New To Mac-Forums?

Welcome to our community! Join the discussion today by registering your FREE account. If you have any problems with the registration process, please contact us!

Get your questions answered by community gurus • Advice and insight from world-class Apple enthusiasts • Exclusive access to members-only contests, giveaways and deals

Join today!

 
Start a Discussion
 

Mac-Forums Brief

Subscribe to Mac-Forums Brief to receive special offers from Mac-Forums partners and sponsors

Join the conversation RSS
OS X - Operating System General OS operation information and support

OS 10.4 - Virus for OS X?


Post Reply New Thread Subscribe

 
Thread Tools
eyan212
Guest
 
Posts: n/a

A friend of mine just called me to help with a problem on his eMac. He had just downloaded a internet content filter called "Safe Eyes" and now his mac was going nuts. Upon startup, the finder (or desktop) screen would go black and a message in blue text would read "you have one minute to use your computer. Please shut down all programs so you don't lose any data. Click to continue." (this is not an exact quote but it is pretty close) If you click it gives you 60 seconds to do whatever, everything seems to work, but after 60 seconds, the screen blacks out again (closing all the open programs) and displays the same message. This repeats endlessly. There is also a lock symbol on the desktop menu bar to the left of the apple. I uninstalled the Safe Eyes program by dragging it to the trash and also deleted a preferences file that I found. When that did not work I tried to boot from the OS X disc and that failed as well. I tried other boot modes and was not able to boot in safe, verbose or firewire mode. He has a Logitech keyboard not an apple one. Could that be causing the alternate boot problems? i.e. the computer doesn't recognize the commands. Could this be a virus? I hope not. He is using OS 10.4.6. Any help on this would be great. He just switched to mac on my recommendation and I want his experience to be a good one.


-Eyan212
Power mac G5 dual core 2.3 w/ 5.5 gigs RAM and internal TB hard drive space, airport, bluetooth and dual screens.
Power mac G4 dual 1.42 w/ 2 gigs RAM and 500 gigs internal hard drive space.
QUOTE Thanks
PowerBookG4

 
PowerBookG4's Avatar
 
Member Since: Jan 08, 2005
Location: New Jersey
Posts: 6,190
PowerBookG4 has much to be proud ofPowerBookG4 has much to be proud ofPowerBookG4 has much to be proud ofPowerBookG4 has much to be proud ofPowerBookG4 has much to be proud ofPowerBookG4 has much to be proud ofPowerBookG4 has much to be proud ofPowerBookG4 has much to be proud ofPowerBookG4 has much to be proud ofPowerBookG4 has much to be proud of
Mac Specs: Mac Pro 8x3.0ghz 12gb ram 8800GT , MBP 2.16 2GB Ram 17 inch.

PowerBookG4 is offline
there was a security hole in 10.4.6 and this could be the problem because a worm (i think) was released for the old one after apple released and update and stated why. Have him update his os and tell him to always update when updates are released.

My Website
Blog
I love my hosting company!
I was on the M-F honor roll for Febuary:2006
QUOTE Thanks
eyan212
Guest
 
Posts: n/a

Quote:
Originally Posted by PowerBookG4
Have him update his os and tell him to always update when updates are released.
Will this fix the problem or will it just prevent further problems?
QUOTE Thanks
Aptmunich

 
Aptmunich's Avatar
 
Member Since: Mar 09, 2004
Location: Munich
Posts: 9,075
Aptmunich has a brilliant futureAptmunich has a brilliant futureAptmunich has a brilliant futureAptmunich has a brilliant futureAptmunich has a brilliant futureAptmunich has a brilliant futureAptmunich has a brilliant futureAptmunich has a brilliant futureAptmunich has a brilliant futureAptmunich has a brilliant futureAptmunich has a brilliant future
Mac Specs: Aluminium Macbook 2.4 Ghz 4GB RAM, SSD 24" Samsung Display, iPhone 4, iPad 2

Aptmunich is offline
Weird, that sounds exactly like the sasser virus for Windows...

He's not using the classic environment by any chance is he? There were a fair number of malicious viruses for OS 9 and older, but no really malicious ones for OS X.

The one virus that was discovered was more of a proof-of-concept. It certainly didn't do anything like that.

Perhaps it is a genuine application bug, but I've never heard of a shutdown countdown before.


Maybe he's still using his windows computer by accident?
QUOTE Thanks
eyan212
Guest
 
Posts: n/a

Quote:
Originally Posted by Aptmunich
He's not using the classic environment by any chance is he? There were a fair number of malicious viruses for OS 9 and older, but no really malicious ones for OS X. Maybe he's still using his windows computer by accident?
He is not using classic. He is a new mac user and has no idea what classic is. I would not allow him to use his windows computer without wearing rubber gloves and a HazMat suit!

PLEASE HELP US!
QUOTE Thanks
eyan212
Guest
 
Posts: n/a

I reformatted his hard drive. This was a crude solution that only worked because it was a new computer and he had nothing saved on it. There has got to be a better way to deal with this problem. I will continue to check this post for any further insight.
QUOTE Thanks
baggss

 
baggss's Avatar
 
Member Since: Oct 10, 2004
Location: Margaritaville
Posts: 10,309
baggss has a reputation beyond reputebaggss has a reputation beyond reputebaggss has a reputation beyond reputebaggss has a reputation beyond reputebaggss has a reputation beyond reputebaggss has a reputation beyond reputebaggss has a reputation beyond reputebaggss has a reputation beyond reputebaggss has a reputation beyond reputebaggss has a reputation beyond reputebaggss has a reputation beyond repute
Mac Specs: 27" 3.4 Ghz i7 iMac-13" C2D Macbook-OSX 18.8.2-64Gb iPad 2-32 Gb iPhone 5-ATV 2-14Tb of Storage

baggss is offline
How did you get it to boot from the DVD to reformat it?


QUOTE Thanks
D3v1L80Y

 
D3v1L80Y's Avatar
 
Member Since: Feb 02, 2004
Location: PA
Posts: 12,459
D3v1L80Y has a reputation beyond reputeD3v1L80Y has a reputation beyond reputeD3v1L80Y has a reputation beyond reputeD3v1L80Y has a reputation beyond reputeD3v1L80Y has a reputation beyond reputeD3v1L80Y has a reputation beyond reputeD3v1L80Y has a reputation beyond reputeD3v1L80Y has a reputation beyond reputeD3v1L80Y has a reputation beyond reputeD3v1L80Y has a reputation beyond reputeD3v1L80Y has a reputation beyond repute
Mac Specs: MacBook

D3v1L80Y is offline
There are no viruses for OS X. And there hasn't been any yet.
There weren't really any "viruses" for OS 9 or earlier either, as most of those "viruses" were simply exploits of macros in applications like MS Word and MS Excel... and the exploits only did damage if and only if you used macros when those apps were open....but anyway....
The problem was (sorry to say) most likely user error. Those types of applications all have timers that will limit how long kids can use the computer, period. I would wager that he enabled this timer on the very account he was trying to use on startup. In other words, his admin account. If it was enabled, he would experience the same symptoms you described. These programs also at times give the illusion that you actually deleted the application, but in reality it is still active and running. This is to give the kids or 'protected' parties the idea that they are not being monitored and can go about their dubious tasks when they are in reality still being monitored.
Quote:
Originally Posted by Safe Eyes Website
In order to maintain the security in Safe Eyes that you have come to trust, three pieces of information are required to uninstall Safe Eyes: your username, administrator password and an uninstall code. Uninstall codes are tied to your specific Safe Eyes account and can only be used on the day it is issued. You can obtain an uninstall code below by entering your username and administrator password and clicking "Generate Uninstall Code". LINK
So, as you can see in your case, you never uninstalled it. This is why you couldn't access the various startup methods and that symptoms never ceased.
These are very powerful applications and from what I have seen cause more damage than good. Since your friend's machine is working now, I would suggest leaving any of that monitoring software off of it.

__________________________________________________
Posting and YOU|Forum Community Guidelines|The Apple Product Cycle|Forum Courtesy

mac: a waterproof raincoat made of rubberized fabric
MAC: a data communication protocol sub-layer, also known as the Media Access Control
Mac: a brand name which covers several lines of personal computers designed, developed, and marketed by Apple Inc.

QUOTE Thanks
eyan212
Guest
 
Posts: n/a

I brought my apple keyboard over to his house so I was able to boot off the DVD. His logitech keyboard was the problem there. The time outs were not caused by the Safe Eyes software. Whatever it was seemed to be "infecting" Finder. I just don't know.
QUOTE Thanks
D3v1L80Y

 
D3v1L80Y's Avatar
 
Member Since: Feb 02, 2004
Location: PA
Posts: 12,459
D3v1L80Y has a reputation beyond reputeD3v1L80Y has a reputation beyond reputeD3v1L80Y has a reputation beyond reputeD3v1L80Y has a reputation beyond reputeD3v1L80Y has a reputation beyond reputeD3v1L80Y has a reputation beyond reputeD3v1L80Y has a reputation beyond reputeD3v1L80Y has a reputation beyond reputeD3v1L80Y has a reputation beyond reputeD3v1L80Y has a reputation beyond reputeD3v1L80Y has a reputation beyond repute
Mac Specs: MacBook

D3v1L80Y is offline
Quote:
Originally Posted by eyan212
I brought my apple keyboard over to his house so I was able to boot off the DVD. His logitech keyboard was the problem there. The time outs were not caused by the Safe Eyes software. Whatever it was seemed to be "infecting" Finder. I just don't know.
Again, the only thing that 'infected' the computer was the Safe Eyes software. :black:
Quote:
Originally Posted by eyan212
I uninstalled the Safe Eyes program by dragging it to the trash and also deleted a preferences file that I found. When that did not work ....
It was not uninstalled completely or properly and that is likely what caused the issues you were having.
There currently are no viruses or malware for OS X.

__________________________________________________
Posting and YOU|Forum Community Guidelines|The Apple Product Cycle|Forum Courtesy

mac: a waterproof raincoat made of rubberized fabric
MAC: a data communication protocol sub-layer, also known as the Media Access Control
Mac: a brand name which covers several lines of personal computers designed, developed, and marketed by Apple Inc.

QUOTE Thanks

Post Reply New Thread Subscribe


« Automator at Startup | Mail, need help »
Thread Tools

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off
Forum Jump

Similar Threads
Thread
Thread Starter
Forum
Replies
Last Post
Virus Protection On a mac XFce Schweb's Lounge 5 07-24-2006 02:00 PM
Virus stain designs Community Suggestions and Feedback 6 03-23-2006 12:33 PM
i have a virus guys help me out Absolute Zero Schweb's Lounge 15 09-15-2004 03:39 PM
Stupid Windows Virus Matt Schweb's Lounge 15 08-02-2004 04:05 AM
OS X virus!!!! WilliS Apple Rumors and Reports 54 05-10-2004 09:09 PM

All times are GMT -4. The time now is 04:11 AM.

Powered by vBulletin
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
X

Welcome to Mac-Forums.com

Create your username to jump into the discussion!

New members like you have made this community the ultimate source for your Mac since 2003!


(4 digit year)

Already a member?