Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

How can I remove Yahoo trojan?

Several time an hour, the screen below pops-up, asking for my Yahoo email password. Once, when I did submit my password, a spam email was immediately sent to all of my friends. I changed my password but can't get rid of this popup. I don't know if it's a trojan or something else, but if someone could help me get rid of this screen, I'd really appreciate it.


User uploaded file

iMac, Mac OS X (10.7.3)

Posted on Feb 26, 2012 3:55 PM

Reply
22 replies

Feb 26, 2012 8:32 PM in response to devinher

Well it seems you have a yahoo mail account and in order to use it, you need to provide your password. Is there anything you are using Yahoo for that you need to log into it such as a homepage or email?

Is your yahoo email working?


In addition, as Linc said, disable syncing in Address Book prefs in the Accounts tab for On My Mac if it is enabled.

Feb 26, 2012 8:42 PM in response to Glenn Leblanc

I do have a Yahoo account which I've used as my primary email for years and am always logged in. Email has always worked great. The one time I got tired of this box popping up and entered my password, a spam email went out to all of my friends through my Yahoo account. That's why I think it's something malicious. I changed my password and continued using Yahoo email without problem.


I don't use Yahoo for anything else that I can think of that would require login. It's pretty agressive and doesn't behave like I think a genuine login screen would behave. If I enter a false password, it will go away for a good period of time. When I enter a false password in a legitimate login screen, they typically immediately let me know I've made a mistake and prompt me for the correct one.


Thanks for helping sleuth this out. I feel like I have a team of detectives on my side.

Feb 26, 2012 8:48 PM in response to devinher

Please read this whole message before doing anything.


This procedure is a diagnostic test. It’s unlikely to solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.


The purpose of this exercise is to determine whether the problem is caused by third-party system modifications that load automatically at startup or login. Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards. Boot in safe mode and log in to the account with the problem. The instructions provided by Apple are as follows:


  • Be sure your Mac is shut down.
  • Press the power button.
  • Immediately after you hear the startup tone, hold the Shift key. The Shift key should be held as soon as possible after the startup tone, but not before the tone.
  • Release the Shift key when you see the gray Apple icon and the progress indicator (looks like a spinning gear).


Safe mode is much slower to boot and run than normal, and some things won’t work at all, including wireless networking on some Macs.


The login screen appears even if you usually log in automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.


Test while in safe mode. Same problem(s)?


After testing, reboot as usual (i.e., not in safe mode.)

Feb 27, 2012 8:18 PM in response to Linc Davis

This was a fascinating test. After booting in safe mode, I didn't experience the pop up and even left it on all night. Nothing.


Then I plugged my iPhone in to charge it and a couple of minutes later, the pop up appeared. I tried it again today and the pop up appeared again but then never made a return appearance as it usually does.


So, what could that mean? Was this part of your theory?

How can I remove Yahoo trojan?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.