Marwevl virus, marwevl virus

facebook does not allow me to log on becuase it tell me i have a virus on my mac. do you know how to instal a protetion?

Sorry, I'm not a facebook user, but there are several reports on here of the same issue. Maybe best to wait for a while to see if the issue clears.

Similar Messages

Norton Anti Virus? Viruses and Worms

I have been reading the boards on all the opinions about viruses and worms. I know MAC OX hasn't had a problem in 20 years. I am not one to panic, but two worms in one week has my attention. Eventually someone will write code that will get into the MAC OS.
The reason this has my attention is that my Powerbook G4 (2MB RAM) is running slower and the processing is getting sloppy. I am an audio and video editor and I know I push my G4 and G5 to the limits, but I know when something isn't right. I was happy when I went over to MACs last year and that I didn't need anti virus software. Norton always slowed down my PCs, let alone goofed all kinds of stuff up.
To be honest, I want to be ready. I am looking at Norton and I want to know if there are any consumer related articles about Norton 10.0. eg, Does it run in the background and slow up the processor? I still keep one PC and used EZ Armour. It is much better that Norton and doesn't suck up processing power.
I downloaded ClamXav, but does anyone have any opinions on it?
Any thoughts would be appreciated.
G5 G4 all loaded, firewire drives, Mbox, 30' cine display Mac OS X (10.4.5)

Hi, Nelson.
First, do not believe the FUD (Fear, Uncertainty, and Doubt) spread about Norton AntiVirus. A good bit of that is undeserved, especially when it comes to NAV 10, which is the Tiger-compatible version and what I use.
I recently engaged in a debate on this subject in this thread, so you can read some of my thoughts there in response to the usual FUD spread about NAV and Symantec Norton products in general.
See my "Detecting and avoiding malware and spyware" FAQ for my recommendations as well as a list of some recent Mac OS X security threats that have emerged, including Trojans, rootkits, and spyware.
Having a comprehensive backup and recovery solution, and using it regularly is also important. For advice on the backup and recovery solution I employ, see my "Backup and Recovery" FAQ. Computing without a comprehensive backup and recovery solution is like driving without auto insurance.
Good luck!
Dr. Smoke
Author: Troubleshooting Mac® OS X
Note: The information provided in the link(s) above is freely available. However, because I own The X Lab™, a commercial Web site to which some of these links point, the Apple Discussions Terms of Use require I include the following disclosure statement with this post:
I may receive some form of compensation, financial or otherwise, from my recommendation or link.

AIM virus? "Virus-detection" popups in Safari?

Could it be, some sort of virus on my beloved macbook pro? Here is the story..
Last night when I logged into Adium, I received a message from "aim" claiming that I had some sort of friend request waiting for my approval, and someone wanted to list me in their profile. I hovered over the link and it went to the aim website, and curiosity always kills the cat.. I clicked. (Dumb, right?) Well, it did take me to the aim website and it was asking for my log in, so I closed.
Since then the same IM pops up every time I log on. I'm not sure if that has any affiliation with my next problem, but it could be useful information. I went to myspace.com, and I received a pop up saying something along the lines of "Malware/Spyware has been detected on your computer and you should resolve it by going to this website and downloading our anti-virus software." There was a URL at the top, not sure where it went to because it didn't matter. I canceled out because I had no other option, and it came up again. I canceled once more, and it came up again with only OK as the option. I tried force quitting Safari, and it didn't work at first. I received yet another pop up talking about slow script, asking if I wanted to continue to run it, and I said no, then hit apple alt esc and managed to close Safari.
Everything seems to be working fine in Firefox. Any suggestions as to how to rid of whatever might be happening, or any information on what it is at all would be greatly appreciated, I am not sure where to start. I'll be the first to admit that I an a novice when it comes to this sort of thing. Thank you for your help. I will be happy to give anymore information if needed.

Yes, sites like that (Adium, FaceBook, YouTube) are notorious for being the prime sources of 'scareware' and malware, most of which is aimed at Windows users and extracting unnecessary money from them with pointless, worthless software. No malware can affect your Mac unless you allow it to install, which in most cases would require your root password.
In your case you may have acquired a 'tracker cookie' sending you to other sites than you intended.
To get rid of them you ned MacScan:
The appearance of Trojans and other malware that can possibly infect a Mac seems to be growing, but is a completely different issue to viruses.
If you allow a Trojan to be installed, the user's DNS records can be modified, redirecting incoming internet traffic through the attacker's servers, where it can be hijacked and injected with malicious websites and pornographic advertisements. The trojan also installs a watchdog process that ensures the victim's (that's you!) DNS records stay modified on a minute-by-minute basis.
SecureMac has introduced a free Trojan Detection Tool for Mac OS X. It's available here:
http://macscan.securemac.com/
The DNSChanger Removal Tool detects and removes spyware targeting Mac OS X and allows users to check to see if the trojan has been installed on their computer; if it has, the software helps to identify and remove the offending file. After a system reboot, the users' DNS records will be repaired.
(Note that a 30 day trial version of MacScan can be downloaded free of charge from:
http://macscan.securemac.com/buy/
and this can perform a complete scan of your entire hard disk. After 30 days the cost is $29.99. The full version permits you to scan selected files and folders only, as well as the entire hard disk. It will detect (and delete if you ask it to) all 'tracker cookies' that switch you to web sites you did not want to go to.)
A white paper has recently been published on the subject of Trojans by SubRosaSoft, available here:
http://www.macforensicslab.com/ProductsAndServices/index.php?mainpage=document_general_info&cPath=11&productsid=174
Also, beware of MacSweeper:
MacSweeper is malware that misleads users by exaggerating reports about spyware, adware or viruses on their computer. It is the first known "rogue" application for the Mac OS X operating system. The software was discovered by F-Secure, a Finland based computer security software company on January 17, 2008
http://en.wikipedia.org/wiki/MacSweeper
On June 23, 2008 this news reached Mac users:
http://www.theregister.co.uk/2008/06/23/mac_trojan/
More information on Mac security can be found here:
http://macscan.securemac.com/
The MacScan application can be downloaded from here:
http://macscan.securemac.com/buy/
You can download a 30 day trail copy which enables you to do a full scan of your hard disk. After that it costs $29.95.
More on Trojans on the Mac here:
http://www.technewsworld.com/story/63574.html?welcome=1214487119
The latest news on the subject, from July 25, 2008, is:
Attack code that exploits flaws in the net's addressing system are starting to circulate online, say security experts.
The code could be a boon to phishing gangs who redirect web users to fake bank sites and steal login details.
In light of the news net firms are being urged to apply a fix for the loop-hole before attacks by hi-tech criminals become widespread.
Net security groups say there is anecdotal evidence that small scale attacks are already happening.
Further details here: http://news.bbc.co.uk/2/hi/technology/7525206.stm
A further recent development is the Koobface malware that can be picked up from Facebook (already a notorious site for malware), as reported here on December 9, 2008:
http://news.bbc.co.uk/newsbeat/hi/technology/newsid_7773000/7773340.stm
There may be other ways of guarding against Trojans, viruses and general malware affecting the Mac, and alternatives will probably appear in the future. In the meantime the advice is: be careful where you go on the web and what you download!

Oneclick virus, oneclick virus

I've got the same trojan or virus that many others have. I've completed the prescribed procedure of removing some Launch daemons and agents in both User and root Libraries. I've uninstalled my FLASH. I've removed all browser extentions. I've reset my Safari and still I can't shake this evil MacKeeper. It's time to write laws that financially hurt those who do infect our Internet!
Using Safari or Chrome or Firefox if I surf to Pinterest, nothing happens but always when I sellect the Show Board and Pins option my browser opens up a new window on ONECLICK briefly before ending up on a MacKeeper and a pop up asking me if I want to Cance or OK installation.
Sometimes a new window for other products show up - but it seems relevant that when I go to Pinterest it is alway MacKeeper that shows up.
This bug seems sophisticated.
Also not likely related but the timing is curious, while browsing Pinterest on my Pinterest iPhone App, for no reason or relation the App jumps me to the App store to try and sell me on some unrelated App.    My wife's iPhone is doing this too.   Has my safe Apple world been breached this badly?
Any more ideas - I'm afraid to log into my bank account now.
Hardware Information:
          MacBook Pro (15-inch, Mid 2009)
          MacBook Pro - model: MacBookPro5,3
          1 2.66 GHz Intel Core 2 Duo CPU: 2 cores
          8 GB RAM
Video Information:
          NVIDIA GeForce 9400M - VRAM: 256 MB
          NVIDIA GeForce 9600M GT - VRAM: 256 MB
System Software:
          OS X 10.9.2 (13C64) - Uptime: 0 days 18:10:1
Disk Information:
          Hitachi HTS545032B9SA02 disk0 : (320.07 GB)
                    EFI (disk0s1) <not mounted>: 209.7 MB
                    Macintosh HD (disk0s2) / [Startup]: 319.21 GB (94.82 GB free)
                    Recovery HD (disk0s3) <not mounted>: 650 MB
          HL-DT-ST DVDRW GS23N
USB Information:
          Apple Inc. iPod 2.02 GB
          Seagate FreeAgent Pro 1 TB
                    BOOT DISK (disk1s1) /Volumes/BOOT DISK: 320.13 GB (9.53 GB free)
                    TCapsule (disk1s2) /Volumes/TCapsule: 346.8 GB (168.2 GB free)
                    lostTC (disk1s3) /Volumes/lostTC: 333.27 GB (37.59 GB free)
          Apple Inc. Built-in iSight
          Apple Internal Memory Card Reader
          Apple Inc. Apple Internal Keyboard / Trackpad
          Apple Computer, Inc. IR Receiver
          Apple Inc. BRCM2046 Hub
                    Apple Inc. Bluetooth USB Host Controller
Thunderbolt Information:
Gatekeeper:
          Mac App Store and identified developers
Kernel Extensions:
          [not loaded] com.cisco.nke.ipsec (2.0.1) Support
          [not loaded] com.logitech.iokit.quickcam (1.0.7) Support
          [not loaded] com.rogueamoeba.InstantOn (6.0.0 - SDK 10.6) Support
          [not loaded] com.rogueamoeba.InstantOnCore (6.0.0 - SDK 10.6) Support
Startup Items:
          HP IO: Path: /Library/StartupItems/HP IO
Launch Daemons:
          [loaded] com.adobe.SwitchBoard.plist Support
          [running] com.backblaze.bzserv.plist Support
          [loaded] com.bombich.ccc.plist Support
          [loaded] com.google.keystone.daemon.plist Support
          [loaded] com.oracle.java.JavaUpdateHelper.plist Support
          [running] com.sophos.autoupdate.plist Support
          [running] com.sophos.intercheck.plist Support
          [running] com.sophos.notification.plist Support
          [loaded] net.sourceforge.MonolingualHelper.plist Support
Launch Agents:
          [not loaded] com.adobe.AAM.Updater-1.0.plist Support
          [not loaded] com.cooliris.SetLaunchArch.plist Support
          [running] com.epson.Epson_Low_Ink_Reminder.launcher.plist Support
          [running] com.epson.eventmanager.agent.plist Support
          [loaded] com.google.keystone.agent.plist Support
          [running] com.sophos.uiserver.plist Support
User Launch Agents:
          [running] com.backblaze.bzbmenu.plist Support
User Login Items:
          IDriveforMac
          AirServer
          VMware Fusion Start Menu
          Google Drive
Internet Plug-ins:
          Default Browser: Version: 537 - SDK 10.9
          AdobePDFViewerNPAPI: Version: 11.0.06 - SDK 10.6 Support
          AdobePDFViewer: Version: 11.0.06 - SDK 10.6 Support
          DivXBrowserPlugin: Version: 2.0 Support
          o1dbrowserplugin: Version: 5.3.1.18536 Support
          QuickTime Plugin: Version: 7.7.3
          Google Earth Web Plug-in: Version: 6.0 Support
          googletalkbrowserplugin: Version: 5.3.1.18536 Support
          Silverlight: Version: 5.1.10411.0 - SDK 10.6 Support
          JavaAppletPlugin: Version: 14.9.0 - SDK 10.7 Check version
Audio Plug-ins:
          BluetoothAudioPlugIn: Version: 1.0 - SDK 10.9
          AirPlay: Version: 2.0 - SDK 10.9
          AppleAVBAudio: Version: 203.2 - SDK 10.9
          iSightAudio: Version: 7.7.3 - SDK 10.9
iTunes Plug-ins:
          Quartz Composer Visualizer: Version: 1.4 - SDK 10.9
User Internet Plug-ins:
          WebEx: Version: 1.0 Support
3rd Party Preference Panes:
          Backblaze Backup Support
          DivX Support
          Growl Support
Time Machine:
          Skip System Files: NO
          Mobile backups: OFF
          Auto backup: NO - Auto backup turned off
          Volumes being backed up:
                    Macintosh HD: Disk size: 297.29 GB Disk used: 208.99 GB
          Destinations:
                    TCapsule [Local] (Last used)
                    Total size: 322.99 GB
                    Total number of backups: 8
                    Oldest backup: 2014-04-16 06:43:51 +0000
                    Last backup: 2014-04-30 14:49:43 +0000
                    Size of backup disk: Too small
                              Backup size 322.99 GB < (Disk used 208.99 GB X 3)
          Time Machine details may not be accurate.
          All volumes being backed up may not be listed.
Top Processes by CPU:
               8%          WindowServer
               4%          vmware-vmx
               3%          Safari
               2%          hidd
               1%          bzfilelist
Top Processes by Memory:
          729 MB          vmware-vmx
          303 MB          mds_stores
          254 MB          com.apple.IconServicesAgent
          139 MB          InterCheck
          139 MB          Mail
Virtual Memory Information:
          1.48 GB          Free RAM
          2.90 GB          Active RAM
          1.98 GB          Inactive RAM
          1.39 GB          Wired RAM
          1.67 GB          Page-ins
          0 B          Page-outs

Sure you have a virus? What makes you think so?
You should read this: http://discussions.nokia.com/t5/Pool-of-Knowledge/Should-I-worry-about-viruses-or-malware/m-p/109611...
Looks like virus is not the case. But that doesn't mean youre not facing issues.
Maybe we can help, but virus it isn't!

Virus scan, virus scan?

I would like to know how to check for malware and virusses on my MacAir ...
Facebook tells me I am infected... is this for real???
Maurits

This is not real. That's probably a scam, so ignore it.
If you are worried about the MacBook safety, have a look at this website > http://www.thesafemac.com/mmg You don't need an antivirus, and I only recommend it if you have got files you will transfer to a PC, because you may infect other PCs even if the viruses don't affect to you (OS X can't get infected by Windows viruses).
Apart from that, if you still want to use an antivirus, get Sophos

Outgoing Mail Virus, Yes, Virus!

My Apple Mail client has been sending out messages with no record of them in my Sent items. First I saw messages leave in the activity bar and now I'm getting confirmation as Undeliverable alerts are appearing for addresses I've never seen, some in Europe (I'm in the US). Further evidence is the appearance of automated replies from a subscription package tracking service I cancelled. This service is receiving messages from me that I am not sending.
I've installed ClamXav, Norton and Symantec and they found nothing. I've read other references to this issue at these discussions but so far no solutions. Can anyone help?

Tom Gewecke wrote:
You mean that you can see emails in that folder that you did not send? If so, then someone may have hacked your yahoo account. Change your password.
Port 443 is used for https -- e.g. secure financial transactions. Why would you want to close it?
YES. I can see emails in the "SENT" folder that I did not send as viewed by the web page displayed in Safari, not to be confused with the "SENT" folder as viewed by the Apple Mail app.
YES, I changed my password on Yahoo web mail & I deleted all of my yahoo web mail contacts as a precaution.
I agree that somehow my yahoo web mail account was compromised, but yahoo responded by saying that it was their belief that it apples mail client was the one that "sent" the email. I have POP access to my Yahoo mail on both my Imac and G4 Powerbook, the difference being that on the PB, I do not delete emails from the POP server.
It is my understanding that when the firewall is turned on and is operating in the "Stealth" mode, that the OSX should ignore any external probe requests and not respond in any way. True to form, when I switch on the OSX firewall, & check box "Block all incoming connections", then go to Gibson's web page to scan common ports, Gibson reports that on my desktop imac, that it had successfully ignored probe requests. This is a good thing since I don't want any response of any kind to give someone or some machine an indication that I exist. The only exception would be is when I initiate a secure transaction session, otherwise I want this port closed down. I feel the same way about port 113.
On my G4 Powerbook running Leopard (OS X.5.8), I am frustrated in not seemingly being able to set the firewall to operate in the stealth mode. The Gibson Research web page continues to report that my G4 Powerbook port 113 is closed and port 443 is open when I have not initiated any secure sessions. This reporting by Gibson Research's web page is the same using Safari 4 or the latest version of FireFox.
The concern revolves around when using a public access WI-FI hotspot, like a coffee house/ restaurant, or hospital waiting rooms, with the laptop of others that may be compromised, that in turn is probe scanning for other laptops / desktops seeking to do mischief. In this environment, you betcha, I want to be in the stealth mode, blocking all incoming transactions except for basic transactions like DHCP, Bonjour, & IPSec.
Perhaps the initial thread posting by Organicbooks might have been similar to my experience, that of having the apple mail app to access their yahoo web mail and at other times accessing the web mail by the use of a browser. The similarity of getting messages from the server of failed delivery of emails that appeared to have been sent, yet not showing up in the "SENT" folder in the mail app made me curious to go and view the SENT folder as viewed from Safari. In my case, that is where I had seen the emails that were sent.

I can't get any help setting up Firefox 4 beta to rid my Computer of worms and viruses

To All Forum Helpers,
I am not smarter than a computer. I graduated High School in 1969 before computer knowledge became vital to www. I am computer novice at best computer dummie at least. I had an encounter with a demonic person in http://www.paltalk.com. I love playing trivia. I went into Rebels Tonight not nothing it was evil. Evil Rebel from the United Kingdom as He asked a Religious Question ? On what island did St.John write Revelations. I answered Pathos . He said I was wrong it was Patmos. I was brought up believing it was Pathos. He cursed me for not believing His answer. Now My New Webcam I can not use for he has his demonic forces typing in horrible things that happened in world history and I get booted out of rooms. I need to get the Answer for removing him from my computer. He even has gone so far as to disable my administration commands in my entire computer. It is a Windows Vista 32 or 64 bit version,which I had no knowledge about in July 2008. My Aunt Pam did but she moved out July 2009 and ever since than I encounter strange events,nut in the past I could get help since I had a Comcast account . Well I am wireless now and have no support whatsoever. Please Someone Help Me Regain control of my Computer.
Sincerely
Foreverchristianman7
[email protected]
Bob Robertson

Bob,
First off, do you have any virus protection (Norton, McAfee) on your
computer? If so, make sure you are running periodic scans to protect
yourself. If you have not purchased one, consider downloading AVG.
http://www.AVG.com
Secondly, if the person in the chatroom you had a disagreement with is
a moderator of the room, he has the ability to remove you from the
chat. I think it is a tad presumptuous to assume evil forces are at
play. The site might have also disabled your webcam. Have you tried
using it on other sites?
Third concerning your administrative commands from your system, you
need to be more specific. If you are not running an anti-virus
program, viruses will remove/hide aspects of your computer. Viruses
can be described as evil, but I’m not sure they are direct acts of
Satan. Your loss of access might have also happened when your Aunt
moved out. If she deleted her account, it might have somehow
consequently removed your access from certain programs.
Finally, you need to figure out who is providing your internet access.
Comcast is an “internet service provider.” ‘Wireless’ is, well, not.
If you are using a neighbor’s internet, you might have obtained a
virus from here quite easily. This is also illegal if you do not have
permission from the neighbor.
I hope this helps.
Marcus
[email protected]

My internet connection works in parallels, but not in chrome in mac os10.7.2. Also, Safari won't open - it just bounces in the launch bar. Do I have a virus? I've used my laptop in 2 hotels and an airport this week.

I

You probably don't have a virus. Viruses are a ubiquitous PC thing but a rare mac thing.
Here are a few things to try to fix the situation:
1. Restart your mac. Fixes most problems.
2. Delete the preferences files for Chrome and Safari, then restart. Note, you will have to reenter your preferences. The preferences are found in Users/your user account/Library/Preferences. Lion hides the Library. You can get to it by holding down the option key and going to the Go menu in the Finder.
3. If that doesn't work, I'd delete Safari and Chrome and reinstall them.

Is there an anti virus program for mac 9.1? Think I have a virus

I don't use an anti virus - using outlook express I got a strange message with no subject or sender - just a blank line. I tried deleting it but it wouldn't be deleted. Since then every time I try to delete it - it crashes the system. Same with Internet Explorer. And now my main screen icons will just 'disappear' from the screen then it crashes.
I tried looking for an antivirus but all of them seem to be for 9.2 or higher and I don't know what to do - if I upload to 9.2 will I loose any programs or files - new to this from the PC world. Thanks
G4 Mac OS 9.1.x

Hi, debbieM -
Welcome to Apple's Discussions.
It is doubtful that you have a virus - no virus which can harm OS 9 has been released in well over 10 years.
Getting a message every now and then with no subject and no body is not unusual. There are a couple of ways to get rid of a message without opening it.
Click on an adjacent message which is okay to delete, then hold down the Shift key and select the blank messages - none of them will open. Once you have selected all the ones for deletion, press the Delete key.
Or, click and hold on a message; or press the Control key and click and hold on a message. A contextual menu should appear; one of the choices in that menu shuld be to delete the messge. If you choose that, it should happen without the message ever opening.
Things you can do to make Outlook Express run smoother -
• Increase the Preferred memory allocation for it. Adding 20 or 30 thousand to the original Preferred amount, or even more if you have sufficient RAM, is not excessive.
Article #18278 - Assigning More Memory to an Application
• Compact the databases. To do that - with OE not running, hold down the Option key and start up OE. A splash screen will open, asking if you want to compact the database files - click okay, and follow the prompts.
For Internet Explorer, increase its Preferred memory, a lot. Adding 30 to 50 thousand is not excessive.
And now my main screen icons will just 'disappear' from the screen then it crashes.
That could indicate one or more other problems.
• How full is your hard drive? It is good practice to not allow your hard drive to get more than 85% full. When it does get more full than that, odd behaviors including an unstable OS begin occuring.
• Try rebuilding the desktop file (note that the desktop file has very little to do with the desktop). To rebuild the desktop safely, restart - immediately hold down the Shift key until you get the "Extensions Off" message; then release Shift and hold down the Command and Option keys until you get the splash screen asking if you want to rebuild the desktop; click yes (or okay). Once that's done, restart to turn your extensions back on.
• Boot to your most recent OS 9 Install CD, one valid for that machine - ideally it would be OS 9.1, the same as is on the machine. Once booted to the CD, run Disk First Aid from the Utilities folder on the CD. Let DFA have a look at your hard drive, and allw it to repair what it can - it may take more than one pass to do this, especially if the drive is rather full.
If DFA finds things it just can't fix, post back with the description of the problems found.
if I upload to 9.2 will I loose any programs or files....
Updating the OS from OS 9.1 to OS 9.2.1 should not cause any loss of files.
However, in general updating an OS is not a fix for a damaged or unstable OS. It is better to get the OS now on the drive healthy before updating it.
When the machine goes unstable (icons begin disappearing, etc.) are there any error messages?

How do I identify a new type of virus?

This may not be a Firefox 4 problem specifically, but I was advised in another forum to post it here:
Recently I got hit by the FakeRean virus that I downloaded via Firefox 4 Beta 6. The mechanism is that the web site opens a global modal dialog offering to play a video, but instead installs a virus. In most cases I can recognize this as an attack, and the solution is to open Task Manager and terminate Firefox. Because the attack uses a global modal dialog, all other features of Firefox are disabled. However, if you're not thinking quick, sometimes you click the dialog by mistake instead of terminating Firefox.
Mozilla are actively working on this vector in Firefox 4, and hope to have a solution for the global modal dialog problem before the final release of Firefox 4.
Windows Security Essentials was able to identify it pretty quickly as FakeRean, but was not able to block it. Also, after running a scan and removing some occurrences of the virus, the virus was still able to propagate to other places. I scanned my computer 3 or 4 times without resolving the problem. Finally I downloaded and installed Windows Defender and had it scan a few time. For a while I had both Security Essentials and Windows Defender scanning at the same time. Finally after a day and a half I seemed to have gotten rid of the virus, but it took a great many scans by two applications to resolve the problem.
More recently I have encountered a similar, but far more nasty virus. It as the same behavior of many of the 'fake' security software viruses, it claims you have a virus, and prompts you to scan. It uses a combination of pop-up windows, system tray warnings, etc., although not quite as annoying as the FakeRean I had before. The nasty part is any time you try to run your security software, Security Essentials or Windows Defender, it intercepts them saying they are infected, so you cannot run them. Also, it seems to be smart enough to detect when you go to a web site to download security software and blocks that too. After several hours of trying I was not able to run any currently installed security software, or download and install any new security software. I probably could have found a few other things to try, but I had performed a full system backup the day before, so I simply booted my Windows Setup DVD and restored the last image backup - which seemed to solve the problem. A subsequent scan by Security Essentials found nothing.
This recent virus was also installed via Firefox 4, but beta 7 this time. I think I may have clicked on some dialog to activate it, but it was not too clear. Also, the attack site(s) seem to try installing a Firefox plug-in, but I never confirmed the request to install.
After restoring my system image, I ran into the same problem again via Firefox 4 beta 7 and picked up the virus from some web site, but this time I was being really careful to not click any dialogs or confirm any actions, so something more devious was going on as I picked up exactly the same virus, but a different way. Again, just restored my last backed up image and my system is clear of the virus again.
I can't say that Firefox 4 is specifically the problem because I have not tried other browsers on the same web sites, but these new attack sites seem to be getting more devious at getting around the security features in browsers. Also, they have no problem getting through Windows Security Essentials even when active protection is enabled.
Anyway, does this particular virus have a name? It would probably be 'fake' something.
Can anyone think of any way to identify the virus? I might try leaving Security Essentials open next time I go web browsing and see if that helps.
Can anyone think of any other ways to combat this virus, short of restoring the last system image backup?
Cheers, Eric

If you have the application then it is in your Applications folder. Locate it then double-click on the icon. It's that easy. If you need to download it, then go here: Adobe Reader 11.0.09. The download will be a disc image file - has an extension of ".dmg." Normally, the download is in your Downloads folder or on your Desktop. Locate the .dmg file and double-click on it to mount the image on your Desktop. There will be an installer inside the mounted disc image. Double-click on the installer and follow the directions to install it on your computer.

Old external drive; how to check for virus?

I`ve an old external drive from the time I was a Windows PC user. I just don`t want a virus on my macbook, so I want to make sure that the drive is clean, and wipe out all the deadly ****. So, what do I do? PS, I have really important stuff in there too, so I cant just reformat the drive.
S

Download and scan it with either Sophos or ClamXav. Not that Windows viruses can affect the Apple OS:
There are many forms of ‘Malware’ that can affect a computer system, of which ‘a virus’ is but one type, ‘trojans’ another. Using the strict definition of a computer virus, no viruses that can attack OS X have so far been detected 'in the wild', i.e. in anything other than laboratory conditions. The same is not true of other forms of malware, such as Trojans. Whilst it is a fairly safe bet that your Mac will NOT be infected by a virus, it may have other security-related problem, but more likely a technical problem unrelated to any malware threat.
You may find this User Tip on Viruses, Trojan Detection and Removal, as well as general Internet Security and Privacy, useful: The User Tip seeks to offer guidance on the main security threats and how to avoid them.
https://discussions.apple.com/docs/DOC-2435
More useful information can also be found here:
www.thesafemac.com/mmg

PLEASE READ EVERYTHING. My macbook pro is with virus. What should I do?

     Hello Guys! Thanks for reading this. First, I ask apologize for any mistakes (I'm not a native speaker neither I live in a country that English is the official language).
     I've used an anti-virus called "virus barrier express" for some time (it never detected any malware) and it doesn't detect any today. I've experienced some problems (such as speed reduction, but i found it normal). My macbook pro is from late 2012 and here the specifications: Processor 2,5 GHz Intel Core i5 Memory 4 GB 1600 MHz DDR3. I have 432,6 GB free memory of 499,25 GB. I still use Mountain Lion. I was pretty sure it had a malware then I installed the Comodo Anti-virus. I was that sure because of three things:
      1- In several unrelated sites some words appeared green and when I passed the cursor over them (most of the time unintentionally) it opened sort of a box or little window. It appeared and "X" at the "right down"(think about the the screen of the mac, it would be near the trash) corner of the box then I clicked in it and the box closed. (these is similar to the "hot words" on windows).
     2- When I load a youtube video (not sure if it has begun yesterday or the day before yesterday) the description, the commentaries and the suggestions (suggested videos) keep going down (I know this sound very weird, but I'll try to explain it: I need to scroll down the page to read the description and every 1-3 seconds I need to scroll down again because the description is a little "downer". This happens "in blocs" (it doesn't scroll down continuously as i do when scroll down, it go "jumping spaces"). P.S.: the video and the search bar don't move). I'm not sure I explained right, any doubts ask me.
     3- Several times when surfing the web new windows (tabs) open with non-related things as "how to work from home and win R$16.000 (this was an aleatory number, and R$ is the real/reais = Brazil coin) and "Gold scheme: how to win the lottery" (this was translated from Portuguese).
     4- The most urgent problem (only appeared after installation of Comodo Anti-virus) My macbook pro is constantly stopping. Example: if I try to open the Library folder (after I explain why I was trying to open it) it stop and I need to force the computer to shut down by pressing the power button and holding it. I can't think in ant other examples right now but since yesterday I have need to force the computer to shut down sometimes. This continue even if quit/exit Comodo anti-virus.
     Continuing the history… I ordered the Comodo to scan my computer and it has found 2 malware at a Library folder and 1 malware at System folder, I've tried to put them in quarantine, but the computer stopped (I don't know if it is the right term: the colored disk appeared and the computer didn't accept any command) and the malware is still there (I tried to put them in quarantine but the computer stopped again). The danger of the threat is low accordingly to Comodo Anti-virus.
     What should I do? If I remember something more I'll add it later.

First, remove Comodo. You don't need it, and it sounds like it is causing a problem.
The other symptoms sound like you have adware installed. Comodo might have detected some components of that adware, or it might not have, but whatever the case, you should NEVER allow any anti-virus software to quarantine or delete files from your computer. See: How to remove infected files.
Regarding the adware, see my Adware Removal Guide.
(Fair disclosure: The Safe Mac is my site, and contains a Donate button, so I may receive compensation for providing links to The Safe Mac. Donations are not required.)

I believe my computer may have a virus. Can someone help?

Lately ive been worried that my MacBook pro has a virus. Today i went to "Finder" and saw that i had shared files going--ive never shared any files. The location says "Neighborhood". Also, i went to my activity monitor and saw that there was a file called "disnoted" runnnig and it was by the user "damian". My name is not Damian and i have no idea who it could be. It wont let me stop the process either. Ive tried many times and it hasnt worked. I also see an "activitymonitord" is running from "root" what is that? Any help on this would be great. Im quite worried about the security of my computer now. Please tell me what this means and if it is a virus, how i can remove it. Ive suplied pictures aswell. Thank you.

Corbyy wrote:
i went to my activity monitor and saw that there was a file called "disnoted" runnnig and it was by the user "damian".
It's daemon
https://en.wikipedia.org/wiki/Daemon_%28computing%29
disnoted
DISTNOTED(8)              BSD System Manager's Manual             DISTNOTED(8)
NAME
     distnoted -- distributed notification server
SYNOPSIS
     distnoted
DESCRIPTION
     distnoted provides distributed notification services.
     There are no configuration options to distnoted. Users should not run distnoted manually.
OS X                         July 1, 2005                         OS X
I also see an "activitymonitord" is running from "root" what is that?
Activity Monitor, it has a root process obvious to watch everything going on.
Please tell me what this means and if it is a virus,
No virus, just turn off Sharing and Bluetooth in your System Preferences > Sharing & Bluetooth
Looks like someone in the "Neightborhood" set up a network thats all.

I was told I needed to run a virus scan before being allowed to reinstate my facebook account. What is the best way for me to download a free, but 100% safe virus scan for my iMac?

Is there a virus scan download from Apple.com that I should use to clear my iMac before I download the latest update to Mevericks and get a clear slate to reactivate my facebook account? Thank you.

You may have been the victim of a potential scam or responded to a pop-up trying to sell anti-virus software.
How on earth would Facebook know you have a virus - not least because there are no viruses that can affect OS X.
There are many forms of ‘Malware’ that can affect a computer system, of which ‘a virus’ is but one type, ‘trojans’ another. Using the strict definition of a computer virus, no viruses that can attack OS X have so far been detected 'in the wild', i.e. in anything other than laboratory conditions. The same is not true of other forms of malware, such as Trojans. Whilst it is a fairly safe bet that your Mac will NOT be infected by a virus, it may have other security-related problem, but more likely a technical problem unrelated to any malware threat.
You may find this User Tip on Viruses, Trojan Detection and Removal, as well as general Internet Security and Privacy, useful: The User Tip seeks to offer guidance on the main security threats and how to avoid them.
https://discussions.apple.com/docs/DOC-2435

Possible virus on my iPod 15 GB (with Dock Connector)

Hey everyone ~ I have an iPod 15gb (with dock connector)... yes one of the really old ones when they first came out. I think somehow I have downloaded a virus on it. Do any of you know how I can get rid of it, just short of getting rid of my iPod? When I connect it to my laptop through the Firewire card it crashes my computer. The firewire card is fine as it normally stays in the wireless card port all of the time. Recently I have gotten some new music and have downloaded and it copied it onto my iTunes, but when I go to add it to my iPod it crashes.
Any help is greatly appreicated.
concerned user~
Amber

I highly doubt it has a virus, as viruses must be written for a specific device and to my knowledge there are no viruses written for iPods. On top of that, you would have had to install the virus, furthering proof that this is highly unlikely.
Maybe its logic board became corrupt, so it isn't connecting to iTunes properly, and freezes it.

Marwevl virus, marwevl virus

Similar Messages

Maybe you are looking for