Questions tagged [malware]
Malware, short for malicious software, is software designed to disrupt computer operation, gather sensitive information, or gain unauthorized access to computer systems.
286
questions
0
votes
1
answer
204
views
Goobspatch flagged as malicious by MacOS. What should I do?
My Mac just popped up this warning:
"goobspatch" can't be opened because Apple cannot check it for malicious software.
This software needs to be updated.
Contact the developer for more ...
- 766
0
votes
0
answers
27
views
Some script ran when accidentally clicked on a fake notification window. iPhone 13 pro
I was using Safari on an iPhone 13 pro with the latest updates and stumbled upon an article in a website with a lot of ads and I accidentally touched on a fake window for notifications subscription ...
0
votes
0
answers
57
views
how to remove preference pane-based malware? (have already tried malware removal apps)
Running macOS 13.4.1 or an i3 MacBook Air. At the top of Application Notifications I have had the following appear:
ask you
Confirm that you're not a robot, you need click Allow
If I allow it to, a ...
- 1
4
votes
1
answer
309
views
Is this a legit macOS modal, or a malware attempt?
The following modal dialog prompting for a software update password has been popping up a few times and I really do not know what to make of it:
it seems to be controlled by the Finder (not a browser ...
- 143
1
vote
1
answer
105
views
Is it possible for a trojan app to keep plaguing an iOS device after the app had been uninstalled?
An app that comes with AceDeceiver got installed invisibly against my will on my iPhone, iOS ver. 15.6.
Full background analysis by PaloAltoNetworks:https://unit42.paloaltonetworks.com/acedeceiver-...
- 61
1
vote
0
answers
444
views
Why does RemoteManagementAgent keep starting?
Background: I have witnessed the cursor move on its own on several brief occasions over the past several weeks. I've been reassuring myself that it's just some static discharge going through the ...
- 264
2
votes
0
answers
167
views
"Joel Rennich" "Le Liu" Background programs [duplicate]
As you can see below, I got these prompts when I startup my Mac. What are these programs with people's names "Joel Rennich" and "Le Liu" on my Mac.
How Can I find and get rid of ...
Mike
5
votes
1
answer
1k
views
Allow in the Background Unrecognized Entry
I have a mysterious entry called "Denis Graur", does anybody have clue of what it is from? It does sound like I might be infected with a malware.
- 51
0
votes
0
answers
237
views
What should appear in "Full Disk Access" by default?
I am looking for malware in my computer. I found that "Security & Privacy – Full Disk Access" is allowed for certain objects like "launchd" however I do not know what should be ...
- 133
1
vote
1
answer
122
views
Random greyed out window appears and doesn't seem attached to any app
This random grey, translucent window keeps appearing on my screen. I can click and drag it around (it usually sits on the bottom of my window) but it sits on top of all windows and I can't seem to ...
- 113
0
votes
1
answer
2k
views
What is AirPlayXPCHelper?
I found this in Activity Monitor and there were three of them - the last one keeps rebooting so it can never go
Am I being Hacked?
Analysis of sampling AirPlayXPCHelper (pid 21478) every 1 millisecond
...
- 11
0
votes
1
answer
112
views
How can I secure my mac when downloading a file?
I am a developer & ASO specialist. As you guess, I have different customers. I am downloading 5-10 files per day from my customers.
I learned that it is possible to hack MacOS via mp4, apk files, ...
- 101
1
vote
1
answer
622
views
Chrome reroutes me automatically to servisepagefind.com and Bing without my consent -- how to stop it?
The way to replicate this is simple in my Chrome browser:
Type the search in Google
Modify the search in Google a second time
Then it sends me either to Bing or to this weird servisepagefind.com
...
- 469
1
vote
0
answers
86
views
Facetime is answered on remote / Camera turned on while no one is at the computer - and it's locked
Update: I've been able to confirm that Facetime is the trigger
I've come home to unlock my OSX Monterey (build 21G72?), only to notice Facetime is running with the camera on. This has now happened ...
- 51
0
votes
0
answers
268
views
iOS Safari address bar suggests URL's I haven't visited
Over the last couple of months I've noticed that when I start typing in the address/search bar in Safari on my iPhone it will sometimes auto-complete with websites that I haven't visited. But Search ...
- 85
3
votes
2
answers
376
views
Notification center: where did the apps Kerberos and CoinChefs come from?
I looked in my Notification Center on macOS and see two apps that I did not install:
Where did they come from? Are they spyware? Malware?
How can I get rid of them?
In response to the suggestions ...
- 2,819
1
vote
1
answer
143
views
Cannot move (malware) message to junk or trash - Mac Mail
Got a malware attachment in an email I knew better than to open. My Sophos auto-protection caught it, too, and named it "DocExp-AC".
However, if I tried to right-click to move it to Junk (in ...
- 465
0
votes
1
answer
2k
views
How to erase the entire hard disk of a mac mini late 2014
I bought a second hand mac mini late 2014 with 256GB SSD storage and with OS X El Capitan version 10.11.6. I do not know the seller and I assume the device is virus-ridden! I am mainly concerned that ...
- 131
2
votes
2
answers
1k
views
Removing Adware in ~/Library/Application Support
I recently installed some software that was clearly malicious but it didn't function and I started getting popups in my browser, changed my default search engine, and installed some malicious chrome ...
- 131
4
votes
1
answer
1k
views
TrialArchivingService is this a new process or is it malware?
Found this new process TrialArchivingService that was using a lot of cpu. It was started by user. Has anyone else seen this process. All input is welcome.
OS - Monterey 12.3
Thanks,
M
- 41
1
vote
0
answers
75
views
Unidentifiable process always running
According to the screen time monitor on my iPhone there's process called "isha.sadhguru.org" on all day and responsible for an average running time of 20 hours per day:
It's unclear why ...
- 111
-1
votes
1
answer
470
views
Method to Log or View iOS App Network Calls [No Jail-Breaking]
Outside of a proxy, is there a way to log, or view network calls apps, services, and processes are making/have made on iPhone and iPad devices? For forensic analysis/malware hunting. I’m aware there ...
1
vote
1
answer
532
views
Adware file in /var/root/
My MacBook Pro has had a common adware virus on it ExploreSearchResults. I have already gone through all of my extensions and deleted anything related. Anything in the Applications folder that did not ...
- 11
-3
votes
1
answer
50
views
How can I get rid of bloatware? [closed]
MacOs supposedly has less bloatware than the other commercial OS' available. I have found that my mac has some.
Remote Management seems ingrained in the system very stubbornly; it may be the tip of ...
9
votes
4
answers
4k
views
Mac terminal found open with “man James” text. Have I been hacked?
I found a terminal window open with the below.
I ran /bin/bash -x and it looks like VMware was accessed and GPG tools.
It also added something suspicious to my login items... have I been hacked?! Also ...
user444921
0
votes
1
answer
43
views
Used Macbook Pro 2018 - what is the safest approach to ensure no virus?
I bought a MBP 2018 off ebay.
When I boot up the machine it showed the install prompt for Big Sur. I imagine the person who owned it before reset it such that it was ready for re-installation.
My ...
- 290
5
votes
1
answer
310
views
Possibly a virus?
I'm new to Mac. I downloaded software from a website. It was a DMG file. I installed it, but then the app didn't appear in the Launchpad. I accessed the DMG and I see this strange installation script ...
- 51
4
votes
1
answer
6k
views
Are there risks when running `sudo xattr -rd com.apple.quarantine "/Applications/*.app" `?
There is an application I really need to use but needs the sudo xattr -rd com.apple.quarantine command to run and I am not 100% sure if this app is harmless.
Is there any way to be sure? like scanning ...
- 41
1
vote
0
answers
197
views
legitimate software source, or malware?
Needing to upgrade to a 64-bit version of Microsoft Office (in order to upgrade to Mac OS Catalina or Big Sur), I sought out a deal on Office 2019.
After paying, I received an email with the ...
- 151
-1
votes
1
answer
274
views
Hybrid-Analysis.com indicates macOS built-in file is contacting a malicious website
I'm wondering if anyone knows why this
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc
is connecting to adriver.ru ?
This is according ...
- 191
2
votes
1
answer
2k
views
Unknown item in macOS screen time, is it malware?
I checked my screen time after a few weeks today and saw that it said 24 hours and it seems more than half of that was something called "psv4.userapi.com". My Mac is usually asleep for most ...
- 399
0
votes
2
answers
655
views
“24B93E7F-8822-4465-B473-7BE7BB8E3E4A” will damage your computer. You should move it to the Bin
I have been having multiple pop-ups since this morning, and each popup occurs around 2-3 hours after the previous one, and has the following message:
“24B93E7F-8822-4465-B473-7BE7BB8E3E4A” will damage ...
- 130
0
votes
0
answers
28
views
Spyware/Anti-malware software for only one user
Is it possible to install a corporate anti-malware (sort of a spyware with various things blocked) app on one user profile only, without it having access to another admin user profile on the same Mac?
...
0
votes
0
answers
426
views
sudo: /private/etc/sudoers.d is owned by uid 501 should be 0 - unable to run sudo commands on terminal - big sur [duplicate]
My brew command was getting stuck without any output. So I tried reinstalling brew. When I try to re-install using:
/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/...
- 101
1
vote
1
answer
109
views
Help! Virus on my mac affecting my search engine. It is called "Function Loginput"
I don't know much about this so please bare with me.
If you think you can help in any way, feel free to ask any questions or anything since these forum sites are my only hope at this point.
I have a ...
- 21
0
votes
1
answer
218
views
If we know the exact moment a system was infected by a virus, would a simple rollback via Time Machine fix it?
What follows is an extreme scenario, simply to better understand the extension of Time Machine's utility.
Let's assume that up to this moment our system is fully backed up via TM and is not infected.
...
1
vote
1
answer
95
views
Mac Software that Detects Windows Malware
I want to use my Mac to scan drives that have Windows partitions on them for malware. I know that there are a lot of security software packages out there for Macs but I'm not sure if they detect ...
- 111
3
votes
1
answer
9k
views
"Google Chrome wants access to control Finder", should I be worried?
When browsing using Google Chrome on OS X Catalina I out of nowhere got a system pop-up saying "Google Chrome wants access to control Finder" and asking me whether I want to allow that or ...
0
votes
1
answer
2k
views
sudo: /private/etc/sudoers.d is owned by uid 501 should be 0 - unable to run sudo commands on terminal (macOS Big Sur 11.3.1)
When I Run Any Sudo Commands I get:
sudo: /private/etc/sudoers.d is owned by uid 501, should be 0
sudo: no valid sudoers sources found, quitting
sudo: error initializing audit plugin sudoers_audit
...
4
votes
2
answers
6k
views
What is the process EscrowSecurityAlert in Activity Monitor?
I'm a little worried about a process I see in Activity Monitor called 'EscrowSecurityAlert'
Descriptions provided other forums ranges from it being a sign of malware:
The threat to your Mac is ...
- 4,339
0
votes
2
answers
366
views
Wrong Root Name Appearing in Terminal | MacOS [duplicate]
I just noticed today that a weird name that appeared on my teminal "rrmando2x13g" as shown in the image below. Usually only my computer name (removed in cyan) used to appear.
Does this mean ...
- 182
2
votes
1
answer
439
views
Stop malware from being executed by launchd
I've got this program running on my computer, /var/root/Library/Application Support/.SectionChannel.dp/SectionChanneldd, which Norton has identified as the malware OSX.Malcol. However, Norton has ...
- 203
0
votes
3
answers
598
views
Recommended malware/virus scanner for mac? [duplicate]
I have been searching for a good virus/malware scanner for my mac. But I'm scared that I might download some trashy software because all the stuff I find on google just turn out to be ads.
Do you have ...
- 111
0
votes
1
answer
64
views
Question mark on finder's side bar -- could it be malware?
When I click on this question mark finder tells me it can't open it because the original item couldn't be found. A week ago I downloaded a file that I suspect could have been malware. Could a malware ...
7
votes
1
answer
2k
views
What is the Unknown (0) process with 232 threads on my iPhone?
Here's a list of the processes on iPhone, obtained with help of Activity Monitor in Xcode instruments.
Is the Unknown(0) process with 232 threads owned by root malware?
- 455
2
votes
1
answer
1k
views
Error Message Says FileZilla Will Damage My Computer
After updating to Catalina, when I start FileZilla, I get the error message "filezilla will damage your computer. you should move it to the bin”. I had installed FileZilla from the App Store, and ...
- 609
-1
votes
1
answer
115
views
Making sure Mac M1 doesn't have tracking or screen-capturing software
I was given a new MacBook Air (M1) by my employer for work (from home), but I also want to use it as my main personal laptop as well, since having 2 machines doesn't seem necessary.
There a chance ...
- 13
1
vote
2
answers
147
views
Scanning External Drives (USB keys in particular) before mounting them
I need your help: it happens quite often to me that I have to mount drives coming from the most diverse sources and, sometimes, with quite a high risk of being infected with god knows what. As a ...
- 121
0
votes
1
answer
169
views
Utilize "burner" user accounts to sandbox specific "sketchy" apps
There's some apps that are sort of irreplaceable for a user, yet at the same time unwanted by them, (due to violating privacy, controversial history etc.)
In my case that is Google's Android File ...
0
votes
2
answers
66
views
Protect a folder from access
The folders: desktop, documents, downloads, network volumes and more are protected by Catalina.
Can I protect a folder in the same way as the one so that it is asked whether an application is allowed ...
- 837