Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Help! My iMac has a trojan

This happens only with Chrome, not any other browser (yet).


To start off, I think this is something similar to Trojan.flashback or Trojan.yontoo. I say this only because it behaves similarly but the removal kits for these two didn't solve the problem.


In detail, this happens only with Chrome (for now). Whenever I click a link, it would lead to a random ad by replacing the current page or popup page. I would have to refresh the page and click the same link again to get to where I want to go. Another thing I noticed is that when I search in Google, there is a random ad on the right-hand side, which says (this ad not by this site).


I have been unsuccessful in getting rid of this and I would appreciate much help.


OS 10.6.8

Java and Software all up-to-date.


So far I have tried the following:

1. Checking internet plugins folder under Library, and deleting suspicious ones.

2. ClamXav scan

3. Dr.Web light

iMac, Mac OS X (10.6.8)

Posted on Apr 3, 2013 6:08 AM

Reply
44 replies

Apr 3, 2013 7:54 AM in response to AnaMusic

Thomas must have a redirect on it because it goes to the same 'The Safe Mac' page...


Yup, I didn't want to kill all the links to my old site when I changed it, so all the reedcorner.net addresses redirect to the corresponding page on The Safe Mac. I do prefer thesafemac.com links to be used now, though I'm not going to have a conniption about use of the older links either! 🙂

Apr 3, 2013 8:03 AM in response to Aleksdev

That article is so far out of date it is worthless. Everything it talks about has been handled as long as your Mac software is up todate.


A Trojan is not a virus. A virus is self replicating code that is capable of propagating on its own. A Trojan on the other hand ask for your permission to install itself. Hence they are totally different things.


Allan

Apr 3, 2013 8:07 AM in response to rkaufmann87

Okay, first and foremost I am not trolling seventy one. If you think I am I refer you to the post above about Apple removing thier own article after the media started reporting on it, in order to save face.


On viruses for i-OSX you say. I think you're mistaking iOS for OSX, I'm not sure. Anyway, I just said one. Flashback is an exploit that can replicate and spread pretty easily. Any security hole that has the capability to gain elevated access or even user acess (enough to copy itself to a USB drive) has the potential to be a virus by the strict definition, it's just pointless on Mac as the chance of one users Mac making direct contact with anothers is orders of magnitude lower than Windows. Sure it's been patched but so has 99% of Windows viruses.


Now as for the looser definition of Virus, which is what the OP's problem would come under, here's a list from 3 mins of googling.


Olxy backdoor

Blackhole RAT version 2 (also known as Musminim)

Bancos

FakeAVZp-B

Bckdr-RID

FakeAv-DD

Olyx.Backdoor

backdoor.wirenet.1

Good old OSX/Leap

OSX/DNSChanger

OSX/RSPlug

OSX/Jahlav

MacSweeper

OSX/Krowi

OSX/Hellrts


And the the guys that want to argue semantics about who's at fault. I don't care. When your computer becomes part of a 1 million strong Mac botnet you shouldn't care who's fault it is, you should care about getting rid of it and making sure it doesnt happen again.

Apr 3, 2013 8:14 AM in response to rkaufmann87

Kaufmann: Do you see the kind of unnecessary confusion saying there are no OSX viruses brings, when it's clear (for the ten millionth time) that 99.99% of people who employ that term are using it to mean malware, or, aka, anything they think, rightly or wrongly, is an infection? Why do you insist on repeating this misleading comment (rather "tic") ad infinitum? What possible purpose other than serving as fodder for an argument from people who are sure there are viruses, meaning malware, does it serve?

Apr 3, 2013 8:09 AM in response to Aleksdev

A trojan is a virus please correct me if I'm wrong


There's a lot of needless arguing and misinformation going on here, ironically in response to an issue that isn't actually caused by malware at all.


First, let's get terminology straight. "Malware" is a catch-all term for all malicious software. Trojans, viruses, worms, rootkits, etc all fall into this category. This is the best term these days, as many malicious programs don't actually fit perfectly in any of those sub-categories.


A "trojan" is a program that tricks the user into installing it, and cannot get installed by itself. Most Mac malware lies firmly within this category. A "virus" is a self-replicating program that attaches itself to another program in order to infect new systems. There is no Mac malware that fits that definition. A "worm" is similar to a virus, except that it does not need to attach itself to anything, and there are also no Mac worms. A "rootkit" is any kind of malware capable of illicitly attaining root-level permissions... method of installation is irrelevant.


So, technically speaking, it is true that there are no Mac viruses. On the other hand, most people do not properly understand what these definitions mean, and they often interpret the word "virus" to mean what the word "malware" does. Thus, I see no value, and much potential harm, in stating that there are no Mac viruses.


Regarding recent Java- or Flash-related outbreaks, such as Flashback, the malware involved in those cases does not fit strictly in any category. Malware that sneaks in through vulnerabilities in third-party software (like Java or Flash) is not a trojan, since it does not require the user's assistance to install itself. However, it is also not a virus or worm, as it is not self-replicating. Users must visit a compromised web site in order to become infected. This malware also would not usually be called a rootkit, as most of the time root access is not obtained, or even sought out.


For more information on this sort of thing, see my Mac Malware Guide, which Ana referred to earlier.

Apr 3, 2013 8:11 AM in response to thomas_r.

Thomas A Reed wrote:


Thomas must have a redirect on it because it goes to the same 'The Safe Mac' page...


Yup, I didn't want to kill all the links to my old site when I changed it, so all the reedcorner.net addresses redirect to the corresponding page on The Safe Mac. I do prefer thesafemac.com links to be used now, though I'm not going to have a conniption about use of the older links either! 🙂


Already Update my Links 😀


Thanks Thomas 🙂

Apr 3, 2013 8:13 AM in response to thomas_r.

No, lets get the terminology straight. English is decided by the speakers, not by the facts. Sure, a Virus may or may not be a specific type of malware, but the fact is that it occupys a lot more mindshare as a word, and your common man on the street will refer to any form of malware as a Virus. Thus the terms are interchangeable.


We dont; really get "true" Virii anymore anyway, UAC and good security controls saw to that.

Apr 3, 2013 8:22 AM in response to thomas_r.

Thomas A Reed wrote:

Thus, I see no value, and much potential harm, in stating that there are no Mac viruses.

+1 for that. In fact, I consider it irresponsible to say that there are no Mac viruses without explaining the difference between viruses & other types of malware, which most certainly can & sometimes do infect OS X users.

Apr 3, 2013 8:48 AM in response to seventy one

Are YOU trolling? I at no point mentioned rewriting the english dictionary. I mentioned being accomodating of differences in peoples meaning when they say the word virus, but there was no talk of dictionary. I even mentioned Wikipedia, and it stating in the second line that people use The word Virus as a catchall incorrectly. Doesn't stop it from being the way people use it.


Here's another example. Technically Americans are from America the landmass(continent), and there is no such thing as America the country as the CIA mandates that the shorthand for United States of America is The US, however it doesnt stop people from saying 'I'm from America' and people knowing that they are from the USA and not Argentina. In Amreican English, the refer to the continent as 'The Americas' but the rest of the world doesnt. And before you suggest North and South America, know that there is 7 ways fo classifying continent and many of the state that 'The Americas' is a landmass and therefore 1 continent. If you know what they mean, why argue the point?

Help! My iMac has a trojan

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.