-
All replies
-
Helpful answers
-
Nov 7, 2014 7:14 PM in response to derekfromonby Kappy,All of those are OS X system files. Why do you think you have a virus? What version of OS X do you have, and what is the exact model of your computer? Please describe in detail what is happening to make you think you have a virus.
See the following:
Helpful Links Regarding Malware Problems
If you are having an immediate problem with ads popping up see The Safe Mac » Adware Removal Guide and AdwareMedic.
Open Safari, select Preferences from the Safari menu. Click on Extensions icon in the toolbar. Disable all Extensions. If this stops your problem, then re-enable them one by one until the problem returns. Now remove that extension as it is causing the problem.
The following comes from user stevejobsfan0123. I have made minor changes to adapt to this presentation.
Fix Some Browser Pop-ups That Take Over Safari.
Common pop-ups include a message saying the government has seized your computer and you must pay to have it released (often called "Moneypak"), or a phony message saying that your computer has been infected, and you need to call a tech support number (sometimes claiming to be Apple) to get it resolved. First, understand that these pop-ups are not caused by a virus and your computer has not been affected. This "hijack" is limited to your web browser. Also understand that these messages are scams, so do not pay any money, call the listed number, or provide any personal information. This article will outline the solution to dismiss the pop-up.
Quit Safari
Usually, these pop-ups will not go away by either clicking "OK" or "Cancel." Furthermore, several menus in the menu bar may become disabled and show in gray, including the option to quit Safari. You will likely have to force quit Safari. To do this, press Command + option + esc, select Safari, and press Force Quit.
Relaunch Safari
If you relaunch Safari, the page will reopen. To prevent this from happening, hold down the 'Shift' key while opening Safari. This will prevent windows from the last time Safari was running from reopening.
This will not work in all cases. The shift key must be held at the right time, and in some cases, even if done correctly, the window reappears. In these circumstances, after force quitting Safari, turn off Wi-Fi or disconnect Ethernet, depending on how you connect to the Internet. Then relaunch Safari normally. It will try to reload the malicious webpage, but without a connection, it won't be able to. Navigate away from that page by entering a different URL, i.e. www.apple.com, and trying to load it. Now you can reconnect to the Internet, and the page you entered will appear rather than the malicious one.
An excellent link to read is Tom Reed's Mac Malware Guide.
Also, visit The XLab FAQs and read Detecting and avoiding malware and spyware.
See these Apple articles:
Mac OS X Snow Leopard and malware detection
OS X Lion- Protect your Mac from malware
OS X Mountain Lion- Protect your Mac from malware
OS X Mavericks- Protect your Mac from malware
If you require anti-virus protection Thomas Reed recommends using ClamXAV. (Thank you to Thomas Reed for this recommendation.)
From user Joe Bailey comes this equally useful advice:
The facts are:
1. There is no anti-malware software that can detect 100% of the malware out there.
2. There is no anti-malware that can detect everything targeting the Mac.
3. The very best way to prevent the most attacks is for you as the user to be aware that
the most successful malware attacks rely on very sophisticated social engineering
techniques preying on human avarice, ****, and fear.
4. Internet popups saying the FBI, NSA, Microsoft, your ISP has detected malware on
your computer is intended to entice you to install their malware thinking it is a
protection against malware.
5. Some of the anti-malware products on the market are worse than the malware
from which they purport to protect you.
6. Be cautious where you go on the internet.
7. Only download anything from sites you know are safe.
8. Avoid links you receive in email, always be suspicious even if you get something
you think is from a friend, but you were not expecting.
9. If there is any question in your mind, then assume it is malware.
-
Nov 8, 2014 12:36 AM in response to derekfromonby MadMacs0,derekfromon wrote:
I've been reading about PINTSIZED
Why were you reading about it? Where? It's been almost two years since this was discovered. It is described by TheSafeMac as:
Description modified February 21, 2013
This malware is installed via Java vulnerabilities and opens a back door to allow hackers to access your Mac. It was named and described by Intego, and may be responsible for a number of high-profile security breaches.
i have found a file in my launch daemons similar to the files stated that are associated with this virus...i found this file org.cups.cups.plist in my system library launch daemons....can anyone please tell me if this is an infected file??
Similar doesn't count, it would have to be exactly one of the ones described. Are you sure the one you have isn't "cups.cupsd.plist"? Do you have Java installed and enabled in your browser?
Are you having issues with your computer? If so, then you should start a new discussion and clearly state what problems you are observing in as much detail as possible. Never jump to the conclusion that you are infected by malware, since it's rare to run across any these days unless you spend a lot of time on pirated software sites or live in China and OS X 10.6.8 will completely protect you against all commonly found malware that can impact OS X and it's applications as long as you keep it completely up-to-date.
-
Nov 8, 2014 5:31 AM in response to derekfromonby thomas_r.,It's entirely normal to have a file named org.cups.cupsd.plist in the System LaunchDaemons folder. This is not malware.
As MadMacs0 points out, if you are having a problem with your computer, you should start a new topic to discuss that, without mention of malware. If the problem were caused by malware, that will come out in the course of investigating the problem.
If you're not having a problem, I'd strongly advise not trying to rummage through your system looking for files similar to those described in some security company blogs. That's not a decent strategy for detecting malware. Real malware infections on Macs are rare, but if you need to give yourself some peace of mind, download a copy of ClamXav. Scan your hard drive with it, but if anything is found, do not delete it! First, see How to remove infected files.