GoDaddy claims my Mac is infected

Today I received an email from GoDaddy with the following information in it:
"Your hosting account had uploaded infected content, which we have removed. Please scan your local computer with current virus definitions prior to uploading any further content as future uploads of infected content can result in account suspension"
I only use one computer to attach/upload information to the GoDaddy site and it is a MacBook Pro running OS X. I have never worried about anti-virus software so I have to admit I was very surprised when this email arrived in the Inbox. The software for the website is DreamWeaver, which I know is cross-platform, but I have only ever used this MacBook Pro to upload content to the server. Is it possible my GoDaddy account has been compromised? I checked the website and it still looks fine. Does anyone have any ideas on how I can "scan" my MacBook Pro and send the results back to GoDaddy to show that it is fine?
Thank you,
Book

Thank you for the comments. I have downloaded and installed ClamXav on the MacBook Pro and it is currently running the scan. I also have an voice mail from Go Daddy tech support with the call back number matching one of their phone numbers. As soon as the scan is complete, I am going to call them directly and request more information. I thought about the possibility of a hack, still haven't ruled it out, but the password would be hard to figure out, in my opinion. Still, I am going to change the password as soon as I get the scanning and the phone call out of the way. What I find odd about a possible hack, and not being a hacker maybe I don't see it, is that nothing has changed on the website. I checked out the main page and all my subpages and they all look fine. Now, I am not going to say there is not something going on behind the scenes, but I would think that the files/wording/pictures/something would have been changed if the site was hacked. Am I being naive in my assumption? I can accept that as fact if you guys feel that may be the case. But for now, I will let the scan run then call GD tech support at the direct number from the website itself and see if I can get to the bottom of all this. Once I have found a resolution, I will post it back here for reference.
Thanks!

Similar Messages

How can you find out if your mac is infected with the flash back virus

how can you find out if your mac is infected with the flash back virus?

F-Secure's Flashback removal tool - http://www.f-secure.com/v-descs/trojan-downloader_osx_flashback_k.shtml - supposedly also works on OSX 10.5 and earlier.
05 Apr 2012 How to Detect and Protect Against Updated Flashback Malware - http://tidbits.com/article/12918 - detection methods for multiple browsers and general information
Leopard and earlier users see recommendations at: https://discussions.apple.com/thread/3872491

Hello there, if i had installed a windows on bootcamp and for some reasons the windows had infected, does the mac gets infected or harmed? sorry im transforming from pc to mac and i just want to know .. thank you

if i had installed a windows on bootcamp and for some reasons the windows had infected, does the mac gets infected or harmed?

Yes, when you run Win via BootCamp, the computer is a "real" Windows computer and just as vulnerable as any other Windows machine. It its the operating system, not the hardware, that creates vulnerability.
However, it also means you basicaly have two independent computers that happen to share the same physical space. The Mac side, as others have said, is not vulnerable to assaults that are made on the Windows side, so do not go installing a pile of anti-virus garage on the Mac side. It is unneeded at this time and will basically ruin your Mac's performance. The Windows side WILL need some form of protection.

Half a million Mac computers 'infected with malware'... is this a legitimate concern?

Received an email "Half a million Mac computers 'infected with malware' "... is this a legitimate concern?

The email itself may be suspect but the story is not:
http://arstechnica.com/apple/news/2012/04/flashback-trojan-reportedly-controls-h alf-a-million-macs-and-counting.ars
although the original source (a Russian anti-virus company ) may or may not be genuine, Ars Technica is highly respected.
As limnos says, you should disable Java (not Javascript) and also turn off 'Open safe files after downloading' in Safari Preferences/General.
You should also read this:
Flashback Trojan - Detection, and how to remove (with caution):
http://www.f-secure.com/v-descs/trojan-downloader_osx_flashback_i.shtml

My mac is infected with viruses, Safari can not normally search for constantly appear commercials and some unknown site. What to do? antivirus free program that you recommend?

my mac is infected with viruses, Safari can not normally search for constantly appear commercials and some unknown site. What to do? antivirus free program that you recommend?

You may have installed the "VSearch" trojan, perhaps under a different name. Remove it as follows.
Malware is constantly changing to get around the defenses against it. The instructions in this comment are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
Back up all data before proceeding.
Step 1
From the Safari menu bar, select
          Safari ▹ Preferences... ▹ Extensions
Uninstall any extensions you don't know you need, including any that have the word "Spigot," "Trovi," or "Conduit" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
Reset the home page and default search engine in all the browsers, if it was changed.
Step 2
Triple-click anywhere in the line below on this page to select it:
/Library/LaunchAgents/com.vsearch.agent.plist
Right-click or control-click the line and select
          Services ▹ Reveal in Finder (or just Reveal)
from the contextual menu.* A folder should open with an item named "com.vsearch.agent.plist" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
Repeat with each of these lines:
/Library/LaunchDaemons/com.vsearch.daemon.plist
/Library/LaunchDaemons/com.vsearch.helper.plist
/Library/LaunchDaemons/Jack.plist
Restart the computer and empty the Trash. Then delete the following items in the same way:
/Library/Application Support/VSearch
/Library/PrivilegedHelperTools/Jack
/System/Library/Frameworks/VSearch.framework
~/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
Some of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
This trojan is distributed on illegal websites that traffic in pirated content. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect much worse to happen in the future.
You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that this Internet criminal has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing, has not done so, even though it's aware of the problem. This failure of oversight has compromised both Gatekeeper and the Developer ID program. You can't rely on Gatekeeper alone to protect you from harmful software.
*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select
          Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.

I am being told by something called buycherries that my mac is infected . Are they associated with Apple or are they a hoax

Whilst seaching the net Ihave been told by two pop ups that my I Mac OSx 4 has been infected by malware. Both pop ups claim they are Apple generated , one of them was from something call "buycherries" can anyone assist. Are they genuine or are they a hoax

Apparently a hoax. Please see this recent Knowledge base article.
http://support.apple.com/kb/HT4650

HT5228 How do I know if my mac is infected?

I am new to mac and just saw media reports about 600K infected macs. How do I know if mine is infected?

Launch the Terminal application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ If you’re running Mac OS X 10.7 or later, open LaunchPad. Click Utilities, then Terminal in the page that opens.
Step 1
Copy or drag — do not type — the line below into the Terminal window, then press return:
launchctl getenv DYLD_INSERT_LIBRARIES
Post the lines of output,if any, that appear below what you just entered (the text, please, not a screenshot.)
Step 2
Repeat with this line (triple-click anywhere in it to select the whole line):
find /Applications /System/Library/CoreServices -type d -name *.app -exec defaults read {}/Contents/Info LSEnvironment \; 2> /dev/null | grep DYLD_INSERT_LIBRARIES
If you get no output from either step, you're not infected with any variant of Flashback that I know of.

How to sync GoDaddy email with Mac Mail (sent items)

Hi,
I send email from my iPhone using my GoDaddy email for work. How can I get the sent email (from the iphone) to show up in Mac Mail's "sent list" for the same account?
TIA!
Brian

irrelevant

Half a million Mac computers 'infected with malware'?

I just read this: http://www.bbc.co.uk/news/science-environment-17623422
It includes a link to this: http://www.f-secure.com/v-descs/trojan-downloader_osx_flashback_i.shtml -- apparently details about “how to confirm if a machine is infected and how to remove the Trojan” – but it seems to jump straight in with “Manual disinfection is a risky process; it is recommended only for advanced users” – and instructions to remove the malware, rather than just checking to see if infected. I’m not an advanced user. Where do I find "Terminal"? Where do I begin, or just continue burying my head in the sand, believing that Mac is perfect?

Where do I find "Terminal"
The Utilities folder.
Is there something going on wit your Mac that makes you believe that it's infected? If not, then you're probably fine.
Did you ever download and install Java for OS X Lion? If not, then you're fine.
Have you ran Software Update to download and isntall the 2 patches Apple has released in the last week? If so, then you're fine

I have received a message stating that my mac is infected by viruses and I should download MacProtector.mpkg. Is this spam or a real alert from my iMac?

I have received a message stating that my imac is infected by viruses and that I should download and install MacProtector.mpkg. Is this spam or a real alert from my iMac?

As long as whatever installer got downloaded to your machine never ran, and if it ran you quit the installer and didn't let it complete, then you're fine. For more information about this trojan, which is a variant of the MacDefender trojan, see:
http://www.reedcorner.com/news.php?s=macdefender
* Disclaimer: links to my pages may give me compensation.

I think my mac is infected with a virus, every time I use the internet pop up pages appear constantly what should I do?

I think I may have accidentally opened an email attachment which was fake. Ever since I did this my mac constantly opens pop up pages with ads every time I click the mouse. I have checked in preferences and it says pop up pages are blocked but still they keep appearing. How do I stop this?

You may have installed the "VSearch" trojan, perhaps under a different name. Remove it as follows.
Malware is constantly changing to get around the defenses against it. The instructions in this comment are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
Back up all data before proceeding.
Step 1
From the Safari menu bar, select
          Safari ▹ Preferences... ▹ Extensions
Uninstall any extensions you don't know you need, including any that have the word "Spigot," "Trovi," or "Conduit" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
Reset the home page and default search engine in all the browsers, if it was changed.
Step 2
Triple-click anywhere in the line below on this page to select it:
/Library/LaunchAgents/com.vsearch.agent.plist
Right-click or control-click the line and select
          Services ▹ Reveal in Finder (or just Reveal)
from the contextual menu.* A folder should open with an item named "com.vsearch.agent.plist" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
Repeat with each of these lines:
/Library/LaunchDaemons/com.vsearch.daemon.plist
/Library/LaunchDaemons/com.vsearch.helper.plist
/Library/LaunchDaemons/Jack.plist
Restart the computer and empty the Trash. Then delete the following items in the same way:
/Library/Application Support/VSearch
/Library/PrivilegedHelperTools/Jack
/System/Library/Frameworks/VSearch.framework
~/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
Some of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
The problem may have started when you downloaded and ran an application called "MPlayerX." That's the name of a legitimate free movie player, but the name is also used fraudulently to distribute VSearch. If there is an item with that name in the Applications folder, delete it, and if you wish, replace it with the genuine article from mplayerx.org.
This trojan is often found on illegal websites that traffic in pirated content such as movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow.
You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that the Internet criminal behind VSearch has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing has not done so, even though it's aware of the problem. This failure of oversight has compromised both Gatekeeper and the Developer ID program. You can't rely on Gatekeeper alone to protect you from harmful software.
*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select
          Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.

HT4811 I have tried to find out more about recent virus hitting apple computers through 'adobe' downloading. can anyone help me how to find out if my Mac is infected ?

How do I find out if FileVault is enabled ?

To answer your subject line, see About the Flashback malware. (Note that my pages contain links to other pages that promote my services, and this should not be taken as an endorsement of my services by Apple.)
I'm not sure what that has to do with FileVault, but to answer that question, go to System Preferences -> Security & Privacy -> FileVault.

I received a call saying a Trojan worm is affecting my Mac. The call was from India. Is this a scam? Or can I find a way of checking my computer myself? On 4-12-14, I paid to have my firewall fixed which had let in some maleware. The firewall is on now.

Today, 4-26-14 I received a call from India claiming my Mac was infected with a malware: a trojan worm and they were from Microsoft Support group. I did not believe them and ended the call. On 4-12-14 I paid a 3rd party vendor to fix my system connection for my wireless HP printer. The 3rd party found that I had not set up my Firewall correctly and had let in 31 malwares. It has been fixed, the Firewall is in place and all seems fine both on the Mac and with printer operations.
The question is, can I check to see that all is fine on my Mac easily so I can do my own assessment versus listening to a potential scam to sell me unnecessary computer software fixes?

It's a scam, ignore it. You don't have to worry about malware however your computer uses a pretty old version of OS X, if you can update the computer to run Mavericks 10.9.x I would strongly recommend that. This way your computer will remain even more safe as it will then be using a version of OS X that Apple continues to update and provide security updates for. The minimum system specifications for Mavericks are:
To install Mavericks, you need one of these Macs:
iMac (Mid-2007 or later)
MacBook (13-inch Aluminum, Late 2008), (13-inch, Early 2009 or later)
MacBook Pro (13-inch, Mid-2009 or later),
MacBook Pro (15-inch or 17-inch, Mid/Late 2007 or later)
MacBook Air (Late 2008 or later)
Mac mini (Early 2009 or later)
Mac Pro (Early 2008 or later)
Xserve (Early 2009)
Your Mac also needs:
OS X Mountain Lion, Lion, or Snow Leopard v10.6.8 already installed
2 GB or more of memory (4GB or more STRONGLY recommended)
8 GB or more of available space

Is their anyway to run anti-spam against an inbox of already downloaded mail?

I need to clean a legacy inbox and would love to be able to run something to identify known spam messages. All I can find are tools for preventing spam on the way in.

There are very few Mac Viruses, mainly because the Mac code is written more defensively than Windows. Some of the credit goes to the developers of Unix, some to the developers of Mac OS X.
Also, if you have your own Router and use DHCP, the Firewall provided gives good protection from random attacks from the Web.
The current wave of Mac scare-ware is a group of Trojan Horse programs called Mac Defender and similar names. Appearing out of nowhere, It claims your Mac is infected, and asks to run a detailed scan. This used to be an obvious hoax, because the window the old ones drew had Microsoft Windows Icons. Now they are drawing Mac windows on Macs.
Once you have allowed it to begin, it requests your Admin password. If you supply your Admin password, it can do ANYTHING to your Mac. This is similar to a scam where a stranger in a Big Black Car rolls up to you and offers you candy, then to go for a ride.
Strangers who spontaneously offer you "candy" and other free stuff on the internet are not your friends. They will take you and your computer for a ride, and you may never be seen again. Do not allow Safari to [√] open "safe" files automatically. Do not provide your Admin password, to any strangers, ever.
If you maintain your presence of mind long enough to refuse generous offers from strangers to scan your Mac, and refrain from providing your Admin password to strangers, it is very unlikely that your Mac is infected with anything. If you are exceptionally paranoid, you can proactively seek out free anti-virus software such as ClamXAV or Sophos Anti-Virus. These programs are respected, but will have nothing to do, and may slow down your Mac and make installing new software more difficult.
My recommendation it to suggest to your friends that they get a Mac. If you tell them you have never had a virus, they will find that unbelievable, and based on their own experience, will likely call you a liar.

Does mac can be infected with virus?

i've been browsing using firefox and suddenly there is an alert that my mac is infected.. then it prompts to scan and asked to remove the infected applications.. i did not proceed to remove it and just close the windows.. is this true?

i did not proceed to remove it and just close the windows.
Hopefully you did not make any purchases, give out your billing information?
Anytime you see an offer such as that, quit your browser. You can always relaunch your browser.
It's just an ad trying to get you to purchase security software you do not need.
Never accept unsolicited offers from the internet.

GoDaddy claims my Mac is infected

Similar Messages

Maybe you are looking for