My Macbook may be infected with a Trojan ! Help.

Recently whenever I use a Google search answer page, the link that I want to follow does not open and I get redirected to a shopping/advert type of page. I believe that this is a 'Trojan' ? How do I get rid of it ? Is there some nice and simple free download that will clean the macbook for me?
Thanks
4jbl7

A simple answer is YES. Always install every download from apple and am always checking to see that I don't miss any.
The 30 day trial issue of Macscan said that it found a trojan and put it into an isolation folder for me which I then very quickly trashed. A second sweep said all was clear.
I have stripped Firefox out altogether and am now using Safari. I have had no issues with this although I prefer to use Firefox. I might try a reinstall in a few days time and see what happens but the trojan issue is of some concern . Might well call my dealer helpline tomorrow and see what they say about it.
Cheers and thanks
4jbl7

Similar Messages

My macbook pro is infected with VBS.Lys.M. Unfortunately, bitdefender can only quarantine it and it keeps reappearing. Is there any way to remove it from my computer?

My macbook pro is infected with VBS.Lys.M. Unfortunately, bitdefender can only quarantine it and it keeps reappearing. Is there any way to remove it from my computer?

That's Windows malware, so it cannot be infecting your Mac. It probably is on your computer as an email attachment. To remove it, see:
http://www.thesafemac.com/how-to-remove-infected-files/
Also, note that BitDefender is pretty bad at detecting Mac malware. I would recommend removing it. See my Mac Malware Guide for more information about protecting yourself from malware:
http://www.thesafemac.com/mmg

My yahoo acct is infected with a trojan.

My yahoo acct is infected with a trojan. I ran a full system scan with sophos but it is still infected. can someone walk me through the fix?

Have you contacted Yahoo tech support and/or posted in their forums if they have one?

Did my macbook (May 2009) come with install discs? I can't seem to find them. Thank you

Did the Macbooks, May 2009, come with install disks? I can't seem to find mine and I am going to have someone put in a larger hard drive. Any ideas on where I could get the install disk/s for OS 10.5? Thank you.

Or you can clone your hard drive if you want. To clone your current hard drive I like the free application Carbon Copy Cloner. It makes a bootable copy of everything on your hard drive http://www.bombich.com/index.html You'll need a cheap SATA external hard drive case. Put the new drive in the case then partition and format the new drive and clone your old drive to the new one. Then replace your old hard drive with the new one.
Here's a cheap SATA external hard drive case on eBay http://cgi.ebay.com/USB-2-5-SATA-HDD-HARD-DRIVE-EXTERNAL-ENCLOSURE-CASE-BOX-/120 636286623?pt=PCC_Drives_Storage_Internal&hash=item1c167ba69f

My computer has been infected with a Trojan Horse. It has completely taken over my Mac email account and was sending out malicious email to everyone in my address book. At the same time it infected my iPhone---I am no longer able to receive or send emai

My computer has been infected by a Trojan Horse. It has taken over my Mac email account and began sending out malicious emails to everyone in my address book. I cleared out my MAC address book and began using my AOL email account. It took a few days and then my AOL email account was infected and has now been send out malicious email to all my contacts for over a month. It has also infected my iPhone--I am no longer able to send or receive emails on my iPhone. Also, once the Trojan Horse began using my AOL email it completely blocked me from using my MAC account by sending never ending popups asking for my email password to access my MAC email account, but it never accepts my pass word. The TH has also slowed down everything on my computer. It's like I am working on an old PC with dial up connection instead of the high speed digital connection that I have. The little color wheel spins constantly as I wait for sometimes over a minute for a page to pull up. If it pulls up at all. I have tried to use the 2 disks that came with my computer to completely remove everything on my computer and then reinstall all the programs, but I am not allowed to sweep my computer clean. I thought maybe my disks that came with my computer were defective so I called Apple and they sent me 2 new disks. I am not able able to clear my computer with the 2 new disks either. I have done this before successfully so it's not something new to me. I do remember when I believe my computer became infected: I had googled an unusual sewing term, and I was opening what appeared to be legitimate sites, when all of a sudden a pop up appeared that said that my computer had been infected. I immediately shut my computer off, but it was too late. I downloaded a virus program for Mac, and it has never found a virus or problem at all. I think it is part of this Trojan Horse, but I am unable to delete it from my computer. It refuses to uninstall. The Mac Trojan Horse is real and it is terrible. If anyone has any suggestions for me I would be very appreciative,
Beth
vu

Install ClamXav and run a scan with that. It should pick up any trojans.
17" 2.2GHz i7 Quad-Core MacBook Pro  8G RAM  750G HD + OCZ Vertex 3 SSD Boot HD 
Got problems with your Apple iDevice-like iPhone, iPad or iPod touch? Try Troubleshooting 101

HT5228 How can I tell if my computer has been infected with the Trojan?

How can I tell if my computer has been infected with this latest Trojan (or with any Trojan)? I did install the latest update to Java when I was told by my iMac that new software was available for my computer, which was just 2 or 3 days ago (first week of April). Now it is being said that there was a Java Trojan.
Many thanks for any replies!

Log out and log back in, if you haven’t done so recently. Launch the Terminal application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ If you’re running Mac OS X 10.7 or later, open LaunchPad. Click Utilities, then Terminal in the page that opens.
Step 1
Copy or drag — do not type — the line below into the Terminal window, then press return:
launchctl getenv DYLD_INSERT_LIBRARIES
Post the lines of output, if any, that appear below what you just entered (the text, please, not a screenshot.)
Step 2
Repeat with this line (triple-click anywhere in it to select the whole line):
find /Applications /System/Library/CoreServices -type d -name *.app -exec defaults read {}/Contents/Info LSEnvironment \; 2> /dev/null | grep DYLD_INSERT_LIBRARIES
The command will take a noticeable amount of time to run. Wait for a new line ending in a dollar sign (“$”) to appear.
If you get no output from either step, you're not infected with any variant of Flashback that I know of.

My imac is infected with a bug.Help

my imac is infected with a bug.Help

If the problem could be adware or malware, a product you may have inadvertently downloaded
to do something and then found the computer acted up, there are ways to remove those things.
However it helps to know what computer model build year and OS X the machine is running.
Then what the problem is, with detail to describe what it is doing wrong, or not doing right...
If you have odd issues in Safari browser, there are methods and descriptions here that may help:
•Remove unwanted adware that displays pop-up ads and graphics on your Mac - Apple Support
•Adware Removal Guide:
http://www.thesafemac.com/arg/
•Tech Guides: (malware, adware, & performance guides)
http://www.thesafemac.com/tech-guides/
Until communication is established, we can only wait to see what you can tell us about the problem.
For the most part, Macs just do not get infected.
In any event, a reply could help...
Good luck & happy computing!

Can the rescue and recovery function be infect with a trojan virus?

I had some trouble with trojan viruses. My scan software detected malware on my system which I deleted with the help of the antivirus software antivir (free version) and with the software malwarebytes.
My thinkpad r51 is still running and virus scans do not show any problems any more. But I am not quite sure if I can trust the scans. So I am thinking about to format the harddisk and setup a new system. Or to use the rescue and recovery function which says that the system will be put back to its initial state. Is it really possible to bring the system back to its original state with help of rescue and recovery? ? I am a little bit afraid that the rescue and recovery function might be infected too? How does the function work? Can the system really be put back to its original state?
Any help appreciated, thanks!
Tom
Solved!
Go to Solution.

Hi,
if you have a virus on your system, then there is a realy small chance, that the virus got also into the Service Partition.
So in this situation if you want to restore the system , then after the restore finish, the virus should surely be gone.
Service partition is a protected partition, which content can not be accessed just like that .
Rgrds

I have just updated Firefox and my computer got infected with a Trojan JS:Redirector-JM

Following the Firefox update my computer developed a threat. this threat was on my C Drive in Mozilla\Firefox\Profiles\cjo3fr3x.default\Cache\2\BD\DEA35do1 and was JS:Redirector-JM. I had problems on the reboot following the update and got an error message advising 'cannot create Shell notification'. When I searched this on Google I saw that this may be because of a virus so I ran a full system scan on Avast and the Redirector showed up as a high threat.

The normal update box uses a secure https connection to the mozilla update servers so that should be safe unless your computer is already infected or you changed some dangerous settings in about:config. Then I have no idea why it shows up after the update, that's really strange.

Can't get rid of a popup telling me I may be infected with a virus

Out of the blue my screen was taken over with a pretend virus alert. Over it is a pop-up that I can't delete. It tells me to call 844-482-1735 for 'tech support'. It looks like this:
I looked through older listings that seemed similar and tried T-Smart but no luck. I can't use Safari as every time I click on OK it just comes back and nothing behind it is usable. I've forced quit and gone to another machine. Any ideas? I'm running latest system and Safari on an iMac.

Force quit, and then relaunch Safari while holding the "shift" key to prevent the window from reopening.

Computer may be infected with malware

how do I get rid of the malware on my macpro

It's best to describe the problem in as much relevant detail as possible, rather than what you think is causing it or how you think it should be solved.

My Macbook Pro is Infected, Seriously! Please Help!

I paid 4000$ for my macbook and it was working fine for a year. Now my internet is incredibly slow and sluggish. To load a single web page takes literally 5 minutes wirelessly but still sluggish when plugged up with the ethernet cable. There are popups that are displayed in my browsers firefox and Safari that say "This is not a Joke you are a winner" and prompts me about a Dell notebook I had won. It then redirects me to some adserving site and mentions FreeZinger in the fineprint. Something is going on because I have downloaded and ran multiple virus and DNS changer scans, iAntivirus, securemac, and etc. At first I thought this was a minor problem but its still there. I ran sudo through the terminal and nothing came up. My internet was blazing fast but now is slow no matter where I use it, whether at school, home or work. Please help ASAP because I think my computer needs some serious debugging. Dont tell me I am one of the first to get a virus on a mac. If I need to purchase some insurance and send my mac in please let me know. Any help at all with this issue is greatly appreciated.

"I paid _*4000$*_ for my macbook"
Then you were ripped off. The latest top model cost $2,799.00
"There are popups that are displayed in my browsers firefox and Safari that say "This is not a Joke you are a winner" and prompts me about a Dell notebook I had won."
Go into your browsers preferences & select the +"Block Pop-Up Windows"+ (or something similar) setting.
"I have downloaded and ran multiple virus and DNS changer scans, iAntivirus, securemac, and etc."
Uninstall them all. Not needed for Macs. There are no known viruses for OS X.
If you want to feel safe from +trojans+ download ClamX which is a free download from their website, Versiontracker & MacUpdate.
"Dont tell me I am one of the first to get a virus on a mac."
Try running repair permissions from your HD and afterwards run +repair disk+ and repair permissions from your software install DVD.
How much HD space do you have left?

How to detect if Macbook pro infected with a bot?

Heard from Comcast that my MacBook Pro may be infected with a bot. How do I know? Should I download their recommended Norton AntiVirus software?

I'm not as convinced as Linc that this is a scam. Of course, Comcast does have an agreement with Symantec to promote Norton, but that doesn't mean that they're likely to lie to customers to get them to use Norton. That could get them into some pretty serious hot water.
It is possible that you could be infected with Flashback, and Comcast has detected botnet activity coming from your network as a result. Make sure to run Software Update to install the latest Java- or Flashback-related update, which should remove any infection. (If you're infected, it'll tell you, and if not, the update will just install and say nothing.)
However, it's very easy for these sorts of things to be wrong. False positives come up all the time. You could have had an infected Windows machine connected to your network at some point that triggered the warning. That is more easily possible if your wireless network doesn't have a password, so you may have a neighbor using your network without permission. Also, your IP address may have been used by someone else, who was infected with something, until recently and the IP addresses were reassigned from the pool of available IP addresses. Which just means the previous user of the IP address triggered the warning, and now you're using the address so you're receiving the warning by mistake.
If they give you a hard time about installing AV software, install Sophos Anti-Virus for Mac Home Edition or ClamXav, both of which are free and excellent. Then scan your machine and let them know you're clean. Do not install Norton.

How can I determine if my iMac is infected with Malware. Internet is very slow at times.

Some time ago I opened a link in an email from a friend and later found out that his email address had been hijacked. The site the link took me to seemed innocuous, but ever since it seems that from time to time that my internet connection is very slow, as if there is not enough band width. Is it possible that my computer is infected with some sort of malware? How can I determine that? If it is infected how can the malware be removed?

Here is the report.
Problem description:
I clicked on a link in a email from a hacked email account and since then my internet connection runs very slow at times. I am concerned that my iMac may be infected with some sort of Malware
EtreCheck version: 2.1.6 (109)
Report generated January 21, 2015 at 12:26:10 PM MST
Download EtreCheck from http://etresoft.com/etrecheck
Click the [Support] links for help with non-Apple products.
Click the [Details] links for more information about that line.
Click the [Adware] links for help removing adware.
Hardware Information: ℹ️
iMac (21.5-inch, Late 2009) (Technical Specifications)
iMac - model: iMac10,1
1 3.06 GHz Intel Core 2 Duo CPU: 2-core
12 GB RAM Upgradeable
BANK 0/DIMM0
4 GB DDR3 1067 MHz ok
BANK 1/DIMM0
4 GB DDR3 1067 MHz ok
BANK 0/DIMM1
2 GB DDR3 1067 MHz ok
BANK 1/DIMM1
2 GB DDR3 1067 MHz ok
Bluetooth: Old - Handoff/Airdrop2 not supported
Wireless: en1: 802.11 a/b/g/n
Video Information: ℹ️
NVIDIA GeForce 9400 - VRAM: 256 MB
iMac 1920 x 1080
System Software: ℹ️
OS X 10.10.1 (14B25) - Time since boot: 1:8:36
Disk Information: ℹ️
WDC WD5000AAKS-40V2B0 disk0 : (500.11 GB)
EFI (disk0s1) <not mounted> : 210 MB
Macintosh HD (disk0s2) / : 499.25 GB (398.65 GB free)
Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB
PIONEER DVD-RW DVRTS09
USB Information: ℹ️
Apple Inc. Built-in iSight
Apple Internal Memory Card Reader
Apple Computer, Inc. IR Receiver
Apple Inc. BRCM2046 Hub
Apple Inc. Bluetooth USB Host Controller
Gatekeeper: ℹ️
Mac App Store and identified developers
Kernel Extensions: ℹ️
/Library/Extensions
[loaded] com.symantec.kext.SymAPComm (12.7.1f4 - SDK 10.8) [Support]
[loaded] com.symantec.kext.filesecurity (12.7f4 - SDK 10.8) [Support]
[loaded] com.symantec.kext.fw (5.3.1f4 - SDK 10.8) [Support]
[loaded] com.symantec.kext.internetSecurity (5.4f4 - SDK 10.8) [Support]
[loaded] com.symantec.kext.ips (3.9.2f1 - SDK 10.8) [Support]
[loaded] com.symantec.kext.pf (5.7.1f4 - SDK 10.8) [Support]
/System/Library/Extensions
[not loaded] com.seagate.driver.PowSecDriverCore (5.2.4 - SDK 10.4) [Support]
/System/Library/Extensions/Seagate Storage Driver.kext/Contents/PlugIns
[not loaded] com.seagate.driver.PowSecLeafDriver_10_4 (5.2.4 - SDK 10.4) [Support]
[not loaded] com.seagate.driver.PowSecLeafDriver_10_5 (5.2.4 - SDK 10.5) [Support]
[not loaded] com.seagate.driver.SeagateDriveIcons (5.2.4 - SDK 10.4) [Support]
Launch Agents: ℹ️
[running] com.brother.LOGINserver.plist [Support]
[loaded] com.google.keystone.agent.plist [Support]
[loaded] com.symantec.errorreporter-periodicagent.plist [Support]
[loaded] com.symantec.nis.application.plist [Support]
[running] com.symantec.uiagent.application.plist [Support]
Launch Daemons: ℹ️
[loaded] com.adobe.fpsaud.plist [Support]
[running] com.fitbit.galileod.plist [Support]
[loaded] com.google.keystone.daemon.plist [Support]
[running] com.sec.faxdb.plist [Support]
[running] com.symantec.deepsight-extractor.plist [Support]
[loaded] com.symantec.errorreporter-periodic.plist [Support]
[loaded] com.symantec.liveupdate.daemon.ondemand.plist [Support]
[loaded] com.symantec.liveupdate.daemon.plist [Support]
[invalid?] com.symantec.MissedTasks.plist [Support]
[not loaded] com.symantec.nav.migrateqtf.plist [Support]
[invalid?] com.symantec.Sched501-1.plist [Support]
[running] com.symantec.sharedsettings.plist [Support]
[running] com.symantec.symdaemon.plist [Support]
[invalid?] com.symantec.symSchedDaemon.plist [Support]
User Launch Agents: ℹ️
[loaded] com.adobe.ARM.[...].plist [Support]
[invalid?] com.google.GoogleContactSyncAgent.plist [Support]
User Login Items: ℹ️
Microsoft AU Daemon Application (/Applications/Microsoft AutoUpdate.app/Contents/MacOS/Microsoft AU Daemon.app)
Fitbit Connect Menubar Helper Application (/Applications/Fitbit Connect.app/Contents/MacOS/Fitbit Connect Menubar Helper.app)
Internet Plug-ins: ℹ️
o1dbrowserplugin: Version: 5.38.6.0 - SDK 10.8 [Support]
Default Browser: Version: 600 - SDK 10.10
Flip4Mac WMV Plugin: Version: 2.3.8.1 [Support]
AdobePDFViewerNPAPI: Version: 11.0.10 - SDK 10.6 [Support]
FlashPlayer-10.6: Version: 16.0.0.257 - SDK 10.6 [Support]
Silverlight: Version: 5.1.30317.0 - SDK 10.6 [Support]
Flash Player: Version: 16.0.0.257 - SDK 10.6 [Support]
iPhotoPhotocast: Version: 7.0
googletalkbrowserplugin: Version: 5.38.6.0 - SDK 10.8 [Support]
QuickTime Plugin: Version: 7.7.3
AdobePDFViewer: Version: 11.0.10 - SDK 10.6 [Support]
CouponPrinter-FireFox_v2: Version: Version 1.1.6 [Support]
GarminGpsControl: Version: 2.9.3.0 Release [Support]
NortonInternetSecurityBF: Version: 1.11.0 - SDK 10.6 [Support]
JavaAppletPlugin: Version: 15.0.0 - SDK 10.10 Check version
User internet Plug-ins: ℹ️
Google Earth Web Plug-in: Version: 7.1 [Support]
Safari Extensions: ℹ️
Norton Internet Security [Installed]
3rd Party Preference Panes: ℹ️
Flash Player [Support]
Flip4Mac WMV [Support]
Norton\nQuickMenu [Support]
Time Machine: ℹ️
Skip System Files: NO
Mobile backups: OFF
Auto backup: NO - Auto backup turned off
Volumes being backed up:
Macintosh HD: Disk size: 499.25 GB Disk used: 100.60 GB
Destinations:
Seagate Backup Plus Drive [Local]
Total size: 1.00 TB
Total number of backups: 15
Oldest backup: 2013-08-01 22:49:49 +0000
Last backup: 2014-11-06 19:34:10 +0000
Size of backup disk: Adequate
Backup size 1.00 TB > (Disk used 100.60 GB X 3)
Top Processes by CPU: ℹ️
      5% WindowServer
      1% Fitbit Connect Menubar Helper
      0% fontd
      0% AppleSpell
      0% launchservicesd
Top Processes by Memory: ℹ️
580 MB com.apple.dock.extra
322 MB SymDaemon
206 MB Google Chrome
168 MB spindump
155 MB mds_stores
Virtual Memory Information: ℹ️
7.46 GB Free RAM
2.59 GB Active RAM
1.51 GB Inactive RAM
1.05 GB Wired RAM
2.56 GB Page-ins
0 B Page-outs
Diagnostics Information: ℹ️
Jan 21, 2015, 11:23:52 AM /Library/Logs/DiagnosticReports/rpcsvchost_2015-01-21-112352_[redacted].cpu_res ource.diag [Details]
Jan 21, 2015, 11:18:14 AM Self test - passed

How do I know if my Mac has been infected with the virus

I recently was asked to download an Adobe Acrobat reader update but before I was made aware that the current virus was contained in a similar request, I downloaded what I assumed to be a legit update. I currently do not use my mail program on my Mac so am unaware of any spam being distributed from the computer. How can I identify if my computer has been infected with this Trojan Horse virus?

Two Helpful Links Regarding Flashback Trojan
A link to a great User Tip about the trojan: Flashback Trojan User Tip
A related link in the tip to a checker: Malware Checker Dowload Link
A Google search can reveal a variety of alternatives on how the remove the trojan should your computer get infected. This can get you started.
For now I recommend the User Tip from etressoft to detect and remove:
Checking for and removing the "Flashback" trojan

My Macbook may be infected with a Trojan ! Help.

Similar Messages

Maybe you are looking for