Leopard Mal-Ware/Virus???

Discussion in 'macOS' started by apedosmil, Jul 9, 2008.

  1. apedosmil macrumors newbie

    Joined:
    Oct 27, 2007
    #1
    Hello, I took a nap today and went to my Macbook and noticed a pop-up from Safari....

    Now I'm concerned on got something. My nephew was on the pc so I'm concerned.

    I checked out my processes but I can't seem to find anything.

    //***

    UID PID PPID C STIME TTY TIME CMD
    0 1 0 0 0:22.08 ?? 0:28.77 /sbin/launchd
    0 10 1 0 0:00.84 ?? 0:00.97 /usr/libexec/kextd
    0 11 1 0 0:05.68 ?? 0:08.00 /usr/sbin/notifyd
    0 12 1 0 5:56.82 ?? 57:54.48 /usr/sbin/syslogd
    0 14 1 0 3:14.81 ?? 3:14.89 /usr/sbin/update
    0 15 1 0 0:00.01 ?? 0:00.01 /sbin/SystemStarter
    0 18 1 0 0:00.78 ?? 0:01.55 /usr/sbin/securityd -i
    0 20 1 0 1:21.24 ?? 3:06.87 /System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Support/mds
    65 21 1 0 0:00.80 ?? 0:01.27 /usr/sbin/mDNSResponder -launchd
    501 22 1 0 0:03.38 ?? 0:08.45 /System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console
    0 23 1 0 0:00.02 ?? 0:00.02 /usr/sbin/KernelEventAgent
    0 25 1 0 0:00.01 ?? 0:00.01 /usr/libexec/hidd
    0 26 1 0 0:26.05 ?? 0:35.28 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/Versions/A/Support/fseventsd
    0 28 1 0 0:01.31 ?? 0:01.31 /sbin/dynamic_pager -F /private/var/vm/swapfile
    0 30 1 0 0:02.59 ?? 0:05.78 /usr/sbin/diskarbitrationd
    0 31 1 0 0:20.47 ?? 0:34.36 /usr/sbin/DirectoryService
    0 33 1 0 0:31.80 ?? 0:54.43 /usr/sbin/configd
    0 36 1 0 0:00.03 ?? 0:00.04 autofsd
    0 37 1 0 0:02.58 ?? 0:03.30 /usr/libexec/ApplicationFirewall/socketfilterfw
    1 40 1 0 0:09.47 ?? 0:21.16 /usr/sbin/distnoted
    0 43 1 0 0:14.86 ?? 0:26.75 /System/Library/CoreServices/coreservicesd
    0 47 1 0 0:00.18 ?? 0:00.28 /usr/sbin/blued
    88 48 1 0 23:20.76 ?? 61:22.24 /System/Library/Frameworks/ApplicationServices.framework/Frameworks/CoreGraphics.framework/Resources/WindowServer -daemon
    65 53 1 0 0:09.70 ?? 0:12.46 /sbin/launchd
    501 61 1 0 1:10.31 ?? 1:30.02 /sbin/launchd
    501 75 61 0 0:00.18 ?? 0:00.45 /System/Library/CoreServices/AirPort Base Station Agent.app/Contents/MacOS/AirPort Base Station Agent -launchd
    501 79 61 0 0:02.10 ?? 0:10.61 /System/Library/CoreServices/Spotlight.app/Contents/MacOS/Spotlight
    501 80 61 0 0:00.59 ?? 0:00.86 /usr/sbin/UserEventAgent -l Aqua
    501 81 61 0 0:00.00 ?? 0:00.01 /usr/sbin/pboard
    0 87 1 0 0:38.24 ?? 0:45.71 /Library/StartupItems/ParallelsTransporter/llipd
    0 100 1 0 0:19.82 ?? 0:26.02 /Library/StartupItems/Parallels/pvsnatd
    0 102 1 0 0:02.14 ?? 0:03.03 /usr/sbin/coreaudiod
    501 107 61 0 1:26.50 ?? 8:04.58 /System/Library/CoreServices/Dock.app/Contents/MacOS/Dock -psn_0_32776
    501 108 61 0 0:10.55 ?? 0:20.29 /System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Support/ATSServer
    501 109 61 0 0:42.34 ?? 1:31.09 /System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer -psn_0_36873
    501 110 61 0 1:32.19 ?? 4:31.45 /System/Library/CoreServices/Finder.app/Contents/MacOS/Finder -psn_0_40970
    501 116 61 0 0:00.22 ?? 0:00.43 /Applications/iTunes.app/Contents/Resources/iTunesHelper.app/Contents/MacOS/iTunesHelper -psn_0_49164
    -2 118 1 0 0:00.01 ?? 0:00.01 /System/Library/PrivateFrameworks/MobileDevice.framework/Versions/A/Resources/usbmuxd -launchd
    501 125 61 0 0:24.70 ?? 1:41.04 /Library/PreferencePanes/Growl.prefPane/Contents/Resources/GrowlHelperApp.app/Contents/MacOS/GrowlHelperApp -psn_0_65552
    501 194 61 0 0:02.32 ?? 0:06.31 /System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell -psn_0_90134
    501 444 107 0 0:02.79 ?? 0:11.73 /System/Library/CoreServices/Dock.app/Contents/Resources/DashboardClient.app/Contents/MacOS/DashboardClient
    501 445 107 0 0:01.75 ?? 0:04.10 /System/Library/CoreServices/Dock.app/Contents/Resources/DashboardClient.app/Contents/MacOS/DashboardClient
    501 446 107 0 0:01.69 ?? 0:03.77 /System/Library/CoreServices/Dock.app/Contents/Resources/DashboardClient.app/Contents/MacOS/DashboardClient
    501 447 107 0 0:04.14 ?? 0:17.68 /System/Library/CoreServices/Dock.app/Contents/Resources/DashboardClient.app/Contents/MacOS/DashboardClient
    92 3302 1 0 0:09.36 ?? 0:12.13 /sbin/launchd
    501 23859 1 0 0:00.47 ?? 0:01.16 /System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mdworker MDSImporterWorker com.apple.Spotlight.ImporterWorker.501
    501 23903 61 0 0:01.80 ?? 0:23.25 /Applications/Utilities/Activity Monitor.app/Contents/MacOS/Activity Monitor -psn_0_8009635
    0 23904 23903 0 0:09.35 ?? 0:15.95 /Applications/Utilities/Activity Monitor.app/Contents/Resources/pmTool
    501 23936 1 0 0:00.86 ?? 0:01.90 /System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-helper -uuid D466D1B3-05B0-47C4-BA06-A6BE3A8A7562 -post-exec
    501 23937 23936 0 0:00.68 ?? 0:01.98 /System/Library/PrivateFrameworks/DiskImages.framework/Versions/A/Resources/DiskImages UI Agent.app/Contents/MacOS/DiskImages UI Agent
    0 23941 1 0 0:00.07 ?? 0:00.11 /System/Library/PrivateFrameworks/DiskImages.framework/Resources/hdiejectd
    95 23958 1 0 0:00.00 ?? 0:00.01 /System/Library/Frameworks/JavaVM.framework/Versions/A/Resources/bin/updateSharingD
    95 23962 1 0 0:00.05 ?? 0:00.07 /sbin/launchd
    501 24009 61 0 0:05.35 ?? 0:42.46 /Applications/ClamXav.app/Contents/MacOS/ClamXav -psn_0_8046508
    501 24036 24009 0 1:05.05 ?? 14:23.45 /usr/local/clamXav/bin/clamscan --stdout -v -r -i --no-mail /Applications /Developer /Library /System /Users
    501 24099 61 0 0:02.49 ?? 0:14.35 /Applications/Safari.app/Contents/MacOS/Safari -psn_0_8050605
    0 24113 18 0 0:00.01 ?? 0:00.03 /System/Library/CoreServices/SecurityAgent.app/Contents/Resources/authorizationhost
    92 24114 18 0 0:00.22 ?? 0:00.63 /System/Library/CoreServices/SecurityAgent.app/Contents/MacOS/SecurityAgent
    501 24180 61 0 0:00.18 ?? 0:01.08 /Applications/Utilities/Terminal.app/Contents/MacOS/Terminal -psn_0_8062896
    0 24181 24180 0 0:00.03 ttys000 0:00.04 login -pf glassJAw
    501 24182 24181 0 0:00.02 ttys000 0:00.02 -bash
    0 24202 24182 0 0:00.00 ttys000 0:00.00 ps -ef


    Does anything look wrong?
     
  2. CanadaRAM macrumors G5

    CanadaRAM

    Joined:
    Oct 11, 2004
    Location:
    On the Left Coast - Victoria BC Canada
    #2
    Yer joking, right?

    What did the Safari pop-up say? How about you give us that detail before asking us to examine 120 lines of output.

    Unless your nephew has an admin level password to your machine, then your chances of any malware being installed is approximately zero,
     
  3. apedosmil thread starter macrumors newbie

    Joined:
    Oct 27, 2007
    #3
    It was a ad pop up. and my nephew knows the root password.. I have it on a post it note :-/
     
  4. The General macrumors 601

    Joined:
    Jul 7, 2006
    #4
    OMG AN AD POP UP!

    Stop the presses! It's a virus!
     
  5. tdhurst macrumors 68040

    tdhurst

    Joined:
    Dec 27, 2003
    Location:
    Portland, OR
    #5
    Oh God

    Erase your computer. RIGHT NOW.

    And he doesn't have the root password, he has the admin password.

    And what good does it do to have it WRITTEN ON A POST IT NOTE NEXT TO THE COMPUTER?
     
  6. mac-convert macrumors 6502a

    mac-convert

    Joined:
    Nov 2, 2006
    Location:
    Are we there yet?
    #6
    I have mine as the screensaver - that way I don't have to worry about losing a posty note. :rolleyes:
     
  7. apedosmil thread starter macrumors newbie

    Joined:
    Oct 27, 2007
    #7
    The reason why I'm concerned is I left the computer without safari running a site, it was still open just no site was open.

    I leave my computer, 3 hours later I go back to it and I see a pop up.

    No one was on my computer in that 3 hours.

    This is why I'm concerned.

    Thanks
     
  8. Tallest Skil macrumors P6

    Tallest Skil

    Joined:
    Aug 13, 2006
    Location:
    1 Geostationary Tower Plaza
    #8
    Go to "Safari", "Block Pop-up Windows". That should take care of it.
     
  9. GGJstudios macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #9
    Well, as of this date, no viruses exist that affect the Mac OS. Your thread title would be more appropriate if it said something like "Safari pop-up" or "Safari question" rather than throwing the "Mal-Ware" or "Virus" words around. Welcome to the world of Mac: unlike Windows, when you have anything happen on your Mac that is unexpected or undesirable, the LAST possible explanation is a virus. And, if you're like me (and many other Mac users) the FIRST possible explanation is user error.
     
  10. tdhurst macrumors 68040

    tdhurst

    Joined:
    Dec 27, 2003
    Location:
    Portland, OR
    #10
    Stop

    It's a pop up. Enough of this nonsense about viruses and malware.
     
  11. tdhurst macrumors 68040

    tdhurst

    Joined:
    Dec 27, 2003
    Location:
    Portland, OR
    #11
    Nice try, but...

    Trusting.
     

Share This Page