I think I have a virus/spyware/adware???
Hello!
Last week while I was on www.google.com searching images, my Safari download manager popped up and began downloading "soft_58s7.exe". I immediately deleted it and assumed that I had clicked on an image that took me to a link that gave me a virus. I continued on using google, and when searching something completely different the download occurred again, and again. Each time I deleted the file from my computer by locating it in Finder and dragging it to the trash.
However, not I get random pop-ups everyone once in awhile while using sites that I know do not have pop-ups (Google search, aol.com, facebook). So I think I have a virus.
I also tried to download ProtectMac Antivirus, but it tells me that it cannot be downloaded because there is another antivirus software on my computer that it is not compatible with. I checked my applications and there was an app called "VirusProtect", which I drug to the trash as well. However I still received this message that ProtectMac could not be installed because of another antivirus application. I believe that I either did not uninstall VirusProtect correctly, which I need help doing because the icon is no longer there, or this is also an effect of the virus.
Please help!!
Im on a MacBook, running OS X 10 .5.8
Thank you!
I think this is also an effect of the virus because I have no virus protection on my com
.exe files are Windows executables that do not run on Macs, and simply downloading one will not give you a virus. Random pop-ups in your browser may occur but as long as you dismiss them there should nothing of concern.
You cannot delete virus protection software by dragging it to the Trash. You must use the appropriate uninstaller that is included with the software.
Also see:
Do You Need Anti-Virus Protection for Your Mac?
According to Rich Mogull's article, Should Mac Users Run Antivirus Software?,
"The reality is that today the Mac platform is relatively safe. There are hundreds of thousands of viruses and other malicious software programs floating around for Windows, but less than 200 are known to target the Mac, and many of those are aimed at versions of the Mac OS prior to Mac OS X (and thus have no effect on a modern Mac).
It's not that Mac OS X is inherently more secure against viruses than current versions of Windows (although it was clearly more secure than Windows prior to XP SP2); the numerous vulnerabilities reported and patched in recent years are just as exploitable as their Windows equivalents. But most security experts agree that malicious software these days is driven by financial incentives, and it's far more profitable to target the most dominant platform."
Mr. Mogull is a computer security expert. I recommend reading the entire article as it is quite informative.
For additional information on viruses, trojans, and spyware visit The XLab FAQs and read the FAQs on viruses and spyware.
Similar Messages
-
Hi,
I have not been using any 3rd party security software, but am now required to make sure that I have anti-virus, spyware, and adware protection with respect to my interface with a Windows network at my office. Two questions, please:
- Does my OS 10.5.6 already provide those security elements?
- If not, what security software would you recommend?
Thanks!If you are running Windows you need all the protection money can buy. But if you are running Mac OS X:
No viruses that can attack OS X have so far been detected 'in the wild', i.e. in anything other than laboratory conditions.
It is possible, however, to pass on a Windows virus to another Windows user, for example through an email attachment. To prevent this all you need is the free anti-virus utility ClamXav, which you can download from:
http://www.clamxav.com/
However, the appearance of Trojans and other malware that can possibly infect a Mac seems to be growing, but is a completely different issue to viruses.
If you allow a Trojan to be installed, the user's DNS records can be modified, redirecting incoming internet traffic through the attacker's servers, where it can be hijacked and injected with malicious websites and pornographic advertisements. The trojan also installs a watchdog process that ensures the victim's (that's you!) DNS records stay modified on a minute-by-minute basis.
SecureMac has introduced a free Trojan Detection Tool for Mac OS X. It's available here:
http://macscan.securemac.com/
The DNSChanger Removal Tool detects and removes spyware targeting Mac OS X and allows users to check to see if the trojan has been installed on their computer; if it has, the software helps to identify and remove the offending file. After a system reboot, the users' DNS records will be repaired.
(Note that a 30 day trial version of MacScan can be downloaded free of charge from:
http://macscan.securemac.com/buy/
and this can perform a complete scan of your entire hard disk. After 30 days the cost is $29.99. The full version permits you to scan selected files and folders only, as well as the entire hard disk.)
A white paper has recently been published on the subject of Trojans by SubRosaSoft, available here:
http://www.macforensicslab.com/ProductsAndServices/index.php?mainpage=document_general_info&cPath=11&productsid=174
Also, beware of MacSweeper:
MacSweeper is malware that misleads users by exaggerating reports about spyware, adware or viruses on their computer. It is the first known "rogue" application for the Mac OS X operating system. The software was discovered by F-Secure, a Finland based computer security software company on January 17, 2008
http://en.wikipedia.org/wiki/MacSweeper
On June 23, 2008 this news reached Mac users:
http://www.theregister.co.uk/2008/06/23/mac_trojan/
More information on Mac security can be found here:
http://macscan.securemac.com/
The MacScan application can be downloaded from here:
http://macscan.securemac.com/buy/
You can download a 30 day trail copy which enables you to do a full scan of your hard disk. After that it costs $29.95.
More on Trojans on the Mac here:
http://www.technewsworld.com/story/63574.html?welcome=1214487119
The latest news on the subject, from July 25, 2008, is:
Attack code that exploits flaws in the net's addressing system are starting to circulate online, say security experts.
The code could be a boon to phishing gangs who redirect web users to fake bank sites and steal login details.
In light of the news net firms are being urged to apply a fix for the loop-hole before attacks by hi-tech criminals become widespread.
Net security groups say there is anecdotal evidence that small scale attacks are already happening.
Further details here: http://news.bbc.co.uk/2/hi/technology/7525206.stm
A further recent development is the Koobface malware that can be picked up from Facebook (already a notorious site for malware), as reported here on December 9, 2008:
http://news.bbc.co.uk/newsbeat/hi/technology/newsid_7773000/7773340.stm
There may be other ways of guarding against Trojans, viruses and general malware affecting the Mac, and alternatives will probably appear in the future. In the meantime the advice is: be careful where you go on the web and what you download! -
What can I do if I think I have a virus?
QuestionWhat can I do if I think I have a virus?
AnswerSkip this and contact a professional
If you'd like to skip this guide and contact a professional, CLICK HERE.
There are a few steps you can take if you think you have a virus.
Use anti-virus software
One of the first things you should do is scan your computer with anti-virus software. Many Toshiba computers come with software for this purpose. You may choose to use an alternative, but you should only have one anti-virus program installed at a time.
Run your anti-virus program and ensure it's fully updated. Once it's updated, preform a full scan of your computer.
Disconnect accessories
If that doesn't help, you should disconnect any accessories connected to your computer. It's possible that the symptoms that you think are due to a virus could be due to an accessory.
Uninstall new software
An error with a new program might be causing problems that you think are being caused by a virus. To check this, uninstall any new programs that you installed near the time your computer's symptoms first appeared.
Perform system restore
If none of the previous suggestions helped, you might consider performing a system restore. This will return your computer's system files to a previous state. System settings will revert, and programs installed since the restore point was created might need to be reinstalled. Your documents shouldn't be changed.
For more information on performing a system restore, see one of the following articles:
How To: Understanding System Restore, Refresh, Reset, and, Recovery options in Windows 8 + Video
How To: Perform a system restore in Windows 7
Contact a professional or perform a system reset
Lastly, you might want to return your computer to factory default conditions. This is sometimes called a system reset or a system recovery. Note that this will remove all of your software and data that you added including applications, documents, photos, etc.
If you don't want to reset your computer and you'd like to contact a professional, CLICK HERE.
If you do want to proceed with a system reset, the system reset will remove the virus. For more information, see the following article:
How To: Understanding System Restore, Refresh, Reset, and, Recovery options in Windows 8 + VideoSome processes are critical, but many can be interrupted without any problem.
You can monitor your ongoing processes by going to Applications/Utiltities/Activity Monitor; pay particular attention to Disk Activity and Network. To interrupt a process, highlight the process, and tap "Quit Processes." This will interrupt or stop the runaway process. -
I think I have a virus or bot on my MacBook. Random e-mails have been sent from my e-mail overnight. I use comcast.net. Any suggestions for removing the bot.
Let me guess, one or more of your friends has asked you why you're sending them solicitations for phony pharmaceuticals or shady software?
These emails did not originate from your MacBook. What happens is that one or more of your friends has a Windows computer with your email address stored in its Address Book (or whatever Windows calls it). Their computer gets infected with a program that examines email addresses stored on it and used yours as the "return address" on the spam it's spewing forth, to disguise the actual source.
At present, there are no such known programs that run on Macs. Therefore, there is nothing to remove on your MacBook. All you're guily of is sending an email to someone with a Windows computer, who is lacking the anti-malware utilities that are a practical requirement for Windows.
Summary: There's nothing you can do.
Lesson: Friends don't let friends run Windows. -
I am having trouble with my mac book air. I think I have a virus because everytime i click on a link it openes up popup windows and other things. How do I reset teh computer?
Please post a screenshot that shows what you mean. Be careful not to include any private information.
Start a reply to this message. Click the camera icon in the toolbar of the editing window and select the image file to upload it. You can also include text in the reply. -
I can't open or receive hotmail emails on my macbrook pro, but i can on other devices. i changed my password, emptied the cache, tried using a different browser, etc. i think i have a virus. help!
Thanks for your help. that's not working either! ugh!!
I can open hotmail, but it's not formatting right, i can't open emails, nor send them.
Thank you so much for trying to help. I really appreciate it.
I understand that you can't get a virus by opening an email, but it seems way too circumstancial! This is my third mac -- because unlike PC -- I never had a problem. I understand this problem is not with my macbook, because every other website works fine -- it's hotmail! -
i think i have a virus on my Macbook Pro, OS X Yosemite, how do i wipe my computer clean without erasing photos and music etc?
The update alerts are fake, and are intended to dupe you into installing malware or disclosing private information so that your identity can be stolen.
You might get the alerts when visiting a website that has been hacked. Don't visit the site again. If applicable, notify the site administrator of the problem, but don't send email to an unknown party.
If you get the alerts when visiting more than one well-known website, such as Google, YouTube, or Facebook, then they may be the result of an attack on your router that has caused you to get false results from looking up the addresses of Internet servers. Requests sent to those sites are redirected to a server controlled by the attacker. It's possible, but less likely, that the DNS server used by your ISP has been attacked.
Back up all data.
Unlock the Network preference pane, if necessary, by clicking the lock icon in the lower left corner and entering your password. Cllck Advanced, open the DNS tab, and change the server addresses to the following:
8.8.8.8
8.8.4.4
That's Google DNS. Click OK, then Apply.
In Safari, select
Safari ▹ Preferences... ▹ Privacy ▹ Remove All Website Data
and confirm. If you’re using another browser, empty the cache. Test. If the fake update alerts stop, see below. Otherwise, ask for instructions.
The router's documentation should tell you how to reset it to the factory default state. Usually there's a pinhole switch somewhere in the back. It may be labeled "RESET." Insert the end of a straightened paper clip or a similar tool and press the button inside for perhaps 15 seconds, or as long as the instructions specify.
After resetting the router, quit the web browser and relaunch it while holding down the shift key. From the Safari menu bar, select
Safari ▹ Preferences... ▹ Privacy ▹ Remove All Website Data
and confirm. Do the equivalent if you use another browser. Open the Downloads folder and delete anything you don't recognize.
Then go through the router's initial setup procedure. I can't be specific, because it's different for every model. The key points are these:
1. Don't allow the router to be administered from the WAN (Internet) port, if it has that option. Most do.
2. Set a strong password to protect the router's settings: at least ten random upper- and lower-case letters and digits. Don't use the default password or any other that could be guessed. Save the password in your keychain. Any password that you can remember is weak.
3. If the router is wireless, or if you have a wireless access point on the network, use "WPA 2 Personal" security and set a different strong password to protect the network. If the router or access point doesn't support WPA 2, it's obsolete and must be replaced.
During the time the router was compromised, you were redirected to bogus websites. If you ever connected to a secure site and got a warning from your browser that the identity of the server could not be verified, and you dismissed that warning in order to log in, assume that your credentials for the site have been stolen and that the attacker has control of the account. This warning also applies to all websites on which you saw the fake update alerts.
Check the router manufacturer's website for a firmware update.
If you downloaded and installed what you thought was a software update, ask for instructions. -
I think I have a virus, yesterday I got an email from Verizon that I own $1000 and I tried to open it and now I have 8 emails from the same sender. DO I have a virus and what should I do to clean my ipad?
Chances are your iPad is fine. when you clicked on that e-mail, you confirmed to them 'hey, real person' so now Mr Spammer is working towards his 'make money from home' quota of spam by sending you multiple e-mails. You can block him - I'm not sure what e-mail client you're using so no idea for exact instructions, but you'll probably need to do this on a computer not via the iPad) and you could report him....wouldn't hold my breath that the report will actually accomplish anything beyond the person being blocked.
The iPad's operating system is different from the OS of a PC or Mac. Viruses written for one can't run on the others. (and iPads dont' get viruses in the strictest definition of the term, malicious programs that propogate themselves across the operating system)
The down side, even if you block this person, they know your address is a 'live' one so you'll need to be alert and aware because I'm sure more spam and phising mails are on their way.
If you did enter ANY info, make calls and start changing passwords ASAP. -
I think I have a virus - hard disk full and administrator rights gone
I think I have a virus - my hard disk is full allthough I only have about 20G of 60 used. I cant install a virus checker as I have lost my administrator rights (when I check in accounts, I am just a "standard" user. This means I cannot install any software as it will not let me run the installer program - says incorrect username / password
You may have a corrupted disk but you do not have a virus. Boot using your original system installation DVD and run Disk Utility. Repair the disk.
If you have no Administrator accounts at all, follow this procedure to create a new, temporary Administrator account from which you can fix your normal one.
Power on or restart your Mac.
At the chime or grey screen, hold ⌘ and S on your keyboard to enter single-user mode.
At the prompt, type
fsck -fy
and press Return.
This is a simple check for file system integrity and is optional. It will take a moment or two to complete. Wait for it to finish before proceeding.
Type the following exactly as written, one line at a time, each line followed by the return key. There is a single space preceding the first "slash" ( / ) character in each line:
mount -uw /
rm /var/db/.AppleSetupDone
shutdown -h now
When you restart the machine, it will take you through the entire setup and registration process all over again. When you do so, create a brand new account with Admin privileges. Give it a simple and disposable name since you will delete it later. Do not choose the option to transfer or migrate information to the Mac.
When it completes, log in under that new account, change your previous account back to Admin, and log out.
Log in using your old account, which will now have its Admin privileges restored. Delete the throwaway account you just created. -
Pls help my time capsule (4th gen) lost it files..I think it have a virus pls help me to fix it tnx..
1. Ethernet .. are you using ethernet?
2. Change the name of the TC to short, no spaces and pure alphanumeric.
3. In the file sharing page change the workgroup to WORKGROUP.
4. In the same area, change the guest access to on read and write.
5. If you setup homegroup on the PC get rid of it.. TC is not compatible with homegroup.
6. Turn off ipv6 in the network settings for ethernet. (since you are going to be using ethernet).
From Mac version utility it looks like this.
Go to the admin tools and ensure that bonjour for windows is on.
Manually type the IP directly into windows explorer.. do not open via MyComputer.
\\10.0.1.1
Because the error message is important. -
How do I fix a problem with Facebook. They think I have a virus or malware
I have been having trouble with facebook thinking that I have a virus or malware as I am posting on the games I play. I have an antivurus on my computer and it does not detect anything.
Do a malware check with some malware scanning programs on the Windows computer.<br />
You need to scan with all programs because each program detects different malware.<br />
Make sure that you update each program to get the latest version of their databases before doing a scan.<br /><br />
*http://www.malwarebytes.org/mbam.php - Malwarebytes' Anti-Malware
*http://www.superantispyware.com/ - SuperAntispyware
*http://www.microsoft.com/windows/products/winfamily/defender/default.mspx - Windows Defender: Home Page
*http://www.safer-networking.org/en/index.html - Spybot Search & Destroy
*http://www.lavasoft.com/products/ad_aware_free.php - Ad-Aware Free
See also:
*"Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked -
Mac vs Windows - cost of lost time from viruses, spyware, adware
My entire office just returned from a convention. Due to the open network at the convention, they set up a table back in the office where every single person who used a laptop at the convention must have IS check for and remove all viruses, adware and spyware. The lead IS network person had 60 on her laptop, other laptops are just as bad.
The cost of owning a Windows machine: hours of lost productivity as the IS department checks a hundred machines, and lost productivity as the owners wait to get their machines back.
Macs are more expensive? Hah! I walked in, showed my MacBook Pro and was waved through with, "I wish I had a Mac."Macs are more expensive? Hah! I walked in, showed my MacBook Pro and was
waved through with, "I wish I had a Mac."
Well, I wouldn't take security so easy, even with a Mac.
There are (even few) viruses for the Mac and there is also a chance to get spyware on your computer.
So although the risk is low, I decided to have a virus scanner on my Mac running and regularly updating. Furthermore I configured the internal firewall to be as strict as possible (e.g. enabled stealth mode and check regularly that all services not needed are really disabled, maybe a bit paranoid, confessed).
Let me share an interesting (maybe wired) thought:
I noticed that within the last months, many security holes of OS X are coming to the public (e.g. WLAN exploit). Very likely because of the Mac became more popular (thanks to iPod and so also more people are using it.
The problem... a hacker can reach millions of people when writing spyware for Windows and only a few ten thousands when spending the same time for developing a Mac one. Currently, at least.
However the Mac's popularity grows and simultaneously it makes also more sense (for a hacker) to write viruses and spyware.
And while many Windows viruses and spyware is written by script kiddys, it takes a lot of more knowledge to hurt OS X. Good ? Sure, but there is another risk... experienced hackers could start developing for OS X and it may become a hard job for Apple to work against them.
The reason simply is that OS X hasn't been "publicly tested" as much as Windows. So there are surely a lot of hidden bugs, even security related. Let's face, no operating system is bug free, not the complex ones we all use today.
So maybe we should call it "Interesting times, today" and wait what happens. But generally I agree... Windows is the most insecure operating system. This is not a "I hate MS" opinion, but I daily work with both worlds and can't say how often I had to totally reinstall Windows on my laptop while using my PB for over two years.
Let's say "thank you" to Microsoft that hackers are spending their time on Windows and not on OS X -
Just updated to Yosemite on my MBP. After shutdown now when I login, it starts the process (the bar starts to move), then the screen goes black, then it asks me to login again and this time it is a successful startup. Is this a Yosemite bug or do I have a virus? I also have some funny tiling on the screen at youtube and some other websites. Another bug?
Reinstalling OS X Without Erasing the Drive
Boot to the Recovery HD: Restart the computer and after the chime press and hold down the COMMAND and R keys until the menu screen appears. Alternatively, restart the computer and after the chime press and hold down the OPTION key until the boot manager screen appears. Select the Recovery HD and click on the downward pointing arrow button.
Repair the Hard Drive and Permissions: Upon startup select Disk Utility from the main menu. Repair the Hard Drive and Permissions as follows.
When the recovery menu appears select Disk Utility. After DU loads select your hard drive entry (mfgr.'s ID and drive size) from the the left side list. In the DU status area you will see an entry for the S.M.A.R.T. status of the hard drive. If it does not say "Verified" then the hard drive is failing or failed. (SMART status is not reported on external Firewire or USB drives.) If the drive is "Verified" then select your OS X volume from the list on the left (sub-entry below the drive entry,) click on the First Aid tab, then click on the Repair Disk button. If DU reports any errors that have been fixed, then re-run Repair Disk until no errors are reported. If no errors are reported click on the Repair Permissions button. Wait until the operation completes, then quit DU and return to the main menu.
Reinstall OS X: Select Reinstall OS X and click on the Continue button.
Note: You will need an active Internet connection. I suggest using Ethernet if possible because it is three times faster than wireless.
Also see:
Reinstall OS X Without Erasing the Drive
OS X Yosemite- Reinstall OS X
OS X Mavericks- Reinstall OS X
OS X Mountain Lion- Reinstall OS X
OS X Lion- Reinstall Mac OS X
Note: You will need an active Internet connection. I suggest using Ethernet
if possible because it is three times faster than wireless. -
Is there an anti virus program for mac 9.1? Think I have a virus
I don't use an anti virus - using outlook express I got a strange message with no subject or sender - just a blank line. I tried deleting it but it wouldn't be deleted. Since then every time I try to delete it - it crashes the system. Same with Internet Explorer. And now my main screen icons will just 'disappear' from the screen then it crashes.
I tried looking for an antivirus but all of them seem to be for 9.2 or higher and I don't know what to do - if I upload to 9.2 will I loose any programs or files - new to this from the PC world. Thanks
G4 Mac OS 9.1.xHi, debbieM -
Welcome to Apple's Discussions.
It is doubtful that you have a virus - no virus which can harm OS 9 has been released in well over 10 years.
Getting a message every now and then with no subject and no body is not unusual. There are a couple of ways to get rid of a message without opening it.
Click on an adjacent message which is okay to delete, then hold down the Shift key and select the blank messages - none of them will open. Once you have selected all the ones for deletion, press the Delete key.
Or, click and hold on a message; or press the Control key and click and hold on a message. A contextual menu should appear; one of the choices in that menu shuld be to delete the messge. If you choose that, it should happen without the message ever opening.
Things you can do to make Outlook Express run smoother -
• Increase the Preferred memory allocation for it. Adding 20 or 30 thousand to the original Preferred amount, or even more if you have sufficient RAM, is not excessive.
Article #18278 - Assigning More Memory to an Application
• Compact the databases. To do that - with OE not running, hold down the Option key and start up OE. A splash screen will open, asking if you want to compact the database files - click okay, and follow the prompts.
For Internet Explorer, increase its Preferred memory, a lot. Adding 30 to 50 thousand is not excessive.
And now my main screen icons will just 'disappear' from the screen then it crashes.
That could indicate one or more other problems.
• How full is your hard drive? It is good practice to not allow your hard drive to get more than 85% full. When it does get more full than that, odd behaviors including an unstable OS begin occuring.
• Try rebuilding the desktop file (note that the desktop file has very little to do with the desktop). To rebuild the desktop safely, restart - immediately hold down the Shift key until you get the "Extensions Off" message; then release Shift and hold down the Command and Option keys until you get the splash screen asking if you want to rebuild the desktop; click yes (or okay). Once that's done, restart to turn your extensions back on.
• Boot to your most recent OS 9 Install CD, one valid for that machine - ideally it would be OS 9.1, the same as is on the machine. Once booted to the CD, run Disk First Aid from the Utilities folder on the CD. Let DFA have a look at your hard drive, and allw it to repair what it can - it may take more than one pass to do this, especially if the drive is rather full.
If DFA finds things it just can't fix, post back with the description of the problems found.
if I upload to 9.2 will I loose any programs or files....
Updating the OS from OS 9.1 to OS 9.2.1 should not cause any loss of files.
However, in general updating an OS is not a fix for a damaged or unstable OS. It is better to get the OS now on the drive healthy before updating it.
When the machine goes unstable (icons begin disappearing, etc.) are there any error messages? -
Please help!! It's driving me nuts. I've reinstalled the OS via the disc about 3 times so far, but haven't yet erased the drive (and am seriously considering doing so). I barely have any files on my HD because I run everything off of external drives (after losing a TON of stuff after my Mac crashed in the first 3 months of having it). I bought the computer in 2007 and was running Tiger. I passed on Leopard but gave in for Snow Leopard because I wanted an iPhone and iPad. When I installed SL, I had to reformat the HD and made it Journaled......it's been acting ******** ever since.
First you don't have a virus because none exist for OS X. So you can stop worrying about hat. If you recently got a warning about a Virus and accepted downloaded some software then you fell for a Trojan. Here is an article about that and how to rid yourself of it.
If you did not download anything like that then doing a Erase and Install would be the way to go. Here is a video that will show you exactly what to do.
Maybe you are looking for
-
Procure KIT with Purchase order but 15 different materials - how?
Hi SAP MM Guru's, I have a requirement There are 15 different mateirals which are maintained in Material master seperately with different numbers but all will have to be procured from one vendor same time and issue is each material is consumed on the
-
Hi when I am using CS4 to insert text i want to put some spaces between a couple of words on the same line. i.e. please call this number etc etc how do i do that? Many thanks Mark
-
Cannot see systems in a solution
Hi, We have just installed Solution Manager 4 and I am trying to setup a landscape for Solution Manager itself so I can download Support Packs and get it up to SP15 whereas its currently SP12. When I use transaction solution_manager and click the sol
-
My Ipod Touch's (5G) earpod controls have just stopped working, and device becomes warm/hot.
Hi. Yesterday my Ipod Touch's (5G) has suddenly stopped working with Apple's earpod controls. Furthermore when playing music with the screen off the device becomes warm or even hot, and the battery drains from a full charge to empty in about 4 or 5
-
how to install Google plus hangout in tall bar how to remove whit space in Google plus