Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Help! My iMac has a trojan

This happens only with Chrome, not any other browser (yet).


To start off, I think this is something similar to Trojan.flashback or Trojan.yontoo. I say this only because it behaves similarly but the removal kits for these two didn't solve the problem.


In detail, this happens only with Chrome (for now). Whenever I click a link, it would lead to a random ad by replacing the current page or popup page. I would have to refresh the page and click the same link again to get to where I want to go. Another thing I noticed is that when I search in Google, there is a random ad on the right-hand side, which says (this ad not by this site).


I have been unsuccessful in getting rid of this and I would appreciate much help.


OS 10.6.8

Java and Software all up-to-date.


So far I have tried the following:

1. Checking internet plugins folder under Library, and deleting suspicious ones.

2. ClamXav scan

3. Dr.Web light

iMac, Mac OS X (10.6.8)

Posted on Apr 3, 2013 6:08 AM

Reply
44 replies

Apr 3, 2013 9:37 AM in response to WZZZ

And beyond that, consider that malware (including viruses & social exploits of all kinds) often affect even those whose computers are not infected with them.


We Mac users don't live in a closed world. There is probably lots of personal info about each of us on dozens if not thousands of other computers accessible through the Internet. Even if we do nothing besides accidentally pass some malware that can't infect our computers on to someone's computer that it can, it can materially impact our personal security & privacy.


Silly as it sounds, it might help to think of it a little like the example of Typhoid Mary. Like with biological viruses effectively stopping the spread of computer malware is a cooperative effort, sometimes necessitating the participation of those that are immune to their direct effects.

Apr 5, 2013 2:30 AM in response to thomas_r.

Oh my, since my original post, so much tangential arguments went by that I stopped following my own post for a while. The issue is still persisting, and I am happy to see that there are many bright minds here who all can probably help me. I am unfortunately out for the day, so when I return tomorrow I will post the list of plug-ins I see for Chrome. Just to let you know for now, I did reinstall Chrome, but didn't fix the issue (but I haven't deleted all the plugins yet).

Apr 5, 2013 3:44 AM in response to Daew

I did reinstall Chrome, but didn't fix the issue (but I haven't deleted all the plugins yet).


Yeah, reinstalling Chrome wouldn't work, because the installed Chrome extensions would stay behind and be used by the fresh copy of Chrome. I know it got loud here, but the important thing is that you check your Chrome extensions.

Apr 6, 2013 12:16 AM in response to Daew

Daew wrote:


The problem solved! I deleted all the plugins, but still didn't solve the problem.

I think all but one of us told you that it would not.

I went ahead and deleted all extensions for Chrome. Voila! The problem is no longer present.

I'm certainly happy for you, but since you never told us what those extensions were and you deleted them all at once, we won't know how to help the next user with this problem.


This is the Apple Community Support forum and most of us are here to try and help the Community.

Apr 7, 2013 2:49 PM in response to Daew

Daew wrote:


I revisited with my best efforts, and the likely culprit was a Chrome extension called "FastSave." I have no recollection of installing this extension...

That's one of the usual suspects that get's installed when you don't notice an opt-in check box while doing something else in Chrome. It's been going on for at least six months now. Torrent downloads are one such known source.

Help! My iMac has a trojan

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.