Wierd - virus?

Discussion in 'macOS' started by dazzer21, Mar 2, 2009.

  1. dazzer21 macrumors 6502

    Oct 18, 2005
    I've just had the wierdest thing happen. Sitting behind my iMac at work, all of a sudden the alert sound started sounding again and again and then the name of the hard disk under the icon top right changed to 'you've been owned'. I went to the console to see what happened and got this:

    02/03/2009 16:42:48 OSXvnc-server[104] rfbProcessClientProtocolVersion: client gone

    02/03/2009 16:42:48 OSXvnc-server[104] Waiting for clients

    02/03/2009 16:42:48 OSXvnc-server[104] Protocol version 3.8

    02/03/2009 16:43:30 OSXvnc-server[104] Client oo.ooo.ooo.ooo disconnected

    02/03/2009 16:43:30 OSXvnc-server[104] Statistics:

    02/03/2009 16:43:30 OSXvnc-server[104] key events received 428, pointer events 0

    02/03/2009 16:43:30 OSXvnc-server[104] framebuffer updates 0, rectangles 0, bytes 0

    02/03/2009 16:43:30 OSXvnc-server[104] Waiting for clients

    The IP address was not mine. This seems to be an obvious connection from outside via vnc - I'm no Mac security guru although I probably had my guard down as I connect to this machine from home via VNC myself. So could it be a virus or maybe I've been hacked. Can anyone deduce what happened from the above?
  2. GGJstudios macrumors Westmere


    May 16, 2008
    There ARE no viruses in the wild that affect Mac OS X.
    No antivirus software can detect a Mac virus, because no Mac viruses exist.
    There are trojans that exist, but these can be easily avoided if:
    • you are careful what applications you install
    • you are careful where you get applications
    • you never enter your administrative password without THINKING!
    You also may not be aware that this question, like many others, has already been discussed quite a bit (beat to death, actually!) Using MRoogle to search the forums before you post will frequently reveal threads related to your question that the standard forum search misses, and will help you avoid posting repetitive threads. Here are some of the dozens of threads on this topic, filled with opinions and recommendations:

    One thread that you may find particularly helpful is this one: http://forums.macrumors.com/showthread.php?p=7066120
  3. Sky Blue Guest

    Sky Blue

    Jan 8, 2005
    Then surely anyone else could've.
  4. angelwatt Moderator emeritus


    Aug 16, 2005
  5. Cromulent macrumors 603


    Oct 2, 2006
    The Land of Hope and Glory
    Use SSH if you must remotely access a machine.
  6. Tex-Twil macrumors 68020


    May 28, 2008
    with a strong password ;)

Share This Page