URGENT. Is there an easy way to check a Mac for Spyware, Keylogger and Virus

Discussion in 'Mac Basics and Help' started by petalino, Jan 5, 2016.

  1. petalino, Jan 5, 2016
    Last edited: Jan 5, 2016

    petalino macrumors regular

    Joined:
    Nov 21, 2010
    #1
    My friends Macbook may be i serious trouble.

    Someone has tried changing his password on FB several times yesterday. He received a weird webhosting invoice by regular post coming from Germany to New York asking him to pay it through a website. The invoice seems to be from a legitimate webhosting company. He went to the website, which turned out to be a bogus chinese language website. Of course the invoice if fake and he never used their services.

    He entered his email there. Just an hour later someone tried changing his FB password.

    I am suspecting the worse. Want to help him as much as I can.
    I already asked him to disconnect from WIFI and bring the Macbook to me.

    Besides the obvious, such as changing email logins and passwords, we need to do a thorough scan of his Mac for malware.

    Any ideas or hints for a scan for Spyware, Keylogger and Virus, plus whatever else might be lurking?
     
  2. wgnoyes macrumors 6502

    Joined:
    Jul 20, 2011
  3. northernmunky macrumors 6502a

    northernmunky

    Joined:
    Jan 19, 2007
    Location:
    London, Taipei
    #3
    Avast is good, I'm using Virus Barrier myself.

    There arent exactly very many cases of keyloggers and the like on the Mac platform. You have to input a root password to get anything like that installed on a Mac. Probably more likley hes fallen for a phishing site and he uses the same password for everything, resulting in them gaining access to his FB.
     
  4. satcomer, Jan 5, 2016
    Last edited: Jan 7, 2016
  5. hachre macrumors 6502a

    hachre

    Joined:
    Sep 26, 2007
    #5
    I say we take off and nuke the site from orbit. It's the only way to be sure...
     
  6. ocabj macrumors 6502a

    ocabj

    Joined:
    Jul 2, 2009
    #6
    1. Multi Factor Authentication.

    2. Reformat.
     
  7. thomasareed macrumors member

    thomasareed

    Joined:
    Aug 24, 2015
    #7
    Unless your friend downloaded something from that site, then went and installed it, it's very unlikely that he has a keylogger installed, or any other kind of malware. Most likely, what is happening is that he entered his e-mail address on an unsavory site, and now the people behind that site are trying to get into his Facebook account.

    You said that someone had "tried" changing his password... were they successful? If not, he should probably just change his Facebook password (and his e-mail password to be on the safe side), make those passwords long and strong, and enable two-factor authentication on Facebook:

    https://www.facebook.com/notes/facebook-engineering/introducing-login-approvals/10150172618258920/

    If it would make him feel better, Malwarebytes Anti-Malware for Mac is free and scans quickly, and should detect any known keyloggers if they're installed.

    Thomas Reed
    Director of Mac Offerings, Malwarebytes
     
  8. Shanghaichica macrumors 603

    Shanghaichica

    Joined:
    Apr 8, 2013
    Location:
    UK
    #8
    I'm using Bit Defender for Mac. It works pretty well.
     

Share This Page