Level 1

4 points

Incognit VPN Switcher used by Hackers?

In my 2016 hacking, this may be what the hackers were using to get into my system...This came from a Malwarebytes system snapshot I just checked. Also the Ka-Block might have been one of their tools.

Does anyone know how to locate these programs and delete them? Also I believe they were key-logging, would love to make sure that program is gone. Does anyone know what TrafficLight is??

Name: IncognIt VPN Switcher

Path: /Users/kathywingate/Library/Safari/Extensions/IncognIt VPN Switcher.safariextz

Modified: 2016-07-06 17:18:37 +0000

Name: Ka-Block!

Path: /Users/kathywingate/Library/Safari/Extensions/Ka-Block!.safariextz

Modified: 2016-07-06 17:15:07 +0000

Name: TrafficLight

Path: /Users/kathywingate/Library/Safari/Extensions/TrafficLight.safariextz

Modified: 2016-07-06 17:17:16 +0000

MacBook Pro (15-inch 2.53 GHz), Updated to El Capitan 10.11.5

Posted on Jun 29, 2017 1:51 PM

27 replies

Old Toad

Level 10

215,448 points

Jul 7, 2017 4:29 PM in response to kthywin

Have you ever installed Symantec AV software?

[not loaded] com.symantec.nis.uninstall.English.plist (Shell Script cb147988 - installed 2017-04-30)

It's not needed and is totally useless. Uninstall it according to the developer's instructions.

thomas_r.

Level 7

32,031 points

Jul 7, 2017 4:53 PM in response to kthywin

One of the worst things you can do with your Mac is open up the Console and start looking at logs. Unless you have intimate knowledge of what those logs mean, that's a recipe for trouble. In this case, none of the log messages you're showing us are at all concerning. Every single one of them is generated by a legitimate Apple process.

I don't see anything at all related to malware or hacking in your EtreCheck report.

Jul 7, 2017 5:38 PM in response to thomas_r.

thomas_r. wrote:

One of the worst things you can do with your Mac is open up the Console and start looking at logs. Unless you have intimate knowledge of what those logs mean, that's a recipe for trouble. In this case, none of the log messages you're showing us are at all concerning. Every single one of them is generated by a legitimate Apple process.

I think that should be a User Tip.

kthywin Author

Level 1

4 points

Jul 8, 2017 5:36 PM in response to Old Toad

I agree Norton is useless, and I thought I had gotten rid of it long ago...I'll have to see what else I need to do to get rid of whatever is left...Thanks for the AOK, good to know everything is perfect, and now all I need to do is figure out why my main hard drive won't boot now. Thanks again.

kthywin Author

Level 1

4 points

Jul 11, 2017 10:23 AM in response to Old Toad

Do you really consider it absolutely normal for the following programs I have never heard of to "self-install" when I am not using my computer?...This was during the time of my imaginary hacking, and while my daughter was visiting, and I made a point not to use my computer while she was here for July 4th holiday.

Ka-Block! - David Graham & Josh Peek - http://kablock.com (installed 2016-07-06)

TrafficLight - Bitdefender SRL - http://trafficlight.bitdefender.com/ (installed 2016-07-06)

IncognIt VPN Switcher - IncogniTeam Ltd. - http://www.incogniteam.com (installed 2016-07-06)

thomas_r.

Level 7

32,031 points

Jul 12, 2017 8:11 AM in response to kthywin

Those are all legitimate tools. They did not get installed all by themselves. Either you installed them and forgot - or didn't know that whatever you were installing was going to install those Safari extensions - or someone else with access to your Mac installed them.

SeaPapp

Level 7

26,492 points

Jul 1, 2017 3:31 AM in response to Esquared

Esquared wrote:

Almost everybody receives phishing scams on a daily basis, including me.

I don't, I've taken the proper steps to protect my office!

Esquared

Level 6

12,415 points

Jun 30, 2017 8:46 AM in response to kthywin

A VPN anonymyzes YOU, not the people that want to get in from the outside. And besides: you cannot hack a router with something as simple as a Safari extension.

Esquared

Level 6

12,415 points

Jul 1, 2017 12:58 AM in response to kthywin

Almost everybody receives phishing scams on a daily basis, including me. Not because they're on some sort of list, but because phishers simply harvest email addresses on the internet.

Esquared

Level 6

12,415 points

Jul 7, 2017 11:30 PM in response to kthywin

What's so odd about this? Everybody gets these. It just means that your firewall is doing its job.

kthywin Author

Level 1

4 points

Jul 9, 2017 6:25 PM in response to Esquared

Thanks, good to know I'm not alone...😁

JimmyCMPIT

Level 7

29,306 points

Jul 12, 2017 8:15 AM in response to kthywin

Norton is not useless, it's damaging; if it was useless it wouldn't cause problems, but it causes more problem than the virus it pretends to protect you against.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Incognit VPN Switcher used by Hackers?