Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Think my computer may have been hacked?

This could be me just being paranoid but the other day I was browsing the deep web with one of my friends, who convinced me it would be cool to see the "hidden wiki". I said fine, not thinking much of it. We didn't go on any weird CP websites. Just looked at the hidden wiki and a website that sold IDs (didn't buy any, of course). I looked at the top left of the scree and realized the no script was set to "Allow all scripts". I freaked out and then I closed it. Yesterday I was looking at my email and found that it had been signed into in several different places. This scared me. I now have read that the deep web contains viruses, trojans, and other harmful things. So I did a set of 5 commands another forum poster wrote to see if anything is fishy.


com.Symantec.kext.SAVAPComm (12.1)

com.avast.PacketForwarder (1.4)

com.avast.AvastFileShield (2.1.0)

modvvlan503:~ danielwasserman$ sudo launchctl list | sed 1d | awk '!/0x|com\.(apple|openssh|vix)|edu\.mit|org\.(amavis|apache|cups|isc|ntp|postfi x|x)/{print $3}'

com.avast.regapp

com.avast.account

com.avast.fileshield

com.avast.proxy

com.avast.crashreport

com.avast.daemon

com.avast.uninstall

com.avast.init

com.microsoft.office.licensing.helper

com.google.keystone.daemon

com.cloudpath.maccmd

com.adobe.fpsaud

modvvlan503:~ danielwasserman$ launchctl list | sed 1d | awk '!/0x|com\.apple|edu\.mit|org\.(x|openbsd)/{print $3}'

com.microsoft.Office365Service.27136



com.avast.helper

com.avast.userinit

com.spotify.client.29072

com.spotify.webhelper

com.microsoft.Excel.24320

com.microsoft.Word.24672

com.microsoft.Powerpoint.24496

com.google.Chrome.23616

com.microsoft.autoupdate.fba.36992

com.zanapps.sleeptime.28896

com.BlueStacks.AppPlayer.Agent.37344

com.symantec.symsecondarylaunch.application

com.symantec.scannotification.application

com.symantec.savdiskmountnotify.application

com.symantec.quickmenusa.application

com.hp.messagecenter.launcher

com.google.keystone.system.agent

com.facebook.videochat.danielwasserman.updater

com.BlueStacks.AppPlayer.UpdaterAgent

com.BlueStacks.AppPlayer.UninstallAgent

com.BlueStacks.AppPlayer.Service

com.BlueStacks.AppPlayer.LogRotator

modvvlan503:~ danielwasserman$

modvvlan503:~ danielwasserman$



/Library/Extensions:

ATTOCelerityFC8.kext

ATTOExpressSASHBA2.kext

ATTOExpressSASRAID2.kext

ArcMSR.kext

CalDigitHDProDrv.kext

HighPointIOP.kext

HighPointRR.kext

PromiseSTEX.kext

SoftRAID.kext



/Library/Input Methods:


/Library/Internet Plug-Ins:

Default Browser.plugin

Flash Player.plugin

Quartz Composer.webplugin

QuickTime Plugin.plugin

SharePointBrowserPlugin.plugin

SharePointWebKitPlugin.webplugin

Silverlight.plugin

flashplayer.xpt

googletalkbrowserplugin.plugin

nsIQTScriptablePlugin.xpt

o1dbrowserplugin.plugin


/Library/Keyboard Layouts:


/Library/LaunchAgents:

com.avast.userinit.plist

com.google.keystone.agent.plist

com.hp.messagecenter.launcher.plist

com.oracle.java.Java-Updater.plist

com.symantec.quickmenusa.application.plist

com.symantec.savdiskmountnotify.application.plist

com.symantec.scannotification.application.plist

com.symantec.symsecondarylaunch.application.plist



/Library/LaunchDaemons:

com.adobe.fpsaud.plist

com.avast.init.plist

com.avast.uninstall.plist

com.cloudpath.maccmd.plist

com.google.keystone.daemon.plist

com.microsoft.office.licensing.helper.plist

com.oracle.java.Helper-Tool.plist


/Library/PreferencePanes:

Avast.prefPane

Flash Player.prefPane

JavaControlPanel.prefPane

SymAutoProtect.prefPane

SymantecSAQuickMenu.prefPane


/Library/PrivateFrameworks:

SymAppKitAdditions.framework

SymBase.framework

SymIR.framework

SymScheduler.framework


/Library/PrivilegedHelperTools:

com.cloudpath.maccmd

com.microsoft.office.licensing.helper


/Library/QuickLook:

iBooksAuthor.qlgenerator

iWork.qlgenerator


/Library/QuickTime:

AppleIntermediateCodec.component

AppleMPEG2Codec.component


/Library/ScriptingAdditions:


/Library/Services:

ScanService.service


/Library/Spotlight:

Microsoft Office.mdimporter

iBooksAuthor.mdimporter

iWork.mdimporter


/Library/StartupItems:

NortonMissedTasks

SMC

SymAutoProtect


/etc/mach_init.d:


/etc/mach_init_per_login_session.d:


/etc/mach_init_per_user.d:


Library/Address Book Plug-Ins:


Library/Fonts:


Library/Input Methods:

.localized


Library/Internet Plug-Ins:

BlueStacks Install Detector.plugin

FacebookVideoCalling.bundle


Library/Keyboard Layouts:


Library/LaunchAgents:

com.BlueStacks.AppPlayer.LogRotator.plist

com.BlueStacks.AppPlayer.Service.plist

com.BlueStacks.AppPlayer.UninstallAgent.plist

com.BlueStacks.AppPlayer.UpdaterAgent.plist

com.avast.home.userinit.plist

com.facebook.videochat.danielwasserman.plist

com.spotify.webhelper.plist


Library/PreferencePanes:


Library/Services:

Import into NOOK Study.workflow

modvvlan503:~ danielwasserman$ osascript -e 'tell application "System Events" to get name of every login item' 2> /dev/null

uHD-Agent, iTunesHelper, SleepTime, Spotify, uTorrent, BitTorrent

modvvlan503:~ danielwasserman$

modvvlan503:~ danielwasserman$


I don't see anything too weird... but I'm not savvy with this. I know this seems really trivial but it would mean a lot if someone could check this out. I appreciate it in advance.


Also, If I were to be extra careful, sould backing up my stuff to an external hard drive and reformatting my disk to factory settings put me in the clear? Thank you! I really appreciate any feedback 🙂

MacBook

Posted on Jun 10, 2014 2:41 AM

Reply
1 reply

Jun 10, 2014 6:07 AM in response to dwass212

Your biggest problem is Avast & Symantec, rather than being hacked; although downloading & opening software from torrent sites could easily leave you wishing that you hadn't.


Unless you had Java enabled in your web browser preferences, or an outdated Flash plug-in, there's no danger in visiting any wesbite unless you download & open/install/run something.

Think my computer may have been hacked?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.