Tag Info

Hot answers tagged

24

You can follow these instructions from F-Secure to uninstall/remove the malware: Run the following command in Terminal: defaults read /Applications/Safari.app/Contents/Info LSEnvironment Take note of the value, DYLD_INSERT_LIBRARIES Proceed to step 8 if you got the following error message: "The domain/default pair of ...


16

Web browsing The largest potential danger comes from the "Internet". My mac is online most of it's operating time and web browsers are among the most used applications on my Mac. Therefore, the most important rules are: surf the web carefully don't just download any software you find Browser choice The browser choices, configurations and extensions ...


10

Your first point ("Kept up with OS X system patches") is probably the most important. If you trace the history of exploits on OS X, most have come from: Java Flash PDFs Safari Giving privileges to unknown apps or clicking on unknown links I'm not a security expert, but it seems like limiting your exposure to those things will decrease your exposure ...


9

Flashback Checker This is for your relatives and friends that want to avoid using the Terminal. Download this free app from Github. As referenced in this Macworld article, the single-function app will quickly check your machine for the infection. The app doesn't remove the malware, which will be left up to the user by manually following the instructions ...


8

That is more or less it. I also like to run potentially unsafe stuff in a VM of some kind (I use Parallels, but for this the free VirtualBox works well enough); Parallels 7 can automatically install a virtual Mac image from the Lion recovery image, which is very convenient for this kind of sandboxing. (Yes, running Lion in a VM is now legal.)


7

Sadly, malicious code can be so small and obfuscated in an infinite number of ways so you can't simply make a rule to test a package to tell if it's good or bad. Statistically, people have established some guidelines like trying to know the source (typing in the web address directly and not trusting a link, not downloading it from an alternate site, ...


7

I'm fairly certain the green light is hard-wired to the camera, there's no way to activate the camera without activating the light, precisely for privacy reasons. If you're really concerned about it, you can always just use a piece of electrical tape to cover the camera (or fold a piece of cardboard over the top of the lid for a non-sticky solution). ...


6

You can disable the XProtect updates in System Preferences => Security => General, and there uncheck the box "Automatically update safe downloads list." Now you can change the version info in /System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.meta.plist


6

This message is the case when either: Your device is enrolled under MDM and after deployment it will display something like image below.(https://www.apple.com/iphone/business/it/management.html) Your passcode is too obvious and needs to be changed Microsoft Exchange can force a passcode on your iPhone. Obvious codes start with the following numbers: ...


6

From Wikipedia: The Trojan [FlashBack] targets a Java vulnerability on Mac OS X. The system is infected after the user is redirected to a compromised bogus site, where JavaScript code causes an applet containing an exploit to load. An executable file is saved on the local machine, which is used to download and run malicious code from a remote ...


6

Presently there aren't any known Viruses for iOS. The security exploit that you mentioned, the PDF exploit and the TIFF image exploit before it, were patched shortly after the exploit was made public. Is it impossible for a virus to sneak through? Absolutely not, though if you're running the most recent iOS release the chances you'll get a virus or have ...


5

The simple way is to boot to recovery mode and use disk utility to first erase the "Macintosh HD" partition, then start the installer. No need to zero the drive since you won't be recovering any deleted files at this point. A verified correct installer of Lion will then get downloaded from the Internet. Here is a guide for you... OSX Recovery OS X ...


5

It appears the site is distributing malware. If you opened the page on your computer you should first install a good antivirus/antimalware program, try Sophos which is good and free. If it was on your iPad (as your tag suggests) there's probably a bit less cause for alarm as there is currently no known virus which can infect an iPad. Next it's probably a ...


5

Go to Settings app > General > Profiles Delete any configuration profile that you don't want to keep, then delete any that control passcode. If Profiles is not near the end of the list (below VPN and above Reset >) then you may have no profiles and can continue to the next step. Next, go to Settings app -> Passcode enter your passcode, turn passcode ...


4

Admin Alert is related to Dell KACE, an "appliance-based approach to systems management", and the admin alert icon appearing in the dock is apparently a bug.


4

That is because the Dock process isn’t getting enough resources and/or is crashing. TheDock process is not just responsible for your Dock, but also Mission Control, Launchpad, Dashboard and the Desktop background. If this happens most frequently during periods of heavy use, then it is not getting enough resources or its resources are being swapped to disk. ...


4

I get these messages when I connect to the China Unicom network. I think the "Cancel/Accept" dialog is hardcoded into iOS for the purpose of accepting the carrier's terms of use. These messages come from the sim card, and I think only the carrier can send them. It's sleazy for the carrier to use this functionality for advertising.


4

If your device is not jailbroken the odds of malware on iOS are basically 0, at least for what you're describing. There is currently no way anything could be installed without going through the App Store. Even then, a malicious app could only access its own files in its own sandbox. So, no installed app on iOS could modify anything outside of it. This is ...


4

Kaspersky's removal tool ...checks if your Mac is affected and removes the trojan if necessary. You can download it on http://support.kaspersky.com/downloads/utils/flashfake_removal_tool.zip Check online using your UUID You can check if you Mac is affected using your UUID (Universally unique identifier) on http://flashbackcheck.com/ Go to: ...


3

Use common sense. That is the most important thing to do when using any system, any time. I have been using Macs for about ten years. I have never installed any Firewalls or virus scanners, always worked in an admin account full-time, always downloaded and installed all kinds of apps and never have I had ANY problems regarding security. Most of the ...


3

It fixes the vulnerability that Flashback used to install itself; this Gizmodo article gives some more info to check: 1. Run the following command in Terminal: defaults read /Applications/Safari.app/Contents/Info LSEnvironment 2. Take note of the value, DYLD_INSERT_LIBRARIES 3. Proceed to step 8 if you got the following error message: "The domain/default ...


3

I have not heard of any exploit that would produce this behaviour. The fact that the pages DO load, and only switch to another page AFTER they have loaded, indicates to me that the problem lies within the page itself. For instance some "evil" Javascript is inserted into the page causing it to redirect. If the problem was in the OS, for instance messing ...


3

This is spam, introduced by an extension, through superfish.com. AdBlock is not the cause! AdBlock blocks the injected ad, so the extension inserts the text equivalent. Disabling AdBlock will remove the text, because it allows the original injection to take place, and will decrease page load time as the secondary text injection is no longer required. ...


3

Here is a link for removing ransomware on a Mac. it's pretty easy: http://www.thesafemac.com/fbi-ransomware-virus-rampant/ From the post: There have been many reports among Mac users recently of being “infected” with an FBI ransomware “virus,” telling them that their computer has been seized and that they have to pay money to get it unlocked. ...


3

Your Calender must be set to automatically accept invitations from email. CHECK FOR THIS SETTING: Automatically retrieve CalDAV invitations from Mail Select this checkbox to have Calendar get event invitations from Mail. Go to Preferences in your Calender and turn it off. (for now) Next set junk filtering in your gmail. Also block this ...


3

Hidden files are hidden from ls unless you use the -a or -A flag: -A List all entries except for . and ... Always set for the super-user. -a Include directory entries whose names begin with a dot (.). Source: ls man page Therefore, files can be hidden by starting the filename with a . but ls will still show the file if it is run with -a or -A. Note ...


2

ls is not a command that opens the directory file itself and show it's contents. It uses dirent (Directory Entries) from the C library which is used by a lot of software like stat but also bash's parameter expansion. So the real question is then: Is it possible for malware to hide files from BSD/Darwin? No, you can't hide files from it's own system because ...


2

I left Charles (web proxy debugger) running and waited for the re-direct again. I found the site that is originating the request to sponsor.adverstitial.com, it is ad.cpmaxads.com. A request to that site goes out, then it brings back a lot of shady looking javascript/HTML mix with this in the middle: {var ...


2

Thank you; but I figured it out. I created a Test account on the computer to see if it was a system thing or user thing; turned out to be a system thing. I then went poking around but limited my searching to the system library, and found the offending file: it was in the LaunchAgents folder, and it was com.vsearch.agent.plist Put that in the Trash, ...


2

I had this problem tonight too. I "bit" before I thought it being malware, but it doesn't seem to have been malware. I changed my PIN and the phone reset, then the new PIN worked. BUT... the phone immediately asked for me to change the PIN again... now I was thinking Malware. I kept changing the PIN and it kept asking me to do it again. I used the tip ...



Only top voted, non community-wiki answers of a minimum length are eligible