mackeeper and other malware

Download and run Etrecheck. Copy and paste the results into your reply.

Etrecheck is a diagnostic only tool that was developed by one of the most respected users here in the ASC and recommended by Apple Support to provide a snapshot of the system and help identify the more obvious culprits that can adversely affect a Mac's performance.

could it have stolen passwords remembered by my browser? or could it intercept passwords sent via secure ssl connection to mail accounts or banks?

As bad as it is "MacKeeper" doesn't do that. However, there is a larger issue at hand: the fact that you apparently installed something you shouldn't have. That raises an important question only you can answer — what else did you install?

Mac malware does not get installed on its own. It relies upon deception to do that, but your active participation and consent are required. Please read Effective defenses against malware and other threats.

A product that can detect and remove malware in all its forms — including programs whose sole purpose is to harvest your personal information — does not exist. Most people are all too willing to install and use such things, and will even get angry when you suggest to them that's not a good idea.

That's just a scam. It is completely unrelated to "Trusteer". Just close the web page and forget it. For a description of that scam please read Phony "tech support" / "ransomware" popups and web pages.

To uninstall "Trusteer" read http://www.trusteer.com/support/uninstalling-rapport-mac-os-x. "Trusteer" itself is not harmful. It will just prevent your Mac from working properly. Do not install non-Apple "anti-virus" or "security" junk on a Mac.

I suggest you review your computing practices. If you have not done so already, please read Effective defenses against malware and other threats.

That's unlikely but difficult to know without knowing the specific malware that was installed. It certainly can't hurt to change your passwords. You can run MalwareBytes to be sure all the adware was properly removed. Malwarebytes was developed by one of our own colleagues here in ASC. It gets rave reviews and is about the most proven anti-malware software for Mac.

I believe it was mac keeper and zip cloud -identified by DetectX.

By using malwareBytes, i could see OS X/geniou and ad viewer.

Remembering passwords is a pain and would not ant to change it unless necessary.

thanks

-kamal

It may be that your bank's system has detected this ... and there again, if it has you may have installed trusteer raport, another dodgy program. Can you confirm you are still on 10.6.4 Snow Leopard ?

kamal_prasad wrote:

There is no Trusteer Rapport on my mac.

Good. You're the one who asked how to remove it.

How does safari store passwords and can a malware view them?

Passwords are stored in Keychain. Nothing can view them without the Keychain password that protects its contents, which by default is your login password.

Try running this program in your normal account, then copy and paste the output in a reply. The program was created by etresoft, a frequent contributor. Please use copy and paste as screen shots can be hard to read. On the screen with Options, please open Options and check the bottom 2 boxes before running. Click “Share Report” button in the toolbar, select “Copy Report” and then paste into a reply. This will show what is running on your computer. No personal information is shown.

Etrecheck – System Information

That's another matter. Please update your profile when asking questions because it is totally confusing for those that are trying to help you.

Passwords are stored in Keychain and Keychain itself is password protected, so you don't have to worry about malware gaining access to your passwords.