Have had to re-download Mozilla due to malware - final step of installation asks if I will allow unknown publisher to make changes to computer - click YES and get message my computer is infected with malware - click NO and cannot open Mozilla
Long story short, unwisely allowed unknown publisher to make changes to my computer (which I thought was related to my anti-virus protection) last night. In the process, seems I allowed malware (called antivirus8). Neither Explorer or Mozilla were available - seemed to have been wiped out by antivirus8 thing. Explorer came back up (with favorites still intact) after doing full scans and a few other things...but Mozilla did not. Uninstalled Mozilla and re-downloaded. Final step of installation asked if I wanted to allow an unknown publisher (and I'm sorry to say I don't remember exactly what it was...something with safe in the name, I think) to make changes to my computer. Clicked NO and still not able to access Mozilla...redid and clicked YES and immediately got message that my computer was infected with malware. Have used Mozilla for years...hate just having Explorer. Anti-virus program is Kaspersky...ran full scan and it did not detect a thing...so I really don't know what happened!
Try running several malware scanners to see if Kaspersky missed anything. It is best to run several as each will pick up things that the others miss. Some scanners you can try are:
* [http://www.malwarebytes.org/mbam.php Malwarebytes]
* [http://www.superantispyware.com/ SUPERAntiSpyware]
* [http://www.lavasoft.com/products/ad_aware_free.php Ad-Aware]
* [http://www.microsoft.com/windows/products/winfamily/defender/default.mspx Windows Defender]
* [http://www.safer-networking.org/en/home/index.html Spybot S&D]
If the above malware scanners do not find any malware or can not clear it, you should consider posting in one of these forums for specialized malware removal help:
* http://forums.spybot.info/
* http://www.spywarewarrior.com/index.php
* http://forum.aumha.org/
* http://www.bleepingcomputer.com/forums/
* http://www.spywareinfoforum.com/
Similar Messages
-
Okay everybody...so I'm on the struggle bus so I'm going from Photoshop cs6 off my old broken laptop to trying to dwn Photoshop Cs2...either way I love PS. Now when I tried downloading it for free from Adobe...succeeded...but when I went to the download folder to install it, it said "Do you want to allow the following program from an unknown publisher to make changes to this computer?" I mean....what would you do? Is it safe to click yes....(Don Don Don...*sound effect*)..please help...
If you already have a license for photoshop cs6, why do you want photoshop cs2?
You can just install photoshop cs6 on your new computer provided both operating systems are the same kind (both mac or both windows)
If you don't have an install dvd for cs6, you can download photoshop cs6 from here and use your serial:
http://helpx.adobe.com/x-productkb/policy-pricing/cs6-product-downloads.html -
I have macbook pro and am on OS X Yosemite 10.10.2 . I am having lot of warning message on my browser that my computer is infected with malware/spyware and use mackeeper. How do I solve this issue . This is happening more on chrome and Safari browser
There is no need to download anything to solve this problem. You may have installed a variant of the "VSearch" ad-injection malware. Follow Apple Support's instructions to remove it.
If you have trouble following those instructions, see below.
Malware is always changing to get around the defenses against it. This procedure works as of now, as far as I know. It may not work in the future. Anyone finding this comment a few days or more after it was posted should look for a more recent discussion, or start a new one.
The VSearch malware tries to hide itself by varying the names of the files it installs. To remove it, you must first identify the naming pattern.
Triple-click the line below on this page to select it, then copy the text to the Clipboard by pressing the key combination command-C:
/Library/LaunchDaemons
In the Finder, select
Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.
A folder named "LaunchDaemons" may open. Look inside it for two files with names of the form
com.something.daemon.plist
and
com.something.helper.plist
Here something is a variable string of characters, which can be different in each case. So far it has always been a string of letters without punctuation, such as "cloud," "dot," "highway," "submarine," or "trusteddownloads." Sometimes it's a meaningless string such as "e8dec5ae7fc75c28" rather than a word. Sometimes the string is "apple," and then you must be especially careful not to delete the wrong files, because many built-in OS X files have similar names.
If you find these files, leave the LaunchDaemons folder open, and open the following folder in the same way:
/Library/LaunchAgents
In this folder, there may be a file named
com.something.agent.plist
where the string something is the same as before.
If you feel confident that you've identified the above files, back up all data, then drag just those three files—nothing else—to the Trash. You may be prompted for your administrator login password. Close the Finder windows and restart the computer.
Don't delete the "LaunchAgents" or "LaunchDaemons" folder or anything else inside either one.
The malware is now permanently inactivated, as long as you never reinstall it. You can stop here if you like, or you can remove two remaining components for the sake of completeness.
Open this folder:
/Library/Application Support
If it has a subfolder named just
something
where something is the same string you saw before, drag that subfolder to the Trash and close the window.
Don't delete the "Application Support" folder or anything else inside it.
Finally, in this folder:
/System/Library/Frameworks
there may an item named exactly
v.framework
It's actually a folder, though it has a different icon than usual. This item always has the above name; it doesn't vary. Drag it to the Trash and close the window.
Don't delete the "Frameworks" folder or anything else inside it.
If you didn't find the files or you're not sure about the identification, post what you found.
If in doubt, or if you have no backups, change nothing at all.
The trouble may have started when you downloaded and ran an application called "MPlayerX." That's the name of a legitimate free movie player, but the name is also used fraudulently to distribute VSearch. If there is an item with that name in the Applications folder, delete it, and if you wish, replace it with the genuine article from mplayerx.org.
This trojan is often found on illegal websites that traffic in pirated content such as movies. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect more of the same, and worse, to follow. Never install any software that you downloaded from a bittorrent, or that was downloaded by someone else from an unknown source.
In the Security & Privacy pane of System Preferences, select the General tab. The radio button marked Anywhere should not be selected. If it is, click the lock icon to unlock the settings, then select one of the other buttons. After that, don't ignore a warning that you are about to run or install an application from an unknown developer.
Then, still in System Preferences, open the App Store or Software Update pane and check the box marked
Install system data files and security updates (OS X 10.10 or later)
or
Download updates automatically (OS X 10.9 or earlier)
if it's not already checked. -
URGENT - ARE LATEST VERSIONS OF FIREFOX DOWNLOADS INFECTED WITH MALWARE/ADWARE?
It is VERY URGENT that the following is looked into by Mozilla Firefox and anyone else who uses this browser, as it would appear that the latest installation downloads from Mozilla Firefox (GB-EN) for versions 28.0 and 29 (and quite possibly previous versions) ARE THEMSELVES INFECTED with malware/adware. This is the only conclusion I can come to after repeated resets of my computers to factory settings, and everything is fine until I re-download Mozilla Firefox and select it as default browser, then the following happens when my Office 365 account is accessed:
In Office 365, if I select the 'File' menu and 'Office Account', then click on the 'Manage Account' button, TWO tabs on the default browser (if it is Firefox) are opened and the SECOND tab is a malware/adware page, usually called something like www.74f.com or another URL or server with a number, and sometimes this has an email address on the adware page that opens. This only happens when Mozilla Firefox is the default browser - it does not happen in Internet Explorer. In IE, the second tab is the correct tab for the Account in Office 365.
This has caused me to do repeated resets to factory default settings on my two laptops, one running Windows 8.1 64 bit and one running Windows 7 64 bit, and everything is fine when re-installation of all programs is complete and IE is the default browser. As soon as Mozilla Firefox is downloaded - the latest versions 28 or 29, and Firefox is set as the default browser, the malware/adware tab reopens in Office 365, as above.
On doing a search on what www.74f.com is, it appears to be registered on servers in China.
The malware/adware seems to be directly connected with the download and installation of the latest versions of Firefox. PLEASE INVESTIGATE URGENTLY - as although Firefox has always been my favourite browser, there is no way I am ever going to use it again unless this is solved, as I am fed up with doing factory resets of my computers to solve this. Each time I re-install Firefox it happens again, to a previously clean system.First - Relax
So to clarify what the issue is. What apparently no one of our IT experts could figure out in a YEAR!
If you trace everything with Procmon you will see that this is a simple issue of not putting Quotation marks around Command line arguments.
That is what Office is executing as you click that "Manage Account" button.
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" http://o15.officeredir.microsoft.com/r/rlidOfficeManagementPortal?ver=15&app=outlook.exe&clid=111&p1=1&lidhelp=1111&liduser=1111&lidui=1111&MachineKey=11111-111-111111 66F
So there is a MachineKey generated with a space in it.
What happens if you execute this in cmd… Correct – Firefox will assume that 66F is a 2nd argument in this case a URL and translate it to www.66f.com after not finding a DNS record for 66F in the local environment.
Of course ChinaHackers will figure this out too and maybe use this… but then I couldn’t find anything strange with the 66f website.
As in this case: "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" FirstTab 2ndTab
This is not a Firefox issue MS should just bloody put his Urls in Quotation marks!
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" “http://o15.officeredir.microsoft.com/r/rlidOfficeManagementPortal?ver=15&app=outlook.exe&clid=111&p1=1&lidhelp=1111&liduser=1111&lidui=1111&MachineKey=11111-111-111111 66F”
Now feel free to write Microsoft and tell them thanks for wasting 15min of my day. -
I have an iphone 4S and i cant download apps onto it. Everytime I click to install, the icon appears on the homescreen with 'waiting' under it and then disappears. Can anyone help? Its driving me mental!
I found this very good
http://ipadhelp.com/ipad-help/iphone-ipad-apps-stuck-waiting/ -
We have been blocked from Facebook with a message that says we have been infected with malware on our iPad 2, what can we do?
You don't have malware on your iPad. Report the issue to FaceBook: http://www.facebook.com/help/
-
My phone was stolen and my icloud is loged in and now my ipad is disabled and now asking for activation and it says there that i have to put my icloud account and i tried loging in my account but it says that it cannot open with that icloud account what do i do????
Welcome to the Apple Community Robin.
Contact AppleCare(or Apple ID Support), upon speaking to an operator you should explain that your problem is related to your Apple ID, this way you will not be charged for assistance, even if you don’t have an AppleCare plan. -
Do you have any exp. guys that your ipad3 infected with malware virus?
Do you have any exp. guys that your ipad3 infected with malware virus?
There is no malware for the iPad, unless you have jailbroken it. If you have not jailbroken it, whatever problem you are having that prompts you to ask about viruses is not caused by malware, guaranteed.
-
Tried to sign in on my Facebook account and it would not let me as it says my computer/device is infected with malware and I must remove the malware before I can continue...So how do I do that on an iPad? I was just signed in to FB an hour earlier on here and had no message then. Can someone help me figure this out please. I had no idea the iPad could also get malware....Thanks!
What you may have got was an ad, that tells you you have malware, when in fact when you either click on the ad or try to X out of the ad, that's when it installs the malware on your computer. It's a trick. If it's indeed like that, that's when it's good for the iPad, since it can't get the junk they're trying to push out.
-
Is my computer infected with Malware?
I know it is unlikely since I am on the allegedly impenetrable OS of Mac, but a couple of things happened lately whilst I was browsing the internet on Safari that make me think I may have.
A couple of days ago whilst I was using a site for streaming music, I clicked on a link, two specific songs in fact, and it immediately took me to a page warning me that the site may contain potentially harmful malware. This may have been my OS alerting me, I don't know.
Following that, yesterday evening while I was browsing, I noticed a pop-up advert for a mobile phone company or something and I couldn't understand how it had appeared. So I clicked the back button on it and it seemed to go back momentarily to some site called sublimemedia.com and then return to the original pop-up that was causing me concern.
To the best of my knowledge I did not click on anything that would have directed me this to pop-up, and it happened several times of it's own accord, sometimes opening a new page, and one time it seemed to redirect the tab I was in to a pop-up advert whilst opening a new page with the page I was originally looking at, if you know what I mean...
I have Safari set so as to only open pop-ups from sites that I navigate to.
So do I have some form of malware, adware, scareware on my computer and if so how do I get rid of it?
I followed the instruction on this page.
http://www.macworld.com/article/60823/2007/10/trojanhorse.html
but it did not seem to detect anything untoward.
I have also run ClamXav on everything and again my computer appears to be virus free.
Message was edited by: STU9000A couple of days ago whilst I was using a site for streaming music, I clicked on a link, two specific songs in fact, and it immediately took me to a page warning me that the site may contain potentially harmful malware. This may have been my OS alerting me, I don't know.
It was not the OS alerting you. The OS doesn’t send you messages in Web Pages. This is a simple “frighten the unwary computer user” web advert. Ignore it.
I noticed a pop-up advert for a mobile phone company or something and I couldn't understand how it had appeared. So I clicked the back button on it and it seemed to go back momentarily to some site called sublimemedia.com and then return to the original pop-up that was causing me concern.
This is exactly the same.
I have Safari set so as to only open pop-ups from sites that I navigate to.
It’s not perfect, I’m afraid and every now and then one will get past it.
So, no you’re not infected with Malware, these are sneaky forms of web advertising.
Regards
TD -
Half a million Mac computers 'infected with malware'... is this a legitimate concern?
Received an email "Half a million Mac computers 'infected with malware' "... is this a legitimate concern?
The email itself may be suspect but the story is not:
http://arstechnica.com/apple/news/2012/04/flashback-trojan-reportedly-controls-h alf-a-million-macs-and-counting.ars
although the original source (a Russian anti-virus company ) may or may not be genuine, Ars Technica is highly respected.
As limnos says, you should disable Java (not Javascript) and also turn off 'Open safe files after downloading' in Safari Preferences/General.
You should also read this:
Flashback Trojan - Detection, and how to remove (with caution):
http://www.f-secure.com/v-descs/trojan-downloader_osx_flashback_i.shtml -
I have been editing a document on my MacBook Pro and iPad, which has the newer versions of Pages. Now, I cannot open on My MacBook. It says I need a newer version of OS. However, I'm not showing a newer version being availabe!!! Can anyone help???
That is Pages for iPad v2.0, which Pages '09 v4.3 can't read.
You need to either stick with the older version of Pages on the iPad or get Pages 5 for the Mac which is only available if you are running OSX 10.9 Mavericks.
Unfortunately that is not the end of your woes because Apple has made iCloud convert the files to Pages 5 now, and Pages 5 has over 90 features deleted on top of doing a shocking job of converting older Pages files.
Peter -
Download and convert Youtube video to MP3---Just with one click
Download and convert Youtube video to MP3---Just with one click
Last week, when wandering around the Youtube watch.com, I was enthralled with the theme song of "Lost", especially the words of the song "I found out, on the corner of first and amistad, where the west was all but won all weeklong, smoking his last cigarette, I said: "Where you been?" He said: "ask anything.""......"
I couldn’t help expecting to save this song to my personal players. What a delightful thing listening to the song while walking or waiting for a bus! Okay, do you have the same experience as me? When hearing an exciting speech or dialogue, are you thirsty for downloading them and saving as your best memory?
Download, convert Youtube to mp3?—yes, you can.
Anna, one of my best friends, has posed a question "I have a Mac notebook and I only need the audio (mp3 music) of a certain Youtube movie, what shall I do?" The solution to the problem is shown as below:
Step one: Install a Youtube Converter for Mac as follows:
Step two: import the URL of Youtube video (or batches of URL) you wanna convert using "Add URL" icon. Select output format like audio (MP3) by "Settings" and customize your output file path with "Browse".
Step three: If you want your output audio much better, you can set the audio resolution like Bit Rate, Channels or Sample Rate presented in the following picture.
Step four: Click "Ok” button, it automatically download and convert your youtube videos simultaneously. After a few minutes, you can get the desirable audio (mp3) you want and enjoy it on any portable devices.
Download, convert Youtube videos to iPod, iPhone, iPhone 3Gs, PSP, Creative Zen, Zune, iRiver, and etc. --- done by one click.
Generally, if you want to download a Youtube video and then convert them to MP3 for your mobile devices, you need two Youtube tools: Youtube Downloader and Youtube Converter. But, now, with Pavtube Youtube Converter for Mac, you can both download and convert massive videos by clicking one "Ok" button.
Now, all the best, you can enjoy versatile Youtube music at a waiting room, on a bus, traveling, walking around the park or lying on your bed..Youtube's ToU specifically state that downloads of any content is prohibited unless there is a download button available for a particular video.
-
I had an update message on my phone and I clicked yes to update. Now the phone has a picture of itunes and usb connection, but can't be used. itunes says I have to restore my phone, but will lose all the data. Is there anything else I can do? I really don't want to lose all my pictures and other data.
It's in recovery mode. There is nothing left on the phone at all. If you didn't back it up before you started, your data is gone.
you have no choice but to restore at this point. -
My gen 3 iPod Touch seems to have duplicated all my music since updating to IOS 5 so that it now only holds half as much. What can I do about it? I'm using the same iTunes library with OS 10.6 and all software up to date.
Is the camera damaged? Could be a hardware problem.
Try:
Close the Camera app in the multitasking bar, then try again.
Restart/Reset/Restore your iPod. In that order.
Maybe you are looking for
-
Incomming payment screen - form settings
On form settings for incomming payment screen, the box show cust ref no is checked yet the field does show on the grid. Version 2007 Anyone have any idea why?
-
I can't receive or send messages in my group.
I can receive and send messages just fine to individual people, but in the group my messages won't send. [12:11:10 PM] System: MSNP: Connection Data (MSNP24): * Status: LoggedIn * Server Current: BN1MSGR1011310.gateway.messenger.live.com * Server Sav
-
Hello I have an iBook G4 with a disk issue! Help
Hello I have an iBook G4 and my disk/CD drive has disappeared. I also have a disk stuck in it. it spins on start up but nothing, I've tried all the reset and hold options and no luck. is there a driver i could install to find it or do i need to repla
-
I hate my Motorola Droid Razr! After 3 years it has turned out to be a real crappy cell phone. Does not belong in the "smartphone" category. Forever freezes up, doesn't respond to anything I ask it to do. I am purchasing another brand of smartphone a
-
Hi , I am loading some text data from R/3 to Bw WHERE i CAN SET THE LANG = EN beacause it is getting even the german descriprtions