spyware or keylogger?

Discussion in 'iMac' started by nunes013, Jun 3, 2011.

  1. nunes013 macrumors 65816

    nunes013

    Joined:
    May 24, 2010
    Location:
    Connecticut
    #1
    Ok, im trying to help my friend who has an iMac running leopard. hes texting me with info so ill try my best. he says he thinks he has a keylogger or something. whenever he tries to log into fb or a site he says a security verification pops up saying the website is fake and if he wants to continue. he clicks no and then he refreshes the page a few times and eventually safari stops working and he has to restart his computer. he said he looked at netstat in terminal and said it says there are foreign addresses. it only happens on safari though. he ran two different virus scans and both came up with nothing. any ideas.
     
  2. GGJstudios macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #2
    It's most likely not malware or a keylogger, unless he's actively installed something flaky or given someone access to his Mac to do so. He should try resetting Safari, clearing cookies and cache. Also, check DNS settings both on his Mac and his router. Also, a restart wouldn't hurt.

    No viruses exist in the wild that can run on Mac OS X, and there never have been any, since it was released 10 years ago. The handful of trojans that exist can be easily avoided with some basic education, common sense and care in what software you install:
    The first section of that link deals specifically with the MacDefender/MacSecurity/MacProtector/MacGuard issue, which may or may not apply. I encourage you to read it.

    Read the section "Why am I being redirected to other sites?" in the link above.
     
  3. nunes013 thread starter macrumors 65816

    nunes013

    Joined:
    May 24, 2010
    Location:
    Connecticut
    #3
    cool, thanks, he is trying all those. ill post back when he tells me what he did but it might be till tomorrow because its 1 am here lol.

    but i did learn something very interesting from the post. i use sophos to scan every few months but didnt know about the exploit. thats good information. i always wanted an antivirus on my mac for some added protection. time to look into the others that were on there :)
     
  4. MacmancUK macrumors member

    Joined:
    May 7, 2011
  5. Power Mac macrumors newbie

    Joined:
    Jun 4, 2011
    #5
    Only in Imaginationland.
     
  6. GGJstudios macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #6
    You obviously don't know about malware as it relates to Mac OS X. Read the link I posted and educate yourself.
     
  7. Power Mac macrumors newbie

    Joined:
    Jun 4, 2011
    #7
    I suggest you educate yourself on what links contain accurate information, then report back to us.
     
  8. GGJstudios macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #8
    The link I posted contains nothing but facts. I also suggest, since you are new to this forum, that you read a few dozen of the existing virus/malware threads where this has been discussed ad nauseam. There are no viruses in the wild that can affect Mac OS X, and there never have been any since it was released 10 years ago. You are welcome to attempt to prove otherwise by simply naming one such virus, but I can save you time. No one has ever been able to name one, since none exist. Before you make your attempt, read the link I posted for accurate definitions of what is a virus, a trojan, etc.
     
  9. Pintail macrumors member

    Joined:
    Apr 20, 2011
    #9
    Dang, I think I just stepped in troll poop!

    OP - let us know what happened ok? Love to know if those steps worked for you/him.
     
  10. Badger^2 macrumors 68000

    Badger^2

    Joined:
    Oct 29, 2009
    Location:
    Sacramento
    #10
    As a second opinion -- GG is 100% correct.

    Your buddy doesnt have a virus, or a keylogger or even malware -- the first one doesnt exist, he would have to give permission to install the second and his symptoms are not what the MacDefender malware does. (it only asks for money)

    Apple has already issued a patch for MacDefender, so if everyone installs that -- now even thats no out there.

    something else going on.
     
  11. GGJstudios macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #11
    Most keyloggers will not appear in Activity Monitor and most users can't even recognize names of legitimate processes, so that approach won't work.

    Here are more useful steps:

    1. Did you install a keylogger app on your Mac?
    2. Did you give someone else access to your Mac so they could install a keylogger?
    If the answers to those two questions is "no", you don't have a keylogger on your Mac.
     
  12. macsforever macrumors member

    macsforever

    Joined:
    Jun 7, 2014
    #12
    But he's POWERMAC he he... he has the POWER he he.
     
  13. GGJstudios macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #13
    3 year old thread. That user is long gone.
     

Share This Page