1 2 Previous Next 22 Replies Latest reply: Mar 8, 2012 5:43 AM by Linc Davis
devinher Level 1 Level 1 (0 points)

Several time an hour, the screen below pops-up, asking for my Yahoo email password. Once, when I did submit my password, a spam email was immediately sent to all of my friends. I changed my password but can't get rid of this popup. I don't know if it's a trojan or something else, but if someone could help me get rid of this screen, I'd really appreciate it.

 

Screen Shot 2012-02-26 at 9.51.44 AM.png


iMac, Mac OS X (10.7.3)
  • 1. Re: How can I remove Yahoo trojan?
    petermac87 Level 5 Level 5 (4,205 points)

    For a start go to Safari > Block Pop Up Windows and check it. If you are concerned about trojans, then download ClamAVx and run it.

     

    Pete

  • 2. Re: How can I remove Yahoo trojan?
    Linc Davis Level 10 Level 10 (118,350 points)

    Select Apple menu > System Preferences > Mail, Contacts & Calendars. Delete the Yahoo item from the list on the left.

  • 3. Re: How can I remove Yahoo trojan?
    devinher Level 1 Level 1 (0 points)

    Yahoo isn't listed there - just Gmail and iCloud.

  • 4. Re: How can I remove Yahoo trojan?
    Linc Davis Level 10 Level 10 (118,350 points)

    Disable Yahoo synchronization in the preferences of Address Book.

  • 5. Re: How can I remove Yahoo trojan?
    devinher Level 1 Level 1 (0 points)

    I actually use Chrome and my settings are already set to block all pop ups. Ran ClamAVx and Sophos and didn't come up with anything. Confounded.

  • 6. Re: How can I remove Yahoo trojan?
    Glenn Leblanc Level 5 Level 5 (5,940 points)

    Well it seems you have a yahoo mail account and in order to use it, you need to provide your password. Is there anything you are using Yahoo for that you need to log into it such as a homepage or email?

    Is your yahoo email working?

     

    In addition, as Linc said, disable syncing in Address Book prefs in the Accounts tab for On My Mac if it is enabled.

  • 7. Re: How can I remove Yahoo trojan?
    devinher Level 1 Level 1 (0 points)

    I went to preferences for Address Book and it shows iCloud and On my Mac (local): the only option for Yahoo shows under On my Mac and is already unchecked.

  • 8. Re: How can I remove Yahoo trojan?
    Linc Davis Level 10 Level 10 (118,350 points)

    When did this start? Did you install any new software around that time?

  • 9. Re: How can I remove Yahoo trojan?
    devinher Level 1 Level 1 (0 points)

    I do have a Yahoo account which I've used as my primary email for years and am always logged in. Email has always worked great. The one time I got tired of this box popping up and entered my password, a spam email went out to all of my friends through my Yahoo account. That's why I think it's something malicious. I changed my password and continued using Yahoo email without problem.

     

    I don't use Yahoo for anything else that I can think of that would require login. It's pretty agressive and doesn't behave like I think a genuine login screen would behave. If I enter a false password, it will go away for a good period of time. When I enter a false password in a legitimate login screen, they typically immediately let me know I've made a mistake and prompt me for the correct one.

     

    Thanks for helping sleuth this out. I feel like I have a team of detectives on my side.

  • 10. Re: How can I remove Yahoo trojan?
    devinher Level 1 Level 1 (0 points)

    That's a great question. I wish I could answer definitively. I think it started a couple of months ago and I don't remember installing anything. Most things I download come from the App store.

  • 11. Re: How can I remove Yahoo trojan?
    Linc Davis Level 10 Level 10 (118,350 points)

    Please read this whole message before doing anything.

     

    This procedure is a diagnostic test. It’s unlikely to solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.

     

    The purpose of this exercise is to determine whether the problem is caused by third-party system modifications that load automatically at startup or login. Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards. Boot in safe mode and log in to the account with the problem. The instructions provided by Apple are as follows:

     

    • Be sure your Mac is shut down.
    • Press the power button.
    • Immediately after you hear the startup tone, hold the Shift key. The Shift key should be held as soon as possible after the startup tone, but not before the tone.
    • Release the Shift key when you see the gray Apple icon and the progress indicator (looks like a spinning gear).

     

    Safe mode is much slower to boot and run than normal, and some things won’t work at all, including wireless networking on some Macs.

     

    The login screen appears even if you usually log in automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.

     

    Test while in safe mode. Same problem(s)?

     

    After testing, reboot as usual (i.e., not in safe mode.)

  • 12. Re: How can I remove Yahoo trojan?
    Glenn Leblanc Level 5 Level 5 (5,940 points)

    Go to the yahoo website that you would log into for your account. Look for any apps other than email and disable them such as calendars and contacts, possibly syncing options, ichat, etc.

  • 13. Re: How can I remove Yahoo trojan?
    devinher Level 1 Level 1 (0 points)

    This was a fascinating test. After booting in safe mode, I didn't experience the pop up and even left it on all night. Nothing.

     

    Then I plugged my iPhone in to charge it and a couple of minutes later, the pop up appeared. I tried it again today and the pop up appeared again but then never made a return appearance as it usually does.

     

    So, what could that mean? Was this part of your theory?

  • 14. Re: How can I remove Yahoo trojan?
    Linc Davis Level 10 Level 10 (118,350 points)

    Did the dialog appear while in safe mode, when you connected your phone?

1 2 Previous Next