Virus/Keylogger?

I play online games and recently I started playing them again after a few months break, the first time I had done so on my Imac. Within two days my account had been hacked and my email account had been hacked to do so. The Game Master who dealt with my query told me this was only possible if my computer had been infected with some kind of key logger or virus. When sold the Imac I was told by the woman who dealt with me it was not possible for Imacs to get viruses or key loggers, both of which I enquired about specifically because I was so fed up with my Windows laptops getting them. I was looking for a replacement for my laptop which at this time and stopping in the Apple store was a purely impulsive thing, I had no desire to buy one at this stage as I had no reason to believe them to be any better than Windows, just a lot more expensive. It was this bit of information that really made me consider Apple and ultimately why I ended up spending twice as much on an Imac than I was planning to spend on my new Windows laptop. I was so worried about potential risks to the expensive Imac that I actually asked her outright if I should buy an antivirus for it to keep it safe and she told me that wasn't necessary. As a result, I have spent the last 7 months trusting the Apple advice and been blissfully unaware my Imac is indeed vulnerable. When I informed the Game Master of this he told me it was entirely possible for them to be infected with all sorts, just less likely than a Windows Pc and all I had to do was check on google if I didn't believe him. Sure enough there was reams of people who were inquiring about viruses, malware, spyware, key loggers ect on their Macs. However, unlike with a Windows computer there seems to be a much smaller area of knowledge on how best to detect, remove, and prevent these things on Macs. One website suggests a programme, another one reviews it as useless with massive flaws in its security. I am pulling my hair out with this now as theres programmes I have never even heard of that I am trying to understand having installed them on my Imac in desperation and yet the scans are coming back with nothing. And yet I am changing my passwords on the Imac and my email is still being hacked into so there has to be at least something on here thats giving my information away. My Windows may have been a nightmare for getting viruses ect but at least finding them and removing them was not normally a difficult process. All I am after is an antivirus that is going to detect, remove and prevent ALL forms of adware, spyware, malware, whatever, from my Imac. What ones do people suggest? I have rambled on a bit in case theres any insight there as to what could be causing this as well, I am not very clued up on Macs as you can probably tell. When I bought the Imac I was also told that if there was any drop in the preformance of my Imac I could bring it in and it would be returned to the condition it was in when I bought it for nothing. I do not want to do this as my nearest Apple store is an hours drive away bang in the middle of a shopping mall, plus I don't have the time to go without the computer with my exams coming up. My other question is is this even a genuine offer from Apple, or is this also untrue?

iMac, Mac OS X (10.6.7)

Posted on Jun 19, 2011 11:24 AM

Reply
18 replies

Jun 19, 2011 11:36 AM in response to jamiechimp

The Game Master who dealt with my query told me this was only possible if my computer had been infected with some kind of key logger or virus.


False. It could happen if the game server itself was hacked, or if you chose a weak password and someone guessed it.


When sold the Imac I was told by the woman who dealt with me it was not possible for Imacs to get viruses or key loggers...


There are no known Mac viruses. Malware of other kinds does exist, but you don't have it.


I was so worried about potential risks to the expensive Imac that I actually asked her outright if I should buy an antivirus for it to keep it safe and she told me that wasn't necessary.


True.


All I am after is an antivirus that is going to detect, remove and prevent ALL forms of adware, spyware, malware, whatever, from my Imac. What ones do people suggest?


No such thing exists. If you have installed the latest security update, and if you only download files using Safari, Mail, or iChat, then you have all the useful malware protection there is. It still isn't absolute, and it never will be. However, that doesn't really matter, because your problem has nothing to do with malware. You were misinformed by a server administrator who wants to shift blame from himself to you.


My other question is is this even a genuine offer from Apple, or is this also untrue?


It's true. You can make an appointment at the "Genius Bar" of an Apple Store for help with pretty much any Mac problem. There's no charge for the service. They aren't really geniuses, but they can often help with common problems.

Jun 19, 2011 11:45 AM in response to Linc Davis

Ok, Thank you. If its possible for my Imac to get malware what programmes would you suggest to safeguard against these, just to on top of whatever protection the Imac already has? If its true theres no malware on here why is it when I change my passwords my emails account is still being hacked into? I know if I were to use public computers or even other peoples computers then its likely to be done from there but I never use my emails except from my Imac.

Jun 19, 2011 11:57 AM in response to jamiechimp

If its possible for my Imac to get malware what programmes would you suggest to safeguard against these, just to on top of whatever protection the Imac already has?


The best safeguard is the program between your ears. The malware going around now works by tricking people into installing it. It doesn't install itself. If you're web browsing and suddenly you see a popup telling you that you have "viruses" and need to install anti-virus software from that same popup, it's a scam. In fact, any website that tells you that you must install software from that same site is a scam. That simple recognition will protect you better than any software you can install now, or ever. Relying too much on software as a substitute for thinking only increases the danger.


If its true theres no malware on here why is it when I change my passwords my emails account is still being hacked into?


I don't know why your email account is being hacked, but it's not because of malware. Have you changed the password?

Jun 19, 2011 12:12 PM in response to Linc Davis

I think I've come across a bit rude on here which I apologise for, I'm not out to be awkward I am just genuinely frustrated with this now. I am fairly ignorant with computers and really do need all the advice people have got on how to keep it protected. Having said that I have used a computer for years and know some of the basics like ignoring popups or fake virus scanners. Probably because I have used a Windows computer for so long, I know thats not always going to be enough. A few popups have come up even though I have told safari to block them but I just ignore them.
I have changed my password, twice now, and both times its been gotten into and the only way I know for that to happen would be something like a keylogger sending someone your passwords. Have I got that wrong and there are alternatives? No one else has access to the Imac apart from myself.

Jun 19, 2011 1:01 PM in response to jamiechimp

I can't rule out the possibility that someone is spying on you. There are many ways that could be done, including the use of a keylogger. But that could only be done as an inside job. It's not malware in the usual sense of a malicious program distributed anonymously over the Internet, and no anti-virus software would detect it.


A keylogger doesn't have to be software, by the way. It could just as well be a hardware device.


Open the Sharing preference pane in System Preferences. Are any services enabled that you didn't know about? Are the settings different from what you thought they were?


If you have good reason to think that your computer has been tampered with, the only thing to do is to back up all your data, then erase the hard drive, reinstall the OS from original media, reinstall your third-party software from known-good copies, and then restore your documents and settings.

Jun 19, 2011 1:30 PM in response to Linc Davis

To change personal info in the game, such as passwords, the game sends your email account an email with the request you made and you do so from there. My password for the game has been changed each time and each time I have found the necessary emails either read or deleted in my deleted box. Emails are also appearing in my deleted box, read, that I have never even seen. So I know someone is going on my email account which is whats causing me the most concern.


I just checked the Sharing preferences but they are exactly as I set them when I got it, to be sharing nothing. Thank you for the advise, this is going to sound rather foolish but how would I go about backing up all my data and erasing my hard drive?

Jun 19, 2011 1:46 PM in response to jamiechimp

First, email is not private unless encrypted. If a password is sent to you in clear-text email, then it's blown before you ever get it, even if your email account hasn't been hacked.


That said, it does sound like someone is getting into your email account, even after you change the password. The first thing you should is take this up with the mail service provider. It should be able to tell whether there's been any unauthorized access to your account, and from where.


If you have no backups, then you have much more to worry about than a hacked gaming account. Shut down the computer NOW and don't start it again until you're ready to set up a backup solution. For that you'll need an external hard drive and cable. When you have them, enable Time Machine and select the external drive as your backup device.


Mac 101: Time Machine


Frankly it makes no sense to be talking about fantasy stuff like "viruses" when you don't have basic computer literacy down. The very first thing any computer user should learn is to make backups.

Jun 19, 2011 2:00 PM in response to jamiechimp

Before you go wiping your hard drive, let's try and prove that you're really being attacked. If someone's getting into your account and resetting your game's password, I don't see why they wouldn't just go ahead and change the email address associated with the game as well (and change your email password to lock you out). Since it doesn't seem that either of these have happened, I'm not convinced someone is spying on you.


The next thing is to see if there really is anything on your Mac sending your keystrokes out. Try installing a tool called "Little Snitch" - it's a network monitor that tells you when any software tries to connect to the outside world, so if there is something monitoring your inputs and sending them externally, then Little Snitch will tell you and you'll be given the option to block it.


Do you have access to your email from anywhere other than your Mac? A mobile phone, another computer? If someone was accessing your account, and going to the length of deleting emails, I would think they'd properly delete them rather than just leave them in the trash. Emails can be marked as read accidentally, especially if you access your email from different programs, a web client, a phone, some service that checks your email for you, Outlook's "preview pane"... Are emails being sent from your account?


Do you use Gmail? If so, it will tell you where and when your account has been accessed, so you'll be able to see if someone else is logging in.


Have you tried changing your password on your email account, and then logging in without typing the password? for example, use the onscreen keyboard, or copy and paste the password (e.g. use an on-screen password generator to create a new password). Have you tried changing your game settings to use a different email address? Are you using the same password for email and game (you shouldn't be).


Have you tried setting up a separate user account on your Mac, and logging in as the new user? Again, if there is some software it may only be installed under the one user account.

Jun 20, 2011 4:17 PM in response to jamiechimp

My Mac has also been easy prey for hackers in the small city where I live. I have gone so far as to erase the disk and start over to get rid of any malware yet they (coworkers) are still 'privy' to everything I type or do on my personal, at home Intel iMac. This includes specific details I would never discuss with anyone. I am the only person with physical access to this iMac. I bought it new, directly from the Apple distribution center.


My wireless modem is secured in every way possible, but my phone calls over the phone wires were also being listened in on.... I say "were" because I finally cancelled my phone service because of this breach of privacy. My connection to the Internet is via DSL.


I do not open attachments in emails from people i don't know or don't trust. 99% of the people I email are trusted friends and family, mostly out of state.


I had satellite service for a year. That stopped the eavesdropping on my computer. But because the service was very unreliable and expensive, I went back to the phone line. The eavesdropping started up again almost immediately and remains to this day.


So there you have it. Macs are vulnerable.

Jun 20, 2011 4:44 PM in response to 23david23

You have no proof, that is just conjecture, and if you diont mind me saying, a little paranoid. A secure wipe would remove the keylogger if you had one, which I very much doubt tbh. You cannot say "there you go Macs are vulnerable" with no proof. Someone would have to put something on your Mac from within your home or used a device. That simple and unless you have material of great value on your machine why would they even do that? This is almost fantasy.

Jun 21, 2011 6:24 AM in response to 23david23

23david23, whilst no-one would dispute that Macs (as with all computers) are vulnerable, I doubt that what you've experienced is due to your Mac being compromised. In fact, you've pretty much proven it yourself - if, as you say, you erased the disc and started over, then anything that was on your machine would have been removed. The only way it would have returned is if you put it there. That would, of course, mean that the fault lay with you, and not your Mac.


Another reason why I doubt your Mac is the problem is that you say your telephone calls were being monitored. Whilst you could have an app that used a Mac's microphone to monitor sound near the Mac, it would not pick up both sides of a phone conversation and it would not pick up anything (clearly) from another room. The fact that you went so far as to cancel your phone service suggests that it was more than just your side of the calls that was being monitored. Plus all you'd need to do to stop your Mac listening would be to disable the microphone - that would have been the first thing you tried and since it clearly had no effect, it's not the computer.


Instead, I would suggest that you check your apartment for miniature video/audio devices - quite possibly someone has planted a few of them around your home and is picking up the signals remotely. Such devices are very easy and cheap to buy these days.


Also, it'd be fairly easy for your co-workers to access your email account from another computer other than yours - just because they know what's in your inbox doesn't mean your Mac has been compromised.


But if you are as careful with installing software as you claim, and have indeed wiped and started from scratch, then there is no way you could have anything on your Mac which would allow your co-workers to spy on you.

Jun 21, 2011 12:20 PM in response to Steamrunner TTT

I like to hear you say these things... but how, when I went home and typed stuff in TextEdit, could they then confront me with it the next day? I typed stuff that would be sure to get a response (insulting words about one of the staff people.... 100% made up). Next work day I got all kinds of reaction, one guy tried blocking me from entering the building (I finally made it in) including the spouse of the staff person coming into the plant and making derogatory remarks in front of me, about me and I had never met that person before in my life.


How can these things happen? And why, during the year that I had satellite Internet, was I not bothered by anyone at all, no matter what I typed or what website I visited. It only started up again after I went back to the phone line - DSL. Before the satellite service I had dial-up.


It's all a little too weird.... I can see that they are probably doing something else altogether, but i have had the police and a phone company tech to my house to check for devices... nothing showed up. It's all somehow through my computer and the phone line.


It's been going on for 8 years and I am 100% stumped.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Virus/Keylogger?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.