Ir para o conteúdo principal

2.0GHz, 2.3GHz, or 2.6GHz quad-core Intel Core i7 processor (Turbo Boost up to 3.8GHz) with 6MB shared L3 cache.

580 Perguntas Visualizar todos

I downloaded scripts from a YouTube video- now I have a virus. Help?

I downloaded the Islands Void Script, Islands Alternate Link, and Vega X Download from the description of this YouTube video- https://youtu.be/RlhZLdS06Co and now I appear to have a virus. Norton is taking ages and finding nothing, Malware Bytes and Avast are scanning in 10 seconds or less and finding nothing.

Before I installed these items I scanned them with Norton, so when they said no threats found I went ahead and downloaded them. I don’t know what to do because I’m not fully aware of how scripts work. I deleted these items so they’re no longer on my computer, however the damage is obviously already done. Safari will not close, (even through force quit - it disappears for a millisecond but appears again in the force quit screen) and I keep getting a pop up for “mac keeper”. I also can’t google anything without being redirected through several links before landing at yahoo. I’ve cleared the cache, the history, and deleted the only extension I had (Honey), and removed all items under “manage website data” on the privacy tab through safari preferences.

I also saw the list of websites that downloads are set to “allow” and I denied many that I no longer need or wasn’t sure of. One of those was the file name I saw tonight called artesevening.xyz. I changed it from allow to deny, and then I removed it from the list along with the others I was unsure of.

I can say that after downloading, when I clicked to install these items, I was prompted by security to “open anyway” which I did so because Norton had found them not to be threatening. Upon doing so, I found that Terminal was open, but nothing else had been. I found it to be fishy so I deleted them and moved on. Minutes later I found several tabs open in safari that I did not open. I closed them and tried to google something and that’s when I first noticed the redirecting. I’m much more Windows savvy than I am with Mac but I really want to get this taken care of. Any suggestions?

Responder a esta pergunta Também tenho esse problema

Esta é uma boa pergunta?

Pontuação 1
5 comentários

@kimberlyrenee

Ok

So we have to act fast as we don’t know what could happen next!

Do you have any valuable information on the device?

Thanks:-)

por

I have the internet off and I’ve started it up in safe mode. I do have things on my device that I would very much not like to lose, but I’m worried about connecting an external hard drive with something like this going on. Thank you for your quick response! Also, I’ve gone into my email from my phone and signed out of all other devices (including from my Mac) because all of my credit cards and social media accounts are linked back to that account. So that makes me feel a bit better lol but I’m still panicking.

por

Also, as I said I cleared cache and history from safari, but I had passwords saved on my Mac to all of my credit card and banking accounts. So it worries me that that information may be at risk!

por

@kimberlyrenee

Hi

Sorry for the delayed reply

I never got a notification on your reply

That’s really good that you have protected you self be removing sensitive data

If it’s possible go on to the apple App Store and download clean my mac x

It has a pretty good virus and malware detection tool

Thanks:-)

por

Thank you! My computer seems to be better but I tried this software and am getting some some failed logs. I’m not sure what to do next!

por

Adicionar um comentário

1 resposta

Pergunta mais útil

Hi @kimberlyrenee,

This is what's known as a browser hijacker, and can be a bit tricky to get rid of without a software that recognizes it and removes it. I have done a bit of Googling now, but I can't seen to find any English sites that describes that process for this particular one, or software that removes it.

The intent of this one is made to hijack your browser and to display ads to you and redirect you to pages with ads the coders make money on. Luckily it (at least not yet) doesn't steal information, that I can find info about, but it could be updated in the future unless removed.

What sort of files do you have on your Mac that you'd like to keep?
Documents, pictures, etc.?

I haven't really encountered a hijacker in quite a few years, but they're out there!
Here is a link to an article on Trend Micro (very reputable security company), detailing a bit of information.

Esta resposta foi útil?

Pontuação 1

9 comentários:

Ok so I’m going through the link you sent me, and I’m stuck on step 3. Perhaps I found where this virus is hiding? I went to system information, software, applications and I sorted by “last modified”. 5 things were listed. CCleaner, Norton ServiceManager, SymUIAgent.app, Norton 360, and Install Norton 360.

I removed Norton ServiceManager, and I am currently trying to remove the SymUIAgent one. (File Location is /Library/Application Support/Symantec/Silo/MES/SymUIAgent/Norton.app) When I try to delete Norton (it appears as an app within the SymUIAgent folder along with two other folders, Logs and PlugIns), it tells me, “The item “Norton” can’t be moved to the Trash because it’s open.” However, it is not open. When I open the force quit window, it is not listed.

When I open Activity Monitor, it shows up under the CPU tab, under Process Name. I try to force quit through there and then go back to delete the file and it won’t let me. Does this mean I found the (or A) problem?

por

I just noticed under processes I see “nortonaggregatord” and under User it says “nobody”. lol is this normal?

por

When trying to uninstall Norton 360, I get a pop up, “A helper tool is needed to uninstall Norton 360. SymUIAgent.app is trying to install a new helper tool.” This may be totally normal and if it is I apologize lol normally I would just put my password in and install the helper because I know I’ve done that plenty of times before, but SymUIAgent is the one I’m having trouble uninstalling and now it’s coming up again.

por

Thank you for your response, by the way! Also, yes documents, pictures and maybe downloads as well.

por

@kimberlyrenee Sorry for not answering sooner, I was in the car driving. Yes, Norton is always running, even though you can’t see unless in processes. Allowing the helper is ok, but as @hellomacos mentioned, I’d try CleanMyMac X either from App Store or macpaw.com

To take full advantage of it, you need a license, but a lot can be done with the free tool. I had a license so I could test it out, and that tool can really clean your Mac! Makes uninstalls incredibly simple, cleans everything and helps keep you safe

por

Exibir mais 4 comentários

Adicionar um comentário

Adicionar a sua resposta

Kimberly Renee será eternamente grato(a).
Exibir estatísticas:

Últimas 24 horas: 0

Últimos 7 dias: 2

Últimos 30 dias: 7

Duração total: 363