You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Cox says my computer is infected

I run Malwarebytes Premium for Mac multiple times daily. It has never identified or quarantined a threat. But today I received this email from Cox, my internet provider, saying that my computer is infected. Is this a sales tool, a false positive, or something I should deal with? If so, how do I deal with it?


Dear Cox High Speed Internet Subscriber,We received an alert that one of your home devices has been infected with a virus.

One or more devices (desktop computer, laptop, tablet, smartphone) using your modem may be infected with malware, which can steal your credentials, launch attacks on websites, or conduct other malicious activities.

It's important you take care of this as soon as possible.

We know it's hard to tackle viruses on your own, so we made sure that, as a customer, you have free access to Cox Security Suite Plus powered by McAfee, which helps you protect up to five devices by following these quick and easy steps:

  • Make sure there's no anti-virus software already installed on your devices, and if there is, uninstall it with the help of your software manual

Download and install Cox Security Suite Plus from **** , or one of these trusted Anti-Virus software choices:

Microsoft Safety Scanner: ****

Malwarebytes: ****

  • Update your computer software, browsers, and operating system to protect them from malware and ensure your security patches are updated
  • Run your software on each device until you've removed all detected malware

If you need some extra help, Cox offers premium technical support at reasonable rates. Visit **** to reach Cox Complete Care, or call ****

As always, if you have any questions, don't hesitate to give Cox Network Security a call at ****

Your partner in cyber security,

Cox Customer Safety


To confirm this message is valid, visit **** , log in to your MyAccount drop down, select the drop down again, and click Email Notification History on the left side of the page.

Periodically Cox sends emails about changes in our service that affect you. Please note that if you unsubscribe from promotional emails, we will continue to send you important or time sensitive email messages about your service such as this. Cox will never send you an email asking for your personal information, such as passwords.

The Cox Acceptable Use Policy (AUP):

****





[Edited by Moderator]

iMac 27", macOS 10.13

Posted on May 20, 2019 4:09 PM

Reply
Question marked as Top-ranking reply

Posted on May 20, 2019 4:36 PM

Dear Deedle-Doodle: Sounds to me like this is a load of...... let's just say it makes the flowers and grass grow taller and better....

You don't need whatever it is that Cox is trying to sell you on. You also don't need "Clean my Mac", McAfee or anything claiming to fix your mac or clean it from junk. Just regular Malwarebytes I think is fine, once in a while. Throw it out and go have a good cup of coffee...


john b

Similar questions

11 replies
Question marked as Top-ranking reply

May 20, 2019 4:36 PM in response to Deedle-Doodle

Dear Deedle-Doodle: Sounds to me like this is a load of...... let's just say it makes the flowers and grass grow taller and better....

You don't need whatever it is that Cox is trying to sell you on. You also don't need "Clean my Mac", McAfee or anything claiming to fix your mac or clean it from junk. Just regular Malwarebytes I think is fine, once in a while. Throw it out and go have a good cup of coffee...


john b

May 20, 2019 8:49 PM in response to Deedle-Doodle

You should definitely call or chat with the Cox tech support team to get more information about what triggered their message to you so you can figure out if there really is a problem and what & where to look. If Cox saw some type of problematic behavior from your modem, then that is a big deal and needs to be addressed. If the problematic behavior persists and is a danger or if it affects the Cox network, they can disconnect your modem. They can also confirm if the email alert was sent by Cox.


The problem may not be with your Mac at all. It could be a problem with your modem or router or any device connected to your network including phones, tablets, TVs, routers, access points, connected home assistants like the Amazon Echo, any connected home automation system, or even a guest connecting their laptop or other device to your network. People have a lot of devices connected to the network these days. Does Cox provide a public WiFi guest account on their supplied modem/router? If so, perhaps a neighbor connected to the public guest WiFi network hosted by your modem/router and was the source of the problem. If you have kids, then you should definitely check out their computers for issues.


It is also possible this is a scam phishing email from a third party trying to have you call the number in the email or click on the link in the email and get your password and personal information. Or it could be a legitimate message from Cox trying to scare you into using their extra paid services. If it is a legitimate email from Cox, then it is disappointing more detailed information was not provided and you really do need to investigate and confirm if there is a real issue here. Please do not click on any links in the email and do not call any numbers provided in the email. Instead contact Cox support directly from their website from a URL you type in or from information located on your billing statements.


As others here have mentioned, as long as you are careful with the websites you access, the links you click on both on websites and within emails, and you are careful with downloading and running third party apps, you don't need any extra AV software, cleaning software, etc. for a Mac as most of them cause more problems than they solve.


Good luck.

May 21, 2019 3:35 AM in response to Deedle-Doodle

First, have you verified that the source of this email is in fact

a valid Cox Cable address?


Many scams are going around that look so very convincing. Definitely do not click

that link in the email. Only log into your account by using your normal means

of logging in. Then see if there is "verification" there. Clicking that link could take

you to some well designed scam site tat will attempt to a) extract what ever information

they can or b) get you to actually download some malicious app.

May 21, 2019 8:25 PM in response to HWTech

Thanks to all who replied. I did verify that the email was legitimately from Cox and that the support phone number was correct. I called it today and spoke with two Tier 2 level network security reps. The first admitted she had no idea of what was going on and suggested that I purchase their premium level support which I declined. At that point she got testy and suggested that I call the support number back and get a different rep! I did, and the second identified a specific url that triggered the alert and was supposedly traceable to my IP address. It was not a site that I was familiar with nor one which I've ever purposely gone to, but they say my IP address contacted it yesterday and that it's a known site for infection and command and control. I also opened a support ticket with Malwarebytes yesterday, but haven't had a response as of yet. I am extremely careful on the net and don't download apps, visit unusual sites, or click on links so I have no idea what could've happened or if my computer is infected.

May 21, 2019 9:29 PM in response to Deedle-Doodle

I've experienced the same problem and it was easily taken care of:


At that time, I called my ISP and they suggested that I reset my router. The rep explained that when you reset your router (or modem), a new/different IP address is assigned to your account. So, the first IP address might have been known and/or blacklisted, a new/different one would not be. I reset my router (unplug for 30 seconds, plug back in, and simply wait until all the lights stop flashing) and have not had a problem since.

May 21, 2019 9:54 PM in response to Deedle-Doodle

Good for you for keeping at Cox tech support. They should definitely provide you with basic information & details about any security incident without having to subscribe to a package. Now I can understand needing to pay them for support on diagnosing the issue further as it can be an involved process, but it would also be in their own best interest to assist you.


First thing you should do is reboot your modem/router although a full reset is better, but a full reset requires setting the router up again. After power cycling the modem/router, log into the router and make sure to change the router's login name & password (some won't let you change the login name) and make sure to write it down somewhere in case you forget it or you will need to do a full reset to regain access. Then make sure all external public internet access to the router is disabled. If the modem/router was setup by Cox, it may never have been properly secured and could have been compromised. You can also check the modem/router's logs to see if they contain any useful information to assist you. A full reset may erase these logs.


Malwarebytes is usually pretty good about removing malicious items, but it doesn't hurt to contact them for confirmation. Keep in mind the problem could be with a visitor's computer/tablet/phone or other device. If you get another notice from Cox, it might be a good idea to find out the exact date & time of the incident so you can try to determine if you had visitors at the time or what you may have been doing on the computer at the time or if you or another family member or guest turned on or used an internet connected device. It may have no correlation to your own use as the malware could just call home at any time it wants.


While you may have been on legitimate and normally safe websites, it is possible one of the websites is/was compromised. You could try checking your browsers history for the URL/IP address in question just in case.


If you have any Windows computers in your house or if anyone brings one to your house, that would definitely be the most likely source of the problem and they should be checked out for infections.


Hopefully Cox will send you another e-mail if it ever happens again. Hopefully no new notices from Cox means it was a one time incident or perhaps securing and power cycling the modem/router solved it.


Good luck in your investigation.

Cox says my computer is infected

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.