Virus in town?

Has anyone heard of any virus wandering around?
On my network of 9 macs, I am experiencing 3 eMacs becoming sluggish (beach ball), one after each other in a 2-3 weeks lapse of time. The spinning wheel appearance at almost every click of the mouse.
These eMacs are running MacOs 10.5.8 and 10.4.11
Have tried the usual maintenance procedures (permissions, safe Boot, disk directory repairs) but not with much results.
Have the latest updates of VirusBarrier installed, but no virus detected.
I recall some years ago having been infected and the virus travelled from one computer to the other over the network.
So far, I don't understand what is happening.

How full are the Hard Drives?
At this point I think you should get Applejack...
http://www.macupdate.com/info.php/id/15667/applejack
After installing, reboot holding down CMD+s, (+s), then when the DOS like prompt shows, type in...
applejack AUTO
Then let it do all 6 of it's things.
At least it'll eliminate some questions if it doesn't fix it.
The 6 things it does are...
Correct any Disk problems.
Repair Permissions.
Clear out Cache Files.
Repair/check several plist files.
Dump the VM files for a fresh start.
Trash old Log files.
First reboot will be slower, sometimes 2 or 3 restarts will be required for full benefit... my guess is files relying upon other files relying upon other files!
Disconnect the USB cable from any Uninterruptible Power Supply so the system doesn't shut down in the middle of the process.

Similar Messages

My Firefox system seems to automatically use a town to provide information those automatic banner displays, but it is NOT my town. How do I set or reset this feature to be my hommetown versus another?

Several different advertisers seem to use an embedded setting to display a map within their banner display, however, it is not my town, but one close by.
A couple weeks ago, a Firefox window popped up, without my involvement, asking me to verify certain information on it. It seemed to be a 'general settings' window from Firefox and I noticed it had the name of the 'other' town listed in the field labeled "Your Location" (or something close to that), so I changed it to the 'correct' name of my hometown and closed the window properly.
This action caused no issues (i.e. it wasn't a Trojan virus or anything) and seemed to have cleared up the incorrect banner maps, maybe as I didn't pay too close attention recently. However, today I again noticed the system using the 'other' town's name when displaying those banner map ads.
How can I set/reset this setting to the name of my correct 'home'town?

You can automatically save downloads without seeing the Open/Save/Cancel dialog in the Options:
orange Firefox button (or Tools menu) > Options > General > "Saves files to"
However, I can't think of a way to have the Open/Save/Cancel dialog always default to Save. I think mine suggests whatever I did last for the same type of content, but I haven't paid close attention.
I'm out of time to address the problem with "do this automatically" but there is one suggestion for why it could be grayed out in this article: [[Change what Firefox does when you click on or download a file]].
Is it possible you had a download-related extension before? To compare settings and extensions, please retain the Old Firefox Data folder on your desktop. Aside from checking the extensions in there, it would be interesting to run a text file comparison on your currently active prefs.js file and your old one in that folder.

Virus, Worm, other Malware?

Situation: We live in the country and are stuck with Hughesnet satellite. Hughesnet has a "Fair Access Policy" and we are only allowed to download 200MB per 24 hours. This is fine and we never go over the 200 MB. Software updates can be done late night when there is a download as much as you want period.
If you go over the 200MB Hughesnet drops you to dial-up speed for 24 hours. I pay pretty close attention to our usage, and we are very consistent.
All of a sudden, starting a day or two ago, we are downloading a ton. About 1MB every 2-3 minutes when a web browser ap is open even if I am not visiting any sites. I can log onto the Hughesnet Modom and monitor usage, and a just watched the usage climb and I was not doing any surfing. If I am visiting sites, it is worse. If I turn off the airport on the computer, it no longer does this, so I think it is safe to assume the modem and my time capsule are not the culprits. It is something in the computer.
We use Firefox and Safari. Both have had the latest updates. I have turned off all syncing and do not have any updates running. Before all of this happened I had been using openoffice to open some .doc files from faculty at school. These are trusted sources. Have not installed any applications.
This is bizarre. Is there a way to get a virus or worm or something without ever opening a file? My wife is all over Facebook, but she says she has not opened any files from Facebook. Can facebook plant something in a browser via a vulnerability?
I guess the answers to those questions does not matter. I just need to figure out how to stop the crazy consumption of MB during routine email and browsing. Obviously something is running in the background and it is pulling in data. Uploads have remained the same, it is only downloads.
Thanks. I hope the collective brain trust can help my figure this one out.
It is very strange

Wow, im so sorry, I cant imagine being in your shoes with those kinds of restrictions.
I just restarted my computer and within 3 min I had used 1MB of data received, checking it with Activity Monitor, its in the Applications folder(use finder). The dashboard updated the weather for my town, I got the word of the day, safari launched and updated the thumbnails for my top sites, mail checked for new emails. Lol, just while Ive been typing this i have used another 1MB
Lots of things can be turned down or off.
Go To:
Apple/System Preferences/System/Software Update-------Uncheck the "Check for updates" box, just remember to go back here at night during "freetime" Hughesnet gives you, and manually check for updates.
Also in System uncheck the "Set date and time automatically"
Obviously using an iDisk in Mobile Me would contribute to internet usage.
Go To:
iTunes/System Preferences/General and Uncheck the "Auto...retrieve cd names from the internet" box, and uncheck the "Check for software updates automatically"
Go To:
Mail/General/Check for new messages/ and set it to Manually
Go To:
Safari/Preferences/General....and have new windows open with an "empty page", new tabs open with an "empty page" and dont use a "home page", chances are you will just load a page you dont really need. Like I said the "Top Sites" little web page icons get updated all the time, you prolly cant afford this feature.
Lol, now I am at 5MB now and I havent been "on the internet" yet. Hope this help gets you started in the right direction.

Flashback virus here.... now gone ???

Hi all,
I recently posted one of the trillions of discussions regarding the Flashback virus here:
file://localhost/Users/michaelm/Desktop/Power%20PC%20apps%20crash%20on%20startup %20in%20OS...-%20Apple%20Support%20Communities.webloc
I confirmed that my 10.5.8 Leopard run Mac Pro did indeed have the virus. All the behaviors were there: Power PC/Rosetta run apps were crashing on start up and the Terminal utility showed the presence of the dreaded DYLD_INSERT_LIBRARIES. After that, I was out of town for about a week and the Mac Pro was shut down for that period and upon my return, I was to wipe and reinstall to start fresh. While away, I read some more articles about the virus and some remedies and removal techniques, so I returned home hopeful that the wipe and reinstall would not be necessary.
But.... when I fired up the Mac Pro today after a week of being shut down, it seems the virus was gone. ??? Is this possible? I entered the following lines in Terminal and got 'does not exist' on all of them!
defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES
defaults read /Applications/Safari.app/Contents/Info LSEnvironment
defaults read /Applications/Firefox.app/Contents/Info LSEnvironment
My older Power PC/Rosetta run apps started up fine with no crashes. I also turned off Java in Safari preferences. So the question is, what to do now? Should I immediately update to 10.6 Snow Leopard (I have too many Rosetta run apps right now to shift to Lion) and get all native softwares up to date? I would imagine that Snow Leopard would be safer at this point than my old Leopard. Should I install a Mac virus protection app as well? Should I also keep Java OFF at all times?
Thanks! Mike

Hi Mike, this thing is changing, so it may even move itself around, or uninstall some things to hide or change itself.
Disable Java in your Browser settings, not JavaScript.
http://support.apple.com/kb/HT5241?viewlocale=en_US
http://support.google.com/chrome/bin/answer.py?hl=en-GB&answer=142064
http://support.mozilla.org/en-US/kb/How%20to%20turn%20off%20Java%20applets
Flashback - Detect and remove the uprising Mac OS X Trojan...
http://www.mac-and-i.net/2012/04/flashback-detect-and-remove-uprising.html
In order to avoid detection, the installer will first look for the presence of some antivirus tools and other utilities that might be present on a power user's system, which according to F-Secure include the following:
/Library/Little Snitch
/Developer/Applications/Xcode.app/Contents/MacOS/Xcode
/Applications/VirusBarrier X6.app
/Applications/iAntiVirus/iAntiVirus.app
/Applications/avast!.app
/Applications/ClamXav.app
/Applications/HTTPScoop.app
/Applications/Packet Peeper.app
If these tools are found, then the malware deletes itself in an attempt to prevent detection by those who have the means and capability to do so. Many malware programs use this behavior, as was seen in others such as the Tsunami malware bot.
http://reviews.cnet.com/8301-13727_7-57410096-263/how-to-remove-the-flashback-ma lware-from-os-x/
http://x704.net/bbs/viewtopic.php?f=8&t=5844&p=70660#p70660
The most current flashback removal instructions are F-Secure's Trojan-Downloader:OSX/Flashback.K.
Check now whether your Mac is infected by Backdoor.Flashback.39!
http://public.dev.drweb.com/april/

Virus attack on router?

I have an issue with my router this happened twice in 1 week. I have reset the router but this keeps happening. What could this be? Could this be some hacker attacking my router or a virus trying to get in? See the video here
http://www.youtube.com/watch?v=_R2RYDsitf4
Please leave comments on the forum. You can also leave them on the video page but Iwould rather the comments be left on this forum. My router is hardware version 5 and it has the latest firmware. This has been a good router I am not ready to give it up. It has a range better than a wireless N i have that is why I am still useing this router. Oh and I live away from town and only a few neighbors have wireless but they are not close enough to cause problems.
Thanks

You said you performed a reset and the problem recurs. Have you done a hard reset using the 30-30-30 method? That involves pressing the reset button for 30 secs, removing the power for 30 while still pressing in the reset button. Then plugging power back in while still holding for 30 last seconds. Then after that power if off and wait 60 seconds before resuming. This will perform a complete hardreset where the unit should be restored to all factory defaults of the firmware.
If the above steps does not fix the issue then the next step would be to reflash the router with the latest firmware. If after a firmware upgrade the issue continues then the router is more then likely on its way out and needs replaced.

When i login to yahoo, my first click results in the spinning wheel. Could i have a virus Or why does it only happen when i login to yahoo?

When i login to yahoo, my first click results in the spinning wheel. Could i have a virus? Or why does it only happen when i login to yahoo?

Firefox allows to select part of a word. You can select a word with a double click and use Shift + left click to set the end of the selection, so you need to click at the end of the last word instead of in it.

Hi, I don't know who to turn to: the person who handles all the compter stuff is out of town, This A.M.I started up Firefox and there was a message re an update, I thoght I new just to click on install and wait to re start Firefox. But what I can remember

Hi, I don't know who to turn to: the person who handles all the compter stuff is out of town, This A.M.I started up Firefox and there was a message re an update, I thoght I new just to click on install and wait to re start Firefox. But what I can remember is that another window opened and asked me to choose 'something' (an icon or banner or?), I thought I must click something (I guess I should read all clearly). Firefox did update to 3.6.4, but it also inserted some sort of what might be called a banner? But it only partly covers the right one- half of my 3 toolbars at the top of the Firefox window. It can't be used for anything as it is just a mess of colors and unknowns, except what looks like a 'top' and what I recognize as a Firefox icon (but only partly visible)!! Now, what it does do is partly hide that whole portion of the toolbars and they are hard to read and in turn make this 'thing' impossible to figure out, if I would care to? I can't find anyway to remove it or use it?? But since the Firefox icon is on it, I guess you should know what it is and how to trash it. I am sorry for this occurrence caused my my carelessness, but I'm not much of a computer person ----HELP! Thank you for any help. Judi
== This happened ==
Every time Firefox opened
== Today, Thrsday June 24, 2010

The only thing I can imagine: it's a [https://addons.mozilla.org/en-US/firefox/personas/ Persona].
Tools->Add-ons->Themes
Here should be the persona (lightweight theme)
and a button "Remove"
Click it (button Remove), and it (Persona, this mix of colors) should go away instantly.
Does it help you?

Flash Player para de funcinar ao desinstalar o anti-virus

Comprei um computador que veio com o McAfee para testar por um mes, como nao pretendia usar este anti-virus desinstalei ele para colocar outro, so que apos desinstala-lo o flash player parou de funcionar no internet explorer e o gadget do windows tambem, ele ficou somente um ponto borrado na tela com a opcao de fechar.
Fiz a instalacao e desinstalacao do flash player varias vezes, mas nao resolveu nada, tentei ate deletar alguns arquivos na pasta do windows/macromed/flash, mas tambem nao resolveu, o unico jeito foi restaurar o sistema para antes de tirar o anti virus, quando fiz isso o flash voltou a funcionar normalmente.
Agora preciso saber como tirar esse anti-virus e deixar o flash funcionando. Obs.: meu sistema e windows 7 home premium 64bits

Os artigos a seguir podem ajudar:
http://translate.googleusercontent.com/translate_c?hl=en&ie=UTF8&prev=_t&rurl=translate.go ogle.com&sl=auto&tl=pt&twu=1&u=http://forums.adobe.com/thread/885448&usg=ALkJrhhAntqPVtNrC pH8aTjX0ph5XA-iXA
http://translate.googleusercontent.com/translate_c?hl=en&ie=UTF8&prev=_t&rurl=translate.go ogle.com&sl=auto&tl=pt&twu=1&u=http://forums.adobe.com/thread/867968&usg=ALkJrhgNp7GsrUGy9 EdrdfmuIi_y-jB_jw
The following articles may help:
http://forums.adobe.com/thread/867968
http://forums.adobe.com/thread/885448

Virus TI au and vst plugin in logic 8

i've seen two cases where it causes massive crashes and lock ups. i hope access and apple fix this ASAP. it's really ******* my friends off...

With the 2.5 beta my Virus TI behaves like that in Logic 7.2 aswell, so I'm afraid this is not a problem for Apple to fix, rather Access Music.
The 2.5 beta update have helped in alot of areas, but it still freezes my computer up from time to time when launching the plugin.

Will it harm my Mac if I download the Graboid Video? Does it contain a virus or something like that?

If you are using this program will you let me know if it is safe or not? I'll look forward for your answers.

There's no virus in graboid. I downloaded this some weeks ago to try it out but like all .pkg's I don't necessarily trust I didn't install it but use Pacifist to see what the installer would install and extract the desired parts.
The GraboidVideoMac.app is really all I needed from the installer. The installer tries to install it's own par2, unrar, and an older VLC.app (1.0.3, VLC is up to 1.1.12). I didn't want this stuff installed since I already have these things in my desired places.
You have to set up an account which you can do from the GraboidVideoMac.app. Problem is the amount you can download is limited (2 Megs I think). After that you need to pay. Screw that. So I just forgot all about using it.

I ran a virus/trojan fix and this is what it said it could not repair something in the main library core or something like that. What do I do? The problem seems to be with safari?

I ran a virus/trojan fix and this is what it said it could not repair something in the main library core or something like that. What do I do? The problem seems to be with safari?

I ran the utility disk and this is what it said.
Warning permission differ Applications/Safari drwxr-xrx they are -rwxr-xr system/livrary Cores has been modified and will not be repaired.
Permission apllication differ on System/livrary/Pr or could be -rw-r--r-- they are rwxr-xr-x Application/iTune be droxr-xr-x they are rwxr-xr-x
Then I hit fix permissions and it said this
Warning SUID file Systm/Library/Core has been modified will not be repaired
I also downloaded Bitdefender Virus Scanner and it found nothing.

Could this be a Mail virus or something like it?

Just received an e-mail as follows:
From: Mail Delivery Subsystem <[email protected]>
Subject: Returned Mail: User unknown
Date: November 27, 2005 10:41:55 AM AKST
To: (my e-mail address here)
The message indicates that the mail was returned to me because there was a problem with the delivery (The following addresses had permanent fatal errors..."):
That paragraph is followed by a batch of 17 e-mail addresses, each with a user name beginning with the letters "p" and the letter "d," but every one of them addresses @ aol.com
The Remote for each e-mail was: Remote-MTA: DNS; air-yc01.mail.aol.com
X-Mailer Microsoft-Outlook-Express-Macintosh-Edition/5.02.2002
Please note that I have never used Outlook Express. In fact, I don't think it's installed on my Mac. Also, here is where I think the problem is at:
Reply-To-"PEA" <(my e-mail address is shown in here)>
From: "Peabody" <(my e-mail address again shown in here)>
Does it mean that somebody used my e-mail addressfor mass e-mail, or is it a virus? Nobody has my e-mail address, except for a couple of friends, and I have never answered to anybody I don't know personally.

Not a virus since there are no viruses that currently affect OS X which has been available for 5 years.
Please note that I have never used Outlook Express. In fact, I don't think it's
installed on my Mac.
OE for Macs is an OS 9 application which if installed on your Mac, would require OS 9 to be installed to run the Classic environment under OS X.
A spammer is using your email address to appear as the sending address for their bulk spam mailings.

A tab popped up wich said Mozzilla Security, the web page seemed to scan my computer, stated it was infested with several viruses, and that I should download protection immediatly. Is this legit?

A new tab opened up on my tool bar labeled Mozilla Security. The website looks like your security warning. But the security button is gray, McAfee doesn't recognize the site, and the web address does not contain Mozilla.com. The web address of this pop up page is: http://update89.modyett.co.be/index.php?Q57hGtS5bW5G7Hr+M0lEZy4rE7T40TcfocDyRAcjpCPVLS/PhAEpv1Hgq9vgx1qxsLunLyiXHnwwL5T3qX/CE0Q/ZRXJp+2mKYsC+kRq
Do I have a virus, as it states, or is this uninvited web page trying to install a virus? What should I do?

Just because it said Mozilla Security in the title bar does not mean it is from Mozilla as Mozilla nor the Firefox browser has ever done such a thing.
This sounds like one of those fake animated scanners which claims it is scanning your computer and then says you are infected with such and such. It then suggests to download something that will be what really infects your computer if using Windows. As long as you did not download and install this whatever.exe then you should be safe. Though you may want to scan your computer with whatever antivirus software you have with updated definitions just to be safer.
This sort of thing is even more obvious on being fake when Linux and Mac users can encounter these pages.

Could I have windows update virus on my macbook pro?

Since last week I have suddenly had what I think must be a virus where a message suddenly flashes up telling me that my java is out of date or that windows "has detected you need to update winupdate videos" and starts a countdown with no option to cancel or delete so I have to exit safari. It seems to happen most frequently when I'm on AOL. I've downloaded avast but that doesn't seem to be finding it and I've checked for software updates in case there is a patch but there are no software updates apparently. Anyone else had this? Got any ideas?

Beth Martin wrote:
Thanks that is helpful. I actually have OS X 10.6.8
Well that does change things a bit. You probably know by now that Apple has terminated support for Snow Leopard and did not provide an earlier update for Java 6 and just this week failed to provide a Security Update. It probably won't take long for malware developers to start attacking SL vulnerabilities as we've seen in the past with older versions of MicroSoft Word (for example) and I'm sure we will see when Windows XP reaches end-of-life in April. So you need to start thinking about an OS X upgrade.
I just went looking for a browser extension that blocks ads - any recommendations?
I agree with Network 23 on AdBlock. Either ClickToFlash or ClickToPlugin (don't use both & I use the latter since it does more) will result in faster browsing, reduced fan usage, and increased battery life.

Could I have a virus

Well - having had a virus myself all Christmas I am wondering whether my Mac also has one. This morning, before heading back home, my son (a complete mac head) decided that I should have the most up to date flash player downloaded onto my imac. Did a repair disk permissions following this. I was then using Firefox on the highways agency website when everything froze and I had to force quit. Both Safari and Firefox now seem to have slowed right down and when quitting Firefox a few minutes ago found a popup on my desktop. This was again after quitting the highways agency traffic information website. This has never happened before.
Is there a possibility that when downloading the flash player my son also downloaded something else as well. I think he downloaded it from macupdate.com.
In any case, is there any way I can check if something is amiss or can anyone recommend a virus scanner?
Thanks
Ann

I think a virus is unlikely. If the version he installed is the one listed here:
http://search.macupdate.com/search.php?keywords=flash&os=mac
it is a beta version.
You could uninstall it using this link: http://kb2.adobe.com/cps/141/tn_14157.html
then download the latest stable version following this link:
http://get.adobe.com/flashplayer/otherversions/

Virus in town?

Similar Messages

Maybe you are looking for