MBP Virus-"MacSecurity", Please Help

[M-B-P]

I was just browsing, looking for a new wallpaper using google images. I searched for "nyc penthouse wall papers" and was looking through wallpapers. I clicked on one of the links for the wallpaper webpage, I was brought to a webpages saying that my "Apple" computer was infected with X number of viruses and prompting me to install a new virus protector. I knew that it was fake and closed it immediately.

However, to my surprise, Safari download windows popped up, and it downloaded "MacSecurity.mpkg", as shown in the screenshot. Then an installer windows popped up prompting me to continue with the installation. I immediately quit the installer.

It googled "MacSecurity" and found the following link.

http://www.securemac.com/MAC-Defender-Rouge-Anti-Virus-Analysis-Removal.php

I am now concerned, since safari downloaded the mkpg, and it launched, does that mean my Mac is now infected? Or would it have only been infected if I continued the installation and entered my password?

Should I just delete the mpkg or take some other action. As a precaution, I am currently scanning my Mac using iAntiVirus. Anything else I should do?

 

[GGJstudios]

This isn't a virus. There has never been a virus in the wild that affects Mac OS X since it was released 10 years ago. The handful of trojans that exist can be easily avoided with some education and common sense and care in what software you install:

Mac Virus/Malware Info​

New 'MACDefender' Malware Threat for Mac OS X

I am now concerned, since safari downloaded the mkpg, and it launched, does that mean my Mac is now infected? Or would it have only been infected if I continued the installation and entered my password?

Should I just delete the mpkg or take some other action. As a precaution, I am currently scanning my Mac using iAntiVirus. Anything else I should do?

Just delete the downloaded file. It can't infect your Mac unless you continue with the installation. Uncheck "Open "safe" files after downloading" in your Safari Preferences.

Read the Virus/Malware link, including the information there about iAntiVirus.

 

[SilentPanda]

The site you linked to says you have to enter your password. Just delete the files from your downloads folder.

 

[M-B-P]

Thanks, I deleted it and unchecked it automatically open safe file on Safari.

I think everybody should be more cautious, because the image I clicked on was not pornographic, nor did it look like it would lead to a malicious link. It blent right in with the other images.

 

[GGJstudios]

I think everybody should be more cautious, because the image I clicked on was not pornographic, nor did it look like it would lead to a malicious link. It blent right in with the other images.

Yes, the thread I linked to explains the behavior. It's only a threat if you follow through with the installation.

 

[jscarf]

i just got this too. it was in my downloads folder before I could blink and figure out what was going on.

I was looking up a picture of fault lines in Europe and POW! right in the kisser! ha

Is this a new thing? I deleted it etc..but wow..first time i've ever had an intrusion like that on my Mac

 

[GGJstudios]

Is this a new thing? I deleted it etc..but wow..first time i've ever had an intrusion like that on my Mac

Yes, it's new, just announced a few days ago.

 

[Criticalmass]

This isn't a virus. There has never been a virus in the wild that affects Mac OS X since it was released 10 years ago. The handful of trojans that exist can be easily avoided with some education and common sense and care in what software you install:

Mac Virus/Malware Info​

New 'MACDefender' Malware Threat for Mac OS X

Just delete the downloaded file. It can't infect your Mac unless you continue with the installation. Uncheck "Open "safe" files after downloading" in your Safari Preferences.

Read the Virus/Malware link, including the information there about iAntiVirus.

It's coming. Sooner or later there will be viruses for Mac O.S. It's an O.S., not God.

The first Worm written was for Unix, which is what the Mac O.S. is based on.

 

[GGJstudios]

It's coming. Sooner or later there will be viruses for Mac O.S. It's an O.S., not God.

The first Worm written was for Unix, which is what the Mac O.S. is based on.

No one is saying there would never be a virus for Mac OS. In fact, OS 9 and earlier did have viruses. The first virus in the wild was written for Apple computers. The facts that I stated are still true, as of this time. If you took the time to read the Mac Virus/Malware Info link I posted, you would know that.

 

[brf09]

I was in the process of downloading something else, got hasty, and installed the MacSecurity... any advice? I am running iVirus...

 

[GGJstudios]

I was in the process of downloading something else, got hasty, and installed the MacSecurity... any advice? I am running iVirus...

So you entered your admin password and your credit card information? You should remove MacSecurity and iVirus. The only effective method for complete app removal is manual deletion:

Best way to FULLY DELETE a program​

 

[Lorelai]

I was looking for a site, clicked on a link in the google search for peekyou and the next thing I know, automatic download and the installer launches. I quit the installer, "secure deleted" the file from the trash and unclicked the "open safe files" link. Anything else I need to do? (The file on my computer wasn't called MacDefender or MacSecurity, but it was in a similar vein).

I freaked out for a second when I saw it happened and I want to make sure I have dealt with everything I need to. As I log in to secure sites with credit cards and banking info, I want my computer to be as secure as humanly possibly. Is there an anti-virus I should buy? I feel like running to the Apple Store and grabbing all the anti-virus programs available and turning my Mac into a fortress!

I am on an iMac, running Mac OS X: 10.5.8.

Thanks!

 

[GGJstudios]

I was looking for a site, clicked on a link in the google search for peekyou and the next thing I know, automatic download and the installer launches. I quit the installer, "secure deleted" the file from the trash and unclicked the "open safe files" link. Anything else I need to do?

No, you're fine if you did that.

(The file on my computer wasn't called MacDefender or MacSecurity, but it was in a similar vein).

The app name and the file name has several variations.

Is there an anti-virus I should buy?

No, you don't need antivirus to protect your Mac. Read the 2nd post in this thread, and click on and read the Mac Virus/Malware Info link I posted.

 

[brf09]

So you entered your admin password and your credit card information? You should remove MacSecurity and iVirus. The only effective method for complete app removal is manual deletion:

Best way to FULLY DELETE a program​

Just entered my admin password, but not my credit card info. So is there any risk that I compromised any information? I never entered my credit card info after the MacSecurity was installed. I did enter my admin password in order to install a new antivirus program.

I put the MacSecurity application and it's installer file in the trash and emptied my trash. That should take care of it??

 

[GGJstudios]

Just entered my admin password, but not my credit card info.

Remove it using the instructions I gave. Before you enter your admin password for anything, I encourage you to think as carefully as you would before entering your credit card or social security number.