kaspersky intrenet security macbook pro terminal question

Hi there

I own a macbook pro and recently updated my ios to Moterey

I have kaspersky internet security installed on my macbook. after finishing the update, kaspersky sent me a notification that I need to download a file name "delete_ff_sh" ( looks like it will delete firefox accounts) and go to utilities then terminal and type the folling command

Sudo-i

and drag the above file to able to use kaspersky fully functional.I did and after clicking on command, it started running.

Immediately I noticed that I lost all my accounts on firefox and I had to login again

I just want to know if anyone had the same issue or if this is something I need to worry about

Posted on Jan 25, 2022 6:15 PM

Reply
Question marked as Top-ranking reply

Posted on Jan 25, 2022 6:21 PM

Lose Kapersky or any other anti-virus. memory manager or disk-cleaners. Only Malwarebytes has any support with this group of contributors.


Killing off critical MacOS components like your Firefox activity is all too common with these products that DO NOT know MacOS well.


Monterey has encapsulated core-system files in a "sealed encrypted container" for the purpose of protecting core-system from viruses and other bad-actors.

Similar questions

6 replies
Question marked as Top-ranking reply

Jan 25, 2022 6:21 PM in response to farboddds61

Lose Kapersky or any other anti-virus. memory manager or disk-cleaners. Only Malwarebytes has any support with this group of contributors.


Killing off critical MacOS components like your Firefox activity is all too common with these products that DO NOT know MacOS well.


Monterey has encapsulated core-system files in a "sealed encrypted container" for the purpose of protecting core-system from viruses and other bad-actors.

Jan 25, 2022 7:00 PM in response to farboddds61

is this type of commands affect my personal privacy?


The command Kaspersky directed you to use invokes "superuser privileges" that allow subsequent commands to be executed without explicit authorization on your part.


The file "delete_ff_sh" is most likely a shell script that did what they claimed it would (delete Firefox accounts), but unless you were to examine that file and were proficient enough to understand what it did, there is no way to determine what else it may have done.


Deciphering shell scripts written by someone else can be a difficult task, even for someone skilled in writing them.


So, the short answer to your question is yes. Given superuser privileges, a shell script is absolutely, positively capable of harvesting information from your Mac and uploading it to Kaspersky — or anyone else for that matter, for whatever purposes they want.


Personal information is the currency of today's world. It's gold, and everyone wants it. Don't make yours easy to get.

Jan 25, 2022 6:54 PM in response to farboddds61

"sudo" is a way for your account to run command that can effect system integrity. An "admin" account usually is below that threshold, but "sudo" means you are invoking higher privilege temporarily.


What you do with "sudo" is the real concern. Deleting FF profiles is an annoyance but usually not fatal. Commands that delete GBs of files are worse.


The "delete FF profiles" script or any other unknown file can be dangerous, or not. Ask first, we will give you the best advice we have.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

kaspersky intrenet security macbook pro terminal question

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.