Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Trojan found on Mac by Avast?

I know Avast! isn't the best, but this is the only time it's given me an "infection" detection so far. The file was an "alekspack10.jar" file and considered a trojan.


I already deleted it using Avast! but what I want to know is was that enough? Does that take it off of my computer? Is there any other way I can scan for it on my computer?


I know this isn't the Avast! forums, but if there's anything else I can do to make sure that (possible) trojan is off of there I would like to know.

iMac, Mac OS X (10.6.8)

Posted on Apr 1, 2014 5:43 AM

Reply
15 replies

Apr 1, 2014 5:53 AM in response to OFQ

If Avast! deleted it, then it should be gone. However, that does not address where it came from. You should check the log carefully for any listing of where Avast! found it, and figure out what additional preventive safeguards you may want to implement. Most dangers from Trojans or other viruses like that won't do anything to a Mac system unless you somehow double-click on it and run it.

Most are actually Windows infectors carried to you via email or download of some sort.

Apr 1, 2014 6:35 AM in response to OFQ

I have too 4 Trojan virus and it found the avast. Is nothing because it's Windows virus it can't effect your Mac, I take the apple support it's sure .


BUT

If you have windows is very dangerous for your windows and the mac cause this virus close your firewall protection and then delete your user(s)

Apr 1, 2014 6:50 AM in response to OFQ

Avast has serious, long-term problems with false positives. I would recommend uninstalling it.


This particular detection is most likely an error, as Csound1 has pointed out. However, there's no guarantee that the file is actually related to Aleks just because it has that in the name. Malware commonly uses tricks like naming itself after legit software.


Because of this, I'd ask what specific trojan this was identified as. I would also ask you to locate that file and upload it to VirusTotal:


https://www.virustotal.com


VirusTotal will scan the file with a large number of anti-virus engines and give you the results. Post a link to the results page here.


After you have resolved this situation and removed Avast, I would recommend that you see my Mac Malware Guide. If you decide that you still want to have anti-virus software at that point, use one of the ones recommended there.

Apr 1, 2014 6:58 AM in response to thomas_r.

thomas_r. wrote:


Avast has serious, long-term problems with false positives. I would recommend uninstalling it.


This particular detection is most likely an error, as Csound1 has pointed out. However, there's no guarantee that the file is actually related to Aleks just because it has that in the name.

The file referred to ( "alekspack10.jar" ) is a legitimate part of the Aleks software, but that does not prove that this is the actual file, or some malware masquerading as the file.

Apr 1, 2014 10:36 AM in response to OFQ

All right, well I already had deleted it before posting this but I can check to see if I can still find the file.


I've been using Avast! for about 2 years already and this is just the first time. Mostly I've just gotten warnings, this is the first time for an infection and my brother had never gotten one yet.


But I will look to see if I can tell where I got it from and will check out the mac malware stuff. Thanks!

Apr 1, 2014 11:12 AM in response to OFQ

I already had deleted it before posting this but I can check to see if I can still find the file.


If you have backups, you might be able to find it there. (If you don't, you should drop everything you're doing and focus on starting a backup system. Literally.)


I'd also point out that the knee-jerk reaction that causes people to immediately delete things detected as malware is a bad one. You should NEVER allow anti-virus software to immediately delete something that it determines is malicious, nor should you delete it yourself until you have done your homework.


Deleting "infected" files automatically is bad for several reasons:


* It could be a false positive, and deleting it could destroy valuable data, damage an application or damage your system.


* If it's actually malicious, it could be a new variant of something else, and ought to be submitted to the security community (via VirusTotal) so they can do a better job of keeping you safe.


* If it's actually Mac malware, you need to know exactly what it is so that you can find out more about how to get rid of it. Some Mac malware can be removed fairly easily, but other malware should never be removed by any method other than erasing the hard drive and starting fresh.


For more information on how to properly deal with such things, see:


How to remove infected files

Apr 2, 2014 6:23 PM in response to thomas_r.

Wow, sounds kind of angry there (I'm not a computer expert obviously), but I do have an external hardrive I can try to find it on.


But I will try to do it when I can, it should still be on the backup. It may not happen right away, I'm dealing with a ton of other things but I will do it when I can.

Trojan found on Mac by Avast?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.