Questions tagged [malware]

Malware, short for malicious software, is software designed to disrupt computer operation, gather sensitive information, or gain unauthorized access to computer systems.

Filter by
Sorted by
Tagged with
1 vote
1 answer
16 views

Cannot move (malware) message to junk or trash - Mac Mail

Got a malware attachment in an email I knew better than to open. My Sophos auto-protection caught it, too, and named it "DocExp-AC". However, if I tried to right-click to move it to Junk (in ...
user avatar
0 votes
1 answer
77 views

How to erase the entire hard disk of a mac mini late 2014

I bought a second hand mac mini late 2014 with 256GB SSD storage and with OS X El Capitan version 10.11.6. I do not know the seller and I assume the device is virus-ridden! I am mainly concerned that ...
user avatar
  • 131
1 vote
2 answers
171 views

Removing Adware in ~/Library/Application Support

I recently installed some software that was clearly malicious but it didn't function and I started getting popups in my browser, changed my default search engine, and installed some malicious chrome ...
user avatar
3 votes
0 answers
455 views

TrialArchivingService is this a new process or is it malware?

Found this new process TrialArchivingService that was using a lot of cpu. It was started by user. Has anyone else seen this process. All input is welcome. OS - Monterey 12.3 Thanks, M
user avatar
1 vote
0 answers
37 views

Unidentifiable process always running

According to the screen time monitor on my iPhone there's process called "isha.sadhguru.org" on all day and responsible for an average running time of 20 hours per day: It's unclear why ...
user avatar
  • 111
-1 votes
1 answer
27 views

Method to Log or View iOS App Network Calls [No Jail-Breaking]

Outside of a proxy, is there a way to log, or view network calls apps, services, and processes are making/have made on iPhone and iPad devices? For forensic analysis/malware hunting. I’m aware there ...
user avatar
1 vote
1 answer
143 views

Adware file in /var/root/

My MacBook Pro has had a common adware virus on it ExploreSearchResults. I have already gone through all of my extensions and deleted anything related. Anything in the Applications folder that did not ...
user avatar
  • 11
-3 votes
1 answer
41 views

How can I get rid of bloatware? [closed]

MacOs supposedly has less bloatware than the other commercial OS' available. I have found that my mac has some. Remote Management seems ingrained in the system very stubbornly; it may be the tip of ...
user avatar
9 votes
4 answers
3k views

Mac terminal found open with “man James” text. Have I been hacked?

I found a terminal window open with the below. I ran /bin/bash -x and it looks like VMware was accessed and GPG tools. It also added something suspicious to my login items... have I been hacked?! Also ...
user avatar
0 votes
1 answer
35 views

Used Macbook Pro 2018 - what is the safest approach to ensure no virus?

I bought a MBP 2018 off ebay. When I boot up the machine it showed the install prompt for Big Sur. I imagine the person who owned it before reset it such that it was ready for re-installation. My ...
user avatar
5 votes
1 answer
272 views

Possibly a virus?

I'm new to Mac. I downloaded software from a website. It was a DMG file. I installed it, but then the app didn't appear in the Launchpad. I accessed the DMG and I see this strange installation script ...
user avatar
3 votes
1 answer
2k views

Are there risks when running `sudo xattr -rd com.apple.quarantine "/Applications/*.app" `?

There is an application I really need to use but needs the sudo xattr -rd com.apple.quarantine command to run and I am not 100% sure if this app is harmless. Is there any way to be sure? like scanning ...
user avatar
  • 31
1 vote
0 answers
58 views

legitimate software source, or malware?

Needing to upgrade to a 64-bit version of Microsoft Office (in order to upgrade to Mac OS Catalina or Big Sur), I sought out a deal on Office 2019. After paying, I received an email with the ...
user avatar
0 votes
0 answers
25 views

Potential malware "methingeko.xyz" [duplicate]

Recently I saw that this "methingeko.xyz" was having 20 hrs of Screen Time, and I didn't recognize this site. Whenever I try to type "methingeko.xyz" in Safari address bar (to ...
user avatar
-1 votes
1 answer
103 views

Hybrid-Analysis.com indicates macOS built-in file is contacting a malicious website

I'm wondering if anyone knows why this /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc is connecting to adriver.ru ? This is according ...
user avatar
0 votes
0 answers
10 views

Outlook's "Checking Update" Window randomly opening while browsing

Problem I was just browsing safari when I noticed this strange behavior: When I opened a new tab and copied some text into the search bar, actually two tabs opened (one empty) and the MS Office ...
user avatar
2 votes
1 answer
869 views

Unknown item in macOS screen time, is it malware?

I checked my screen time after a few weeks today and saw that it said 24 hours and it seems more than half of that was something called "psv4.userapi.com". My Mac is usually asleep for most ...
user avatar
0 votes
2 answers
307 views

“24B93E7F-8822-4465-B473-7BE7BB8E3E4A” will damage your computer. You should move it to the Bin

I have been having multiple pop-ups since this morning, and each popup occurs around 2-3 hours after the previous one, and has the following message: “24B93E7F-8822-4465-B473-7BE7BB8E3E4A” will damage ...
user avatar
0 votes
0 answers
22 views

Spyware/Anti-malware software for only one user

Is it possible to install a corporate anti-malware (sort of a spyware with various things blocked) app on one user profile only, without it having access to another admin user profile on the same Mac? ...
user avatar
0 votes
0 answers
127 views

sudo: /private/etc/sudoers.d is owned by uid 501 should be 0 - unable to run sudo commands on terminal - big sur [duplicate]

My brew command was getting stuck without any output. So I tried reinstalling brew. When I try to re-install using: /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/...
user avatar
  • 101
1 vote
1 answer
85 views

Help! Virus on my mac affecting my search engine. It is called "Function Loginput"

I don't know much about this so please bare with me. If you think you can help in any way, feel free to ask any questions or anything since these forum sites are my only hope at this point. I have a ...
user avatar
0 votes
1 answer
80 views

If we know the exact moment a system was infected by a virus, would a simple rollback via Time Machine fix it?

What follows is an extreme scenario, simply to better understand the extension of Time Machine's utility. Let's assume that up to this moment our system is fully backed up via TM and is not infected. ...
user avatar
1 vote
1 answer
61 views

Mac Software that Detects Windows Malware

I want to use my Mac to scan drives that have Windows partitions on them for malware. I know that there are a lot of security software packages out there for Macs but I'm not sure if they detect ...
user avatar
  • 111
3 votes
1 answer
3k views

"Google Chrome wants access to control Finder", should I be worried?

When browsing using Google Chrome on OS X Catalina I out of nowhere got a system pop-up saying "Google Chrome wants access to control Finder" and asking me whether I want to allow that or ...
user avatar
0 votes
1 answer
2k views

sudo: /private/etc/sudoers.d is owned by uid 501 should be 0 - unable to run sudo commands on terminal (macOS Big Sur 11.3.1)

When I Run Any Sudo Commands I get: sudo: /private/etc/sudoers.d is owned by uid 501, should be 0 sudo: no valid sudoers sources found, quitting sudo: error initializing audit plugin sudoers_audit ...
user avatar
3 votes
2 answers
3k views

What is the process EscrowSecurityAlert in Activity Monitor?

I'm a little worried about a process I see in Activity Monitor called 'EscrowSecurityAlert' Descriptions provided other forums ranges from it being a sign of malware: The threat to your Mac is ...
user avatar
  • 3,067
0 votes
2 answers
195 views

Wrong Root Name Appearing in Terminal | MacOS [duplicate]

I just noticed today that a weird name that appeared on my teminal "rrmando2x13g" as shown in the image below. Usually only my computer name (removed in cyan) used to appear. Does this mean ...
user avatar
  • 153
2 votes
1 answer
151 views

Stop malware from being executed by launchd

I've got this program running on my computer, /var/root/Library/Application Support/.SectionChannel.dp/SectionChanneldd, which Norton has identified as the malware OSX.Malcol. However, Norton has ...
user avatar
0 votes
3 answers
143 views

Recommended malware/virus scanner for mac? [duplicate]

I have been searching for a good virus/malware scanner for my mac. But I'm scared that I might download some trashy software because all the stuff I find on google just turn out to be ads. Do you have ...
user avatar
  • 111
0 votes
1 answer
33 views

Question mark on finder's side bar -- could it be malware?

When I click on this question mark finder tells me it can't open it because the original item couldn't be found. A week ago I downloaded a file that I suspect could have been malware. Could a malware ...
user avatar
7 votes
1 answer
2k views

What is the Unknown (0) process with 232 threads on my iPhone?

Here's a list of the processes on iPhone, obtained with help of Activity Monitor in Xcode instruments. Is the Unknown(0) process with 232 threads owned by root malware?
user avatar
  • 445
1 vote
1 answer
558 views

Error Message Says FileZilla Will Damage My Computer

After updating to Catalina, when I start FileZilla, I get the error message "filezilla will damage your computer. you should move it to the bin”. I had installed FileZilla from the App Store, and ...
user avatar
-1 votes
1 answer
82 views

Making sure Mac M1 doesn't have tracking or screen-capturing software

I was given a new MacBook Air (M1) by my employer for work (from home), but I also want to use it as my main personal laptop as well, since having 2 machines doesn't seem necessary. There a chance ...
user avatar
1 vote
2 answers
93 views

Scanning External Drives (USB keys in particular) before mounting them

I need your help: it happens quite often to me that I have to mount drives coming from the most diverse sources and, sometimes, with quite a high risk of being infected with god knows what. As a ...
user avatar
  • 21
0 votes
0 answers
1k views

Random popup out of nowhere: "Verifying file.."

As the title says, a popup appeared while I was on the internet, I was not on any sketchy website btw. I was not downloading anything either. All I saw was "Verifying file", I don't think it ...
user avatar
  • 219
0 votes
1 answer
85 views

Utilize "burner" user accounts to sandbox specific "sketchy" apps

There's some apps that are sort of irreplaceable for a user, yet at the same time unwanted by them, (due to violating privacy, controversial history etc.) In my case that is Google's Android File ...
user avatar
0 votes
2 answers
56 views

Protect a folder from access

The folders: desktop, documents, downloads, network volumes and more are protected by Catalina. Can I protect a folder in the same way as the one so that it is asked whether an application is allowed ...
user avatar
  • 506
2 votes
1 answer
1k views

What is local.blackjack from Netstat?

When running netstat I noticed the suspicious name blackjack. I wonder if it's malware. PROMPT> netstat -v Active Internet connections Proto Recv-Q Send-Q Local Address Foreign Address ...
user avatar
  • 3,023
0 votes
1 answer
57 views

MacBook Pro experiencing random restarts and buggy behavior while running programs

My MacBook Pro (15inch Mid 2014) has been displaying odd behavior (slowdowns, problems running certain software packages including jGRASP, beach balls, delays in expected restarts, as well as ...
user avatar
0 votes
1 answer
195 views

What is the weird code on my terminal?

Hi I following my previous question, I realised the terminal is showing "Last login:...on ttys000" and sometimes it's showing "Last login:... on console" May I ask if it is normal ...
user avatar
  • 69
1 vote
1 answer
192 views

How to manually detect infections on Mac

My brother installed MS Office supposedly from a pirated site and after he ran the installer, he mentioned it launched terminal automatically and the computer did some stuff on its own. I ran a few ...
user avatar
  • 69
20 votes
2 answers
4k views

Unexplained and persistent "OS X 10.13 is not supported" dialog

I am being interrupted multiple times a day by a mysterious dialog box that says: "OS X 10.13 is not supported. There is an update but you are on OS X 10.13 or an earlier version. Upgrade to the ...
user avatar
0 votes
0 answers
69 views

Finder (and Xcode) accessing iDevices while network was off

I am trying to figure out what is wrong with my Mac. Here are my devices: iPad (7th generation, MW752LL/A) with iOS 14.01 (18A393) iPad Air (MD788LL/A) with iOS 12.4.8 (16G201) iPhone 6 Plus (...
user avatar
16 votes
6 answers
17k views

HP Easy Scan - "HP Scanner 3" will damage your computer

I have been using a HP Envy 4500 printer with my iMac for 2 years using HP Easy Scan - with no issues. Today I tried to scan a document, when I press the "scan" button on the app a pop-up ...
user avatar
  • 329
10 votes
6 answers
7k views

Stopping false positive malware warnings in Catalina?

Today, I received a pop-up warning saying "hpRaster.bundle will damage your computer. You should move it to the Trash". "hpRaster.bundle" is installed by Mac OS X as part of its ...
user avatar
3 votes
1 answer
65 views

What are the risks having visited a counterfeit or phishing web page on iOS?

I received from a regular colleague a sharing e-mail in iOS Outlook, and clicked the link. It opened a web page asking for my credentials, which I did not enter because I recognized the page as ...
user avatar
  • 105
1 vote
1 answer
105 views

After Zoom install: macOS forwards various requests to localhost

right on the day since I installed (and uninstalled) Zoom, various URLs began to be forwarded to localhost. Like: $ traceroute -I googleadservices.com traceroute to googleadservices.com (127.0.0.1), ...
user avatar
3 votes
0 answers
88 views

Unknown networks, is Malware?

I got a Mac with Catalina 10.15.6 When I access Network (Rede in image) in Finder, it show me a strange network, if I disconnect WiFi and connect again its show me a another network name... Until then ...
user avatar
4 votes
0 answers
58 views

Official macOS System security prompt or possible malware? [macOS Catalina]

Why I'm Asking: I've used all Apple operating systems since OS X Snow Leopard and I've never seen this security input prompt, or that symbol anywhere on mac's official system security prompts. I'm ...
user avatar
  • 1,518
0 votes
1 answer
53 views

Potential bluetooth connection malware

I tried to disconnect and remove this device called '57-14-cf-5d-3c-62', and it doesn't work. I'm not really sure why, but I'm wondering if this is potential malware. If so, what is the best way to ...
user avatar

1
2 3 4 5 6