What is com.apple.csconfigdotmaccert?

Question

Level 1

9 points

What is com.apple.csconfigdotmaccert?

My questions are: what is com.apple.csconfigdotmaccert? Should I remove it from the library? Will there be any negative consequences if I leave it, or remove it? What made me nervous is that I keep getting a message saying that Apple Web Security has found viruses and trojans. I believe this is malware and ignored it. Then I began to look to see if anything had been installed without my knowledge, like the dlshield pkg that appeared - that's when I found the com.apple.csconfigdotmaccert in the library. If anyone can give me some advice it would be greatly appreciated.

Many thanks in advance

iMac, Mac OS X (10.6.7)

Posted on Jun 5, 2011 4:12 AM

Reply

Answer 1

Klaus1

Level 9

52,749 points

Jun 5, 2011 2:41 PM in response to Lumpusdumpus

Delete it. It is a scam, the main object of which is to relieve you of $60 by making you think you are buying an anti-virus package which will turn out to be completely phony. All such mesages are.

It is a trojan which may also cause you further problems, and is probably related to the MacDefender trojan:

Apple released Security Update 2011-003 on May 31, 2011, which adds malware detection and removal for the "MAC Defender" scam and delivers a daily update mechanism for updating subsequent malware definitions. This is for Snow Leopard only.

The security update for Mac OS X 10.6.7 is available from Software Update or the company's Downloads page. Installing the update does not require a system reboot.

http://support.apple.com/kb/DL1387

The next time you see such a message you should force-quit Safari.

Message was edited by: Klaus1

Reply

Answer 2

MadMacs0

Level 5

5,221 points

Jun 5, 2011 11:18 PM in response to Lumpusdumpus

Let's not jump to any conclusions quite yet. Questions about that file have been around since at least 2008. That doesn't necessarily mean this isn't different, but here's a theory from last year that it,s MobileMe related https://discussions.apple.com/thread/2564631 . If you didn't install anything after you saw the warnings then your OK.

If you still suspect it, upload it to http://www.VirusTotal.com and see if any malware detector identifies it.

Reply