URGENT. Is there an easy way to check a Mac for Spyware, Keylogger and Virus

[petalino]

My friends Macbook may be i serious trouble.

Someone has tried changing his password on FB several times yesterday. He received a weird webhosting invoice by regular post coming from Germany to New York asking him to pay it through a website. The invoice seems to be from a legitimate webhosting company. He went to the website, which turned out to be a bogus chinese language website. Of course the invoice if fake and he never used their services.

He entered his email there. Just an hour later someone tried changing his FB password.

I am suspecting the worse. Want to help him as much as I can.
I already asked him to disconnect from WIFI and bring the Macbook to me.

Besides the obvious, such as changing email logins and passwords, we need to do a thorough scan of his Mac for malware.

Any ideas or hints for a scan for Spyware, Keylogger and Virus, plus whatever else might be lurking?

 

[wgnoyes]

Avast for Mac, maybe....?

 

[northernmunky]

Avast is good, I'm using Virus Barrier myself.

There arent exactly very many cases of keyloggers and the like on the Mac platform. You have to input a root password to get anything like that installed on a Mac. Probably more likley hes fallen for a phishing site and he uses the same password for everything, resulting in them gaining access to his FB.

 

[satcomer]

The cool program MailwareBytes is free?

 

[hachre]

I say we take off and nuke the site from orbit. It's the only way to be sure...

 

[ocabj]

Besides the obvious, such as changing email logins and passwords, we need to do a thorough scan of his Mac for malware.

Any ideas or hints for a scan for Spyware, Keylogger and Virus, plus whatever else might be lurking?

1. Multi Factor Authentication.

2. Reformat.

 

[thomasareed]

Someone has tried changing his password on FB several times yesterday.

Unless your friend downloaded something from that site, then went and installed it, it's very unlikely that he has a keylogger installed, or any other kind of malware. Most likely, what is happening is that he entered his e-mail address on an unsavory site, and now the people behind that site are trying to get into his Facebook account.

You said that someone had "tried" changing his password... were they successful? If not, he should probably just change his Facebook password (and his e-mail password to be on the safe side), make those passwords long and strong, and enable two-factor authentication on Facebook:

https://www.facebook.com/notes/facebook-engineering/introducing-login-approvals/10150172618258920/

If it would make him feel better, Malwarebytes Anti-Malware for Mac is free and scans quickly, and should detect any known keyloggers if they're installed.

Thomas Reed
Director of Mac Offerings, Malwarebytes

 

[Shanghaichica]

I'm using Bit Defender for Mac. It works pretty well.