123Ethan

Q: MPlayerX

Hello today while using safari a link popped up and wen I clicked it (I had no idea what was happening, I am useless with computers sometimes) it downloaded this file. I proceeded to turn off the wifi, delete the file (before I opened it), go through my applications for a file named mplayerx (or any new applications for that matter) but I found no new applications, scan my mac using sophos (no threats detected), I even went through my files for suspicious files (nothing) and in the end I experienced n change tot he operating system of my computer (no adds popping up) but I have read that this can be an invasive add ware file, so I am kind of freaked out, is there any way it could have installed itself without me opening it up and without wifi??? it didn't seem to change anything but could it have?

 

Oh I am also running an extremely outdated system I think it's life mountain lion

MacBook Pro

Posted on Mar 1, 2015 11:57 AM

Close

Q: MPlayerX

  • All replies
  • Helpful answers

  • by Kappy,Helpful

    Kappy Kappy Mar 1, 2015 12:03 PM in response to 123Ethan
    Level 10 (271,392 points)
    Desktops
    Mar 1, 2015 12:03 PM in response to 123Ethan

    Uninstall MPlayerX - How to Remove MPlayerX from Mac OS ..

     

    If you deleted the download without opening it, then your are safe. Never do something like that again. You hardly have need of Sophos and can uninstall it from your computer. This may even make the computer run a little faster. If you need malware help:

     

    Helpful Links Regarding Malware Problems

     

    If you are having an immediate problem with ads popping up see The Safe Mac » Adware Removal Guide, AdwareMedic, or Remove unwanted adware that displays pop-up ads and graphics on your Mac - Apple Support.

     

    If you require anti-virus protection Thomas Reed recommends using ClamXAV. (Thank you to Thomas Reed for this recommendation.)

     

    Open Safari, select Preferences from the Safari menu. Click on Extensions icon in the toolbar. Disable all Extensions. If this stops your problem, then re-enable them one by one until the problem returns. Now remove that extension as it is causing the problem.

     

    The following comes from user stevejobsfan0123. I have made minor changes to adapt to this presentation.

     

    Fix Some Browser Pop-ups That Take Over Safari.

     

    Common pop-ups include a message saying the government has seized your computer and you must pay to have it released (often called "Moneypak"), or a phony message saying that your computer has been infected, and you need to call a tech support number (sometimes claiming to be Apple) to get it resolved. First, understand that these pop-ups are not caused by a virus and your computer has not been affected. This "hijack" is limited to your web browser. Also understand that these messages are scams, so do not pay any money, call the listed number, or provide any personal information. This article will outline the solution to dismiss the pop-up.

     

    Quit Safari

     

    Usually, these pop-ups will not go away by either clicking "OK" or "Cancel." Furthermore, several menus in the menu bar may become disabled and show in gray, including the option to quit Safari. You will likely have to force quit Safari. To do this, press Command + option + esc, select Safari, and press Force Quit.

     

    Relaunch Safari

     

    If you relaunch Safari, the page will reopen. To prevent this from happening, hold down the 'Shift' key while opening Safari. This will prevent windows from the last time Safari was running from reopening.

     

    This will not work in all cases. The shift key must be held at the right time, and in some cases, even if done correctly, the window reappears. In these circumstances, after force quitting Safari, turn off Wi-Fi or disconnect Ethernet, depending on how you connect to the Internet. Then relaunch Safari normally. It will try to reload the malicious webpage, but without a connection, it won't be able to. Navigate away from that page by entering a different URL, i.e. www.apple.com, and trying to load it. Now you can reconnect to the Internet, and the page you entered will appear rather than the malicious one.

    An excellent link to read is Tom Reed's Mac Malware Guide.

    Also, visit The XLab FAQs and read Detecting and avoiding malware and spyware.

    See these Apple articles:

     

      Mac OS X Snow Leopard and malware detection

      OS X Lion- Protect your Mac from malware

      OS X Mountain Lion- Protect your Mac from malware

      OS X Mavericks- Protect your Mac from malware

      About file quarantine in OS X

     

    From user Joe Bailey comes this equally useful advice:

     

    The facts are:

     

    1. There is no anti-malware software that can detect 100% of the malware out there.

    2. There is no anti-malware that can detect everything targeting the Mac.

    3. The very best way to prevent the most attacks is for you as the user to be aware that

         the most successful malware attacks rely on very sophisticated social engineering

         techniques preying on human avarice, ****, and fear.

    4. Internet popups saying the FBI, NSA, Microsoft, your ISP has detected malware on

        your computer is intended to entice you to install their malware thinking it is a

        protection against malware.

    5. Some of the anti-malware products on the market are worse than the malware

        from which they purport to protect you.

    6. Be cautious where you go on the internet.

    7. Only download anything from sites you know are safe.

    8. Avoid links you receive in email, always be suspicious even if you get something

        you think is from a friend, but you were not expecting.

    9. If there is any question in your mind, then assume it is malware.

  • by 123Ethan,

    123Ethan 123Ethan Mar 1, 2015 12:15 PM in response to Kappy
    Level 1 (0 points)
    Mar 1, 2015 12:15 PM in response to Kappy

    Thank you so much, yeah I have restarted everything no adds are popping up like some of the links said they would, I have always been very careful, never downloaded programs from any sites that I have not double checked (so not even any torrents), never had any problems and for now at least I can keep that up, just one last question if I do accidentally download something like this again do I have to run it for my computer to be infected or can it install itself without me running it?

  • by John Galt,

    John Galt John Galt Mar 1, 2015 1:31 PM in response to 123Ethan
    Level 8 (49,678 points)
    Mac OS X
    Mar 1, 2015 1:31 PM in response to 123Ethan

    You inadvertently installed adware. You do not need to download or install anything to fix it.

     

    For a description of how this may have occurred, how to avoid it in the future, and for Apple's recommended actions read How to install adware. Apple's instructions are linked in the Recovery Procedure near the end of that document. Read and follow them carefully. Pay particular attention to the easily overlooked passages directing you to restart your Mac when required.

     

    "Sophos" is capable of nothing beneficial. Remove it according to its instructions. I suggest this page: http://www.sophos.com/en-us/support/knowledgebase/120838.aspx

  • by 123Ethan,

    123Ethan 123Ethan Mar 1, 2015 1:36 PM in response to John Galt
    Level 1 (0 points)
    Mar 1, 2015 1:36 PM in response to John Galt

    Are you sure I did not run it and I haven't seen any change in the way my system operates (now adds) is it possible it installed itself without me running it???

  • by John Galt,

    John Galt John Galt Mar 1, 2015 1:55 PM in response to 123Ethan
    Level 8 (49,678 points)
    Mac OS X
    Mar 1, 2015 1:55 PM in response to 123Ethan

    No, the reason for referring you to that document is so that you can familiarize yourself with how those things get installed to begin with, and also to point out there is absolutely nothing Sophos will do to prevent that. You did the right thing by dragging the unwanted downloaded file to the Trash. You should do that with any downloaded file you did not expect.

     

    If your Mac is operating normally, then there is nothing you need to do — other than to remain vigilant should adware's appearance change in the future. Adware peddlers are constantly trying new ways to deceive people into installing their junk.

  • by 123Ethan,

    123Ethan 123Ethan Mar 1, 2015 2:34 PM in response to John Galt
    Level 1 (0 points)
    Mar 1, 2015 2:34 PM in response to John Galt

    Thank you soooo much yeah I was pretty scared when it happened but now it's all fine

  • by MadMacs0,

    MadMacs0 MadMacs0 Mar 1, 2015 11:13 PM in response to 123Ethan
    Level 5 (4,791 points)
    Mar 1, 2015 11:13 PM in response to 123Ethan

    123Ethan wrote:

     

    is it possible it installed itself without me running it???

    Anything is possible, but there is currently nothing that we know about that is capable of that as long as you are using a currently support version of OS X and it's fully up-to-date.

  • by thomas_r.,

    thomas_r. thomas_r. Mar 2, 2015 4:57 AM in response to 123Ethan
    Level 7 (30,924 points)
    Mac OS X
    Mar 2, 2015 4:57 AM in response to 123Ethan

    123Ethan wrote:

     

    Are you sure I did not run it and I haven't seen any change in the way my system operates (now adds) is it possible it installed itself without me running it???

     

    No, from your description, John should not have told you that you have installed adware. Since you say you didn't open the file, you didn't install anything. As MadMacs0 points out, there is currently no known way for anything to be installed on your Mac just by visiting a web page.