Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Help! My iMac has a trojan

This happens only with Chrome, not any other browser (yet).


To start off, I think this is something similar to Trojan.flashback or Trojan.yontoo. I say this only because it behaves similarly but the removal kits for these two didn't solve the problem.


In detail, this happens only with Chrome (for now). Whenever I click a link, it would lead to a random ad by replacing the current page or popup page. I would have to refresh the page and click the same link again to get to where I want to go. Another thing I noticed is that when I search in Google, there is a random ad on the right-hand side, which says (this ad not by this site).


I have been unsuccessful in getting rid of this and I would appreciate much help.


OS 10.6.8

Java and Software all up-to-date.


So far I have tried the following:

1. Checking internet plugins folder under Library, and deleting suspicious ones.

2. ClamXav scan

3. Dr.Web light

iMac, Mac OS X (10.6.8)

Posted on Apr 3, 2013 6:08 AM

Reply
44 replies

Apr 3, 2013 6:14 AM in response to Daew

Your machine does not have a virus, there are none for OS X. The first thing to try is create another user account (call it TEST) log into that account and re-test. If the problem goes away that points to your user account having some software issue and the problem not being global. Post back after trying the new user account.

Apr 3, 2013 6:43 AM in response to Daew

In addition to Thomas Reed's site that AnaMusic directed you to, also read Klaus's User Tipon Viruses, Trojans, etc. Just because there are anti-virus programs sold does not mean there are viruses in the wild that affect or infect Mac OS X...there have been no verified viruses found for Mac OS X systems. Stay away from anti-virus software, many such cause damage to the Mac operating systems.

Apr 3, 2013 7:04 AM in response to Aleksdev

You may correct me but you would be wrong. There are no viruses for OSX, however there are a few Trojans. The best method of keeping your system malware free is keeping OS X up-to-date by running Software Update frequently. Also NEVER download some thing unless you request it and even then be wise and do not download from unfamiliar / untrusted sites.

Apr 3, 2013 7:13 AM in response to rkaufmann87

That is such an incredible lie it's unreal. I suppose that security updates are pointless then right, becasue if there are no vulnerabilites you can't be hacked either. Both hackers and viruses use the same doors after all. I also suppose there wasnt a recent Java/Flash virus crisis that caused Apple to stop releasing updates to Flash through the Software Update and give the privilege back to Adobe who were faster at doing it anyway. Oh and these are all lies:


http://mac-antivirus-software-review.toptenreviews.com/history-of-macintosh-viru ses.html

http://nakedsecurity.sophos.com/2013/02/19/apples-own-macs-bitten-by-java-based- malware-attack/

http://www.huffingtonpost.com/2013/02/19/apple-java-update-mac-download-security _n_2720300.html



The problem with Mac viruses and the reason they are so dangerous is that every Mac fan and even Apple themselves will tell you till tehy are blue in the face that they don't exist just to save face. See here:


http://nakedsecurity.sophos.com/2008/12/03/mac-anti-virus-support-advice-disappe ars-off-apple-website/


Finally, I recommend trying this:


http://us.norton.com/mac-flashback/promo


If it comes up blank then you have Flashback trapped in your Chome Flash Player (Chrome doesnt use the built in Flash, it has it's own copy). Delete Chrome using Appcleaner (You MUST use a utility that deletes Chrome's libraries for this to work) then redownload (from a different browser) and install afterward and post back.

Apr 3, 2013 7:52 AM in response to Daew

You probably have a browser extension installed in Chrome that is causing the problem. There are a number of junk adware extensions out there that will do this sort of thing. They're not usually classified as malware, except in cases like Yontoo, where the software uses false pretenses to get itself installed.


In Chrome, choose Windows -> Extensions. This should open a page that lists all your extensions. The only one installed by default is the Google Docs extension... any others are suspect. What extensions do you see?

Help! My iMac has a trojan

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.