Hello there
I inserted a usb memory device into my macbook's usb port which had virus on it. After that if I insert any usb into my mac, all the files are seen by link extension not only in my mac but also in other windows computers.
Is there any way to remove that virus from my mac, as I cannot use any usb?
I've already said I think you are right in this case, however you made a definitive statement that simply isn't correct.
thomas_r. wrote:
There is no malware that can affect a Mac simply by plugging a USB flash drive into the computer, and Windows malware cannot affect the Mac at all.
Malicious software can run by simply attaching a USB stick to a Mac, I assumed as someone interested in security you would want to be accurate and fully aware of this possiblity.
There is no malware that can affect a Mac simply by plugging a USB flash drive into the computer, and Windows malware cannot affect the Mac at all.
Files being replaced by .lnk files is a common symptom of Windows malware. Some malware programs do this, hiding or encrypting the original files, and demanding payment from the user in exchange for restoring their files. Any drive that is experiencing these symptoms has been used on an infected Windows machine. The Mac is not involved at all.
thomas_r. wrote:
There is no malware that can affect a Mac simply by plugging a USB flash drive into the computer, and Windows malware cannot affect the Mac at all.
That is not strictly true. A USB device can masquerade as a 'HIDdevice' - a keyboard, mouse etc. It can do anything that your keyboard can do (like spotlight for terminal then rm your home folder)...
A tool called a 'rubber ducky' already does this. Whilst it technically isnt a virus or malware, it should be considered malicious & a potential entry point. At the very least you should consider it dangerous to connect an unknown USB device.
Here is an example for installing a backdoor via single user mode. Simpler scripts can alter your Mac without single user mode.
I'm certain you are correct in this case Thomas, and your site is very helpful, but it could be time to rethink your answer since the times are a changin.
<Link Edited by Host>
You're talking about the construction of a specialized USB device inserted by a malicious individual with physical access to a machine. That is not what is being discussed here. We're talking about a normal USB flash drive being inserted by the owner of the machine.
Yup.
It's also a commercially available device that can be housed in a USB memory stick case & left for anyone to find & insert into to a computer.
It's a long shot, but not an impossible attack, Mac's can be compromised via USB is my point.
smorshed didn't say where the stick came from.
This is more than a long shot. It's extraordinarily improbable and doesn't explain the .lnk files, which are easily explained by fairly common Windows malware. There would be no reason whatsoever for Mac malware to create Windows .lnk files.
Malicious software can run by simply attaching a USB stick to a Mac
No, it can't. The "Rubber Ducky" described in the article you referred to earlier is a specialized hardware device, not a USB flash drive. Could it be made to look like a regular USB flash drive? Of course. Would it be found getting passed around from person to person like a virus, or being sold in stores as if it were a flash drive? No and no. It's a hacker tool, meant to be used to quickly hack a computer given a very brief period of physical access. An "evil maid attack" is an example of the real-world usage of such devices.
There is no known way for an unmodified flash drive to infect a Mac just by plugging it in.
I understand that Mac won't be affected by a malware. The Ink extension is purely a windows malware.
However, if I insert any usb flash drive into my mac, all the files on it are affected and got Ink extension. So I don't actually get anything from usb drive which is a huge problem for me.
Secondly, if I take some file to a usb flash drive from my mac and insert it to a windows desktop, Ink files are created automatically. So there are two files one being normal and other being affected by Ink extension. And sometime all the files are gone if not within a folder. If I keep them in a folder then sometimes I can save the files in that flash drive.
I will buy a new flash drive today and try it, Let's see what happens?
smorshed wrote:
I understand that Mac won't be affected by a malware.
Then you have misunderstood. There is malware that can affect the Mac. It's just that there isn't any that can affect the Mac simply by inserting a normal USB flash drive, nor is there any that behaves in the way you describe.
However, if I insert any usb flash drive into my mac, all the files on it are affected and got Ink extension.
That's definitely not being caused by the Mac. Any flash drive behaving this way has been damaged by an infected Windows machine. I'm not an expert in how this malware presents itself on Windows. The malware on the Windows machine might cause the contents of those drives to display differently on the infected machine, or the .lnk files are displayed differently on Windows. In any case, the problem only becomes evident when you connect to the Mac, but that does not mean that the Mac is causing the problem.
USB port affected by virus
