Comments on: Spyware on macosx http://klungvik.com/index.php/2008/spyware-on-macosx/ Site of wonder (my personal sandbox) Wed, 10 Mar 2010 09:14:17 +0000 http://wordpress.org/?v=2.9.2 hourly 1 By: hyrcan http://klungvik.com/index.php/2008/spyware-on-macosx/comment-page-1/#comment-203 hyrcan Sat, 30 Aug 2008 03:51:08 +0000 http://klungvik.com/?p=80#comment-203 You may also want to check what your DNS is set to on both your computers and on your local router. The DNSChanger targets both PC and MACs but also D-Link (and others) routers. If you're DNS is set to 85.255.*.* you're still not in the clear. You'll need to change that as well, clearing it or manually inputting what your ISP tells you will help. Here's some more info on the problem: http://www.net-security.org/article.php?id=1150&p=1 http://isc.sans.org/diary.html?storyid=3595 Hope this helps... You may also want to check what your DNS is set to on both your computers and on your local router. The DNSChanger targets both PC and MACs but also D-Link (and others) routers.

If you’re DNS is set to 85.255.*.* you’re still not in the clear. You’ll need to change that as well, clearing it or manually inputting what your ISP tells you will help.

Here’s some more info on the problem:
http://www.net-security.org/article.php?id=1150&p=1

http://isc.sans.org/diary.html?storyid=3595

Hope this helps…

]]> By: subface http://klungvik.com/index.php/2008/spyware-on-macosx/comment-page-1/#comment-195 subface Mon, 25 Aug 2008 23:34:09 +0000 http://klungvik.com/?p=80#comment-195 I have the same problem w/ Safari, and so far MacScan has done the trick. I have a feeling it snuck its way in with some torrent I downloaded in the recent past. Thx for the tip! I have the same problem w/ Safari, and so far MacScan has done the trick. I have a feeling it snuck its way in with some torrent I downloaded in the recent past. Thx for the tip!

]]> By: haridasi http://klungvik.com/index.php/2008/spyware-on-macosx/comment-page-1/#comment-177 haridasi Thu, 21 Aug 2008 23:06:33 +0000 http://klungvik.com/?p=80#comment-177 Asle: That is very strange, because I removed that trojan, I still have the same problem. I remember the file had plugins.settings. After some more research I found out that MacScan didn't do its job properly on my computer. It didn't finish the trojan off. But now it's fixed. Thank you for making me check it a little bit closer. Saved my day :-) Even my browsing seems to go much faster now. Asle: That is very strange, because I removed that trojan, I still have the same problem. I remember the file had plugins.settings.

After some more research I found out that MacScan didn’t do its job properly on my computer. It didn’t finish the trojan off.

But now it’s fixed. Thank you for making me check it a little bit closer. Saved my day :-)

Even my browsing seems to go much faster now.

]]> By: Asle http://klungvik.com/index.php/2008/spyware-on-macosx/comment-page-1/#comment-176 Asle Thu, 21 Aug 2008 22:29:47 +0000 http://klungvik.com/?p=80#comment-176 Seems to be a plugin installed in ~/Library/Internet Plug-Ins/ Tried a -find but no luck. I did a scan with MacScan and found a trojan in one of the plugins. Sorry I was so mad and frustrated I can?t even remember the name of the file. But I removed it and no more popups. It was a trojan called DNSChanger. MacScan found it. http://macscan.securemac.com/ You get full working 30-day trial. Time enough to fix up. Seems to be a plugin installed in ~/Library/Internet Plug-Ins/
Tried a -find but no luck.
I did a scan with MacScan and found a trojan in one of the plugins. Sorry I was so mad and frustrated I can?t even remember the name of the file. But I removed it and no more popups. It was a trojan called DNSChanger. MacScan found it. http://macscan.securemac.com/ You get full working 30-day trial. Time enough to fix up.

]]> By: Newsha http://klungvik.com/index.php/2008/spyware-on-macosx/comment-page-1/#comment-169 Newsha Tue, 19 Aug 2008 02:59:10 +0000 http://klungvik.com/?p=80#comment-169 You know, I just stumbled across your blog because I am getting these ridiculous pop ups from 216...whatever that IP address is. And it is really really annoying. I'm on a PC, but if you figure anything out, let me know, and if I figure anything out and I'll let you know. Keep on keepin! N You know, I just stumbled across your blog because I am getting these ridiculous pop ups from 216…whatever that IP address is. And it is really really annoying.
I’m on a PC, but if you figure anything out, let me know, and if I figure anything out and I’ll let you know.
Keep on keepin!
N

]]>