Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

I apparently have an infection, possibly through Yahoo. Don't know whether malware or something else.

I have a window that appears periodically with a Yahoo logo. The window has my correct email address and asks for my password even though I may already be on Yahoo. It appeared just after a tech discussion with a Yahoo Security agent during which I allowed him access to the computer by remote (Team Viewer). I informed Yahoo of the problem, was told to change my password, which I did. The window request continues. I have swept for Spyware with macscan.securemac.com and cleaned all of the files recommended. The window, however, continues to appear and did so during the scan.

iMac, Mac OS X (10.6.7)

Posted on Nov 27, 2012 6:02 PM

Reply
Question marked as Best reply

Posted on Nov 27, 2012 6:27 PM

Hi Phil,


ClamXAV, free Virus scanner...

http://www.clamxav.com/


Free Sophos...


http://www.sophos.com/en-us/products/free-tools/sophos-antivirus-for-mac-home-ed ition/features.aspx


Little Snitch, stops/alerts outgoing stuff...


http://www.obdev.at/products/littlesnitch/index.html

5 replies

Nov 28, 2012 3:39 AM in response to philfromranchos de taos

It appeared just after a tech discussion with a Yahoo Security agent during which I allowed him access to the computer by remote (Team Viewer).


Did you initiate the discussion with Yahoo Security, or did they call you? If the latter, it's important to note that there's a scam going around right now where someone will call and offer you tech support for a "problem" in hopes that they will be given access to your computer. If that is the case, your computer should be considered compromised.


If, however, you initiated the call, it's probably just some aspect of TeamViewer. Try uninstalling it and see if that fixes things.


I have swept for Spyware with macscan.securemac.com and cleaned all of the files recommended.


Note that MacScan is absolute crap. In my opinion, they should be shut down for scamming people.


I recently did a test of 16 different Mac anti-virus programs. I tested them against 51 different Mac malware samples. MacScan only detected 2 of them. It missed a number of things that it claims to detect. See Mac anti-virus detection rates.


If you want to do a scan of your computer, you should use something better, like Sophos. However, it's important to note that if someone has been given remote access to your computer, it wouldn't require malware to make your computer compromised. There's a lot of perfectly legitimate software that could be used maliciously to give the hacker continued access, and that wouldn't be detected by most anti-virus software.

Nov 29, 2012 8:44 PM in response to philfromranchos de taos

Greetings,

This is a common occurrence with the teamviewer instance and it's important to practice safe surfing and not always rely on what shows up in search engine results as this is a way some of the scammers are luring their targets -- by spamming the search engine results. If you have gotten tricked into installing third party software it is a good idea to work on having it removed. As a MacScan user you are always able to contact us at SecureMac by email.


<Email Edited by Host>

I apparently have an infection, possibly through Yahoo. Don't know whether malware or something else.

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.