Questions tagged [malware]

Malware, short for malicious software, is software designed to disrupt computer operation, gather sensitive information, or gain unauthorized access to computer systems.

Filter by
Sorted by
Tagged with
20
votes
2answers
6k views

What is this unknown executable on my boot volume? Is it Malicious?

I noticed I had this file in the Macintosh HD folder. And then when I click on it, it shows this: Apparently this file was created in 2017, but I don't remember creating it. Any idea what it could ...
5
votes
1answer
147 views

Receiving spam email from my own iCloud account and my own IP address

I found a thread with a similar problem but it didn't seem to have a solution for this situation, so here goes: I have, on 3 occasions now, received spam email (iPhone XS fake promos) to my personal ...
2
votes
1answer
39 views

How to make a dump of my iPhone so as to make forensics

I would like to be able to run a forensic analysis on my iPhone from a disk dump copy made on my Mac or any kind of Unix as I would from any external disk with a dd command. (For those who are ...
1
vote
2answers
92 views

cannot trash malware NGPlayerSetup.dmg

How do I delete this pesky dmg? I never asked for it and never uploaded or downloaded it. When I try to "Empty Trash" it is much to clever and says "it is in use."
3
votes
3answers
103 views

Can a mac be infected by a microsoft trojan?

My friend owns a Mac with Microsoft Office installed and executed (with macros enabled) a trojan horse, AFAIK a W97M/Downloader variant. By fetching some information from the wild, that trojan usually ...
1
vote
0answers
39 views

Unable to delete Kernel malware in extension which hampers my all connections including wifi. Wi-Fi shows no hardware installed

I had downloaded an Ethernet adapter driver from Mac which disabled my wifi. My wifi icon shows no hardware installed. Malware is located in /System/Library/Extensions. It is a kernel extension named "...
1
vote
2answers
120 views

Does the Mac version of BitDefender detect Windows malware?

I need to know if BitDefender scans incoming emails and external drives? I emailed BitDefender's support after installing the trial but never received a reply. I currently use Kaspersky Internet ...
1
vote
0answers
24 views

Qemu Files not deleting “No Such File Or Directory Found”

I have some malware that installed crypto mining on my mac - I'm trying to delete all the files in terminal but keep coming up with "No Such File Or Directory Found" as an error. I'm tearing my hair ...
4
votes
1answer
151 views

CPU completely occupied by strange programs with person names

Anyone knows why this happens and how to resolve it? they show up out of nowhere and stay until I kill each manually. some of these names change to something new too. I thought this might be because I ...
4
votes
1answer
51 views

How to block a developer certificate

I accidentally installed Mac Cleanup Pro when I was going to upgrade Flash for a web site. I've used 'Little Snitch' to block the sites it connects to. The malware is all signed by a Developer ID '...
2
votes
1answer
323 views

possible malware called FISE in Accessibility (Privacy & Security)

I checked my Mac's security and privacy and noticed this entry FISE. When I click Show in Finder nothing happens. I've googled around and found no mention of it at all outside of spammy sites. Before ...
1
vote
1answer
77 views

I heard about the new ZombieLoad vulnerability. How do I protect my Mac?

I don't want my data to be vulnerable to the new MDS issues discovered on Intel processors. What can I do? Is my credit card information safe?
0
votes
1answer
320 views

What is the function of `Library/Application Support/updater_mcy/updater_mcy` file?

My Avast security app has isolated the following file: Library/Application Support/updater_mcy/updater_mcy Since this has happened, I think it has resulted in me getting error messages on my Mac ...
1
vote
1answer
68 views

How to get rid of an spyware on iPhone 8 called News?

I've been suspecting my iPhone to be hacked for quite some times now. After setting the two-factor authentication system on it earlier this week, a connection attempt has been made by someone else (I'...
2
votes
1answer
42 views

STRANGE: After saving a file named BD.jpg, a few minutes later it got renamed to: Good morning -darling …!…-).jpg. WTH?

Yesterday a really strange thing happened to me. I exported 3 files via PhotoShop from the same .psd file: first CA.jpg, second HK.jpg than the third BD.jpg to a website's src project folder (loaded ...
0
votes
0answers
57 views

How to detect and maybe eliminate Malware from 'Flash Player'?

I read about that some websites do claim you have old Adobe Flash Player installed. I am not sure whether or not I got such notifications legitimately or not. I know I have downloaded some Flash ...
0
votes
0answers
12 views

When waking from sleep, login input acts as if delete key is stuck; can't log in

I've had this symptom only twice, both in the last week: I wake my MacbookPro11,4 (mid 2015) from sleep, and I can't type my password to log in because every input keystroke is immediately deleted. ...
0
votes
0answers
692 views

Why is IMRemoteURLConnectionAgent contacting a Charter IP address

I never use iMessage. I never use iCloud. And yet I happened to check my Mac's current network connections and I found this: IMRemoteURLConn 33557 me 7u IPv4 ... 0t0 TCP 192.168.1.198:57996-&...
2
votes
2answers
779 views

What is this strange process `qemu` connecting to minergate.com?

I noticed this in Little Snitch: qemu-system-x86_64 /usr/local/Cellar/qemu/3.0.0/bin/qemu-system-x86_64 Total: 444 B sent, 0 B received Outgoing to xmr.pool.minergate.com (78.46.23.253, 46.4.119....
3
votes
2answers
96 views

Suddenly, menu bar applications have blue badges

I am using a MacBook Air 13' bought in 2017, running Mojave 10.14.1 (18B75). I recently removed malware and plugins named Weknow.ac. Now, several of the application badges and indicators in the menu ...
3
votes
1answer
324 views

Removing Bundlore malware manually

I have a MacBook Pro with macOS Mojave. My Sophos antivirus software found a 'Bundlore' malware and I need to remove it manually. It says it's located in: /Volumes/Player/Player_440.app/Contents/...
1
vote
1answer
43 views

What is the process „Tornit“? It wants to access Safari documents & passwords

I was using Safari a couple of days ago, when I got a pop-up window: Tornit wants to control Safari and access your documents and passwords. Do you allow it? I clicked No. Tornit is a process I ...
1
vote
1answer
360 views

How to debug malware popups in Safari

Around once a day a new tab opens in the background and automatically starts downloading some probably scam software disguised as a "flash player". I tried to fix it doing the things recommended ...
3
votes
0answers
87 views

Is 'volare-karaoke.swf' a malware?

I am running macOS Sierra 10.12. I've noticed an unwanted file volare-karaoke.swf automatically getting download from both Safari and FireFox. It happens mostly when I'm on financial/payment sites (...
5
votes
1answer
155 views

Is it safe to install a deprecated Java version?

I have an old version of Photoshop that requires an outdated Java runtime. "More info" takes me to this Apple support page where you can download the older JRE. Seems reasonable enough, but I am ...
0
votes
1answer
263 views

Cron mail notifies error of suspicious unknown script

Thanks to the mail function of the Terminal it came to my attention that there was some kind of cron job being executed with some errors. The mail of the cron gives this info: 2018-08-02 23:47:22....
1
vote
1answer
886 views

Flash Player.dmg Question

Quick question concerning malicious flash player.dmg files.... I was on news sites (on the likes of CNN, BBC, etc.,) the other night when suddenly my tab automatically opened a new tab with a long ...
8
votes
2answers
1k views

Prevent Spam Downloads on Safari

Background A new spam page has started to appear throughout many "questionable" sites (movie sites, etc.). This new spam page fits in to the category of fake scans, MacKeeper, "YOU HAVE A VIRUS", etc....
1
vote
2answers
687 views

Is my mac being hacked by a user called Guatoan? And how can I remove this user?

I recently visited a website and on pressing a link another window automatically opened saying the website had found a virus on my laptop. Obviously this was a scam so I returned to the original ...
0
votes
0answers
43 views

Think my Dad may have just downloaded the Apple Security Malware

My dad doesn't use a Virus checker (doesnt disable Java either and isn't running the latest OSX) and just appears to have fallen for the Apple Security malware popup (looked and sounded something like ...
1
vote
1answer
47 views

Is Safari allowing extensions to be installed by stray clicks in a web page?

Sometimes when I go to visit my parents, they ask me to fix their Macbook because something is wrong with Safari. The find that there is an extension installed and that it has set the home page in the ...
2
votes
1answer
111 views

Cannot find/remove browser hijackers

My roommate brought me her iMac this afternoon because it's been behaving very badly since she upgraded to High Sierra. It turns out that her boyfriend has gotten a lot of malware onto it, and I'm ...
0
votes
2answers
590 views

How to remove dataloading.net malware from browsers

I have recently installed one software from internet and it installed MacKeeper malware in my system. So every time when I open any link in any of the browser one page pops up in different window with ...
0
votes
0answers
132 views

Is Spectre and Meltdown Patched on OS X 10.10? [duplicate]

I have not yet had an update since the spectre and meltdown vulnerabilities came out... This leads me to believe they have not patched spectre/meltdown on anything below High Sierra... I have ...
1
vote
1answer
37 views

Picture of “scenery” appears on iPhone 6 lock screen

I just noticed that what I thought was "waveform bars" (for lack of a better description) on my iPhone 6 was actually a miniature landscape of houses and trees. What is it and where did it come from? ...
1
vote
1answer
400 views

Shortcut Virus: What's the effect on a Mac?

I was at school when we tested a PowerPoint presentation on one of the school's laptops. Apparently, when we got home, many of my classmates told me that the laptop gave a "shortcut virus" on their ...
4
votes
4answers
5k views

How to remove Malwarebytes from Mac?

I would like to remove Malwarebytes from a friend's macbook. There is nothing in Applications Folder /Library/LaunchAgents (or in /System/Library/LaunchAgents) /Library/LaunchDaemons /Library/...
2
votes
1answer
426 views

What are these folders and files in my library folder?

I have several suspicious folders and files in my library folder. And I was wondering if I should delete them. ApplicationaContents ApplicationContents ApplicationSupport appn this is just a file ...
2
votes
2answers
350 views

How Would I Manually Uninstall Search Encrypt On My MacBook?

How would I uninstall Search Encrypt manually? I have a MacBook Pro and my toddler installed this bloody thing and it creates pop-ups and annoys me to no end. I have previously tried to find a way by ...
1
vote
1answer
76 views

Does Apple provide notifications if device is hacked

I recently used an app that was for live wallpapers and then got a pop up that made a beeping sound (like the typical bomb from movies). I read some reviews of the app which describe the message as a ...
4
votes
2answers
1k views

flashplayer.dmg is in use and can't empty Trash

I accidentally downloaded malware: something posing as Flash Player in flashplayer.dmg. I did not install it, but deleted the dmg file. Now I want to delete my trash bin, but I can't. It says: 'trash ...
1
vote
2answers
30 views

Do Mac apps have access to delete files

I was just wondering if Mac apps can delete files in ~/documents and ~/desktop without user permission?
1
vote
1answer
98 views

How does macOS “detect malware downloaded with Safari”?

On Apple's website, the company makes this claim about macOS High Sierra's security features: Can anyone give me more details on the technology that enables macOS to determine if a file downloaded ...
1
vote
2answers
3k views

I cannot change the home page of Safari anymore

I think I may have a virus or something, because when I installed a program a few days ago it said something about "www.searchpage.com". How can I fix this?
1
vote
1answer
34 views

A suspicious 'installer' was executed on my macbook. What would be the safest course of action?

My brother just tried to download and install a cracked application from some fishy website. In my own Macbook. Needless to say, the suspiciously small installer didn't install the application (even ...
-2
votes
1answer
140 views

Red and blinking areas on Mac

I have MacBook Air, 13 inches, macOS Sierra. Version 10.12.5 Sometimes when I put mouse over or click on some text - the area where mouse pointing getting red, sometimes this red area is getting ...
0
votes
1answer
376 views

Terminal/ZSH Problems & Permission problems

I downloaded something out of the Internet and executed it, which might could have malware. After that I deleted all of that and i opened my Terminal and it gave me this error: /Users/flawn/.zshrc:.:...
2
votes
1answer
134 views

RSS readers and malware

I recently had an issue where some RSS feeds were causing my IT department to think my MBP was infected by ransomware and was connecting to a ransomware server. Ransomware/malware can be 'caught' ...
0
votes
2answers
413 views

Identify why I get a connection to ransomware server

I received some waring that my 'PC' might be infected because it supposedly tried to connect to two ransomware server: http://45.33.9.234/ http://79.170.40.167/ In practice I have a MBP with MacOS ...
2
votes
1answer
87 views

Should I let malwaredomainlist.com connect to the net?

I am getting Little Snitch alerts for Firefox trying to connect to the malwaredomains.com with the IP-address 76.63.222.170. I have blocked the connection, but I wonder why Firefox needs to connect to ...