MBP Virus-"MacSecurity", Please Help

Discussion in 'Mac Basics and Help' started by M-B-P, May 6, 2011.

  1. M-B-P macrumors regular

    Joined:
    May 15, 2010
    #1
    I was just browsing, looking for a new wallpaper using google images. I searched for "nyc penthouse wall papers" and was looking through wallpapers. I clicked on one of the links for the wallpaper webpage, I was brought to a webpages saying that my "Apple" computer was infected with X number of viruses and prompting me to install a new virus protector. I knew that it was fake and closed it immediately.

    However, to my surprise, Safari download windows popped up, and it downloaded "MacSecurity.mpkg", as shown in the screenshot. Then an installer windows popped up prompting me to continue with the installation. I immediately quit the installer.

    It googled "MacSecurity" and found the following link.

    http://www.securemac.com/MAC-Defender-Rouge-Anti-Virus-Analysis-Removal.php

    I am now concerned, since safari downloaded the mkpg, and it launched, does that mean my Mac is now infected? Or would it have only been infected if I continued the installation and entered my password?

    Should I just delete the mpkg or take some other action. As a precaution, I am currently scanning my Mac using iAntiVirus. Anything else I should do?
     

    Attached Files:

  2. GGJstudios macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #2
    This isn't a virus. There has never been a virus in the wild that affects Mac OS X since it was released 10 years ago. The handful of trojans that exist can be easily avoided with some education and common sense and care in what software you install:

    New 'MACDefender' Malware Threat for Mac OS X
    Just delete the downloaded file. It can't infect your Mac unless you continue with the installation. Uncheck "Open "safe" files after downloading" in your Safari Preferences.

    Read the Virus/Malware link, including the information there about iAntiVirus.
     
  3. SilentPanda Moderator emeritus

    SilentPanda

    Joined:
    Oct 8, 2002
    Location:
    The Bamboo Forest
    #3
    The site you linked to says you have to enter your password. Just delete the files from your downloads folder.
     
  4. M-B-P thread starter macrumors regular

    Joined:
    May 15, 2010
    #4
    Thanks, I deleted it and unchecked it automatically open safe file on Safari.

    I think everybody should be more cautious, because the image I clicked on was not pornographic, nor did it look like it would lead to a malicious link. It blent right in with the other images.
     
  5. GGJstudios macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #5
    Yes, the thread I linked to explains the behavior. It's only a threat if you follow through with the installation.
     
  6. jscarf macrumors newbie

    Joined:
    Oct 24, 2010
    Location:
    Vancouver, BC
    #6
    i just got this too. it was in my downloads folder before I could blink and figure out what was going on.

    I was looking up a picture of fault lines in Europe and POW! right in the kisser! ha

    Is this a new thing? I deleted it etc..but wow..first time i've ever had an intrusion like that on my Mac
     
  7. GGJstudios macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #7
    Yes, it's new, just announced a few days ago.
     
  8. Criticalmass macrumors member

    Criticalmass

    Joined:
    Apr 12, 2011
    Location:
    Everywhere
    #8
    It's coming. Sooner or later there will be viruses for Mac O.S. It's an O.S., not God.

    The first Worm written was for Unix, which is what the Mac O.S. is based on.
     
  9. GGJstudios macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #9
    No one is saying there would never be a virus for Mac OS. In fact, OS 9 and earlier did have viruses. The first virus in the wild was written for Apple computers. The facts that I stated are still true, as of this time. If you took the time to read the Mac Virus/Malware Info link I posted, you would know that.
     
  10. brf09 macrumors newbie

    Joined:
    May 7, 2011
    #10
    I was in the process of downloading something else, got hasty, and installed the MacSecurity... any advice? I am running iVirus...
     
  11. GGJstudios macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #11
    So you entered your admin password and your credit card information? You should remove MacSecurity and iVirus. The only effective method for complete app removal is manual deletion:
     
  12. Lorelai macrumors member

    Joined:
    Jul 16, 2006
    Location:
    USA
    #12
    I was looking for a site, clicked on a link in the google search for peekyou and the next thing I know, automatic download and the installer launches. I quit the installer, "secure deleted" the file from the trash and unclicked the "open safe files" link. Anything else I need to do? (The file on my computer wasn't called MacDefender or MacSecurity, but it was in a similar vein).

    I freaked out for a second when I saw it happened and I want to make sure I have dealt with everything I need to. As I log in to secure sites with credit cards and banking info, I want my computer to be as secure as humanly possibly. Is there an anti-virus I should buy? I feel like running to the Apple Store and grabbing all the anti-virus programs available and turning my Mac into a fortress! :eek:

    I am on an iMac, running Mac OS X: 10.5.8.

    Thanks! :)
     
  13. GGJstudios macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #13
    No, you're fine if you did that.
    The app name and the file name has several variations.
    No, you don't need antivirus to protect your Mac. Read the 2nd post in this thread, and click on and read the Mac Virus/Malware Info link I posted.
     
  14. brf09, May 7, 2011
    Last edited: May 7, 2011

    brf09 macrumors newbie

    Joined:
    May 7, 2011
    #14

    Just entered my admin password, but not my credit card info. So is there any risk that I compromised any information? I never entered my credit card info after the MacSecurity was installed. I did enter my admin password in order to install a new antivirus program.

    I put the MacSecurity application and it's installer file in the trash and emptied my trash. That should take care of it??
     
  15. GGJstudios macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #15
    Remove it using the instructions I gave. Before you enter your admin password for anything, I encourage you to think as carefully as you would before entering your credit card or social security number.
     

Share This Page