Tag Info

Hot answers tagged

24

You can follow these instructions from F-Secure to uninstall/remove the malware: Run the following command in Terminal: defaults read /Applications/Safari.app/Contents/Info LSEnvironment Take note of the value, DYLD_INSERT_LIBRARIES Proceed to step 8 if you got the following error message: "The domain/default pair of ...


16

Web browsing The largest potential danger comes from the "Internet". My mac is online most of it's operating time and web browsers are among the most used applications on my Mac. Therefore, the most important rules are: surf the web carefully don't just download any software you find Browser choice The browser choices, configurations and extensions ...


10

Your first point ("Kept up with OS X system patches") is probably the most important. If you trace the history of exploits on OS X, most have come from: Java Flash PDFs Safari Giving privileges to unknown apps or clicking on unknown links I'm not a security expert, but it seems like limiting your exposure to those things will decrease your exposure ...


9

Flashback Checker This is for your relatives and friends that want to avoid using the Terminal. Download this free app from Github. As referenced in this Macworld article, the single-function app will quickly check your machine for the infection. The app doesn't remove the malware, which will be left up to the user by manually following the instructions ...


8

That is more or less it. I also like to run potentially unsafe stuff in a VM of some kind (I use Parallels, but for this the free VirtualBox works well enough); Parallels 7 can automatically install a virtual Mac image from the Lion recovery image, which is very convenient for this kind of sandboxing. (Yes, running Lion in a VM is now legal.)


7

Sadly, malicious code can be so small and obfuscated in an infinite number of ways so you can't simply make a rule to test a package to tell if it's good or bad. Statistically, people have established some guidelines like trying to know the source (typing in the web address directly and not trusting a link, not downloading it from an alternate site, ...


7

I'm fairly certain the green light is hard-wired to the camera, there's no way to activate the camera without activating the light, precisely for privacy reasons. If you're really concerned about it, you can always just use a piece of electrical tape to cover the camera (or fold a piece of cardboard over the top of the lid for a non-sticky solution). ...


6

From Wikipedia: The Trojan [FlashBack] targets a Java vulnerability on Mac OS X. The system is infected after the user is redirected to a compromised bogus site, where JavaScript code causes an applet containing an exploit to load. An executable file is saved on the local machine, which is used to download and run malicious code from a remote ...


6

Presently there aren't any known Viruses for iOS. The security exploit that you mentioned, the PDF exploit and the TIFF image exploit before it, were patched shortly after the exploit was made public. Is it impossible for a virus to sneak through? Absolutely not, though if you're running the most recent iOS release the chances you'll get a virus or have ...


6

You can disable the XProtect updates in System Preferences => Security => General, and there uncheck the box "Automatically update safe downloads list." Now you can change the version info in /System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.meta.plist


6

This message is the case when either: Your device is enrolled under MDM and after deployment it will display something like image below.(https://www.apple.com/iphone/business/it/management.html) Your passcode is too obvious and needs to be changed Microsoft Exchange can force a passcode on your iPhone. Obvious codes start with the following numbers: ...


5

Go to Settings app > General > Profiles Delete any configuration profile that you don't want to keep, then delete any that control passcode. If Profiles is not near the end of the list (below VPN and above Reset >) then you may have no profiles and can continue to the next step. Next, go to Settings app -> Passcode enter your passcode, turn passcode ...


5

The simple way is to boot to recovery mode and use disk utility to first erase the "Macintosh HD" partition, then start the installer. No need to zero the drive since you won't be recovering any deleted files at this point. A verified correct installer of Lion will then get downloaded from the Internet. Here is a guide for you... OSX Recovery OS X ...


5

It appears the site is distributing malware. If you opened the page on your computer you should first install a good antivirus/antimalware program, try Sophos which is good and free. If it was on your iPad (as your tag suggests) there's probably a bit less cause for alarm as there is currently no known virus which can infect an iPad. Next it's probably a ...


4

I get these messages when I connect to the China Unicom network. I think the "Cancel/Accept" dialog is hardcoded into iOS for the purpose of accepting the carrier's terms of use. These messages come from the sim card, and I think only the carrier can send them. It's sleazy for the carrier to use this functionality for advertising.


4

It looks like /usr/libexec/oah/translate is Rosetta, an Apple program to allow programs developed for PowerPC architecture to run on the newest Intel Mac. So I don't think it's a malware, just Mac OS using Rosetta to run Entourage.


4

If your device is not jailbroken the odds of malware on iOS are basically 0, at least for what you're describing. There is currently no way anything could be installed without going through the App Store. Even then, a malicious app could only access its own files in its own sandbox. So, no installed app on iOS could modify anything outside of it. This is ...


4

Kaspersky's removal tool ...checks if your Mac is affected and removes the trojan if necessary. You can download it on http://support.kaspersky.com/downloads/utils/flashfake_removal_tool.zip Check online using your UUID You can check if you Mac is affected using your UUID (Universally unique identifier) on http://flashbackcheck.com/ Go to: ...


4

Admin Alert is related to Dell KACE, an "appliance-based approach to systems management", and the admin alert icon appearing in the dock is apparently a bug.


4

That is because the Dock process isn’t getting enough resources and/or is crashing. TheDock process is not just responsible for your Dock, but also Mission Control, Launchpad, Dashboard and the Desktop background. If this happens most frequently during periods of heavy use, then it is not getting enough resources or its resources are being swapped to disk. ...


3

This is spam, introduced by an extension, through superfish.com. AdBlock is not the cause! AdBlock blocks the injected ad, so the extension inserts the text equivalent. Disabling AdBlock will remove the text, because it allows the original injection to take place, and will decrease page load time as the secondary text injection is no longer required. ...


3

Hidden files are hidden from ls unless you use the -a or -A flag: -A List all entries except for . and ... Always set for the super-user. -a Include directory entries whose names begin with a dot (.). Source: ls man page Therefore, files can be hidden by starting the filename with a . but ls will still show the file if it is run with -a or -A. Note ...


3

Here is a link for removing ransomware on a Mac. it's pretty easy: http://www.thesafemac.com/fbi-ransomware-virus-rampant/ From the post: There have been many reports among Mac users recently of being “infected” with an FBI ransomware “virus,” telling them that their computer has been seized and that they have to pay money to get it unlocked. ...


3

Your Calender must be set to automatically accept invitations from email. CHECK FOR THIS SETTING: Automatically retrieve CalDAV invitations from Mail Select this checkbox to have Calendar get event invitations from Mail. Go to Preferences in your Calender and turn it off. (for now) Next set junk filtering in your gmail. Also block this ...


3

Use common sense. That is the most important thing to do when using any system, any time. I have been using Macs for about ten years. I have never installed any Firewalls or virus scanners, always worked in an admin account full-time, always downloaded and installed all kinds of apps and never have I had ANY problems regarding security. Most of the ...


3

It fixes the vulnerability that Flashback used to install itself; this Gizmodo article gives some more info to check: 1. Run the following command in Terminal: defaults read /Applications/Safari.app/Contents/Info LSEnvironment 2. Take note of the value, DYLD_INSERT_LIBRARIES 3. Proceed to step 8 if you got the following error message: "The domain/default ...


3

I have not heard of any exploit that would produce this behaviour. The fact that the pages DO load, and only switch to another page AFTER they have loaded, indicates to me that the problem lies within the page itself. For instance some "evil" Javascript is inserted into the page causing it to redirect. If the problem was in the OS, for instance messing ...


3

It turns out it was just as our Unix guy had said. The iPhone4s Host name is only present when I am at work and my mac book is accessing the companies wireless network. When I am away, the terminal shows the proper hostname. We are a mac centric company but we use all windows servers. Apparently, that makes a situation ripe for these strange DHCP anomalies. ...


2

There is no surefire solution, but there are some simple steps you can take that in practice are effective: Turn on Gatekeeper. It should be on by default, but if you want to be sure: go to System Preferences, then Security and Privacy, and then click "Mac App Store and identified developers". Like this: Try to get your software through the Mac App ...


2

It means someone has bypassed the security on your Mac and can install new programs, steal data like passwords, banking web site locations and perhaps other sensitive personal emails and information. It also means then can install other software on your Mac if it connects to the Internet to further do similar acts of I'll repute. Lastly, it could crash ...



Only top voted, non community-wiki answers of a minimum length are eligible