Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

The best spyware/malware detection and removal solution in 2014?

Lately I keep get odd little blips on my Mac screen when I open apps and or use various browsers. I uspect that spyware or some other malware somehow has been installed on my machine. I have since installed highly recommended always-on security apps like Avast and Avira and Kasperski for live filtering (thinking that what one does not catch another will) along run-only-on-command apps like BitDefender and ClamX (each catches items the other misses).


I am still seeing the little blips, if fewer than before, so I wonder if there is still some root level malware that has not yet been detected and removed.


I am looking for solutions.


One option is upgrading to Mavericks, but I still havesome criticval apps that are not yet Mavericks compliant, so that delays the upgrade.


Another option is wiping my disk, doing a clean reinstall of the OS, and re-installing apps one at a time (means I lose days of productivity as all get rebuilt).


Another option is finding and installing better spyware detection and removal app (or apps) than I have installed so far.


I searched the Apple support communities and found some older related posts, some going back to 2007 or 2009, which are not relevant today, such as the advice to use MacScan (no longer deemed a viable app), and the ongoing debate whether MacKeeper itself is malware.


I want feedback and suggestions for the hard realities of life on the net at the beginning of 2014. In answering my request, you might help thousands of other Mac users.


Thanks!

MacBook Pro, OS X Mountain Lion (10.8.2), Mid-2010 MacBook Pro 15 inch

Posted on Jan 5, 2014 1:04 PM

Reply
89 replies

Apr 19, 2014 4:40 AM in response to Carlo-020

I run Sophos on both Snow Leopard and Mountain Lion. Perhaps not really needed on the ML, since it is continuing (hopefully) to receive security updates, but employed anyway because Apple can be lackadaisical in getting out XProtect updates (its native, but quite limited A-V), as well as OS security updates. Sophos hasn't caused any problems to speak of with either OS, except some minor slowness when it's checking against its database of malware and URL definitions. I don't know if it has definitions for keyloggers (spyware), but I'd be leaning towards thinking that it doesn't. If you want to run any A-V, I would recommend it. And it's free. It comes with an uninstaller in case you want to get rid of it for any reason. Also, this free Mac edition has been around for a few years now, so it's been tested on quite a few machines and through a number of different versions. I didn't want to use it when it was first released, but I feel much better about it now.



Searching for "Sophos + keyloggers" brings up these two hits.


On Sophos Antivirus for Mac home edition, there is currently no Application Control, so all keyloggers for OS X are generally blocked as either Mal/ or Troj/. Some legitimate programs which could be used for logging are not detected, as they aren't malicious in themselves. We do detect applications and scripts that attempt to drop/install keyloggers on a system without the user's permission.



http://openforum.sophos.com/t5/Sophos-Anti-Virus-for-Mac-Home/keylogger/td-p/156 7


This second link is not for the free Mac version.


http://community.sophos.com/t5/Sophos-EndUser-Protection/Detection-of-Commercial -Keyloggers/td-p/42936

Apr 19, 2014 7:05 AM in response to judahman

Strange experience!

I don't know if it is just me, but I feel like the 80s were people using computers are completely unaware of the dangerous lurking around the corner, the dangerous we now call Viruses or Trojans

it sounds strange to me that in this discussion about security and related topics everybody agrees that is no antivirus program what sticks out in reliability/performance/trustworthiness. It sounds a little bit like Microsoft were claiming to have a very solid and secure product now in 2014 they agree that it is virtually impossible to make a product is completely secure against any aggressive attack to octane information from computer.

How is it possible that Apple claims it can do what no operating system before were able to do?

In a discussion about security, actually the lack of solid AV programs takes me completely by surprise, I have spent the 30 years on computers, but never found myself so insecure when it comes to McIntosh, the words denial comes to mind in regards to the vulnerability of the Macintosh computer.

I hope that we will not find out in the near future that everybody can walk in or out a Macintosh computer like going to the grocery shop.

Apr 19, 2014 7:18 AM in response to Carlo-020

You seem to be striking an argumentative tone, but you're not actually addressing things that have been said, and are making some very erroneous assumptions. You do not seem to have read the things that we have recommended you read. If you wish to have a discussion about security, that's fine, but you need to do your homework first, rather than talking about claims and denials that do not actually exist.

Apr 19, 2014 7:25 AM in response to Carlo-020

In a discussion about security, actually the lack of solid AV programs takes me completely by surprise,

This discussion was originally started by someone who wanted to be sure that there were no infections, backdoors, or spyware on his computer--and he also indicated that it may have been possible that someone had unauthorized physical access to his computer. Given that context, he was told that there was nothing that would indicate with 100% certainty that his computer has not been intruded upon. That was the context for this, and he was therefore told that it would be best to wipe the drive and then reinstall only known and safe items.


"Lack of solid A-V programs:" No A-V program can provide 100% security, for a variety of reasons, the foremost being that for an A-V to detect some form of infection it needs to have been spotted somewhere and then cataloged. And the problem with that is that even if a threat has been cataloged by the best and most comprehensive A-V, it may emerge within a few hours or several days in a different form which then won't be detected. It's a constant cat and mouse game. The mice are very smart and are usually staying one step ahead of the cats.

Apr 19, 2014 7:34 AM in response to WZZZ

Solid A-V = a program what users in can agree on to be trustworthy proactive and hands-on in providing the best possible security to his use. With the emphasis on the users and not on and well oiled marketing strategy. as I stated before Microsoft basically threw in the towel as it is virtually impossible to make an operating system bullet-proof.

Apr 19, 2014 7:54 AM in response to Carlo-020

I already told you that I am using Sophos because I don't think Macs are immune to malware. There are a lot of junk A-V programs around, but from what I have read it is probably one of the strongest and least problematic. But as I already said, no A-V can provide complete protection. And probably the best A-V is to exercise safe practices in browsing and downloading, and keep things updated. For extra security, I also run Firefox with the NoScript extension, and Adblock Plus (malware can be delivered via ads.) You might want to look into those.


Unless you have something to add that isn't just a repeat of what you've already said, I'm beginning to think further discussion here is pointless.

Apr 19, 2014 8:27 AM in response to Carlo-020

After testing all available AV for Mac for almost a year I'd have to label Intego as the best option right now. This is only by looking at how well it detects malware/adware/spyware/etc. How well it does compared to other when it comes to system performance and impact I do not know but it runs great on my Mac Pro.


Intego can be the best today and replaced by another tomorrow, it's a scene that changes fast and without warning so rather than focussing on a single AV, look for trends. AV's that perform well over a long period of time are more likely to continue doing well but again, no statistics to back this up.


There's no problem choosing an AV and replacing it with another if you find it performs better. I have often switched between Sophos, Avast, Intego and Avira in the past. Whatever I felt did better at the time is what would be installed on my system 🙂 Just make sure you properly uninstall older AV before installing a new one.

Apr 19, 2014 9:26 AM in response to Allan Eckert

Just out of curiosity:

- Which AV have you used that are worthless or are you stating all AV are worthless?

- Did all AV you tried cause issues?

- Were the AV you tried complicated to use? (going to the 'wasting your time' and 'getting more done' by not using them)

- Did you use these AV on an older Mac? (I find a Mac has to be pretty old for a good AV to impact system performance or hog resources)

Apr 19, 2014 1:22 PM in response to Carlo-020

Carlo-020 wrote:


How is it possible that Apple claims it can do what no operating system before were able to do?

I don't think Apple ever made that brazen a claim and they have been silent on the matter for several years now. There are relatively detailed explanation of what protection they do provide, which I find to be largely complete and accurate. They don't even make claims of being better than Windows in their ads any more. About the only thing I don't know is what "...the most common variants of malware" are removed by the Malware Removal Tool when it runs and a couple of details on how XProtect updates works in Mavericks.

The best spyware/malware detection and removal solution in 2014?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.