Virus/bot/hacked on new MacBook Pro

Question

Virus/bot/hacked on new MacBook Pro

Hi, I purchased a new MacBook Pro in December 2012.

I use the native browser - Safari and no other browser. Version 6.0.2 MAC OS 10.8.2 and I use COMCAST for email through a browser.

Every few minutes a box appears on my display too fast for me to see it and disappears. A few weeks ago COMCAST emailed me a notice saying I might have a bot but I can't reach their technical support line. It's also not clear it was genuinely from COMCAST.

I installed Clamvox and Sophos, neither have found any virus..

Can someone please help me? I can't figure out what this mysterious pop up is and I can't see it long enough to know what it says. COMCAST is not helpful.

Thank you.

Posted on Jan 18, 2013 4:51 PM

Reply

Answer 1

thomas_r.

Level 7

31,989 points

Jan 19, 2013 6:08 AM in response to jem consulting

This is not caused by malware, but it's hard to say what might be doing it. It could be any software that you have installed that is misbehaving. Try weeding through all your third-party software according to the instructions here:

Check third-party software

See if you can figure out what's causing the problem by removing things one at a time or in small groups, and see if the problem goes away.

Reply

Answer 2

Jan 19, 2013 1:38 PM in response to thomas_r.

Hi there.. I only have the Microsoft Office Tools (Word, Powerpoint, Excel and Outlook) on the system as well as the above noted virus checkers... nothing else from 3rd party vendors..

Any other ideas?

I had a window up today and it looked like there was a ghost capture.

Is it possible someone sent a keyclick and/or screen capture program via a picture to me?

If so, how would I detect it?

Thanks.

Reply

Answer 3

thomas_r.

Level 7

31,989 points

Jan 19, 2013 1:52 PM in response to jem consulting

Is it possible someone sent a keyclick and/or screen capture program via a picture to me?

No. There isn't any current Mac malware capable of infecting your system at this time. See my Mac Malware Guide. Whatever this is, it's not malicious.

Reply

Answer 4

Jan 19, 2013 7:33 PM in response to thomas_r.

Hi there thanks for your most recent reply.

Well - how do I figure out what this popup window is? There has to be a way to figure it out.. I'm not comfortable having a window come and go.. and not having any idea what it is..

Reply

Answer 5

Jan 19, 2013 7:37 PM in response to jem consulting

Maybe if you took a screen shot of the window and posted it here we might be able to help you.

Allan

Reply

Answer 6

Jan 19, 2013 7:44 PM in response to Allan Eckert

If that were possible I would.. the issue, read above is that it pops up quickly and disappears before I can even read it. There is something doing this.. I just can't figure it out and evidently, it isn't easy ... I've been through Thomas's site which has been very helpful.. that's where I found out about the two most commonly used anti-virus software utilities and hence installed them..

This isn't an easy issue to debug...

Reply

Answer 7

Jan 19, 2013 7:47 PM in response to jem consulting

The messages should be in one of the log files. You can search the log files by opening Console.

Allan

Reply

Answer 8

Jan 19, 2013 8:07 PM in response to Allan Eckert

The pop up window will be in a log file? Excellent! Allan - how do I find this ? I'm pretty new to diagnostics here..

Reply

Answer 9

Jan 24, 2013 5:26 AM in response to Allan Eckert

I'm still having the problem, not able to find out where or in what log file the pop up window will be. Does anyone have any specific information?

Would sincerely appreciate.

Thank you.

Reply

Answer 10

thomas_r.

Level 7

31,989 points

Jan 24, 2013 6:11 AM in response to jem consulting

I'd advise you to take it to a professional at this point. If you have an Apple Store near you, make an appointment at the Genius Bar.

Reply

Answer 11

MadMacs0

Level 5

5,221 points

Jan 24, 2013 7:15 AM in response to jem consulting

jem consulting wrote:

I'm still having the problem, not able to find out where or in what log file the pop up window will be. Does anyone have any specific information?

The system.log is where most error messages are written. Viewable with the Console app (found in /Applications/Utilities). Should be the first entry in the Log List column under "LOG FILES". Turns over daily at midnight, so if you have to go back to a previous there is a weeks worth under "/var/log".

Reply