Questions tagged [malware]
Malware, short for malicious software, is software designed to disrupt computer operation, gather sensitive information, or gain unauthorized access to computer systems.
298
questions
64
votes
3
answers
743k
views
Is the message "You must change your passcode within 60 minutes" valid / non-malware?
A few minutes ago, after unlocking my phone (iPhone 4, iOS 7.0.1) I got a dialog over the home screen:
Passcode Requirement
You must change your passcode within 60 minutes
and it offered to ...
34
votes
5
answers
3k
views
Is my Mac infected with the Flashback trojan?
I own a 2011 model of MacBook Pro with a Core i7 processor and Snow Leopard. I have found out there is a trojan horse which now controls 600,000 Macs.
How can I find out if my MacBook is being ...
24
votes
2
answers
4k
views
Unexplained and persistent "OS X 10.13 is not supported" dialog
I am being interrupted multiple times a day by a mysterious dialog box that says:
"OS X 10.13 is not supported. There is an update but you are on OS X 10.13 or an earlier version. Upgrade to the ...
22
votes
7
answers
2k
views
How to limit my Mac's exposure to malware?
With OS X malware increasingly in the news (see the Flashback Trojan issue), is there anything that I should do to increase the security of my Mac and reduce my exposure to malware?
What I'm doing ...
20
votes
2
answers
6k
views
What is this unknown executable on my boot volume? Is it Malicious?
I noticed I had this file in the Macintosh HD folder.
And then when I click on it, it shows this:
Apparently this file was created in 2017, but I don't remember creating it.
Any idea what it could ...
16
votes
6
answers
18k
views
HP Easy Scan - "HP Scanner 3" will damage your computer
I have been using a HP Envy 4500 printer with my iMac for 2 years using HP Easy Scan - with no issues.
Today I tried to scan a document, when I press the "scan" button on the app a pop-up ...
12
votes
5
answers
39k
views
Are auto-downloaded malicious .dmg app files a security risk if they are never opened?
I visited a page to stream a TV show, and upon clicking the search result link got the following pop-up:
I clicked OK, as nothing on Chrome was available, and when I did that, Chrome auto-downloaded ...
12
votes
4
answers
4k
views
Full screen ad on iPhone in place of lock screen
I own an iPhone 3GS and use it as personal hotspot for my MacBook Pro via USB.
The iPhone is running iOS 5.1.1, and the MacBook is running a Mountain Lion preview. However the question is not ...
11
votes
0
answers
7k
views
why does Macos PowerChime use the network [closed]
PowerChime Sent Bytes:236 KB Rcvd Bytes: 8 KB Sent Packets: 7,210 Recvd Packets: 209
This alarms me!
Running Catalina 10.15.3 on a Macbook Pro 16"
10
votes
6
answers
8k
views
Stopping false positive malware warnings in Catalina?
Today, I received a pop-up warning saying "hpRaster.bundle will damage your computer. You should move it to the Trash".
"hpRaster.bundle" is installed by Mac OS X as part of its ...
10
votes
8
answers
32k
views
Random shutter sound
Every once in a while I hear a loud sound from my Mac. It sounds like either a camera shutter or a keychain lock/unlock. It all started a couple of weeks ago.
I fear something is snapping shots of my ...
10
votes
1
answer
893
views
Suspected adware infection of Mac
I have an Early 2015 MacBook Pro running OS X 10.11.6 (the latest version of El Capitan) that as of late had started randomly opening a website with the link fastlauncher.xyz [Thanks John Ramos: ...
10
votes
4
answers
5k
views
HP Product Research on Activity Log
I'm seeing an item on my activity monitor called 'HP Product Research.'
I assume it's associated with some HP Printer drivers that I no long need, and have have removed, but this tracker keeps ...
9
votes
4
answers
4k
views
Mac terminal found open with “man James” text. Have I been hacked?
I found a terminal window open with the below.
I ran /bin/bash -x and it looks like VMware was accessed and GPG tools.
It also added something suspicious to my login items... have I been hacked?! Also ...
9
votes
4
answers
1k
views
Paste stops working ("CFPasteboardRef: Lock timeout")
Pasting from the clipboard stopped working on my Mac. Nothing is pasted, and the following line appears many time in syslog.
Apr 5 **:**:** *** com.apple.WebKit.WebContent[6583] <Warning>: ...
9
votes
2
answers
10k
views
How can I circumvent XProtect and re-enable Java Applets?
So, Apple has again updated their XProtect malware definitions to block Java Applets. Unfortunately, my wife's employer's VPN requires an Applet to be run in order to fully establish connectivity. She ...
8
votes
2
answers
2k
views
Prevent Spam Downloads on Safari
Background
A new spam page has started to appear throughout many "questionable" sites (movie sites, etc.). This new spam page fits in to the category of fake scans, MacKeeper, "YOU HAVE A VIRUS", etc....
7
votes
1
answer
2k
views
What is the Unknown (0) process with 232 threads on my iPhone?
Here's a list of the processes on iPhone, obtained with help of Activity Monitor in Xcode instruments.
Is the Unknown(0) process with 232 threads owned by root malware?
7
votes
4
answers
5k
views
MacBook Pro camera and microphone used by malware?
Given the increasing number of reports about malware for Apple computers, I am concerned by the fact that there's no simple way to physically block the camera while I'm using my MacBook Pro.
Is it ...
7
votes
1
answer
2k
views
How can I understand an alert of "cpverify" will damage your computer?
I got this alert that has me concerned.
If I click Ok, then it appear again. File located here: opt/cprocsp/bin/.
After installing the latest OS update all files in that folder has a prefix corrupted....
7
votes
4
answers
13k
views
How do I tell if the Flash Player Installer is a virus?
There's been a couple of trojans recently that imitate the Adobe Flash Player installer one of which is called OSX/flashback.A. (More info here) I've been wary of updating Adobe Flash Player due to ...
7
votes
1
answer
971
views
What is com.appstart.AppStart?
Browsing my launch daemons/agents with LaunchControl today, I noticed this funny-looking user agent with the label "com.appstart.AppStart":
"/Users/jstrout/Library/Application Support/AppPolicy/...
6
votes
3
answers
277
views
Avoiding malware in recommendations?
Occasionally, answers on this site include software recommendations. Let’s assume a "legitimate developer" pretends to have created a useful application that is (secretly) capable of doing harm. How ...
6
votes
2
answers
7k
views
What is the process EscrowSecurityAlert in Activity Monitor?
I'm a little worried about a process I see in Activity Monitor called 'EscrowSecurityAlert'
Descriptions provided other forums ranges from it being a sign of malware:
The threat to your Mac is ...
6
votes
1
answer
313
views
How can I alert Apple about spyware targetting Apple users?
I got a pop-up on my father's iPhone stating that there was spyware on it, along with a number to call for AppleCare support. I realized I only called the number because it was listed in a pop-up and ...
6
votes
5
answers
4k
views
How did my Mac end up with iPhone 4S as my host name in the user prompt in OS X terminal? [duplicate]
The other day I was searching for Xcode iOS 5 tutorials. About a day or two later, I noticed my terminal prompt is now "iPhone4s : myusername". Naturally , my biggest fear is that there could be a ...
6
votes
1
answer
1k
views
How to securely restore new MacBook air after someone else was first admin user
I've just received my new MacBook Air. (my first Apple computer in 15 years!) Unfortunately, I had it sent to work on a day I wasn't in, and it was mistaken for the new intern's computer. He proceeded ...
6
votes
1
answer
2k
views
Allow in the Background Unrecognized Entry
I have a mysterious entry called "Denis Graur", does anybody have clue of what it is from? It does sound like I might be infected with a malware.
6
votes
4
answers
6k
views
How to get rid of booby-trapped pop ups to update flash player?
I'm coming across a malicious pop up to update my flash player. The message in the pop up:
Warning! Your Adobe Flash Player version is outdated. Security risks. Please update now.
I've seen this pop ...
5
votes
2
answers
760
views
Logging in to main user turns off the mac
I am not a mac user, and honestly, I have no idea how to use one (besides the terminal). So, a friend asked if I could help them out with fixing their computer. She says the last thing she was on, was ...
5
votes
4
answers
12k
views
How reliable and trustworthy are the Objective-See Security tools (KnockKnock (UI), Dynamic Hijack Scanner and BlockBlock)?
DHS found an issue
Is this a false positive? Anybody else with the same message?
I installed BlockBlock. What do you think about it? Do you trust those Security tools?
BlockBlock (beta)
BlockBlock ...
5
votes
5
answers
82k
views
How do I examine my iPad for malware?
Lately I occasionally get redirected to other websites when I load some news websites.
It could be a banner redirect I guess, but I suspect something more sinister.
The iPad is NOT jailbroken and ...
5
votes
2
answers
28k
views
Eliminate com.adobe.ARMDC.Communicator.plist malware
Running an Early '09 iMac with Mavericks. Earlier this month I began to see a pop up referencing a 'malware cleaner'. Below is a copy of items dated May 4th in the Launch Agents and Launch Daemons ...
5
votes
3
answers
1k
views
What does the Flashback malware do?
There was a question about removing the Flashback malware from your OS X machine, but I'm still not clear on what it does. What exactly does the Flashback malware do once it is installed on your Mac?
5
votes
2
answers
11k
views
Can .mp4 files infect my Mac with malware/adware/spyware?
Coming from Windows background, I'm usually very paranoid about the files I download, but one time I did something stupid - I downloaded some video files that were hosted in https://openload.co/ (not ...
5
votes
2
answers
14k
views
I've got an error "This site is blocked due to content filtering."
The first question is: How it works?
And the main question is how to remove spying and traffic sniffing things from the Mac.
I've uninstalled Microsoft Corporate Portal, restarted, but it didn't ...
5
votes
1
answer
305
views
Unexpected app "Admin Alert" running on my machine
All of a sudden I noticed an application called "Admin Alert" in my dock.
This is a work computer, I'm wondering if this is some sort of "spyware" that our lovely IT department has installed on my ...
5
votes
1
answer
927
views
Sudden flash of gray in the background
In the last few days I've had a sudden flash of gray in the background. I'm on MacOS 10.7.5. I'm not able to provide a screenshot because it only happens for a split second, but here is a more or less ...
5
votes
1
answer
13k
views
"Google Chrome wants access to control Finder", should I be worried?
When browsing using Google Chrome on OS X Catalina I out of nowhere got a system pop-up saying "Google Chrome wants access to control Finder" and asking me whether I want to allow that or ...
5
votes
1
answer
895
views
Receiving spam email from my own iCloud account and my own IP address
I found a thread with a similar problem but it didn't seem to have a solution for this situation, so here goes:
I have, on 3 occasions now, received spam email (iPhone XS fake promos) to my personal ...
5
votes
1
answer
324
views
Possibly a virus?
I'm new to Mac. I downloaded software from a website. It was a DMG file. I installed it, but then the app didn't appear in the Launchpad. I accessed the DMG and I see this strange installation script ...
5
votes
1
answer
417
views
Is it safe to install a deprecated Java version?
I have an old version of Photoshop that requires an outdated Java runtime.
"More info" takes me to this Apple support page where you can download the older JRE.
Seems reasonable enough, but I am ...
5
votes
1
answer
407
views
Possible keylogger? How to remove?
I'm tailing var/log/sys.log and I keep getting this message:
Jul 13 23:43:52 mac[redacted lol] syslogagent[19960]: Authentication String htt[space added]p://logsviewer.com/membermac/livedesk/...
4
votes
5
answers
8k
views
How to remove Malwarebytes from Mac?
I would like to remove Malwarebytes from a friend's macbook.
There is nothing in
Applications Folder
/Library/LaunchAgents (or in /System/Library/LaunchAgents)
/Library/LaunchDaemons
/Library/...
4
votes
2
answers
1k
views
flashplayer.dmg is in use and can't empty Trash
I accidentally downloaded malware: something posing as Flash Player in flashplayer.dmg. I did not install it, but deleted the dmg file. Now I want to delete my trash bin, but I can't. It says: 'trash ...
4
votes
2
answers
242
views
How much data can an app steal from my MacBook if I allow its system-wide execution?
I'm interested in knowing how to monitor and possibly sandbox an app and its relative background processes in MacOS. Is there some internal utility hidden somewhere in the system tools (even CLI), or ...
4
votes
1
answer
2k
views
Is it possible or likely for malware or a virus to be transferred by plugging a USB hard drive into my Mac?
I am in the process of transferring data from my old MacBook Pro to a new MacBook Pro. In order to transfer some files, I decided to plug in a USB hard drive that contained a bootable partition of my ...
4
votes
2
answers
3k
views
How to make a dump of my iPhone so as to make forensics
I would like to be able to run a forensic analysis on my iPhone from a disk dump copy made on my Mac or any kind of Unix as I would from any external disk with a dd command.
For those who are curious:...
4
votes
2
answers
4k
views
What is AppSC extremely slowing down my MacBook Pro?
I noticed that my OS X very frequently runs extremely slow and everything lags. I opened up Activity Monitor and I saw that something called AppSC is using up to 95% of the memory. It makes my ...
4
votes
2
answers
12k
views
How can I reinstall OS X without a valid App Store connection?
I have a Mid 2009 MacBook Pro that was used by a "less than responsible" user. As such, it seems to have become infected with malware that rewrites all SSL certificates. These certificates cannot be ...