ "$v" ]];};';done;A7(){ v=$((`date +%s`-v[3]));};B2(){ v[$1]="$v";};for i in 0 1;do eval ' B'$i'() { v=;((v['$((i+1))']==0))||{ v=No;false;};};B'$((3+i))'() { v[$2]=`'${c1[30+i]}' "${s[$3]}"<<<"${v[$1]}"`;} ';done;B5(){ v[$1]="${v[$1]}"$'\n'"${v[$2]}";};B6() { v=` paste -d: <(printf "${v[$1]}") <(printf "${v[$2]}")|awk -F: ' {printf("'"${f[$3]}"'",$1,$2)} ' `;};B7(){ v=`grep -Fv "${v[$1]}"<<<"$v"`;};C0() { [[ "$v" ]]&&sed -E "$s"<<<"$v";};C1() { [[ "$v" ]]&&printf "${f[$1]}" "${l[$2]}" "$v"|sed -E "$s";};C2() { v=`echo $v`;[[ "$v" != 0 ]]&&C1 0 $1;};C3() { v=`sed -E "${s[63]}"<<<"$v"`&&C1 1 $1;};for i in 1 2;do for j in 0 2 3;do eval D$i$j'(){ A'$i' $1 $2 $3; C'$j' $4;};';done;done;{ A0;D20 0 $((N1+1)) 2;D10 0 $N1 1;B0;C2 27;B0&&! B1&&C2 28;D12 15 37 25 8;A1 0 $((N1+2)) 3;C0;D13 0 $((N1+3)) 4 3;D23 0 $((N1+4)) 5 4;D13 0 $((N1+9)) 59 50;for i in 0 1 2;do D13 0 $((N1+5+i)) 6 $((N3+i));done;D13 1 10 7 9;D13 1 11 8 10;D22 2 12 9 11;D12 3 13 10 12;D23 4 19 44 13;D23 5 14 12 14;D22 6 36 13 15;D22 7 37 14 16;D23 8 15 38 17;D22 9 16 16 18;B1&&{ D22 35 49 61 51;D22 11 17 17 20;for i in 0 1;do D22 28 $((N2+i)) 45 $((N4+i));done;};D22 12 44 54 45;D22 12 39 15 21;A1 13 40 18;B2 4;B3 4 0 19;A3 14 6 32 0;B4 0 5 11;A1 17 41 20;B7 5;C3 22;B4 4 6 21;A3 14 7 32 6;B4 0 7 11;B3 4 0 22;A3 14 6 32 0;B4 0 8 11;B5 7 8;B1&&{ A2 19 26 23;B7 7;C3 23;};A2 18 26 23;B7 7;C3 24;D13 4 21 24 26;B4 4 12 26;B3 4 13 27;A1 4 22 29;B7 12;B2 14;A4 14 6 52 14;B2 15;B6 14 15 4;B3 0 0 30;C3 29;A1 4 23 27;B7 13;C3 30;B3 4 0 65;A3 14 6 32 0;B4 0 16 11;A1 4 50 64;B7 16;C3 52;D13 24 24 32 31;D13 25 37 32 33;A2 23 18 28;B2 16;A2 16 25 33;B7 16;B3 0 0 34;B2 21;A6 47 21&&C0;B1&&{ D13 21 0 32 19;D13 10 42 32 40;D22 29 35 46 39;};D23 14 1 62 42;D12 34 43 53 44;D12 22 20 32 25;D22 0 $((N1+8)) 51 32;D13 4 8 41 6;D12 26 28 35 34;D13 27 29 36 35;A2 27 32 39&&{ B2 19;A2 33 33 40;B2 20;B6 19 20 3;};C2 36;D23 33 34 42 37;B1&&D23 35 45 55 46;D23 32 31 43 38;D12 36 47 32 48;D13 20 42 32 41;D13 37 2 48 43;D13 4 5 32 1;D13 4 3 60 5;D12 26 48 49 49;B3 4 22 57;A1 26 46 56;B7 22;B3 0 0 58;C3 47;D22 4 4 50 0;D23 22 9 37 7;A7;C2 2;} 2>/dev/null|pbcopy;exit 2>&-
Copy the selected text to the Clipboard by pressing the key combination command-C.
8. Launch the built-in Terminal application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.
Click anywhere in the Terminal window and paste by pressing command-V. The text you pasted should vanish immediately. If it doesn't, press the return key.
9. If you see an error message in the Terminal window such as "Syntax error" or "Event not found," enter
exec bash
and press return. Then paste the script again.
10. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. In most cases, the difference is not important. If you don't know the password, or if you prefer not to enter it, press the key combination control-C or just press return three times at the password prompt. Again, the script will still run.
If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.
11. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, there will be nothing in the Terminal window and no indication of progress. Wait for the line
[Process completed]
to appear. If you don't see it within half an hour or so, the test probably won't complete in a reasonable time. In that case, close the Terminal window and report what happened. No harm will be done.
12. When the test is complete, quit Terminal. The results will have been copied to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.
At the top of the results, there will be a line that begins with the words "Start time." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "Process completed" message to appear in the Terminal window. Please wait for it and try again.
If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.
13. When you post the results, you might see an error message on the web page: "You have included content in your post that is not permitted," or "You are not authorized to post." That's a bug in the forum software. Please post the test results on Pastebin, then post a link here to the page you created.
14. This is a public forum, and others may give you advice based on the results of the test. They speak only for themselves, and I don't necessarily agree with them.
Copyright © 2014 by Linc Davis. As the sole author of this work, I reserve all rights to it except as provided in the Use Agreement for the Apple Support Communities website ("ASC"). Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.

As of this morning, I am being redirected to uk.gomeo when i click on google search results in Safari. Do I have a virus?

Hi,
First time poster and very non-techy person here. I am being redirected to urls starting "uk.gomeo..." when clicking on Google search results in Safari. Quick search on this seems to suggest I have a virus. Not sure what to do or how to get rid of it. Not sure what could have caused it either. Downloaded Acrobat update couple of days ago which took hours, and Twitter account was hacked about a week ago. All software updates up to date. Any advice much appreciated.
Thanks.

Sorry editing that way doesn't work anymore in Lion. But you can look and see if there are any google entries in it. If there are not any google entries you can ignore my posts. If there are try this:
Open terminal
sudo nano /etc/hosts
When prompted for the sudo password - The correct password is your own (the password of the user logged into OS X, also the password you provide when doing system updates and so on).
now you can delete the line(s) that contain google and save.
Using your arrow keys go to the line containing google. Delete the line. Do the same for all lines containig google.
if you have a problem deleting, do a control-x to exit, and reply n to the modified buffer question. To save your changes do a control-o and hit enter , then do a control-x to quit.
Note: normally you never edit the hosts file, but if you see google entries in it then a malware programs has added them. It has been happening with a bogus flash update, that installs flash and asks for your system password. SOmething that seem quite normal when installing software. This bogus flash update makes the hosts modifications adding their own IP adrress for google.

What can I do if I think I have a virus?

QuestionWhat can I do if I think I have a virus?
AnswerSkip this and contact a professional
If you'd like to skip this guide and contact a professional, CLICK HERE.
There are a few steps you can take if you think you have a virus.
Use anti-virus software
One of the first things you should do is scan your computer with anti-virus software. Many Toshiba computers come with software for this purpose. You may choose to use an alternative, but you should only have one anti-virus program installed at a time.
Run your anti-virus program and ensure it's fully updated. Once it's updated, preform a full scan of your computer.
Disconnect accessories
If that doesn't help, you should disconnect any accessories connected to your computer. It's possible that the symptoms that you think are due to a virus could be due to an accessory.
Uninstall new software
An error with a new program might be causing problems that you think are being caused by a virus. To check this, uninstall any new programs that you installed near the time your computer's symptoms first appeared.
Perform system restore
If none of the previous suggestions helped, you might consider performing a system restore. This will return your computer's system files to a previous state. System settings will revert, and programs installed since the restore point was created might need to be reinstalled. Your documents shouldn't be changed.
For more information on performing a system restore, see one of the following articles:
How To: Understanding System Restore, Refresh, Reset, and, Recovery options in Windows 8 + Video
How To: Perform a system restore in Windows 7
Contact a professional or perform a system reset
Lastly, you might want to return your computer to factory default conditions. This is sometimes called a system reset or a system recovery. Note that this will remove all of your software and data that you added including applications, documents, photos, etc.
If you don't want to reset your computer and you'd like to contact a professional, CLICK HERE.
If you do want to proceed with a system reset, the system reset will remove the virus. For more information, see the following article:
How To: Understanding System Restore, Refresh, Reset, and, Recovery options in Windows 8 + Video

Some processes are critical, but many can be interrupted without any problem.
You can monitor your ongoing processes by going to Applications/Utiltities/Activity Monitor; pay particular attention to Disk Activity and Network. To interrupt a process, highlight the process, and tap "Quit Processes." This will interrupt or stop the runaway process.

I think I have a virus/spyware/adware???

Hello!
Last week while I was on www.google.com searching images, my Safari download manager popped up and began downloading "soft_58s7.exe". I immediately deleted it and assumed that I had clicked on an image that took me to a link that gave me a virus. I continued on using google, and when searching something completely different the download occurred again, and again. Each time I deleted the file from my computer by locating it in Finder and dragging it to the trash.
However, not I get random pop-ups everyone once in awhile while using sites that I know do not have pop-ups (Google search, aol.com, facebook). So I think I have a virus.
I also tried to download ProtectMac Antivirus, but it tells me that it cannot be downloaded because there is another antivirus software on my computer that it is not compatible with. I checked my applications and there was an app called "VirusProtect", which I drug to the trash as well. However I still received this message that ProtectMac could not be installed because of another antivirus application. I believe that I either did not uninstall VirusProtect correctly, which I need help doing because the icon is no longer there, or this is also an effect of the virus.
Please help!!
Im on a MacBook, running OS X 10 .5.8
Thank you!
I think this is also an effect of the virus because I have no virus protection on my com

.exe files are Windows executables that do not run on Macs, and simply downloading one will not give you a virus. Random pop-ups in your browser may occur but as long as you dismiss them there should nothing of concern.
You cannot delete virus protection software by dragging it to the Trash. You must use the appropriate uninstaller that is included with the software.
Also see:
Do You Need Anti-Virus Protection for Your Mac?
According to Rich Mogull's article, Should Mac Users Run Antivirus Software?,
"The reality is that today the Mac platform is relatively safe. There are hundreds of thousands of viruses and other malicious software programs floating around for Windows, but less than 200 are known to target the Mac, and many of those are aimed at versions of the Mac OS prior to Mac OS X (and thus have no effect on a modern Mac).
It's not that Mac OS X is inherently more secure against viruses than current versions of Windows (although it was clearly more secure than Windows prior to XP SP2); the numerous vulnerabilities reported and patched in recent years are just as exploitable as their Windows equivalents. But most security experts agree that malicious software these days is driven by financial incentives, and it's far more profitable to target the most dominant platform."
Mr. Mogull is a computer security expert. I recommend reading the entire article as it is quite informative.
For additional information on viruses, trojans, and spyware visit The XLab FAQs and read the FAQs on viruses and spyware.

I think i have a virus on my Macbook Pro, OS X Yosemite, how do i wipe my computer clean without erasing photos and music etc?

i think i have a virus on my Macbook Pro, OS X Yosemite, how do i wipe my computer clean without erasing photos and music etc?

The update alerts are fake, and are intended to dupe you into installing malware or disclosing private information so that your identity can be stolen.
You might get the alerts when visiting a website that has been hacked. Don't visit the site again. If applicable, notify the site administrator of the problem, but don't send email to an unknown party.
If you get the alerts when visiting more than one well-known website, such as Google, YouTube, or Facebook, then they may be the result of an attack on your router that has caused you to get false results from looking up the addresses of Internet servers. Requests sent to those sites are redirected to a server controlled by the attacker. It's possible, but less likely, that the DNS server used by your ISP has been attacked.
Back up all data.
Unlock the Network preference pane, if necessary, by clicking the lock icon in the lower left corner and entering your password. Cllck Advanced, open the DNS tab, and change the server addresses to the following:
          8.8.8.8
          8.8.4.4
That's Google DNS. Click OK, then Apply.
In Safari, select
          Safari ▹ Preferences... ▹ Privacy ▹ Remove All Website Data
and confirm. If you’re using another browser, empty the cache. Test. If the fake update alerts stop, see below. Otherwise, ask for instructions.
The router's documentation should tell you how to reset it to the factory default state. Usually there's a pinhole switch somewhere in the back. It may be labeled "RESET." Insert the end of a straightened paper clip or a similar tool and press the button inside for perhaps 15 seconds, or as long as the instructions specify.
After resetting the router, quit the web browser and relaunch it while holding down the shift key. From the Safari menu bar, select
          Safari ▹ Preferences... ▹ Privacy ▹ Remove All Website Data
and confirm. Do the equivalent if you use another browser. Open the Downloads folder and delete anything you don't recognize.
Then go through the router's initial setup procedure. I can't be specific, because it's different for every model. The key points are these:
1. Don't allow the router to be administered from the WAN (Internet) port, if it has that option. Most do.
2. Set a strong password to protect the router's settings: at least ten random upper- and lower-case letters and digits. Don't use the default password or any other that could be guessed. Save the password in your keychain. Any password that you can remember is weak.
3. If the router is wireless, or if you have a wireless access point on the network, use "WPA 2 Personal" security and set a different strong password to protect the network. If the router or access point doesn't support WPA 2, it's obsolete and must be replaced.
During the time the router was compromised, you were redirected to bogus websites. If you ever connected to a secure site and got a warning from your browser that the identity of the server could not be verified, and you dismissed that warning in order to log in, assume that your credentials for the site have been stolen and that the attacker has control of the account. This warning also applies to all websites on which you saw the fake update alerts.
Check the router manufacturer's website for a firmware update.
If you downloaded and installed what you thought was a software update, ask for instructions.

Do I have a virus on my iPhone4? I get new same ad boxes in 2 old game apps

Happy New Year to everybody!
I have an iPhone 4. I checked the questions regarding Viruses on iPhones, but could not find the same case as mine.
Around Christmas, I downloaded a few apps and deleted some of them again. Among those I kept were the Rummy Lite and Klatsch +.
After some games of Rommé a small box with ads appeared with no option to close it. It does not hinder to play, but disturbs.
I noticed that it disappeared sometimes after I put the iPhone on flight modus (coincidence?). Until now I thought it's ads from the Rommé app.
Now this: I played several times the Klatsch + app without any problem, but since today, I get exactly the same box with the same ads. I'm afraid to have a virus...
I read this could happen on jailbreaked iPhones. Mine is not jailbreaked.
Well, is there any competend help out there?
THANKS A LOT!
Smem78

Hi Roaminggnome,
thank you very much for your answer!
This is also what I initially thought. But the ads appeared 2 or 3 weeks after I had started to use the apps....
What do you think - is this programmed?
Thanks a lot
smem78

Could I have a virus

Similar Messages

Maybe you are looking for