Jangoram vulnerability in MacOS

Question

Level 1

19 points

Jangoram vulnerability in MacOS

There is an adware 'virus' called Jangoram that now has gotten installed twice on my MacOS laptop (now 10.13.1 High Sierra) without my permission.

I cannot find any information from Apple about how to stop this. You can find many websites that tell you to run their program to remove it, but how can you trust them?

This seems a major Apple vulnerability. Why are we not warned about it, or given any ways to block it or remove it?

MacBook Pro TouchBar and Touch ID, macOS High Sierra (10.13.1)

Posted on Dec 10, 2017 9:42 PM

Reply

Answer 1

Best reply

softwater

Level 5

5,556 points

Dec 13, 2017 3:26 AM in response to Snorkeler

Does the MacOS keep a log of installations?

It does, but not in a user-friendly way.

I actually wrote a free/shareware app specifically for this purpose (i.e., to see what files got installed when I downloaded stuff) that you might find helpful:

https://sqwarq.com/detectx/

Disclaimer: this post contains links to my own website from which I may derive some form of compensation. My website does not contain 3rd party ads. This disclaimer is required by ASC Terms of Use whenever linking to one's own site or product.

Reply

Answer 2

Snorkeler Author

Level 1

19 points

Dec 11, 2017 12:56 AM in response to red_menace

Thank you for clarifying that. I actually do not know what it might have been bundled with. I cannot recall installing any extensions. I will start keeping a log of what I grant permission to be installed. Is it possible that a browser such as Chrome could install extensions without your knowledge, in the process of browsing?

Any suggestions about how to avoid installing hitchhiking items like this? I left the Windows world because I got tired of fighting malware every day.

Which brings up a good point. Does the MacOS keep a log of installations?

Reply

Answer 3

Snorkeler Author

Level 1

19 points

Dec 13, 2017 3:32 AM in response to softwater

Thanks, Phil! I have downloaded, installed, subscribed and am using DirectX Swift.

What a fine contribution! It showed me files I never would have found that should not be there, and made it easy to remove them.

I look forward to learning how to use it more fully.

Reply

Answer 4

red_menace

Level 6

17,030 points

Dec 11, 2017 12:48 AM in response to Snorkeler

It is not a virus, it is a browser extension. Whether or not it is bundled in with other products, you are still the one that is installing it, so perhaps you should be looking into that.

Reply