Latest worm virus

I have been getting all of the e-mail's that are infected with the latest worm virus. I know I don't need to worry about infecting my computer, mainly because I delete them right away. But I want to know if I can stop them from coming? I get 1-2 every 10 minutes! Yesterday I couldn't access my e-mail at all. I had to access it through webmail on a Windows computer. As soon as I deleted them I was able to access e-mail's on my computer.
Any help would be greatly appreciated!

If you exchange email with a large number of Windows users that have your email address in their address book and if any of these users have been infected with this Windows virus, the virus is sending email from the infected user's computer to every contact in the user's address book which is how these viruses spread.
It is either due to infected PCs or these messages are spam and the only way to prevent spam is by contacting your ISP or email account provider who can block the IP address of the sender to prevent the sending from sending any email from their computer to your ISP's or email account provider's domain.

Similar Messages

How to protect yourself against the latest Mac OSX Trojan/worm/"virus"

Does anyone know if this is true? I saw it on goole news
How to protect yourself against the latest Mac OSX Trojan/worm/"virus"
Thanks
Jason
[ Edited by Apple Discussions Moderator; href URL ]

Hi YoungBrando,
Welcome to the Apple Discussion Pages
IS there something out there ?
Apparently so.
Are people getting lot of there Buddies computers trying to sned them the file ?
It does not look like it.
Does this Qualify as a virus ?
No. It does not pass itself on without some intervention by the users involved.
Does it qualify as a a Trojan ?
Yes.
What to do.
Don't except files from anyone with the file name mentioned.
Read this response as well
Be aware before Unstuffing any unknown files.
Change the IChat > Preferences > Message section option to Confirm before sending any Files to ON This may not stop the code from getting your computer to send the file without you seeing but it may help based on the way the code is described as being put together generally.
Symantic's reponse
In this article Sophos claim it to be the First Virus for OS X
It also highlights that the main Anti-Virus software houses have already put out an update.
7:51 PM Friday; February 17, 2006

Worm virus listed in Bluetooth devices - what is this and how can I remove it?

When I go into the Bluetooth menu, a device appears called Worm Virus 00011100101011110 as not paired. I have other apple iPhones and they do not list this device. I think it might be a virus. Has anyone seen this before and how do I remove it?

As far as I know, its not possible for a mobile device to get a virus. What are the devices that you currently pair with your ipad?
Try resetting by going to settings/general/reset/reset all settings
if that doesn't work restore the ipad as new.
iTunes: Backing up and Restoring iOS software
http://support.apple.com/kb/HT1414?viewlocale=en_US

How to remove latest java virus?

How to remove latest java virus manually as reported in the media?

There is some incorrect information being presented in this thread.
Neither your system nor Java is updated daily. XProtect on 10.6 or above may get automatic updates as they are pushed out by Apple, but not necessariy daily. I have seen a week or more go by without any, and there have been none for the latest Flashback attack.
There are now Java updates for 10.6.8 and 10.7 to patch the vulnerability that is currently being exploited. This Trojan does not necessarily require your password or any user interaction for infection.
Use Software Update to see if there is a Java update for your OS.
The github Flashchecker is inaduate as it depends on outdated definitions.
Try using this one, which is most certainly more current.
http://www.f-secure.com/weblog/archives/00002346.html
Apple is currently developing a detection and removal tool. No idea when it will be ready.
http://support.apple.com/kb/HT5244

Yahoo Mail Worm/Virus?

This morning my Yahoo mail account sent out a series of Spam emails to random people from my address list. No one was logged into the account at the time this happened. My wife and I routinely access the account from a PC running Norton 360 and from two different Macs. So we're fairly confident none of these computers are infected with anything. I called AT&T/Yahoo tech support, and they indicated that the account appears to have been hacked by some sort of bot... and they thought the issue may be with my iPhone and the fact that it has no antivirus protection.
I took a look at the full headers of the Spam emails and was able to track the originating IP address to Sunnyvale, CA (Yahoo's headquarters). I then compared this with old emails sent from both my home PC and my iPhone. Only the iPhone generated emails went through the Sunnyvale IPs. The emails sent from all three computers on my home network originated from local IPs.
So, bottom line... this leads me to believe that it was indeed my iPhone that somehow triggered the emails. I was driving at the time the emails were sent... so I know I didn't click anything, open any emails, or take any other actions that would have triggered the Spam.
Any idea what's going on here? Should I be concerned that my iPhone has a worm or virus that is triggering these messages? I'm particularly trying to determine if this is just a worm or if an actual person has hacked my account. I changed the password... but that password was also used for some other accounts of mine too. My biggest concern at this point is the potential for identity theft.

I called AT&T/Yahoo tech support, and they indicated that the account appears to have been hacked by some sort of bot... and they thought the issue may be with my iPhone and the fact that it has no antivirus protection.
Sorry, but what a crock.
I seriously doubt this is a worm or virus on your iPhone. If so, you will be the first.
Nothing can be installed on an iPhone from a received email, from a website, or from a received MMS except for a photo, and I haven't read about any viruses or worms being included with a JPEG file. Unless your iPhone has been hacked/jailbroken and you have installed unofficial software on your iPhone from an unknown or untrusted source, it would be some trick for a virus or worm to be installed on your iPhone especially since there are no viruses that infect or affect OS X, and the iPhone runs an optimized version of OS X.
Spammers spoof email addresses - using a random/valid email address to appear as the sending email address for the spam usually making use of valid email addresses gathered from their "known good" email address list which is rotated from what is a huge list. A significant portion of spam is generated from Windows computers that have been taken over remotely by spammers with email generated with a spoofed email address without the user's knowledge.
I venture to say the emails were not generated from your iPhone. More than likely your email address has been spoofed by a spammer only - your email account has not been hacked but it can't hurt to change your account's password.

Virus Question. Re: Storm Worm

A new virus called Storm Worm was Stopped (yea) by my cable provider...and it was for windows anyhow...
but it made me wonder...can you get a virus just by openning an email that has a photo in it? Without even clicking on the photo? or downloading the photo? or doing anything?
Note: I've posted this also on the generic Tiger catagory but thought since it specifically has to do with Mail...I'd post it here as well. bfk

YES...the general rule of thumb is not to open the email, as it is highly unlikely that the picture carries the virus...It will usually be an invisible code (invisible because more often than not the offending code will be written in white, (same color as your email background). The other thing to remember is that any worm virus needs to have live dsl or dial up connection to complete the mission of destroying your pc...so a tip would be to unplug before opening the mail if you suspect anything. Good luck.

How can I remove an app claiming to be anti virus, that downloaded itself from e-mail?

O
On Friday, May 21; I was reading my e-mail. I opened a message from a regular contact and immediately an application opened claiming to be "the latest Anti Virus program for Mac". It will not operate until you register, and it is $59.95 to register. As I was told by Apple people that I didn't need an anti virus program for my Mac., I figured it's a scam. Problem: How do I get it out of my system? (It created an icon on the Task bar that appears as a red shield). It also downloaded a page of ****. I would like to get it out of the system without deleting and reinstalling the OS.

This question has been answered before, see the page linked below:
https://discussions.apple.com/message/15123175#15123175

System slowdown caused by Mail. Application error or worm???

Hi there!
After wondering for a long time why my system is gone so slowly (i never do a restart, just awake from sleep) i figured out that mail is the problem.
Problem is that just after starting mail the activity monitor shows a cpu usage of about 45%, but there is no process in the list causing it. also, the disk activity shows a strange write value. while doing nothing special, it says that there are about 275 kb/s written on the disk! the most strange thing is that this behaviour stays altough mail is closed. the only thing to stop that is to restart the system and NOT open the mail application.
the other strange thing is the behaviours of other apps after using mail. handbrake, for example, is multithreaded an uses about 180% of cpu. after opening mail, it just uses about 100%, as if it is ignoring the 2nd core in my iMac.
now i am wondering if this is just an application error that should be fixed REALLY fast (because mail is my favourite email-client), or, and that should warn all us mac-users, it is some kind of worm/virus/trojan. remember microsoft outlook express? its very similar to mail becaus its winxp's standard mail-app... and you all know how riskful it is...
would be nice if anyone could help me, since the problem is fixed i will use another mail-client and advise this to all that have noticed the same behaviour

Hi Herogen.
Verify/repair your disk (not just permissions), as described here:
The Repair functions of Disk Utility: what's it all about?
If the problem persist after having fixed all filesystem issues, and you suspect Spotlight has a bearing on it, you may try re-creating its database by typing the following command in Terminal:
sudo mdutil -E /
The -E option tells Spotlight to delete any already existing index info (so that it's rebuilt from scratch all over again), and the / at the end means "apply this command to the boot volume".
After entering the command in Terminal, you'll be prompted for your administrator password. Just type it blindly (you won't see any feedback of the keystrokes while you type it) and then press <Return>.
For best results, quit Mail and don't play too much with your disk while Spotlight does its job -- i.e. avoid files being created/modified/deleted, mail being downloaded, etc.

Virus for Macs

Hi everyone
Should we be worried about this?
Mario
PS:I found this on CNN
Apple users may find worm
Virus spread through instant messaging is the first to attack the Mac OS X platform.
February 17, 2006: 5:51 AM EST
SAN FRANCISCO (Reuters) - A malicious computer worm has been found that targets Apple Computer Inc.'s Mac OS X operating system, believed to be the first such virus aimed specifically at the Mac platform.
The worm is called OSX/Leap-A, according to a posting on the Web site of antivirus software company Sophos, which said the worm is spread via instant messaging programs.
The worm attempts to spread via Apple's (Research) iChat instant messaging program, which is compatible with America Online's popular AIM instant messaging program, according to the Sophos Web site.
The worm sends itself to available contacts on the infected users' buddy list in a file called "latestpics.tgz," according to the Sophos Web site.
The vast majority of malicious hacks are aimed at Microsoft Corp.'s Windows operating system and some of its products, largely because Microsoft has more than 90 percent of the market for computer operating systems.
"This first Macintosh OS X threat is an example of the continuing spread of malicious code on to other platforms," said Vincent Weafer, senior director at Symantec Security Response, in a statement.
The worm will not automatically infect Mac computers, but will ask users to accept the file, Weafer said.
Symantec ranked the new worm as a Level 1 threat (with 5 being the most severe).
An Apple spokesperson was not immediately available to comment.
---------------

Hi Mario!
Read these:
Macworld: News: Leap-A malware: what you need to know
Macworld: News: Digging deeper into the Leap-A malware
More links in Ralph Johns (UK) Post.
ali b

Do Macs have worms?

My iMac started getting slower and slower, then programs started crashing, kept getting kernel panics, then it refused to start, wouldn’t install the OSX (that’s the short version, but basically it died). Apple replaced it, but within a week, the same thing started to happen after I reattached my external hard drives. Since I thought there might be something on one of the HDs that was causing the problem, I detached them and trashed whatever I had copied over from them. Didn’t matter. The second computer is now dead, won’t install or reinstall OSX. I’m now using my laptop, but when I tried to copy a couple of files from Time Machine (on one of the ext HDS), it started getting slower, and when I tried to save some of the files to a CD, it wouldn’t burn it. I tried to run Tech Tool Pro on the HD, but the surface scan test locked up and the volume structures test failed. Is it possible that I have a worm on one of the hard drives? I didn’t think Mac had such a thing.

OK, I’ve continued my ongoing research into worms/viruses in Macs and the general consensus seems to be no, worry about something real if you have to, but not that. Which is kind of what I already thought. But it still doesn’t explain what’s going on with my computer(s). This is the third one that started out fine, then began having issues that worsened to the point that the computer no longer functioned. I mean, it’s pretty bad when it won’t even do a clean install of the OSX. Could it be a Lion problem? Or - since things seem to fine until I connect one of my external hard drives or transfer from Time Machine - could there be a corrupted file on one of those that is capable of creating such havoc? It just seems so hard to believe but I can’t think of anything else that could be behind all of this.

Does the MacBook Pro require a virus protection software?

I have an unregistered version of Mac Protector that indicates that I have a worm virus . Is this necessary to protect my MacBook Pro?

If you happen to stumble upon one of these fake anti-virus security alerts, stay calm and avoid the urge to click your way out of it. Instead, simply hit Command-Q (firefox, Safari etc.) and shut it down.
If a window popped up warning you about viruses while you were on the web, it's most likely a scam. As long as you didn't run an installer, you're just fine. Go into your Downloads folder and delete anything you don't recognize or Desktop if that is your default for downloads.
There are different variants of names for this malware but the steps of removal should be the same if you installed the scamware.
1. Open Applications > Utilities > Activity Monitor and terminate processes linked to MACDefender (or other names).
   2. Delete MACDefender (or other names) from the Applications folder
   3. Check System Preferences > Accounts > Login Items for MACDefender (or other names) items.
   4. Check the downloads for any related items to MACDefender (or other names).
   5. Run a Spotlight search for "MACDefender (or other names)" to check for any associated files and if any remove them.
http://www.macoscompatible.com/news/story/how_to_remove_mac_defender_malware.htm l
http://www.securemac.com/MAC-Defender-Rouge-Anti-Virus-Analysis-Removal.php
https://discussions.apple.com/thread/3032201?start=0&tstart=0
https://discussions.apple.com/thread/3042885?start=0&tstart=0
http://www.reedcorner.net/news.php/news.php?s=macdefender
You have fallen for a total scam. Get this off your computer immediately.
First, restart in Safe Boot by holding the Shift key down at the chime. Or, alternatively, open Activity Monitor in Utilities, set to Active Processes, find the program and force quit it. This will keep it from running, but only temporarily, so you can remove it.
    1.    Drag the MacSecurity program -- or whatever it's called; it keeps using different names -- MAC Defender, MacProtector, MacKeeper 911, Apple Security Center, Apple Web Security -- it's not hard to imagine the new names it will be using in the coming days -- (installed in the Applications folder by default) to the Trash. Empty the Trash.
    2.    Remove item of same name from the Login Items for your Account in the OS X System Preferences (if it exists).
    3.    Go to your Home folder Library>Preferences and, if you find it, delete com.alppe.spav.plist. Look also in Application Support (may not be anything there, but check just in case) and search for any files with one of the above names and trash them. Empty the trash.
    4.    If you use Safari, go to Preferences>General and UNCHECK "Open "safe" files after downloading. Keep that unchecked.
http://www.fixkb.com/2011/05/remove-mac-protector.html

Seeking virus info for OS 10.4

I am having trouble finding a list of current viruses for Tiger. Anybody know of a list I can consult for the latest Mac viruses?
Also, has anyone had success with the following program?
http://asisolutions.eu/frameloader.php?url=http://www.asisolutions.eu/software/s ecurity/ChkRootKit_MacOSX/
Thanks,
Hairfarm

I am having trouble finding a list of current viruses
for Tiger. Anybody know of a list I can consult for
the latest Mac viruses?
Yes, here it is:
That's the full list. Seriously, though, there really aren't any in the wild. At all.
As for rootkit checkers, you're free to check it out, of course, but the system will always prompt for your administrative password whenever any application needs to make system-wide changes. That's why it's a good idea to run in a non-admin account - if you get the "admin password" prompt, it gives you pause for thought and lets you decide whether or not you want to assign the privileges.
Matt

Security Vulnerabilities in LabVIEW DSC and Lookout - W32/Sdbot.worm

The LabVIEW DSC
module and Lookout install the Microsoft MSDE 2000 database. By default, the 'sa' password is left blank. Several viruses exploit this this known security vulnerability in MSDE 2000.
You can prevent infection by applying a secure 'sa' password to MSDE 2000.
Make sure the MSSQL Server service is running
Execute the following command line (replace new_password with the desired password):
osql -U"sa" -P"" -Q"sp_password NULL, 'new_password', 'sa'"
In particular, variants of the W32/Sdbot.worm virus are known to exploit this vulnerability.
Refer to this KB or the DSC Module readme for more information.
<http://digital.ni.com/public.nsf/websearch/42DFA4993437D7EE86256DE800570B39?OpenDocument>
~~

Ben wrote:
Thank you for getting the word out fast!
1) Which versions of LV DSC installed "MSDE 2000"?
2) How do I "Make sure the MSSQL Server service is running"?
3) How do I start " the MSSQL Server service "?
4) When you said "Execute the following command line " you mean go to Start >>>Run... and paste in the string you provided, correct?
5) If I am using a standard firewall from MacAfee or the like, should I expect a notification when the attack occurs?
Trying to be careful,
Ben
1) I believe all LabVIEW DSC systems since 7.0
2) You should see an SQL Server icon in the system tray and selecting it you will see a green arrow if it is running and a red square if it is not. If you have the full version of SQL Server installed or a version such as 2005 this might be different. In my case for the Microsoft SQL Server Development Edition I have a separate application called SQL Server Configuration Manager inside the start menu that shows an overview over this and other things.
3) Click on the icon in the system tray and select start, or go to above mentioned Configuration Manager if available or if you want to go on the deepest level go to the Administrative Tools Control Panel and select Services and in there make the SQL Server service started.
4) I would think a real command console to be a bit more appropriate as you can see the feedback if something went wrong.
5) If the Firewall is worth anything I would strongly expect this yes.
Rolf Kalbermatter
Message Edited by rolfk on 01-10-2007 10:58 PM
Rolf Kalbermatter
CIT Engineering Netherlands
a division of Test & Measurement Solutions

Blaster worm- protecting wireless users from infecting each other

Hi,
We, like a lot of folks, are doing our best to eradicate the latest worms. I'm presuming that infected wireless clients attached to access points are capable of infecting other clients in the same radio cell? If so, is there a way to protect them from each other? Does setting PSPF do it? I presume blocking port 135 (in this case) at the wireless interface would not help?
....any suggestions greatly appreciated...thx...Jamie

There should be a patch available for the OS you are running, there's nothing you can do at the AP end since its just acts like a bridge.

I Opened A Strange Attachment, Do I need To Install Anti Virus Software?

I have Yahoo Mail and recently received some emails from myself with strange attachments. Similar emails were sent to random contacts in my Yahoo contact list. I did not send these emails. When I changed my email password, these emails stopped. However, I'm worried my iMac G5 (OS 10.6.4) has a virus because I opened one of the attachments. Also, could a worm virus on my IMac have caused these emails? Yahoo advised me to run anti-virus software. Do I need to run anti-virus software and if so, which one? I've been reading online that anti virus software can cause more harm than good and make your mac "buggy," whatever that means.

P NewYork wrote:
I've been reading online that anti virus software can cause more harm than good and make your mac "buggy," whatever that means.
Yes, you read right! There are no known viruses that attack OS X and other exploits are very rare.
It sounds like your email address is being spoofed.
http://en.wikipedia.org/wiki/Spoofing_attack
This means that infected PC is going through its contact list and sending spoofed as that address.
There's nothing you can do but alert your PC friends.
EDIT: Are these emails actually being sent by your Mac? Check in Sent mail folder?
If you feel you MUST run AV software to prove you have nothing , do a scan with ClamXav a mac friendly freeware app.
-mj
Message was edited by: macjack

Latest worm virus

Similar Messages

Maybe you are looking for