Random webloc-file downloaded - Virus?

Question

Level 1

5 points

Random webloc-file downloaded - Virus?

Hey everyone.

I noticed that a random webloc-appeared on my Mac desk.

I checked the site it was linked to via Google and it's a very plain about.html site with just a logo and a short text (someone offering design/website solutions). The site is so random, I don't think that I would have created the webloc-file my myself accidentally because I never visited the site.

I wonder how it's possible this got downloaded onto my computer.

Do you think someone has to hack me to get it downloaded onto my computer? I am really worried.

I deleted the file but is there any way I could check anything that was downloaded to my computer in the last 24 hours, especially the weblocs?

Thanks so much for your help

iMac with Retina 5K display

Posted on Jun 5, 2018 4:36 AM

Reply

Answer 1

Eric Root

Level 10

684,549 points

Jun 5, 2018 1:49 PM in response to eiskaktus

You are welcome.

Reply

Answer 2

dominic23

Level 10

83,952 points

Jun 5, 2018 7:11 AM in response to eiskaktus

Please run EtreCheck and post the report here. This is a diagnostic test.

https://etrecheck.com

Click “Free Download” button, open Downloads folder, click on it to open, and then select ”Open”.

Click on the bouncing EtreCheck icon in the Dock.

“Choose a problem” from the popup menu box, and then “Start EtreCheck” in the dialog.

Click “Share Report” button in the toolbar, select “Copy to Clipboard” .

Paste it into the reply.

Reply

Answer 3

eiskaktus Author

Level 1

5 points

Jun 5, 2018 7:00 AM in response to dominic23

Thanks so much for your help 🙂 I really appreciate it.

Do you know how the person managed to put their website on my desk however?

Is hacking required for that or could it have happened another way?

Thx

Reply

Answer 4

eiskaktus Author

Level 1

5 points

Jun 5, 2018 11:13 AM in response to Eric Root

I didn't download anything yesterday apart from one PDF (from a trustful source), and that was two hours before the webloc-file appeared.

I just bothers me that such a random and irrelevant website would suddenly appear on my desk.

The only reference to the site I could find is a Facebook-site, where the user frequently posted a link to this site in a language I don't understand. The site itself looks unprofessional and contains just a list of what the person offers (graphics, web design).

Reply

Answer 5

dominic23

Level 10

83,952 points

Jun 5, 2018 12:47 PM in response to eiskaktus

Last time I read the EtreCheck report, there was nothing malicious installed on your Mac.

I went through, Launch Agents, Launch Daemons, Unsigned files and applications installed in last 30 days.

Performance was excellent. Everything else was normal.

If you are still concerned, you can install Malwarebytes for Mac and scan it.

thomas_r -the developer of this app- is a highly regarded active member of this Apple Support Community.

https://www.malwarebytes.org/antimalware/mac/

Download, install , open, and run it by clicking “Scan” button to remove malware.

This will list malicious files, if installed.

Once done, quit Malwarebytes Anti-Malware for Mac.

Install guide: https://support.malwarebytes.com/docs/DOC-1817

Uninstall Guide: https://support.malwarebytes.com/docs/DOC-1190

The installer may ask you to allow it in System Preferences > Security & Privacy. Allow it.

Reply

Answer 6

eiskaktus Author

Level 1

5 points

Jun 5, 2018 1:25 PM in response to dominic23

Thank you for your help.

I just downloaded Malewarebytes. I pressed "scan now", is it normal that is finishes scanning after 3 seconds, is this the full scan?????? It says "congratulations you are clean" though.

Reply

Answer 7

Eric Root

Level 10

684,549 points

Jun 5, 2018 1:26 PM in response to eiskaktus

It doesn't take very long to run.

Reply

Answer 8

eiskaktus Author

Level 1

5 points

Jun 5, 2018 5:08 AM in response to dominic23

Thank you , I will install etrecheck and let you know about the results 🙂

Reply

Answer 9

eiskaktus Author

Level 1

5 points

Jun 5, 2018 5:31 AM in response to dominic23

I downloaded EtreCheck and completed the check.

Here are the results. (I uploaded them to imgur as a pdf, hope it's ok)

https://imgur.com/a/9ONvyWm

Reply

Answer 10

dominic23

Level 10

83,952 points

Jun 5, 2018 7:11 AM in response to eiskaktus

There is no adware/malware installed on your Mac.

Application Audacity is crashing.

Drag the Webloc file to the trash if you have not done it already.

Reply

Answer 11

Eric Root

Level 10

684,549 points

Jun 5, 2018 7:50 AM in response to eiskaktus

If you were downloading anything recently, it may have been included in the download. It is unlikely it is a hack.

Reply

Answer 12

eiskaktus Author

Level 1

5 points

Jun 5, 2018 1:32 PM in response to Eric Root

Ok, thanks. Anything else I could check/test to make sure nobody has access my pc remotely or is malewarebytes already the best solution?

thx

Reply

Answer 13

Eric Root

Level 10

684,549 points

Jun 5, 2018 1:40 PM in response to eiskaktus

Between what dominic has done and Malwarebytes, you should be clean. For someone to hack your computer remotely, they would need to install software and no software was found.

Reply

Answer 14

eiskaktus Author

Level 1

5 points

Jun 5, 2018 1:44 PM in response to Eric Root

thanks very much 🙂!!!!

Reply

Random webloc-file downloaded - Virus?

Similar questions