Virus Scan for MAC?

Discussion in 'Mac Applications and Mac App Store' started by Zanwolf, Feb 19, 2011.

  1. macrumors newbie

    Joined:
    Nov 1, 2009
    #1
    Hey everyone,

    I've been looking for a good virus scan for MAC.

    I've been given McAfee with my ISP but to be completely honest, it's rubbish and doesn't even open for some reason, so I uninstalled it.

    I'm looking for a decent one, free or paid, that I can scan my MAC with. I feel I may have a virus or two as my comp has started to run pretty slow lately.

    So, could anyone suggest a good anti-virus scanner for MAC please?

    Thank you in advance.
     
  2. celticpride678

    Joined:
    Feb 15, 2009
    Location:
    Boston, MA
    #2
    Mac OS X does not need virus protection.
     
  3. macrumors newbie

    blkwls

    Joined:
    Oct 11, 2010
    #3
    Macworld review!
    Sophos free Anti-Virus
     
  4. Guest

    Joined:
    Oct 7, 2010
    #4
    Had a Mac for 3 years now and never had AV on it. It simply doesn't need it.
     
  5. macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #5
    A virus scanner on a Mac is as useful as a screen door on a submarine. How are you going to scan for a virus that doesn't exist? You don't have a virus.
     
  6. Zanwolf, Feb 19, 2011
    Last edited: Feb 19, 2011

    thread starter macrumors newbie

    Joined:
    Nov 1, 2009
    #6
    Well to those that said MACs don't get virus'.

    I can safely say...you are wrong.

    Just downloaded a free trail of ESET Cybersecurity for MAC.
    It found 6. My MAC is now running at perfect speed again and my Internet is going fine.

    I guess they aren't 100% safe. I trust MAC more than PC any day, but it's silly to think that virus' don't exist for them, just a very small minority I guess, but they are out there.
    Ok, they may not have been virus' but I had 6 threats, malware, spyware, whatever, MACs can be infected.

    Cheers for the replies though people.
     
  7. GGJstudios, Feb 19, 2011
    Last edited: Feb 19, 2011

    macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #7
    Prove it by naming one, just one, virus that runs on Mac OS X. Just one.
    It found 6 what? Be specific.
    Viruses that run on Mac OS X don't exist for anyone, including you.
    No one said Macs can't be infected. The difference is, the only way for a Mac to be infected is if the user actively installs the malware (a trojan), as opposed to a virus, which can propagate itself without user interaction.
     
  8. Zanwolf, Feb 19, 2011
    Last edited: Feb 19, 2011

    thread starter macrumors newbie

    Joined:
    Nov 1, 2009
    #8
    Wow GG, no need to be so hostile.

    Like I said, it may not be a virus, could have been malware, spyware, whatever.

    I haven't installed, and never would, install anything that I didn't know what it was.

    The fact is, ESET found 6 threats. It didn't give me the option to view the scan report, which I found strange, maybe because it's a free trail, otherwise I would have posted the report in here.

    I have no reason to lie, otherwise I wouldn't of posted a reply. ESET found 6 threats and deleted 6 threats.

    That's all I care about, they are gone and the fact is, it found something, 6 'somethings' so maybe I can't name them, who cares, they exist and I know I never installed anything I wasn't aware of.

    So god knows how they got there. I don't open emails I don't know who they came from either, I am VERY careful when it comes to my computer security so these 'threats' must have recently been 'planted' as it has only been the last couple of days that I've noticed my MAC performance being slower, hence the thread I made, as it took me by surprise.

    I could have taken the advise and words that users posted in here that virues DON'T exist for MACs, fair enough, my fault for the title of the thread being misleading, but that is because I did not know if it was a virus or not, but I didn't take their advise, I read them, reflected, sought out a virus scan for MAC and ran a scan, giving me the results mentioned.

    I to have heard there are no virues and what not for MAC, so yeah, I'm surprised as well. They are gone now, but they existed, that is what is worrying.
     
  9. macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #9
    I'm not being hostile. I'm being adamant, and asking for facts to backup your claim. There's no emotion involved.
    It's entirely possible that the threats found were Windows threats, not Mac threats. Many virus scanners for Mac will scan for Windows malware. If you haven't installed anything, it's most likely Windows threats, which can not harm your Mac at all.

    Also, there are many things beyond malware that can cause your Mac's performance to degrade. Malware is the last thing to suspect.
     
  10. thread starter macrumors newbie

    Joined:
    Nov 1, 2009
    #10
    That maybe so, but if they don't affect MAC then why has my MAC been going slow?
    The moment they were deleted and I restarted it was fine again, so that to me says it affected my MAC.

    I will look further into the application to see if I can find a scan report and I will post it.
     
  11. macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #11
    There's a clue. Did you restart before you did the scan, or only after?
    By the way, MAC is something completely different than Mac.
     
  12. thread starter macrumors newbie

    Joined:
    Nov 1, 2009
    #12
    Well it's been going slow for days and it's been turned on and off countless times, was only today that I downloaded the anti-virus.

    Was after the scan I restarted and it went back to it's normal speed.

    Mac and MAC, please explain?
     
  13. GGJstudios, Feb 19, 2011
    Last edited: Feb 19, 2011

    macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #13
    It's still unlikely that the malware you found had anything to do with your system being slow, even though it may appear that way. There are a myriad of possibilities that would take some troubleshooting to diagnose. It would really be helpful if you can find any description of the threats that were found. Most AV apps have a log file of some sort, to show a history of actions taken.
    From ESET's site:
    Click the links I posted to see the difference.

    More information from ESET's site, indicating that it's likely the threats were Windows threats:
     
  14. macrumors 68020

    munkery

    Joined:
    Dec 18, 2006
    #14
    There is also this MAC as well. Sorry to add to your confusion.
     
  15. macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #15
  16. Zanwolf, Feb 19, 2011
    Last edited: Feb 19, 2011

    thread starter macrumors newbie

    Joined:
    Nov 1, 2009
    #16
    Here is my scan report of the errors and threats found;

    /Users/RussellParker/Documents/Governement/2009-green-dam.zip » ZIP » exploit.dll - probably a variant of Win32/Agent.FDYLYLD trojan
    /Users/RussellParker/Documents/Governement/farc-farcep-admin-directory-2008.zip » ZIP » _admin/tmp/backhtml.html - probably a variant of Win32/Agent.GQVEMIX trojan
    /Users/RussellParker/Documents/Governement/farc-farcep-admin-directory-2008.zip » ZIP » _admin/tmp/dc.txt - Perl/Small.E trojan
    /Users/RussellParker/Documents/Governement/video6434.mpg.exe - a variant of Win32/Kryptik.IWC trojan - cleaned by deleting - quarantined [1]
    /Users/RussellParker/Library/Caches/Java/cache/6.0/3/a1a68c3-2989a426 » ZIP » encode/Unicode.class - a variant of Java/Agent.AB trojan
    /Users/RussellParker/Library/Caches/Java/cache/6.0/3/a1a68c3-2989a426 » ZIP » setup/lang.class - Java/TrojanDownloader.Agent.NCG trojan
    /Users/RussellParker/Documents/Governement/2009-green-dam.zip » ZIP » exploit.dll - probably a variant of Win32/Agent.FDYLYLD trojan - was a part of the deleted object
    /Users/RussellParker/Documents/Governement/farc-farcep-admin-directory-2008.zip » ZIP » _admin/tmp/backhtml.html - probably a variant of Win32/Agent.GQVEMIX trojan - was a part of the deleted object
    /Users/RussellParker/Documents/Governement/farc-farcep-admin-directory-2008.zip » ZIP » _admin/tmp/dc.txt - Perl/Small.E trojan - was a part of the deleted object
    /Users/RussellParker/Library/Caches/Java/cache/6.0/3/a1a68c3-2989a426 » ZIP » encode/Unicode.class - a variant of Java/Agent.AB trojan - was a part of the deleted object
    /Users/RussellParker/Library/Caches/Java/cache/6.0/3/a1a68c3-2989a426 » ZIP » setup/lang.class - Java/TrojanDownloader.Agent.NCG trojan - was a part of the deleted object

    Number of scanned objects: 1351612
    Number of threats found: 6
    Number of cleaned objects: 6
    Time of completion: 18:10:21 Total scanning time: 5230 sec (01:27:10)


    I'm surprised they were in those folders tbh...
    Hope this helps
     
  17. macrumors 68020

    munkery

    Joined:
    Dec 18, 2006
    #17
  18. macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #18
    It does help. As you can see, they're all trojans and all Windows-based, so they can't harm your Mac or affect its performance.
     
  19. thread starter macrumors newbie

    Joined:
    Nov 1, 2009
    #19
    I see.

    Still find it strange how my comp is fine they are gone though. I DO have Windows on my other side, so could that affect my performance on my mac side, even though those folders are on my mac side?
     
  20. macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #20
    No, only on the Windows side.
     
  21. munkery, Feb 19, 2011
    Last edited: Feb 19, 2011

    macrumors 68020

    munkery

    Joined:
    Dec 18, 2006
    #21
    These could have been the issue in terms of performance degradation because Java is cross platform but they posed no real threat to your Mac. Although, I have not heard of these causing such issues.

    The payloads downloaded by the Java downloader would have been for Windows or they would have prompted for authentication if for Mac (for example, Boonana was cross platform and used a Java downloader but the payload for Mac required authentication to install unless user logged into root account).

    This type of trojans that require use of Java to download the payload (keylogger, rootkit, etc that requires authentication) are best avoided by turning off Java in your web browser or installing an extension that provides control over Java.

    In the case of Safari, Plugin Customs (http://safari.laissemoichercherca.com/plugincustoms) provides click to launch control over Java within the browser.

    I also run on-demand scans with ClamXav (http://www.macupdate.com/app/mac/15850/clamxav) periodically just for peace of mind.
     
  22. thread starter macrumors newbie

    Joined:
    Nov 1, 2009
    #22
    Cheers Munkery,

    Is there a plug-in you know of for Firefox?

    Yeah I downloaded ClamXav today, if it's as good as ESET then I will install it, plus it's free so that is always a plus!
     
  23. macrumors 6502a

    Joined:
    Aug 7, 2007
    #23
    If you'll be sharing files with any Windows users, you can scan for malware. If not, it's totally unnecessary and a waste of time.
     
  24. thread starter macrumors newbie

    Joined:
    Nov 1, 2009
    #24
    No, I've turned sharing off and my Windows files are separate from my Mac files.
    Don't put the same things in either unless I'm copying files over, but I run weekly scans on my Windows side as I know Windows is stupidly prone to attacks etc.
     
  25. macrumors newbie

    Joined:
    Nov 15, 2010
    #25
    Whilst we are on the topic, it might have had those threats due to your inability to spell the word 'government' :D
     

Share This Page