Possible worm or trojan horse?
I got my powerbookg4 (panther) back from apple repair today and now when I open up Safari I get a message from my isp "Spam Alert: Your PC may be infected with a virus that sends out large amounts of spam. As such, your outbound email service has been temporarily suspended." Click below for more information" When you click you get another message that explains that a large volume of outgoing mail has been detected and that it is indicative of a virus or trojan horse. I can click on a button to go to a free location to check out my system. That sounds suspicious in and of itself, but if you go directly to my providers website, they also link to the same place. Additionally, that site doesn't check safari browser, mac osx.
So this is perplexing. How do I know if this is possible on my machine? I rarely use my provider email, and all my email accounts go through apple mail. I logged on to my son's mac to see if he got the same thing, hoping the provider was just sending out random messages but it didn't occur on his machine.
Advice? Thoughts? I do not have a virus protection program on my mac, but I do not visit suspicious sites, do not download from unknown sites, all my music is from itunes, etc. Is the a reputable site I can use to check out my mac?
Thanks
Hi Carole,
I would ignore the on-line warning, especially clicking on the links. No telling what type of spam they'll produce. If you have concerns, call your ISP directly.
While you can certainly pass on a virus/trojan horse, etc. through an e-mail, these type of items do not affect the Mac.
To date, no virus has been written for the Mac (there was a suedo virus written earlier this year - much ado about nothing). From your description, it seems your surfing habits are quite conservative. If true, then Virus software would be unnecessary.
Similar Messages
-
Is it possible to get a trojan horse on an Android?
>>Duplicate post removed to comply with the Verizon Wireless Terms of Service. See Is it possible to get a trojan horse on an Android?<<
Message was edited by: Verizon ModeratorMost likely a false advertisement that is attempting to get you to download a malicious program on your Android.
Highly recommend not hitting "fix".
Yes Androids can have viruses, I would recommend wiping the phone with a factory reset if you believe that your phone has become infected with malicious software. -
Last night, I made the mistake of downloading an app called "Wine" and "Winebottler". These are apps that allow Windows programs to be played on Macintosh without installing Windows. I ended up with 13 new OSX Trojan Horses on my Macintosh. These apps kept on installing add ons to the iTunes Store. I knew I was in trouble immediately, I guess, by instinct.I had also installed Wineskin for the same purpose, but I don't think that was the problem as I found no Trojan Horses associated with this app. I had my security set to download from App Store and Trusted Developers only. I am now going to upgrade my security to download from App Store only now, but I don't know for sure if that will help.
Luckily, I had Kaspersky on my Mac, and it kept on finding Trojan Horses on a full scan. I had firevault on and iCloud on. I am wondering now if my iCloud account is infected. I am currently erasing my whole hard drive and reinstalling. I will not turn on iCloud until I get some advice. For those that are unaware, I know we are in a cyberwar. I don't know where these apps originated, but I wanted the community to know this. I've used Macintosh since the first day it was available in 1984. I've never had troubles with viruses and Trojan Horses like this, except for two that were found by Kaspersky a couple of months ago and were easily found, isolated and disinfected. Not these. Most were easily disinfected: all but two. I had to restart the computer and Kaspersky got rid of them. Kaspersky is a great program, but I wasn't sure if it got rid of everything, which led me to erase and reinstall.
Please inform my about how secure iCloud is against attached viruses or should I delete my account.etresoft wrote:
straycat23 wrote:
I downloaded from WineHQ.org.
I doubt that because WineHQ doesn't have any Mac versions of Wine available. They distribute Linux binaries and source. If you downloaded a Mac version, it must have come from somewhere else.
As soon as I downloaded it and the Winebottler, I knew I had problems.
Why?
I took your earlier advice: left OS10.9.1 in place and turned iCloud back on. I hope I made the right decision. I did not delete Kaspersky because OSX did not delete the Trojan or prevent it from being downloaded. Kaspersky did.
But you are in a catch-22 situation here. These forums are full of people reporting problems with computers and antivirus is a very common cause. By comparison, there are far fewer people reporting problems with trojans. Are these programs really trojans? And even if they are, would they cause as much trouble and be as difficult to remove as antivirus? I doubt it
As far as I can tell WineHQ must be a trusted developer, because that is how my computer is set as I previously stated.
I would definitely consider WineHQ to be trustworthy (more so than antivirus vendors) but they definitely do not have an Apple Developer ID that would enable them to distribute software past Gatekeeper. Someone malicious may have repackaged Wine, added trojans, and signed it with a Developer ID. The only way to address that problem is to identify where you got the software so that the illicit Developer ID can be revoked.
I did not download these programs to play games. That's for Millenials. I downloaded these because Windows is a disaster, and I didn't want to load Windows on my computer. There are Windows programs that there is no equivalent in Mac.
It doesn't matter why you downloaded them. If they are Windows programs, you are going to have to run Windows. Wine is a cool project, but very little software actually works on it.
I also deleted Adobe Flash Player as was advised in another thread. Now I can't see instructions in YouTube. Does the App Store have a recommended flash player to see You Tube?
Download Adobe Flash directly from Adobe and installer. Then download the Click2Flash Safari extension: http://hoyois.github.io/safariextensions/clicktoplugin/ so you can avoid Flash, if possible. If you ever get any Flash popup asking for an update, always close it - always. Then go to the Adobe Flash site yourself and see if there is an update and download it.
I downloaded the program from WineHQ. It's in my history. I went back and looked today. I don't think Linux has an iTunes version. I downloaded a program I didn't request that attached itself to iTunes. This is how I knew I had problems.
I appreciate all the advice: dismissive or not. It did give me confidence there's nothing wrong with my computer. I just don't have faith in Mac like I used to. I'm guessing that the trojans were not real, but I'm glad I had a device to delete the false positives, if for no other reason than it made me feel better. Any website can be attacked by hackers. Maybe that's what happened to WineHQ. -
Hi,
is there someone who knows who to find trojan horses on a Mac?The only Trojans that exist for Mac have been "proof of concept" ones. One called "Leap or "Oompa-Loompa". I wouldn't waste my money on a program that claims to find them.
That said, it is possible (though not probable) for spyware to get onto your Mac. The best way to avoid that is by using your firewall and/or a hard wired router, downloading only from "trusted" sites, installing all security updates and being careful about what you give administrative power to. It is also recommended to run day to day tasks from a non-admin account.
Don't use Limewire or any other P2P service to download your software, get it from reputable sources. In addition, always keep at least your users backed up, preferably a clone of your entire system on a separate disk. And put your sensitive passwords, bank accounts, credit card numbers in a "secure note" in a new keychain or in an encrypted folder.
As for viruses, none. If and when a Mac virus does appear it will be headline news and you can download the AV software then. If you feel you have to run an AV program I'd suggest ClamXav a mac friendly freeware app that is very stable with Tiger. It will check for known virus signatures at any rate.
Enjoy your Mac
-mj
[email protected] -
A little while ago, my macbook was very slow and I went into the Apple store and they recommended that I turn Norton Antivirus off. I did.
A few months later (now) I ran it just for the heck of it to see if it found anything - and it did. Two or three Trojan Horse malware files. Looking at Nortons descriptions, I think that they were (I located and deleted them) all PC based virus BUT, I am wondering:
1. I have Microsoft Office for Mac on my Macbook and I am wondering if those files might have been compromised by a PC virus?
2. I am assuming that if these files have been compromised there is nothing that I can do about retrieving that information as it could be anywhere.
3. If I have other PC based drives hooked up to my macbook wirelessly - were they vulnerable while I had these Trojan Horses on my Macbook?
Thanks.
A.Don't always believe what Norton tells you. It is incompatible with OS X.
Norton Antivirus has a very long and illustrious reputation for mangling Mac OS X systems, sometimes to the point where a complete reinstall is necessary. Among other things, it installs kernel extensions which are known to cause kernel panics and system freezes; it contains known and documented bugs which can silently corrupt Adobe Photoshop and Adobe InDesign files, destroy a user's ability to authenticate as an administrator, and (on PPC systems) can cause Classic to stop functioning; and Symantec has on at least two occasions now released flawed .dat file updates which erroneously report certain critical Mac OS X files as "viruses." (Deleting these "viruses" causes damage to the system that in some cases renders it unbootable.)
1. No
2. Need more details about what you call 'compromised'
3. Yes.
No viruses that can attack OS X have so far been detected 'in the wild', i.e. in anything other than laboratory conditions.
It is possible, however, to pass on a Windows virus to another Windows user, for example through an email attachment. To prevent this all you need is the free anti-virus utility ClamXav, which you can download for Tiger and Leopard from (on no account install Norton Anti-Virus on a Mac running OS X):
http://www.clamxav.com/
The new version for Snow Leopard is available here:
http://www.clamxav.com/index.php?page=v2beta
(Note: ClamAV adds a new user group to your Mac. That makes it a little more difficult to remove than some apps. You’ll find an uninstaller link in ClamXav’s FAQ page online.)
If you are already using ClamXav: please ensure that you have installed Apple Security Update 2010-005 and that your version of ClamXav is the latest available.
However, the appearance of Trojans and other malware that can possibly infect a Mac seems to be growing, but is a completely different issue to viruses.
If you allow a Trojan to be installed, the user's DNS records can be modified, redirecting incoming internet traffic through the attacker's servers, where it can be hijacked and injected with malicious websites and pornographic advertisements. The trojan also installs a watchdog process that ensures the victim's (that's you!) DNS records stay modified on a minute-by-minute basis.
You can read more about how, for example, the OSX/DNSChanger Trojan works here:
http://www.f-secure.com/v-descs/trojanosxdnschanger.shtml
SecureMac has introduced a free Trojan Detection Tool for Mac OS X. It's available here:
http://macscan.securemac.com/
The DNSChanger Removal Tool detects and removes spyware targeting Mac OS X and allows users to check to see if the trojan has been installed on their computer; if it has, the software helps to identify and remove the offending file. After a system reboot, the users' DNS records will be repaired.
(Note that a 30 day trial version of MacScan can be downloaded free of charge from:
http://macscan.securemac.com/buy/
and this can perform a complete scan of your entire hard disk. After 30 days free trial the cost is $29.99. The full version permits you to scan selected files and folders only, as well as the entire hard disk. It will detect (and delete if you ask it to) all 'tracker cookies' that switch you to web sites you did not want to go to.)
A white paper has recently been published on the subject of Trojans by SubRosaSoft, available here:
http://www.macforensicslab.com/ProductsAndServices/index.php?mainpage=document_general_info&cPath=11&productsid=174
Also, beware of MacSweeper:
MacSweeper is malware that misleads users by exaggerating reports about spyware, adware or viruses on their computer. It is the first known "rogue" application for the Mac OS X operating system. The software was discovered by F-Secure, a Finland based computer security software company on January 17, 2008
http://en.wikipedia.org/wiki/MacSweeper
On June 23, 2008 this news reached Mac users:
http://www.theregister.co.uk/2008/06/23/mac_trojan/
More on Trojans on the Mac here:
http://www.technewsworld.com/story/63574.html?welcome=1214487119
This was published on July 25, 2008:
Attack code that exploits flaws in the net's addressing system are starting to circulate online, say security experts.
The code could be a boon to phishing gangs who redirect web users to fake bank sites and steal login details.
In light of the news net firms are being urged to apply a fix for the loop-hole before attacks by hi-tech criminals become widespread.
Net security groups say there is anecdotal evidence that small scale attacks are already happening.
Further details here: http://news.bbc.co.uk/2/hi/technology/7525206.stm
A further development was the Koobface malware that can be picked up from Facebook (already a notorious site for malware, like many other 'social networking' sites like Twitter etc), as reported here on December 9, 2008:
http://news.bbc.co.uk/newsbeat/hi/technology/newsid_7773000/7773340.stm
You can keep up to date, particularly about malware present in some downloadable pirated software, at the Securemac site:
http://www.securemac.com/
There may be other ways of guarding against Trojans, viruses and general malware affecting the Mac, and alternatives will probably appear in the future. In the meantime the advice is: be careful where you go on the web and what you download!
If you think you may have acquired a Trojan, and you know its name, you can also locate it via the Terminal:
http://theappleblog.com/2009/04/24/mac-botnet-how-to-ensure-you-are-not-part-of- the-problem/
As to the recent 'Conficker furore' affecting Intel-powered computers, MacWorld recently had this to say:
http://www.macworld.co.uk/news/index.cfm?email&NewsID=25613
Although any content that you download has the possibility of containing malicious software, practising a bit of care will generally keep you free from the consequences of anything like the DNSChanger trojan.
1. Avoid going to suspect and untrusted Web sites, especially p'orn'ography sites.
2. Check out what you are downloading. Mac OS X asks you for you administrator password to install applications for a reason! Only download media and applications from well-known and trusted Web sites. If you think you may have downloaded suspicious files, read the installer packages and make sure they are legit. If you cannot determine if the program you downloaded is infected, do a quick Internet search and see if any other users reported issues after installing a particular program. A recent example is of malware distributed through innocent looking free screensavers: http://www.zdnet.com/blog/security/malware-watch-free-mac-os-x-screensavers-bund led-with-spyware/6560?tag=nl.e589
3. Use an antivirus program like ClamXav. If you are in the habit of downloading a lot of media and other files, it may be well worth your while to run those files through an AV application.
4. Use Mac OS X's built-in Firewalls and other security features.
5. Stop using LimeWire. LimeWire (and other peer-to-peer sharing applications and download torrents) are hotbeds of potential software issues waiting to happen to your Mac. Everything from changing permissions to downloading trojans and other malicious software can be acquired from using these applications. Similar risks apply to using Facebook, Twitter, MySpace, YouTube and similar sites which are prone to malicious hacking: http://news.bbc.co.uk/1/hi/technology/8420233.stm
6. Resist the temptation to download pirated software. After the release of iWork '09 earlier this year, a Trojan was discovered circulating in pirated copies of Apple's productivity suite of applications (as well as pirated copies of Adobe's Photoshop CS4). Security professionals now believe that the botnet (from iServices) has become active. Although the potential damage range is projected to be minimal, an estimated 20,000 copies of the Trojan have been downloaded. SecureMac offer a simple and free tool for the removal of the iBotNet Trojan available here:
http://macscan.securemac.com/files/iServicesTrojanRemovalTool.dmg
Also, there is the potential for having your entire email contact list stolen for use for spamming:
http://www.nytimes.com/2009/06/20/technology/internet/20shortcuts.html?_r=1
NOTE: Snow Leopard, OS 10.6.x, offers additional security to that of previous versions of OS X, but not to the extent that you should ignore the foregoing:
http://www.apple.com/macosx/security/
Apple's 10.6.4 operating system upgrade silently updated the malware protection built into Mac OS X to protect against a backdoor Trojan horse that can allow hackers to gain remote control over your treasured iMac or MacBook.
http://www.sophos.com/blogs/gc/g/2010/06/18/apple-secretly-updates
Finally, do not install Norton Anti-Virus on a Mac as it can seriously damage your operating system. Norton Anti-Virus is not compatible with Apple OS X.
And if you are using iPhone Apps you are also at risk of losing all privacy:
http://www.engadget.com/2010/10/03/hacker-claims-third-party-iphone-apps-can-tra nsmit-udid-pose-se/ -
Trojan Horse Generic 11.PWW in my AIR download!
Last week I downloaded and installed the latest version of
Adobe (vers. 9) from the Adobe.com site. However, it wouldn't run
and gave me a message that ran along the lines "Your software has
been successfully installed. However, it might run slower than
normal because your disc needs defragmenting," plus some advice to
defrag the disc then run the program again. Well my disc was fine
as I'd run a defrag a day earlier. All the same I defragged it
again then re-tried the new Adobe program. Same message. So I
uninstalled the whole thing and did a new d/load and install. Same
problem still. Finally I gave up on it and uninstalled it. What's
the point of having it if I can't use it?
Well today I ran my anti-virus program (AVG 8) and it found
this:
Infection Trojan horse Generic11.PWW
And the path:
C:\Documents and Settings\Owner\Local Settings\Application
Data\Adobe\Reader 9.0\Setup Files\AIR\Adobe AIR Installer.exe
This Trojan is now locked away in the AVG virus vault. What
beats me is how this is still hanging around on my comp after I'd
uninstalled, run CCleaner etc. I'm not a geek though so if anyone
can advise then I'd be glad for it.
Also, having browsed some recent AIR topics and seeing the
problems people have been having, I'd like to know if anyone else
has picked up a trojan in AIR in their virus scans. I'd appreciate
any feedback, because until I can be sure this problem is fixed I'm
not d/loading any new versions of the main Adobe s/ware.
Many thanks,
MikeHi Luis,
I downloaded the Adobe Reader v.9 s/ware again to see if
things were now different, but the problems persist. Because it
might be helpful to you I took screen shots of the following, which
in respect of issues tell the story well enough:
the download confirmation (while on the Adobe.com download
page),
the Run query box prior to running it that confirms it's
ready to be run,
the Setup Successful box with its confirm of a successful
install but an advisory that the program might not launch as
quickly as possible as my disk needs defragmenting,
the defragment disk report which shows my disk doesn't need
defragmenting,
the download page of an official govt. site where I wished to
download some .pdf format application forms,
the Mozilla Crash Report that I got as soon as I clicked on
the download link in the above page, and
the "Adobe Reader 9.0 has encountered a problem and needs to
close" box that I got when I tried to read one of the same .pdf
files (downloaded via another comp that doesn't have Adobe 9.0).
Please note that same .pdf file reads fine on my PC which runs
Adobe v 7.
Summary: the newly installed Adobe v. 9.0 wrongly says that
my disk needs defragmenting; it crashes my Mozilla v.3 browser as
soon as I try to download a .pdf file from a safe (Capital City
Govt. Dept) website; it cannot read .pdf documents but has to close
- even though those documents clearly show with the usual "Adobe"
icon, showing that Adobe reader is installed on the laptop.
I have uploaded all of those screen shots to a photobucket
site and am sending you a private message with the link. I hope
this will help. Meanwhile, because I never had a Mozilla crash
prior to installing Adobe v 9.0, I am uninstalling this software
again to avoid any more possible crashes. I have also used the
Mozilla Crash Report facility to advise them that I had installed
Adobe 9.0 only minutes prior to the crash and would uninstall the
new s/ware and see if that fixes the problem. (Because the fact is
that there may be another issue involved.)
Meanwhile if there is any way to download an older version of
Adobe reader I'd like to have it. My Adobe 8 was excellent.
Many thanks for taking the time to review this for us. (As
I'm surely not the only one.) I understand that as it's freeware,
Adobe has no liability or onus to do anything so your helpful
approach is brilliant.
EDIT to add: On second thoughts I'll leave the new Adobe 9.0
installed. Makes more sense as there's no way to try any fixes if I
uninstall it :) -
Defualt Black Bla Trojan Horse from Norton
Norton antivirus says a worm was detected and blocked every time i open itunes and comcast at the same time, thats not exactly at the same time, for thats physically impossible, but a close periods. Whats this all about.
By the way Defalt Black Bla Trojan Horse is the worm suppodsly tryn to get in.yeah, figures
-
Trojan Horse virus warning on my MAC
I got a error message of Trojan Horse virus. the message has a number 800 404 5537 to help. They told me to enter an address on the internet explorer URL to control my computer to troubleshoot. Should I give them access?
This is a well-known fake tech support scam. If you call them, they will "show" you some things on your machine that they will tell you are indicative of viruses and other problems. (They are actually perfectly normal things that people can be easily frightened into misinterpreting.)
If you go along with them, they will do two things: 1) require you to pay for a year or two of "service" by giving them a credit card, and 2) request remote access to your computer so they can fix it. They will then charge your credit card far more than they said they would and potentially use the remote access you grant them to install malicious software on your computer.
Never fall for this kind of scam. If you do, there's only one possible response: cancel the credit card and erase the computer's hard drive. -
I got a trojan horse on my sd card through a pc. When inserted the card in my MacBook I opened an .exe file (at that time I didn't know it's infected) and it opened a window with some ureadable letters. My question and concern is what are the chances I got my Mac infected by the trojan? How safe it is to do all my regular banking etc. on the Mac or should I run a visus scan?
Hi i, and welcome to Apple Discussions.
Please note that this is nothing more than an opinion; I'm not sure anyone here can give you a 100% answer.
If you ran the exe while your MBP was booted to a Windows OS, I'd say the odds are very high your MBP is infected.
If you're talking about "opening" the exe while booted into OSX, I'd say the odds are very slim you're infected.
If you were in OSX, by chance did you notice what app opened to show you the "unreadable letters?" Was it Text Edit?
I like to play it safe in situations like this, and given your question about banking, I'd certainly want to find out more. Maybe you can talk to someone in the PC world and find out more about the actual "Trojan" and if it is possible for that to infect a Mac (again, if it's a PC "Trojan," then the odds are very slight).
There are anti-virus apps for the Mac, but some people believe they cause more problems than they resolve. Still, for peace of mind, you may want to google for Mac anti-virus or similar search terms and decide if you want to give it a try. Good luck.
Message was edited by: tjk -
My computer has been infected by a Trojan Horse. It has taken over my Mac email account and began sending out malicious emails to everyone in my address book. I cleared out my MAC address book and began using my AOL email account. It took a few days and then my AOL email account was infected and has now been send out malicious email to all my contacts for over a month. It has also infected my iPhone--I am no longer able to send or receive emails on my iPhone. Also, once the Trojan Horse began using my AOL email it completely blocked me from using my MAC account by sending never ending popups asking for my email password to access my MAC email account, but it never accepts my pass word. The TH has also slowed down everything on my computer. It's like I am working on an old PC with dial up connection instead of the high speed digital connection that I have. The little color wheel spins constantly as I wait for sometimes over a minute for a page to pull up. If it pulls up at all. I have tried to use the 2 disks that came with my computer to completely remove everything on my computer and then reinstall all the programs, but I am not allowed to sweep my computer clean. I thought maybe my disks that came with my computer were defective so I called Apple and they sent me 2 new disks. I am not able able to clear my computer with the 2 new disks either. I have done this before successfully so it's not something new to me. I do remember when I believe my computer became infected: I had googled an unusual sewing term, and I was opening what appeared to be legitimate sites, when all of a sudden a pop up appeared that said that my computer had been infected. I immediately shut my computer off, but it was too late. I downloaded a virus program for Mac, and it has never found a virus or problem at all. I think it is part of this Trojan Horse, but I am unable to delete it from my computer. It refuses to uninstall. The Mac Trojan Horse is real and it is terrible. If anyone has any suggestions for me I would be very appreciative,
Beth
vuInstall ClamXav and run a scan with that. It should pick up any trojans.
17" 2.2GHz i7 Quad-Core MacBook Pro 8G RAM 750G HD + OCZ Vertex 3 SSD Boot HD
Got problems with your Apple iDevice-like iPhone, iPad or iPod touch? Try Troubleshooting 101 -
Hey guys, Im expierencing problems with itunes after the latest update yesterday(1/22) and the problem im having is when i plugged my iphone into my PC today a virus detection came up and said a trojan horse was present. I also cant open itunes at all. Im confused and dont know what to do. thanks in advance
Place the device in DFU mode (google it) and restore.
-
I think I have some Malware/Trojan Horse on MacBook Pro. How to get rid of it?
My MacBook Pro has worked perfect for the last 2 years, but over the last 2 days when I am on Chrome it has started clicking onto random websites when I click other links, and showing certain words as underlined and as hotlinks. I think I recognise that from having a PC as Malware or Trojan Horse? What is the best way to remove this as I have read through a few threads on here and they advise not downloading any anti virus software as it slows down your Mac instead of helping.
<Post Edited By Host>You installed the "VSearch" trojan, perhaps under a different name. Remove it as follows.
Malware is constantly changing to get around the defenses against it. The instructions in this comment are valid as of now, as far as I know. They won't necessarily be valid in the future. Anyone finding this comment a few days or more after it was posted should look for more recent discussions or start a new one.
Back up all data before proceeding.
Triple-click anywhere in the line below on this page to select it:
/Library/LaunchAgents/com.vsearch.agent.plist
Right-click or control-click the line and select
Services ▹ Reveal in Finder (or just Reveal)
from the contextual menu.* A folder should open with an item named "com.vsearch.agent.plist" selected. Drag the selected item to the Trash. You may be prompted for your administrator login password.
Repeat with each of these lines:
/Library/LaunchDaemons/com.vsearch.daemon.plist
/Library/LaunchDaemons/com.vsearch.helper.plist
/Library/LaunchDaemons/Jack.plist
Restart the computer and empty the Trash. Then delete the following items in the same way:
/Library/Application Support/VSearch
/Library/PrivilegedHelperTools/Jack
/System/Library/Frameworks/VSearch.framework
~/Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin
Some of these items may be absent, in which case you'll get a message that the file can't be found. Skip that item and go on to the next one.
From the Safari menu bar, select
Safari ▹ Preferences... ▹ Extensions
Uninstall any extensions you don't know you need, including any that have the word "Spigot," "Trovi," or "Conduit" in the description. If in doubt, uninstall all extensions. Do the equivalent for the Firefox and Chrome browsers, if you use either of those.
Reset the home page and default search engine in all the browsers, if it was changed.
This trojan is distributed on illegal websites that traffic in pirated content. If you, or anyone else who uses the computer, visit such sites and follow prompts to install software, you can expect much worse to happen in the future.
You may be wondering why you didn't get a warning from Gatekeeper about installing software from an unknown developer, as you should have. The reason is that this Internet criminal has a codesigning certificate issued by Apple, which causes Gatekeeper to give the installer a pass. Apple could revoke the certificate, but as of this writing, has not done so, even though it's aware of the problem. This failure of oversight has compromised both Gatekeeper and the Developer ID program. You can't rely on Gatekeeper alone to protect you from harmful software.
*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select
Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return. -
I have received an email from a friend with a link which I clicked. It took me to the google home page. I am now suspicious that my friend's email account has been hijacked and the link contained a virus or a Trojan horse. I would know what to do on my PC but am new to the IPad. Can any form of Trojan horse be planted on IOS 6 or am I worrying unnecessarily? Reassurance would be most welcome as I do use the IPad for checking bank details and web purchases. Thanks for any help.
PC virus won't run on iPad.
-
Can't find file for Trojan Horse on my MacBook
Anyone seen this before?
I have the Norton Antivirus Program installed on my MacBook.
I believe an attack occurred while I was looking through the Apple Support Forums for help with a QuickTime problem and accidentally clicked on the following link: http:www.smacktalkpaintball.com/video/
The Norton Warning came up and I hit the delete option and then set Norton to scan manually.
The following came up at the end of the scan:
Virus "bof.jar-51a4bd07-3d4b399d.zip" detected, Today at 7:24 AM. Repair failed.
/Users/Owner/Li...bd07-3d4b399d.zip Trojan Horse infected
I was not able to locate either of these files anywhere on my computer.
I have two external hard drives that I use to back-up data, but neither of them were connected at the time of the attack, and nothing else was connected when I ran the virus scan.
I do not have Windows installed on this MacBook - Mac OS X, Version 10.5.8,Norton was able to detect the Trojan whereas MacScan was not, but Norton was not able to remove it
That sounds an unlikely outcome on both counts. Norton anti-virus is just that: anti-virus, and I would not trust it to deal with trojans.
Are you sure you actually installed a Trojan?
If you allow a Trojan to be installed, the user's DNS records can be modified, redirecting incoming internet traffic through the attacker's servers, where it can be hijacked and injected with malicious websites and pornographic advertisements. The trojan also installs a watchdog process that ensures the victim's (that's you!) DNS records stay modified on a minute-by-minute basis.
You can read more about how, for example, the OSX/DNSChanger Trojan works here:
http://www.f-secure.com/v-descs/trojanosxdnschanger.shtml
SecureMac has introduced a free Trojan Detection Tool for Mac OS X. It's available here:
http://macscan.securemac.com/
The DNSChanger Removal Tool detects and removes spyware targeting Mac OS X and allows users to check to see if the trojan has been installed on their computer; if it has, the software helps to identify and remove the offending file. After a system reboot, the users' DNS records will be repaired.
(Note that a 30 day trial version of MacScan can be downloaded free of charge from:
http://macscan.securemac.com/buy/
and this can perform a complete scan of your entire hard disk. After 30 days free trial the cost is $29.99. The full version permits you to scan selected files and folders only, as well as the entire hard disk. It will detect (and delete if you ask it to) all 'tracker cookies' that switch you to web sites you did not want to go to.) -
Acrobat 9.5.4 update introduced Trojan Horse Generic31.COFB
I allowed Acrobat 9 to update to 9.5.4 this morning. During the process AVG identified Trojan Horse Generic31.COFB in the file JP2KLib.dll. Is this a false positive or is this file truley infected right from Adobe?
I contacted AVG technical support and verified this is a false positive from a virus definition update they pushed out overnight. They will be sending out an updated virus definition update that will resolve this from being falsely detected. Thanks.
Maybe you are looking for
-
Error while using Microsoft.WindowsAzure.Storage dll in Plugin
Hi, I want to save some CRM content on Azure blob storage. For this i am using a plugin to create data on Azure blob storage. But my plugin is throwing error. Can anyone suggest me some idea how to work with this. Below is the error. Unhandled Except
-
i had purchased a game for my kid, and after he played for a while, there was a message that popped up saying that iCloud backup can not access my account and it has 2 buttons on it, one says ignore, the other says settings, but none of them does any
-
"find my iphone" device name changed to something offensive
hi, i used my ipad to find my iphone4S yesterday. listed in my list of devices was also my old iphone3 that I use as an ipod in a docking station in another part of my house. i have small children and no one has access to my old phone to mess with
-
Hi all, I have an issue for the past 1 month. I bought the samsung ssd 840 evo 1 month ago and i did i copyied (throught the Time Machine) the current hdd to the ssd. For the first boot i had some strange problems with some programs that i fixed in t
-
FM which give delivery no of a schedule line of sale order
Can anybody tell whether there is a function module or any method to find a delivery no and item no of a particular schedule line of item no of a sale order. pls its urgent.