Skip to main content

Questions tagged [malware]

Malware, short for malicious software, is software designed to disrupt computer operation, gather sensitive information, or gain unauthorized access to computer systems.

Filter by
Sorted by
Tagged with
1 vote
1 answer
73 views

How to determine if there is a stealth proxy server recording my computer?

Sorry for rough question, I'm not an engineeer. My company just bought me a computer. I'm awared of privacy leaks and computer data stealers such as proxy server, etc. I know firewall proxy server can ...
Chunhao's user avatar
  • 11
2 votes
1 answer
85 views

"Open.exe" from unidentified developer exists as a executable in my login items?

I cannot find anything on this binary - It does seems to function as stated when I use the command to open files, but I never installed it nor do I see it as a default executable in the bin folder of ...
user876's user avatar
  • 21
3 votes
1 answer
539 views

Clicked on a "bad link" in an email: do I need to worry about malware/virus getting into my iPhone?

First, I feel kind of dumb -- I know never to click on questionable links. But a friend* sent me an email message to my iPhone 11 (iOS 17.4.1) with a link to a website with a picture of them. They'...
Cerulean's user avatar
  • 373
7 votes
2 answers
1k views

Is there a valid reason why Canon's webcam plugin asks to scan my external drives?

Two days ago, I installed Canon's software to use my DSLR as a webcam, using the link I found on this page. The installer required me to override MacOS' security settings. I did so, thinking that it ...
KooDooMoo's user avatar
  • 173
16 votes
3 answers
10k views

I think I downloaded spyware! I used a curl command in terminal given by a fake support user to download a .sh file

I completely fell for a scammer helping me debug an issue. I ignored all the warnings until it was too late... I entered the below command in my macbook terminal and it downloaded a .sh file on my ...
Creole's user avatar
  • 161
8 votes
1 answer
3k views

How can I understand an alert of "cpverify" will damage your computer?

I got this alert that has me concerned. If I click Ok, then it appear again. File located here: opt/cprocsp/bin/. After installing the latest OS update all files in that folder has a prefix corrupted....
Robot Bender's user avatar
1 vote
2 answers
135 views

Does this `last` output from macOS terminal describe a remote access login to my computer?

My computer was up to some strange things. I used the "last" command to check login activity and this is the result. Not only have I never seen it before this, all of my previous logins were ...
IDoNotUnderstand's user avatar
1 vote
1 answer
121 views

Best action against fake virus scammers

This morning I received a notification that after visiting some adult websites, 27 viruses have infected my phone (iPhone XR with iOS 17.3), that they would destroy my SIM card and delete my contacts. ...
gnasher729's user avatar
  • 1,227
0 votes
0 answers
60 views

Suspicious curl request at system boot

I booted up my Macbook Air M1(on MacOS 14.2.1) a couple of minutes ago and, while looking at LuLu logs, I noticed this strange Curl request: curl -s hxxps|://support-sp[.]apple[.]com/sp/ product?cc=...
thinking_opposite's user avatar
2 votes
1 answer
777 views

How do I find out which app is using my Mic?

I'm running MacOS Sonoma 14.2 (23C64). My command bar looks like this — the orange dot says that the mic is on: If I click it, it says that the mic is being used by another user: If I click "...
vy32's user avatar
  • 3,372
3 votes
1 answer
128 views

How can I tell my risk when I detect Malware In Safari cache?

I was browsing a finance site when I got an alert from my third-party antivirus, now this was NOT a popup on the webpage (fake tech support) or a recommendation via MacOS. My antivirus had actually ...
MacMe's user avatar
  • 31
1 vote
1 answer
244 views

Resolution to unexpected "Profiles/MDM wants to make changes." popups? Beware SpamResponse/wmcglobal?

I'm frequently getting unexpected "Profiles/MDM wants to make changes." popups. It started right after I began installing SpamResponse by clicking GET, but aborted when it prompted to ...
WHO'sNoToOldRx4Covid-CENSORED's user avatar
0 votes
0 answers
20 views

Quickly disappearing process bar - what process is it

About a week ago I updated to Sonoma - since then periodically a process monitor appears on my screen and gets done in less than a second. A gray backround, rounded corner process bar of some sort ...
user254694's user avatar
5 votes
1 answer
232 views

How to diagnose a dialog box that flashes up unpredictably, at irregular intervals, too fast to read contents?

Over the last couple of days, I’ve repeatedly had a dialog box appear for a fraction of a second and then disappear, much too quickly to read the contents. It’s happened maybe 4 or 5 times so far; it ...
PLL's user avatar
  • 987
3 votes
0 answers
1k views

What do PerfPowerService and PerfPowerTelemetryService do?

Anyone have any idea what the PerfPowerService and PerfPowerTelemetry...Service is on macOS (Sonoma?) I can't seem to find a lot of information on these processes. The second one isn't even mentioned ...
Blurfquarf's user avatar
0 votes
2 answers
941 views

iCloud catching malware

I had a discussion with a friend of mine today about Malware and iCloud. I am absolutely unexperienced in Software and Security so maybe all of this is absolutely impossible. Its very simple. Let's ...
user avatar
0 votes
0 answers
77 views

Trying To Delete Left-Over Malware Files

An annoying piece of malware that pretends to be a new Safari / Sonoma security feature has deposited itself and its associated files inside my System/Library/... In short, I need to delete a folder ...
LumpyGumbo's user avatar
0 votes
1 answer
1k views

Goobspatch flagged as malicious by MacOS. What should I do?

My Mac just popped up this warning: "goobspatch" can't be opened because Apple cannot check it for malicious software. This software needs to be updated. Contact the developer for more ...
tomh's user avatar
  • 816
0 votes
0 answers
38 views

Some script ran when accidentally clicked on a fake notification window. iPhone 13 pro

I was using Safari on an iPhone 13 pro with the latest updates and stumbled upon an article in a website with a lot of ads and I accidentally touched on a fake window for notifications subscription ...
Georgi D.'s user avatar
0 votes
0 answers
129 views

how to remove preference pane-based malware? (have already tried malware removal apps)

Running macOS 13.4.1 or an i3 MacBook Air. At the top of Application Notifications I have had the following appear: ask you Confirm that you're not a robot, you need click Allow If I allow it to, a ...
Ria's user avatar
  • 1
4 votes
1 answer
718 views

Is this a legit macOS modal, or a malware attempt?

The following modal dialog prompting for a software update password has been popping up a few times and I really do not know what to make of it: it seems to be controlled by the Finder (not a browser ...
Dave's user avatar
  • 143
1 vote
1 answer
156 views

Is it possible for a trojan app to keep plaguing an iOS device after the app had been uninstalled?

An app that comes with AceDeceiver got installed invisibly against my will on my iPhone, iOS ver. 15.6. Full background analysis by PaloAltoNetworks:https://unit42.paloaltonetworks.com/acedeceiver-...
cream_pi's user avatar
1 vote
0 answers
1k views

Why does RemoteManagementAgent keep starting?

Background: I have witnessed the cursor move on its own on several brief occasions over the past several weeks. I've been reassuring myself that it's just some static discharge going through the ...
hawk's user avatar
  • 266
2 votes
0 answers
335 views

"Joel Rennich" "Le Liu" Background programs [duplicate]

As you can see below, I got these prompts when I startup my Mac. What are these programs with people's names "Joel Rennich" and "Le Liu" on my Mac. How Can I find and get rid of ...
user avatar
6 votes
1 answer
2k views

Allow in the Background Unrecognized Entry

I have a mysterious entry called "Denis Graur", does anybody have clue of what it is from? It does sound like I might be infected with a malware.
Oscar P.'s user avatar
1 vote
0 answers
748 views

What should appear in "Full Disk Access" by default?

I am looking for malware in my computer. I found that "Security & Privacy – Full Disk Access" is allowed for certain objects like "launchd" however I do not know what should be ...
Mauricio's user avatar
  • 143
1 vote
1 answer
210 views

Random greyed out window appears and doesn't seem attached to any app

This random grey, translucent window keeps appearing on my screen. I can click and drag it around (it usually sits on the bottom of my window) but it sits on top of all windows and I can't seem to ...
Travasaurus's user avatar
0 votes
1 answer
4k views

What is AirPlayXPCHelper?

I found this in Activity Monitor and there were three of them - the last one keeps rebooting so it can never go Am I being Hacked? Analysis of sampling AirPlayXPCHelper (pid 21478) every 1 millisecond ...
DGS0202's user avatar
  • 11
0 votes
1 answer
265 views

How can I secure my mac when downloading a file?

I am a developer & ASO specialist. As you guess, I have different customers. I am downloading 5-10 files per day from my customers. I learned that it is possible to hack MacOS via mp4, apk files, ...
gurkan stack's user avatar
1 vote
1 answer
640 views

Chrome reroutes me automatically to servisepagefind.com and Bing without my consent -- how to stop it?

The way to replicate this is simple in my Chrome browser: Type the search in Google Modify the search in Google a second time Then it sends me either to Bing or to this weird servisepagefind.com ...
Charlie Parker's user avatar
1 vote
0 answers
125 views

Facetime is answered on remote / Camera turned on while no one is at the computer - and it's locked

Update: I've been able to confirm that Facetime is the trigger I've come home to unlock my OSX Monterey (build 21G72?), only to notice Facetime is running with the camera on. This has now happened ...
NJL's user avatar
  • 51
0 votes
0 answers
433 views

iOS Safari address bar suggests URL's I haven't visited

Over the last couple of months I've noticed that when I start typing in the address/search bar in Safari on my iPhone it will sometimes auto-complete with websites that I haven't visited. But Search ...
James's user avatar
  • 85
3 votes
2 answers
557 views

Notification center: where did the apps Kerberos and CoinChefs come from?

I looked in my Notification Center on macOS and see two apps that I did not install: Where did they come from? Are they spyware? Malware? How can I get rid of them? In response to the suggestions ...
Baumr's user avatar
  • 2,816
1 vote
1 answer
245 views

Cannot move (malware) message to junk or trash - Mac Mail

Got a malware attachment in an email I knew better than to open. My Sophos auto-protection caught it, too, and named it "DocExp-AC". However, if I tried to right-click to move it to Junk (in ...
Bosque Bill's user avatar
0 votes
1 answer
3k views

How to erase the entire hard disk of a mac mini late 2014

I bought a second hand mac mini late 2014 with 256GB SSD storage and with OS X El Capitan version 10.11.6. I do not know the seller and I assume the device is virus-ridden! I am mainly concerned that ...
MOON's user avatar
  • 151
2 votes
2 answers
3k views

Removing Adware in ~/Library/Application Support

I recently installed some software that was clearly malicious but it didn't function and I started getting popups in my browser, changed my default search engine, and installed some malicious chrome ...
user2757771's user avatar
4 votes
1 answer
2k views

TrialArchivingService is this a new process or is it malware?

Found this new process TrialArchivingService that was using a lot of cpu. It was started by user. Has anyone else seen this process. All input is welcome. OS - Monterey 12.3 Thanks, M
NealHarris's user avatar
1 vote
0 answers
79 views

Unidentifiable process always running

According to the screen time monitor on my iPhone there's process called "isha.sadhguru.org" on all day and responsible for an average running time of 20 hours per day: It's unclear why ...
Levon's user avatar
  • 111
-1 votes
1 answer
719 views

Method to Log or View iOS App Network Calls [No Jail-Breaking]

Outside of a proxy, is there a way to log, or view network calls apps, services, and processes are making/have made on iPhone and iPad devices? For forensic analysis/malware hunting. I’m aware there ...
petergibbons's user avatar
1 vote
1 answer
808 views

Adware file in /var/root/

My MacBook Pro has had a common adware virus on it ExploreSearchResults. I have already gone through all of my extensions and deleted anything related. Anything in the Applications folder that did not ...
Will K's user avatar
  • 11
-3 votes
1 answer
56 views

How can I get rid of bloatware? [closed]

MacOs supposedly has less bloatware than the other commercial OS' available. I have found that my mac has some. Remote Management seems ingrained in the system very stubbornly; it may be the tip of ...
zeroGwannabee's user avatar
9 votes
4 answers
4k views

Mac terminal found open with “man James” text. Have I been hacked?

I found a terminal window open with the below. I ran /bin/bash -x and it looks like VMware was accessed and GPG tools. It also added something suspicious to my login items... have I been hacked?! Also ...
user avatar
0 votes
1 answer
47 views

Used Macbook Pro 2018 - what is the safest approach to ensure no virus?

I bought a MBP 2018 off ebay. When I boot up the machine it showed the install prompt for Big Sur. I imagine the person who owned it before reset it such that it was ready for re-installation. My ...
Fresh Codemonger's user avatar
5 votes
1 answer
339 views

Possibly a virus?

I'm new to Mac. I downloaded software from a website. It was a DMG file. I installed it, but then the app didn't appear in the Launchpad. I accessed the DMG and I see this strange installation script ...
David TG's user avatar
4 votes
1 answer
8k views

Are there risks when running `sudo xattr -rd com.apple.quarantine "/Applications/*.app" `?

There is an application I really need to use but needs the sudo xattr -rd com.apple.quarantine command to run and I am not 100% sure if this app is harmless. Is there any way to be sure? like scanning ...
Pedram's user avatar
  • 41
1 vote
0 answers
299 views

legitimate software source, or malware?

Needing to upgrade to a 64-bit version of Microsoft Office (in order to upgrade to Mac OS Catalina or Big Sur), I sought out a deal on Office 2019. After paying, I received an email with the ...
RustyShackleford's user avatar
-1 votes
1 answer
300 views

Hybrid-Analysis.com indicates macOS built-in file is contacting a malicious website

I'm wondering if anyone knows why this /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc is connecting to adriver.ru ? This is according ...
I_Don't_Code's user avatar
2 votes
1 answer
3k views

Unknown item in macOS screen time, is it malware?

I checked my screen time after a few weeks today and saw that it said 24 hours and it seems more than half of that was something called "psv4.userapi.com". My Mac is usually asleep for most ...
python newbie's user avatar
0 votes
2 answers
789 views

“24B93E7F-8822-4465-B473-7BE7BB8E3E4A” will damage your computer. You should move it to the Bin

I have been having multiple pop-ups since this morning, and each popup occurs around 2-3 hours after the previous one, and has the following message: “24B93E7F-8822-4465-B473-7BE7BB8E3E4A” will damage ...
Ankit Kumar's user avatar
0 votes
0 answers
29 views

Spyware/Anti-malware software for only one user

Is it possible to install a corporate anti-malware (sort of a spyware with various things blocked) app on one user profile only, without it having access to another admin user profile on the same Mac? ...
malfeasanto's user avatar

1
2 3 4 5
7