Mac Virus???

Discussion in 'macOS' started by IMcD23, Aug 4, 2007.

  1. IMcD23 macrumors regular

    IMcD23

    Joined:
    Aug 4, 2007
    Location:
    Iowa, United States, Earth, Milky Way, . . .
    #1
    Yesterday, I was working and came by my computer and there was a progress bar on the screen. I assumed it was an automated update downloading, so I ignored it and continued my work. This morning, there was a web site open: http://www.123.com/ . I also saw that some of my files were different. I closed everything and shut down my computer. Now, what do I do??? What is wrong??? Please Help!!!

    EDIT: I have a 17-inch iMac Core 2 Duo, 1GB ram, Mac OS X 10.4.10
     
  2. AdeFowler macrumors 68020

    AdeFowler

    Joined:
    Aug 27, 2004
    Location:
    England
    #2
    Firstly never ignore a progress bar... at the very least look to see what it's doing. Secondly, what files have been modified and how? That website looks very innocent so I doubt you have a problem.
     
  3. IMcD23 thread starter macrumors regular

    IMcD23

    Joined:
    Aug 4, 2007
    Location:
    Iowa, United States, Earth, Milky Way, . . .
    #3
    A Text file that I created elsewhere was in a word document named rtx.doc

    I also went to the web site and it is completely different than what it was before, it looked like Chinese or Japanese. Do you think it has been masked?
     
  4. Scarlet Fever macrumors 68040

    Scarlet Fever

    Joined:
    Jul 22, 2005
    Location:
    Bookshop!
  5. rijiMacDij macrumors regular

  6. IMcD23 thread starter macrumors regular

    IMcD23

    Joined:
    Aug 4, 2007
    Location:
    Iowa, United States, Earth, Milky Way, . . .
    #6
    No, it's just me.
     
  7. Scarlet Fever macrumors 68040

    Scarlet Fever

    Joined:
    Jul 22, 2005
    Location:
    Bookshop!
    #7
    Actually, talking about Microsoft, have you used any MS Office documents with Macros in them? Macros have been known to cause problems in the past.
     
  8. IMcD23 thread starter macrumors regular

    IMcD23

    Joined:
    Aug 4, 2007
    Location:
    Iowa, United States, Earth, Milky Way, . . .
    #8
    I don't think so, i'll check.

    EDIT: There are a bunch of them when i go into word and click tools --> macro --> macros. They are: AddToolbar, convertToPDF, DeleteTheFile, Main, popSaveAsDialog, reloadDoc, reloadDocPatched, startMail, startPrint. Macro created 8/4/07 by (My Name)
     
  9. IMcD23 thread starter macrumors regular

    IMcD23

    Joined:
    Aug 4, 2007
    Location:
    Iowa, United States, Earth, Milky Way, . . .
    #9
    !!!!!!!!!!!!

    :eek: I am sure someone is controlling my computer now, I was working on it again and my cursor was moving around and clicking on stuff. It was freaky!!! What should I do??? :confused:
     
  10. volvoben macrumors 6502

    Joined:
    Feb 7, 2007
    Location:
    nowhere fast
    #10
    Well, to be sure that no one can contact your machine, just unplug the ethernet or turn off the airport/unplug the router/modem. This is the only way anyone could be controlling your machine, so cut off that link first, then worry about what might be wrong.
     
  11. IMcD23 thread starter macrumors regular

    IMcD23

    Joined:
    Aug 4, 2007
    Location:
    Iowa, United States, Earth, Milky Way, . . .
    #11
    What I Did

    I turned off the internet and did a virus scan with ClamXav and it found 5 trojans and 1 dialer in the \Users\<My Username>\Library\Application Support\Crossover directory do you think that is it?
     
  12. Pucas macrumors member

    Pucas

    Joined:
    Jul 25, 2007
    #12
    omg.. It sounds very sick :s

    I was told that mac couldn't get Virus.. So this might be wrong ??
     
  13. IMcD23 thread starter macrumors regular

    IMcD23

    Joined:
    Aug 4, 2007
    Location:
    Iowa, United States, Earth, Milky Way, . . .
    #13
    It was probably an app I installed in crossover. If you don't know what it is, check out http://www.codeweavers.com/
     
  14. Killyp macrumors 68040

    Killyp

    Joined:
    Jun 14, 2006
    #14
    A Mac cannot get a virus, until you start trying to do things PC style, ie, installing Microsoft Office, or running CrossOver (which is why I don't do either any more).

    PCs get viruses, and Macs get viruses if they try and be PCs. That's the easiest way of looking at it.
     
  15. IMcD23 thread starter macrumors regular

    IMcD23

    Joined:
    Aug 4, 2007
    Location:
    Iowa, United States, Earth, Milky Way, . . .
    #15
    Yeah!!!

    Nothing out of the ordinary has happened for a while!!
     
  16. polycat33 macrumors 6502

    Joined:
    Jul 1, 2007
    Location:
    Alexandria, VA
    #16
    How do you disable Macros in Word? That's the first program I bought cause I wanted to be able to continue using it, I have so many documents in Word and stuff... but I sure don't want to open myself up to viruses!
     
  17. IMcD23 thread starter macrumors regular

    IMcD23

    Joined:
    Aug 4, 2007
    Location:
    Iowa, United States, Earth, Milky Way, . . .
    #17
    Macros

    I'm pretty sure that when you open one with macros, a box comes up and asks you if you want to disable macros for that document.
     
  18. polycat33 macrumors 6502

    Joined:
    Jul 1, 2007
    Location:
    Alexandria, VA
    #18
    That's right, I've seen that before - never knew what to answer though. I was hoping there was a way to disable it in preferences so that it applies to all documents you open without asking. But I can live with the popup now that I know the right choice.
     
  19. xUKHCx Administrator emeritus

    xUKHCx

    Joined:
    Jan 15, 2006
    Location:
    The Kop
    #19
    There is a way at least on window to do this, will check it out when i'm back at my mac.
     
  20. IMcD23 thread starter macrumors regular

    IMcD23

    Joined:
    Aug 4, 2007
    Location:
    Iowa, United States, Earth, Milky Way, . . .
    #20
    I'm looking on my mac and can't find anything, maybe in Jan. 2008 when office 2008 comes out for mac, there will be a way. :confused:
     

Share This Page