Think my Mac is hacked/spyware on it....

Discussion in 'macOS' started by Sean56, Oct 24, 2009.

  1. Sean56 macrumors newbie

    Aug 17, 2009
    In my network connections it is showing that I am linked to two different connections, ones that I cannot disconnect from. One is listed as "" and the other is "mansef". I've gone over my netstats, and I am constantly looking at my activity monitor, I recently installed istat to keep track. If anyone has any good ideas of how to disconnect these, it would be a great help.

    Attached Files:

  2. Hellhammer Moderator


    Staff Member

    Dec 10, 2008
    Take a look at your Safety preferences from System Prefs. Do you have firewall enabled?
  3. Sean56 thread starter macrumors newbie

    Aug 17, 2009
    firewall is on

    firewall is on, no and incoming connections are not allowed
  4. brasscat macrumors 6502


    Jun 9, 2007
    Dallas, Texas
    I'd first try disabling all sharing options in Prefs. Then look at your network adapters for any connection that looks out of place (like an adapter that shouldn't exist).

    I'd also drop to a terminal and issue an "ifconfig" and just make sure all the network adapters shown there are represented in the network settings prefs. If there's an extra adapter, manually try removing it by issuing a "sudo ifconfig delete [interface name]" command.

    Also, turn off ipv6 support if you're not using it (it's likely you're not).

    When that's all done with, reboot, and see if the networks still show. It's possible that your network actually shares a local community network (like if you live in an apartment building), and these networks could just others Macs in your local network.

    It's interesting that one of the networks contains the work "panther," as the first and last time any Mac I've owned got hacked was running Panther... which begs the question as to what OS you're running.

    If you're connecting your Mac straight into a cable modem (or the wall via ethernet), you might consider getting an access point or better yet an Airport (or Airport express). Connecting to the Internet via an access point adds connection abstraction and considerable security will almost no effort.

    More details about your network would be helpful, and you might even try calling your ISP and asking their tech support to look into it.

    Good luck.
  5. angelwatt Moderator emeritus


    Aug 16, 2005
    Those are machines on your network from the looks of it. Either your own machines or someone is leeching off your wireless. I don't think it's any form of spying though. Make sure you're wireless is set for WPA2 encryption if it has it. WEP encryption is easily hacked so avoid that. As long as you're not sharing anything the other machines can't read you're stuff (in most cases).

Share This Page