Toggle sidebar Toggle sidebar
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

I installed that new Mac trojan by accident!

T

tmt345

macrumors member
Original poster
One of my friends sent me an email for a video that was supposed to be funny but the video said I had to install a Quicktime Update so I downloaded a file called quicktimeupdate.dmg and I installed it! This friend is always mocking Mac OS X's security so I know why he sent me this! Please is there a patch that can help me or something or has a patch already been released. I did some research and heres a news article about it.

http://arstechnica.com/apple/news/2...hijacks-your-macs-dns-spotted-in-the-wild.ars

I don't want a person from Argentina tracking my Mac, help me please! Oh, and I'm planning to get payback by pretending to make my friends Windows 7 computer BSOD so don't worry.

Thank You
 
If I have to reinstall then do you think I should download Snow Leopard and install that instead? If I really do need to reinstall then I'm going to 1 up my friend and give him an even worse trojan.
 
tmt345 said:
If I have to reinstall then do you think I should download Snow Leopard and install that instead? If I really do need to reinstall then I'm going to 1 up my friend and give him an even worse trojan.
Click to expand...

No, install 10.5 and then install 10.6 when you receive the media.
 
tmt345 said:
If I have to reinstall then do you think I should download Snow Leopard and install that instead?
Click to expand...

No.

And why not just be a bigger man about it and let it go?

If you retaliate, they will do something worse, and the cycle will continue until somebody physically destroys the other person's machine.
 
belvdr said:
No, install 10.5 and then install 10.6 when you receive the media.
Click to expand...

Ok, I think I forgot to add though that I was going to buy Snow Leopard (I already have it pre-ordered) if thats what you meant by "when you receive the media". Backup here I go...
 
tmt345 said:
Ok, I think I forgot to add though that I was going to buy Snow Leopard (I already have it pre-ordered) if thats what you meant by "when you receive the media". Backup here I go...
Click to expand...

I wasn't implying anything. I just meant that you'll be sure to have the retail code when you install from media, without any chance of someone modifying the code before you download it.
 
r.j.s said:
It's probably too late to backup ...
Click to expand...

What do you mean, I'm still able to access my files and stuff. I just don't want some creep from another country tracking me and everything I do and possibly sending me more bad stuff.
 
tmt345 said:
What do you mean, I'm still able to access my files and stuff. I just don't want some creep from another country tracking me and everything I do and possibly sending me more bad stuff.
Click to expand...

You are backing up files that have potentially been corrupted ...
 
tmt345 said:
What do you mean, I'm still able to access my files and stuff. I just don't want some creep from another country tracking me and everything I do and possibly sending me more bad stuff.
Click to expand...

He means you may be backing up the trojan, only to restore it on the new system.
 
Thanks everyone for the help, as a last resort I've downloaded ClamXav to scan my system and if it doesn't find anything I will reinstall.
 
r.j.s said:
It probably wont find find anything, since the trojan is new.
Click to expand...

I'm not even able to update it, it says "ERROR 59 unable to update virus definitions" (and its not being blocked by my firewall, i checked), I'm just going to reinstall instead of dealing with all this stuff. Weird stuff is starting to happen, like my system seems a tad bit slower. The internet is laggy now sometimes and when I yahooed clamxav freaky things started to happen. I got redirected to some weird IP address and that redirected me to some other search site. I had to use google instead.
 
tmt345 said:
If I have to reinstall then do you think I should download Snow Leopard and install that instead? If I really do need to reinstall then I'm going to 1 up my friend and give him an even worse trojan.
Click to expand...
Suggest that after you fix your computer, you just ignore his effort to attack yours.

And if he asks you about it, say, that everything is working fine with your computer.

It will drive him crazy without you doing anything. 🙂
 
What would happen if the OP installed little snitch, or some other packet intercepting software, waited til the trojan phoned home, then tracked down the file through the little snitch software and deleted it? i.e. manual virus removal.
 
chaos86 said:
What would happen if the OP installed little snitch, or some other packet intercepting software, waited til the trojan phoned home, then tracked down the file through the little snitch software and deleted it? i.e. manual virus removal.
Click to expand...

Depends. Other trojans have cron scripts that run to ensure the files are in place.
 
I think you should do a scan with a trial version of Sophos av. It's the only av I know that detected all the Jahlav trojans (probably the one you have) I've found.
 
Download Pacifist and open up the pkg that was contained in the .dmg file.

That will show you what files are contained in the package and where they go. You can then go on a mission to delete all the files it installed.
 
You didn't install it by accident. You installed it out of stupidity. How often did the operating system ask you if you really wanted to install this? Twice. Did it tell you what website the software came from? Yes, it did. Was that website www.apple.com? Not, it wasn't.
 
If nothing else works, just disconnect yourself from the internet, backup all your important files, and reinstall.
 
You must log in or register to reply here.
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.
Top Bottom
Back