Virus curiosity

[GGJstudios]

I took some screenshots. I changed the DNS to what was explained in the earlier post, but the redirection is still happening. Is the issue something else?

You should add the secondary OpenDNS server. Just click the "+" and add 208.67.220.220

Also, reset your browser, clearing your cookies and cache. Also check your router to see what DNS servers you have set there.

 

[mckenna3]

google being redirected to facebook

I randomly started running into the issue of google being redirected to facebook. This strictly affected my ability to access google's search engine (I was able to access gmail and other google pages fine). Following the steps below from this thread, I was unable to remove the greyed out DNS servers, but after adding the primary and secondary Google DNS servers, I was no longer redirected when accessing Google's search engine. I just want to make sure whatever issue initially caused the redirect to begin is now resolved and that no further action is required.

Anyone have input on what could've initially caused the redirect, and do I need to take any further action?


WHY AM I BEING REDIRECTED TO OTHER SITES?
Some users experience a problem with being directed automatically to sites that they didn't intend to visit. This may also occur when searching with Google. You don't have a virus! It's a problem with your DNS settings, either in your Mac or in your router. Try resetting your router. Here's how to fix the problem in Mac OS X:
Quote:
Go to System Preferences > Network
There you will see a padlock icon in the lower left corner and the note "Click the lock to make changes".
Click the lock and enter your administrator password, so you can change DNS servers
with your network selected on the left column, click the "Advanced" button
Click the DNS tab to see the listing of your DNS Servers
If any of the DNS servers are greyed out after entering your admin password, refer to this: 10.5: Disable DHCP-specified DNS servers
Click the "-" icon to remove all existing DNS servers
Click the "+" icon to add the following servers.
You may choose either OpenDNS or Google servers (not both sets):

OpenDNS:
Primary DNS Server: 208.67.222.222
Secondary DNS Server: 208.67.220.220

Google:
Primary DNS Server: 8.8.8.8
Secondary DNS Server: 8.8.4.4
When you've completed your changes, click "OK" to close the Advanced settings window
Click "Apply" on the Network window to save your changes

 

[ravenvii]

[off topic]
I love how the Symantec FAQ above gives a template for a virus hoax email. I created my own!


If you receive an email titled "TRY AN OS X VIRUS -- FREE!", do not open it!
Delete it immediately!
It contains the FREE OS X VIRUS DEMO! virus.
It will delete everything on your hard drive and infect your body with the FREE OS X VIRUS DEMO!
This virus was announced today by Dr. Kim of MacRumours Medical Associates.
Forward this warning to everyone you know


😀
[/off topic]

 

[doodsbang]

Please update this and educate people.

You DON'T have a virus on your Mac!

I know this is an old post but it does come up in searches.
This post is false and misleading. It's mixing semantics with disinformation. A virus is a virus no matter how rare or prevalent it is.

For the average person there is no difference between malware, worms, trojans and viruses. The end result is (in most cases) the same: the computer needs to be cleaned and most likely needs a full OS re-install.

Here's a link to a real Mac virus (polymorphic and encrypted): http://www.symantec.com/security_response/writeup.jsp?docid=2000-122112-5959-99

Please do users a service and tell them that they need AntiVirus software in addition to common sense. This applies not just to Windows but Mac and all other *NIX flavors (Unix, Linux) as well.

In the early days I thought that Linux was immune too - until my Fedora got a rootkit. Nothing worse than resetting all your passwords everywhere and worrying that somebody could have access to all your online accounts.

 

[GGJstudios]

You DON'T have a virus on your Mac!

I know this is an old post but it does come up in searches.
This post is false and misleading. It's mixing semantics with disinformation. A virus is a virus no matter how rare or prevalent it is.

It is neither false nor misleading, especially if you read it in context. There is no disinformation at all in that statement. You conveniently forgot to read the rest of that post, as the very next line is:

If you want to know why this is true, read on.

For the average person there is no difference between malware, worms, trojans and viruses. The end result is (in most cases) the same: the computer needs to be cleaned and most likely needs a full OS re-install.

There is a difference between various form of malware, whether a user acknowledges that or not. The difference determines the defense required. The end result is NOT that the OS needs to be reinstalled.

Here's a link to a real Mac virus (polymorphic and encrypted): http://www.symantec.com/security_response/writeup.jsp?docid=2000-122112-5959-99

Again, you've read out of context. There were viruses in the wild that affected Mac OS 9 and earlier versions, as stated in the rest of the post that you selectively quoted. Such viruses, including the one you linked to, cannot affect Mac OS X. There has never been a true virus in the wild that affects Mac OS X.

Please do users a service and tell them that they need AntiVirus software in addition to common sense.

Antivirus software offers no additional protection that isn't already available by practicing safe computing.

In the early days I thought that Linux was immune too

As stated many times, no OS is immune to malware.

Macs are not immune to malware, but no true viruses exist in the wild that can run on Mac OS X, and there never have been any since it was released over 12 years ago. The only malware in the wild that can affect Mac OS X is a handful of trojans, which can be easily avoided by practicing safe computing (see below). 3rd party antivirus apps are not necessary to keep a Mac malware-free, as long as a user practices safe computing, as described in the following link.

​

Read the What security steps should I take? section of the Mac Virus/Malware FAQ for tips on practicing safe computing.

When the MR Guides are back online, read the Mac Virus/Malware FAQ. Until the MR Guides are available, you can read most of the same info in the Mac Virus/Malware Info post, on which the FAQ is based.

 

[chown33]

Here's a link to a real Mac virus (polymorphic and encrypted): http://www.symantec.com/security_response/writeup.jsp?docid=2000-122112-5959-99

Please do users a service and tell them that they need AntiVirus software in addition to common sense. This applies not just to Windows but Mac and all other *NIX flavors (Unix, Linux) as well.

In the early days I thought that Linux was immune too - until my Fedora got a rootkit. Nothing worse than resetting all your passwords everywhere and worrying that somebody could have access to all your online accounts.

The virus you linked to doesn't run on Mac OS X. At all.

At best, it only runs on Mac OS 9 or earlier, or under Mac OS 9 in the Classic Environment.

I feel confident in asserting this because of the described manner of transmission and infection: MENU and MDEF resources, or INIT resources in the System file, or a System Extension. These resources and files are simply not used in any way by Mac OS X, and they never were. The OS X system file(s) are completely different.

Furthermore, if one were to obtain a program that was already infected by that virus, it wouldn't run at all on any recent OS X system. To run on OS X at all, the system would need the Classic Environment, which only existed thru 10.4 Tiger. So you'd have to be running Tiger, and launch the Classic environment, in order to have the virus run. Or you'd have to be booted into Mac OS 9 on a fairly old Mac.

 

[2012Tony2012]

You say, "You can't infect your Mac simply by visiting a website...You should, however, exercise reasonable caution when doing these things.", but WHY exercise caution when you say you can't infect your Mac with anything by visiting a website?

You either can or can't get something nasty happening to a Mac by visiting the worse website out there? SO which is it? Is there a single website on the internet that can do something bad to Mac?

 

[pdjudd]

You say, "You can't infect your Mac simply by visiting a website...You should, however, exercise reasonable caution when doing these things.", but WHY exercise caution when you say you can't infect your Mac with anything by visiting a website?

You either can or can't get something nasty happening to a Mac by visiting the worse website out there? SO which is it? Is there a single website on the internet that can do something bad to Mac?

Because websites can trick you into doing things that can harm your Mac. The websites themselves cannot harm you, but if they tell you do download and an application to view a free cat video that infects your machine with malware (not a virus) that can be bad.

Recommending caution is a platform agnostic suggestion that has nothing to do with Virus' - which cannot infect your Mac. Nobody says that you can't gt your Mac infected - in fct there are several cases of Malware infecting Macs out there.

You are misunderstanding the message. In no way does it say what you think it does.

 

[GGJstudios]

You say, "You can't infect your Mac simply by visiting a website...You should, however, exercise reasonable caution when doing these things.", but WHY exercise caution when you say you can't infect your Mac with anything by visiting a website?

You either can or can't get something nasty happening to a Mac by visiting the worse website out there? SO which is it? Is there a single website on the internet that can do something bad to Mac?

There were cases in the past where visiting a website could trigger the automatic download of a Trojan, which could be executed if someone had the setting in Safari selected to open "safe" files after downloading. That download was made possible by exploiting a flaw in the Java functionality of Safari. However, those of us practicing safe computing already had Java disabled in Safari, as well as the automatic opening of downloaded files, so we were fully protected from such exploits. Since that time, updates have closed the door on such exploits.

There have also been sites in the past that were malicious in intent, and would trigger scripts that would launch multiple applications on the Mac simultaneously, creating an extreme annoyance to the point where a reboot was necessary, even though they could not infect the Mac with malware.

While there are currently no exploits that can infect your Mac simply by visiting a website, it still makes sense to exercise caution in the type of sites that you visit.

As stated earlier, Macs are not immune to malware. There simply are no viruses in the wild that can infect OS X, and only a handful of Trojans, all of which can be avoided by practicing safe computing. However there is no defense available that protects against user ignorance or carelessness.

 

[2012Tony2012]

Because websites can trick you into doing things that can harm your Mac. The websites themselves cannot harm you, but if they tell you do download and an application to view a free cat video that infects your machine with malware (not a virus) that can be bad.

Recommending caution is a platform agnostic suggestion that has nothing to do with Virus' - which cannot infect your Mac. Nobody says that you can't gt your Mac infected - in fct there are several cases of Malware infecting Macs out there.

You are misunderstanding the message. In no way does it say what you think it does.

So do I understand you right.... you are saying it's impossible for me to get a nasty or malware on my Mac if I visit every website on the internet, as long as I don't enter my password and allow something to be installed? Is that what you are saying?

 

[CosmoFox]

So do I understand you right.... you are saying it's impossible for me to get a nasty or malware on my Mac if I visit every website on the internet, as long as I don't enter my password and allow something to be installed? Is that what you are saying?

Pretty much. Never had a problem on a mac.

 

[GGJstudios]

So do I understand you right.... you are saying it's impossible for me to get a nasty or malware on my Mac if I visit every website on the internet, as long as I don't enter my password and allow something to be installed? Is that what you are saying?

Of course, nothing is impossible, but the likelihood of that happening in today's environment is ridiculously remote. It's beginning to sound as if you'd prefer the answer to be otherwise. You question has been answered. Why are you reviving older threads and starting new ones on this topic all at once?

 

[2012Tony2012]

There were cases in the past where visiting a website could trigger the automatic download of a Trojan, which could be executed if someone had the setting in Safari selected to open "safe" files after downloading. That download was made possible by exploiting a flaw in the Java functionality of Safari. However, those of us practicing safe computing already had Java disabled in Safari, as well as the automatic opening of downloaded files, so we were fully protected from such exploits. Since that time, updates have closed the door on such exploits.

There have also been sites in the past that were malicious in intent, and would trigger scripts that would launch multiple applications on the Mac simultaneously, creating an extreme annoyance to the point where a reboot was necessary, even though they could not infect the Mac with malware.

While there are currently no exploits that can infect your Mac simply by visiting a website, it still makes sense to exercise caution in the type of sites that you visit.

As stated earlier, Macs are not immune to malware. There simply are no viruses in the wild that can infect OS X, and only a handful of Trojans, all of which can be avoided by practicing safe computing. However there is no defense available that protects against user ignorance or carelessness.

So GGJstudios, an automatic download and automatic opening and installing of an app, can be done without even entering a password on Mac to allow an installation? But that can't work anymore seeing Mountain Lion doesn't even have Java installed?

When you say, "While there are currently no exploits that can infect your Mac simply by visiting a website, it still makes sense to exercise caution in the type of sites that you visit." what do you mean exactly? One minute you say those Safari exploits have been closed, and Java would need to be installed I assume for that to work, yet next sentence you say exercise caution when visiting websites? That seems like a confused contradiction? Why use caution if nothing can install itself without user knowing or permitting it to?

So let me ask you this way... my Mountain Lion does NOT have Java installed and I am using Safari 6.1.3, is there any website on the entire internet that could still automatically download, install, infect something on my Mac without my permission, without my entering password and without me knowing? Yes or No?

 

[GGJstudios]

So GGJstudios, an automatic download and automatic opening and installing of an app, can be done without even entering a password on Mac to allow an installation? But that can't work anymore seeing Mountain Lion doesn't even have Java installed?

When you say, "While there are currently no exploits that can infect your Mac simply by visiting a website, it still makes sense to exercise caution in the type of sites that you visit." what do you mean exactly? One minute you say those Safari exploits have been closed, and Java would need to be installed I assume for that to work, yet next sentence you say exercise caution when visiting websites? That seems like a confused contradiction? Why use caution if nothing can install itself without user knowing or permitting it to?

So let me ask you this way... my Mountain Lion does NOT have Java installed and I am using Safari 6.1.3, is there any website on the entire internet that could still automatically download, install, infect something on my Mac without my permission, without my entering password and without me knowing? Yes or No?

After you visit every website on the Internet, be sure to come back and report your findings.

 

[CosmoFox]

After you visit every website on the Internet, be sure to come back and report your findings.

And download every mac app you can install.

 

[2012Tony2012]

After you visit every website on the Internet, be sure to come back and report your findings.

There seems to be enough uncertainty for you to not be able to be 100% sure.

Accurately and truthfully, you should be saying something like, "I am not 100% sure folks, you may or may not, get a malware installed on your Mac by visiting a website, as I am not sure about all websites on the entire Internet as I have never visited every single website, and there may be scripts or webcode that may infect your Mac without your permission or knowing. I don't know for sure, slim chance, but maybe possible, EVEN if you implement everything I teach about Mac Security, you may still get infected"

----------

And download every mac app you can install.

Off topic, this is about visiting websites and if a malware etc can be installed without the user knowing or without their permission, this is not about a user installing Apps willfully and knowingly. That's a different topic for another day🙂

 

[GGJstudios]

There seems to be enough uncertainty for you to not be able to be 100% sure.

Accurately and truthfully, you should be saying something like, "I am not 100% sure folks, you may or may not, get a malware installed on your Mac by visiting a website, as I am not sure about all websites on the entire Internet as I have never visited every single website, and there may be scripts or webcode that may infect your Mac without your permission or knowing. I don't know for sure, slim chance, but maybe possible, EVEN if you implement everything I teach about Mac Security, you may still get infected".

As I've stated more times than I can count, OS X, like every other OS ever created, is not immune to malware. Anyone exercising common sense knows there are no absolute certainties in the world of technology. When you find a website that infects your Mac with a virus, please come back and let us know. Until then, it's reasonable to say it hasn't happened and can't happen until something new is developed. If and when that happens, we will all hear about it.

The recommendations in this thread and elsewhere in this forum are intended to help Mac users adequately understand and protect themselves against threats. Part of that understanding is to dispel the FUD being spread by the uninformed and the preconceived ideas based on Windows experiences of the past. It is estimated there are over 4.5 billion web pages out there. No user will ever visit them all, so the question is pointless and not related to real-world experience of the overwhelming majority of Mac users.

Some people just like to argue for the sake of arguing.

 

[2012Tony2012]

As I've stated more times than I can count, OS X, like every other OS ever created, is not immune to malware. Anyone exercising common sense knows there are no absolute certainties in the world of technology. When you find a website that infects your Mac with a virus, please come back and let us know. Until then, it's reasonable to say it hasn't happened and can't happen until something new is developed. If and when that happens, we will all hear about it.

The recommendations in this thread and elsewhere in this forum are intended to help Mac users adequately understand and protect themselves against threats. Part of that understanding is to dispel the FUD being spread by the uninformed and the preconceived ideas based on Windows experiences of the past. It is estimated there are over 4.5 billion web pages out there. No user will ever visit them all, so the question is pointless and not related to real-world experience of the overwhelming majority of Mac users.

Some people just like to argue for the sake of arguing.

GG, I always notice you get very defensive when your teachings are challenged and proven to be conflicting and you then alter what other people are saying. For example, we are talking about MALWARE, yet you then turn around and falsely claim I am talking about a VIRUS. Also, when you are challenged you claim someone "enjoy arguing with you", which is not true, it's just you get so defensive and make such claims. Just because someone challenges your teachings or something you have written, doesn't mean they are "arguing".

You have written an article in how Mac users can protect themselves, but on the other hand, you have admitted indirectly that you have not visited every website in the world and you do not know with 100% certainty if a website can contain some code that can bypass and defeat your article steps.

Just admit it humbly GG, you do NOT KNOW with 100% certainty if visiting a particular website can infect a Mac user unknowingly with malware. It's unlikely, and slim, yet can happen, agree?

It's NOT up to me to visit every website in the world to prove to you that your guideline steps work. It's up to you to admit that you cannot be 100% sure, which you have admitted now.

It's ok GG, we are all humans and nobody is perfect 🙂 It's ok to be wrong at times, we all are.

 

[GGJstudios]

Just admit it humbly GG, you do NOT KNOW with 100% certainty if visiting a particular website can infect a Mac user unknowingly with malware. It's unlikely, and slim, yet can happen, agree?

It's NOT up to me to visit every website in the world to prove to you that your guideline steps work. It's up to you to admit that you cannot be 100% sure, which you have admitted now.

It's ok GG, we are all humans and nobody is perfect 🙂 It's ok to be wrong at times, we all are.

No one knows anything with 100% certainty, which means you don't know with 100% certainty that everything I've stated isn't absolutely true. Arguing about 100% certainty is a waste of time and any reasonable user will immediately recognize the fallacy of such an argument. You've revived multiple threads and started others, apparently to try to stir up FUD. Well, only the most gullible will fall for it.

For sensible Mac users, you can practice safe computing and surf the web without fear. For the rest, be sure to leave your computer inside the shrink-wrapped box it came in.... and then, you still can't be 100% certain...... 🙄

 

[2012Tony2012]

No one knows anything with 100% certainty, which means you don't know with 100% certainty that everything I've stated isn't absolutely true. Arguing about 100% certainty is a waste of time and any reasonable user will immediately recognize the fallacy of such an argument. You've revived multiple threads and started others, apparently to try to stir up FUD. Well, only the most gullible will fall for it.

For sensible Mac users, you can practice safe computing and surf the web without fear. For the rest, be sure to leave your computer inside the shrink-wrapped box it came in.... and then, you still can't be 100% certain...... 🙄

My questions and challenges are sincere and genuine, if anyone interprets it as stirring up trouble, then they themselves are very insecure and very defensive about their Mac. Many people react that way with many things in their life, as soon as someone puts out a challenge or potential problem with something, they get all insecure and defensive and accuse the person of being a trouble maker etc.

Suffice to say, thank you GG for admitting that you cannot be 100% sure if what you teach is accurate and for admitting that Mac users may be compromised by certain unknown coded websites.

It's a shame we can't sandbox a browser and all it's activities on Mountain Lion, like window users can using sandboxie for example.

 

[GGJstudios]

My questions and challenges are sincere and genuine, if anyone interprets it as stirring up trouble, then they themselves are very insecure and very defensive about their Mac. Many people react that way with many things in their life, as soon as someone puts out a challenge or potential problem with something, they get all insecure and defensive and accuse the person of being a trouble maker etc.

Suffice to say, thank you GG for admitting that you cannot be 100% sure if what you teach is accurate and for admitting that Mac users may be compromised by certain unknown coded websites.

It's a shame we can't sandbox a browser and all it's activities on Mountain Lion, like window users can using sandboxie for example.

I'm neither insecure nor defensive. I've stated fact. You appear to want to raise doubt about whether Mac users are safe surfing the web by hanging your argument on the possible existence of some undisclosed, obscure, not-yet-discovered website that may have some undefined, undiscovered, undocumented and likely nonexistent malware. When you find even one instance of a website that can infect current Macs by simply visiting the site, I'll cheerfully stand corrected. Until that happens, my statements stand.

 

[2012Tony2012]

I'm neither insecure nor defensive. I've stated fact. You appear to want to raise doubt about whether Mac users are safe surfing the web by hanging your argument on the possible existence of some undisclosed, obscure, not-yet-discovered website that may have some undefined, undiscovered, undocumented and likely nonexistent malware. When you find even one instance of a website that can infect current Macs by simply visiting the site, I'll cheerfully stand corrected. Until that happens, my statements stand.

How can you stand "corrected" when you yourself teach others to be cautious just in case?

 

[Kissaragi]

Hi there, I've only had my macbook for couple months now and I've been hearing constantly that macs can't get viruses. Fair enough, but I live with non mac fans who keep telling me that this isn't possible and that somewhere someone will have created viruses for macs.

Seeing as I don't really understand the science behind it (to put me at ease) would someone please explain to me if it is possible to get a virus and if not then why? What's the technology behind it?


Kind Regards

BexXx

There are and never have been any viruses in the wild for OSX. You do not need any anti virus or anti malware protection for any mac.

 

[Tumbleweed666]

How can you stand "corrected" when you yourself teach others to be cautious just in case?

Already answered many posts back, they may trick the unwary into installing malware. All malware currently out there that anyone knows about works this way. So, of course you should be wary - is that really a game you are downloading, or is it malware? Thats the same on all computing systems. The difference is, you dont need to do anything (such as run an antivirus) to stop a virus being installed as there arent any (to date). So since there arent any, the anti virus cannot stop it.

A so-called anti-virus which runs detection for malware may help you, but it could equally well lead to a false sense of security and installing malware.

Being cautious means nothing more than, dont download apps from sources you arent sure of, and dont download pirated software because that is the major source of malware.

 

[Cox Orange]

I find this very interesting:

http://tenfourfox.blogspot.de/2014/02/ssafari-ssl-ssucks.html

Have a read. Important, if one is doing online banking.