Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

cnet download

Hi all,


This is my first mac computer and recently just got it. I just downloaded the app 'Scroll Reverser' from CNET. After reading about CNET notoriously loading malware, adware, etc. in their downloads, I am concerned I may have infected my mac with something I do not know of (as I do not have antivirus installed on it). I have deleted the download from my trash bin, so is there any more potential risk associated with it?


Thanks.

Posted on Mar 24, 2015 8:24 AM

Reply
7 replies

Mar 24, 2015 8:48 AM in response to KiltedTim

The thing is, I downloaded the app originally from the actual developer, then seeing as it was quite complex (the app), I downloaded the cnet app (which was the same app). The original app required some sort of access (via Security and Privacy) in order to work (which I entered). The app itself works fine, but I am unsure as to whether I gave access to the original app or the cnet version. so is this a cause for concern?


Note: the app was actually BetterTouchTool for Mac, not Scroll Reverser

Mar 24, 2015 9:57 AM in response to BladeFURY

If your Mac is behaving normally it is unlikely you installed anything malicious. If you are in doubt, describe any symptoms you think may be relevant.


(as I do not have antivirus installed on it)

That is a common misconception. OS X already includes robust anti-virus and anti-malware protections and you should install no other product claiming any additional benefit. The extant threat to OS X today is adware, and I would not at all be surprised if C net were hosting it. That's the reason for the admonition to avoid it, as well as any other source of software not specifically authorized by its developer. Never download anything from a site that derives its revenue primarily from advertisements. They are not to be trusted.


Read the following to determine if adware may have been installed on your Mac: How to install adware. If you did nothing resembling what it describes, then you have no justification for concern.

Mar 25, 2015 2:14 AM in response to BladeFURY

I heard ClamXav was a useful anti-malware program though, has anyone had any experiences with it?


Non-Apple "anti-virus" software serves no purpose for OS X. Read more on that subject below. The highest praise about ClamXav is that it won't harm your Mac, unlike most other tools like it. It won't do anything beneficial though, cannot possibly prevent you from intentionally installing adware (which it appears you did not do), and if you decide to use tools like it you must familiarize yourself with its operation and respect its capabilities and limitations.


"C - net" and its affiliate site "download dot com" are only a couple examples of untrustworthy sources of Mac software. If you want something that is not available from the Mac App Store, always obtain it from a source specifically authorized by its developer. Performing a cursory web search for Mac software will primarily yield untrustworthy sources, since they derive significant revenue from hosting advertisements for garbage products that should never be installed on any Mac.



There will always be threats to your information security associated with using any Internet - connected communications tool:


  1. You can mitigate those threats by following commonsense practices
  2. Delegating that responsibility to software is an ineffective defense
  3. Assuming that any product will protect you from those threats is a hazardous attitude that is likely to result in neglecting point #1 above.

OS X already includes everything it needs to protect itself from viruses and malware. Keep it that way with software updates from Apple.


A much better question is "how should I protect my Mac":

  • Never install any product that claims to "clean up", "speed up", "optimize", "boost" or "accelerate" your Mac; to "wash" it, "tune" it, or to make it "shiny". Those claims are absurd.

    Such products are very aggressively marketed. They are all scams.

  • Never install pirated or "cracked" software, software obtained from dubious websites, or other questionable sources.
    • Illegally obtained software is almost certain to contain malware.
    • "Questionable sources" include but are not limited to spontaneously appearing web pages or popups, download hosting sites such as C net dot com, Softonic dot com, Soft pedia dot com, Download dot com, Mac Update dot com, or any other site whose revenue is primarily derived from junk product advertisements.
    • If you need to install software that isn't available from the Mac App Store, obtain it only from legitimate sources authorized by the software's developer.
  • Don’t supply your password in response to a popup window requesting it, unless you know what it is and the reason your credentials are required.
  • Don’t open email attachments from email addresses that you do not recognize, or click links contained in an email:
    • Most of these are scams that direct you to fraudulent sites that attempt to convince you to disclose personal information.
    • Such "phishing" attempts are the 21st century equivalent of a social exploit that has existed since the dawn of civilization. Don’t fall for it.
    • Apple will never ask you to reveal personal information in an email. If you receive an unexpected email from Apple saying your account will be closed unless you take immediate action, just ignore it. If your iCloud, iTunes, or App Store account becomes disabled for valid reasons, you will know when you try to buy something or log in to this support site, and are unable to.
  • Don’t install browser extensions unless you understand their purpose:

    Go to the Safari menu > Preferences > Extensions. If you see any extensions that you do not recognize or understand, simply click the Uninstall button and they will be gone.

  • Don’t install Java unless you are certain that you need it:
    • Java, a non-Apple product, is a potential vector for malware. If you are required to use Java, be mindful of that possibility.
    • Java can be disabled in System Preferences.
    • Despite its name JavaScript is unrelated to Java. No malware can infect your Mac through JavaScript. It’s OK to leave it enabled.
    • The same precaution applies to Adobe Flash Player. Newly discovered Flash vulnerabilities appear almost weekly.
  • Beware spontaneous popups: Safari menu > Preferences > Security > check "Block popup windows".
    • Popup windows are useful and required for some websites, but unsolicited popups are commonly used to deceive people into installing unwanted software they would never intentionally install.
    • Popups themselves cannot infect your Mac, but many contain resource-hungry code that will slow down Internet browsing.
    • If you ever receive a popup window indicating that your Mac is infected with some ick or that you won some prize, it is 100% fraudulent. Ignore it.
    • The same goes for a spontaneously appearing dialog insisting that you upgrade your video player right this instant. Such popups are frequently associated with sites that promise to deliver "free" movies or other copyrighted content that is not normally "free".
    • The more insistent it is that you upgrade or install something, the more likely it is to be a scam. Close the window or tab and forget it.
  • Ignore hyperventilating popular media outlets that thrive by promoting fear and discord with entertainment products arrogantly presented as "news". Learn what real threats actually exist and how to arm yourself against them:
    • The most serious threat to your data security is phishing. Most of these attempts are pathetic and are easily recognized, but that hasn't stopped prominent public figures from recently succumbing to this age-old scam.
    • OS X viruses do not exist, but intentionally malicious or poorly written code, created by either nefarious or inept individuals, is nothing new.
    • Never install something without first knowing what it is, what it does, how it works, and how to get rid of it when you don’t want it any more.
    • If you elect to use "anti-virus" software, familiarize yourself with its limitations and potential to cause adverse effects, and apply the principle immediately preceding this one.
    • Most such utilities will only slow down and destabilize your Mac while they look for viruses that do not exist, conveying no benefit whatsoever - other than to make you "feel good" about security, when you should actually be exercising sound judgment, derived from accurate knowledge, based on verifiable facts.
  • Do install updates from Apple as they become available. No one knows more about Macs and how to protect them than the company that builds them.


Summary: Use common sense and caution when you use your Mac, just like you would in any social context. There is no product, utility, or magic talisman that can protect you from all the evils of mankind.

cnet download

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.