Comcast Says I Have a Bot - How Likely?

Joined
Jan 30, 2012
Messages
3
Reaction score
0
Points
1
I have an IMac (love it!) linked to a Linksys router. WPA-2 protection, 25 character random password. 1 Ipad and 2 PC notebooks linked to the network.

So I get an e-mail from my friends at Comcast internet last nite telling me that I may have a "bot" and to hit the attached link to fix it. I call Comcast and they say its legit and that they detected a "Backdoor PHP" virus. Can't tell me which computer. So I hit the link and its an invitation to download Comcast's version of Norton anti-virus.

My virus scans on my PC's turn up nada. But Comcast/Norton DOES offer a free virus protection program for Macs that they encourage me to download.

I've done my share of searches on here and I understand that its a longshot that my Mac is infected. And I've had my battles with Norton's PC stuff in the past and ended up un-installing it..

So my question is . . . anybody dealt with this before? Would you download Norton for MAC even if its free? Anybody heard of a "bot" infecting a Mac?
 

RavingMac

Well-known member
Staff member
Moderator
Joined
Jan 7, 2008
Messages
8,303
Reaction score
242
Points
63
Location
In Denial
Your Mac's Specs
16Gb Mac Mini 2018, 15" MacBook Pro 2012 1 TB SSD
I have an IMac (love it!) linked to a Linksys router. WPA-2 protection, 25 character random password. 1 Ipad and 2 PC notebooks linked to the network.

So I get an e-mail from my friends at Comcast internet last nite telling me that I may have a "bot" and to hit the attached link to fix it. I call Comcast and they say its legit and that they detected a "Backdoor PHP" virus. Can't tell me which computer. So I hit the link and its an invitation to download Comcast's version of Norton anti-virus.

My virus scans on my PC's turn up nada. But Comcast/Norton DOES offer a free virus protection program for Macs that they encourage me to download.

I've done my share of searches on here and I understand that its a longshot that my Mac is infected. And I've had my battles with Norton's PC stuff in the past and ended up un-installing it..

So my question is . . . anybody dealt with this before? Would you download Norton for MAC even if its free? Anybody heard of a "bot" infecting a Mac?

If you absolutely MUST install antivirus go with ClamAV. It's free and relatively harmless. Don't mess with Norton AV. It's big trouble.

And, FWIW, the chances that you are infected with a Bot virus are essentially zero.
 

chscag

Well-known member
Staff member
Admin
Joined
Jan 23, 2008
Messages
65,248
Reaction score
1,833
Points
113
Location
Keller, Texas
Your Mac's Specs
2017 27" iMac, 10.5" iPad Pro, iPhone 8, iPhone 11, iPhone 12 Mini, Numerous iPods, Monterey
I call Comcast and they say its legit and that they detected a "Backdoor PHP" virus.

No such virus for the Mac. (Actually there are no viruses in the wild for the Mac, there is, however, some malware.) The folks at Comcast can barely spell "Mac" let alone know anything at all about OS X. Do as Razormac suggested and stay away from installing Norton as it's difficult to uninstall and causes more problems than it fixes.
 
Joined
Apr 6, 2011
Messages
1,291
Reaction score
43
Points
48
Location
Louisville, KY - USA
Your Mac's Specs
MBP 17" 2011, 2.3GHz Intel Quad-Core i7, 8GB RAM, MacMini 2011, 2.7GHz Intel Dual-Core i7, 8GB RAM
More than likely what happened was you hit a website or a torrent that had it running and Comcast's technology picked it up and where the traffic was going. Unless you are running a torrent or a web server, I would not worry about it. Try clamav, scan the PC and then delete it.
 
Joined
Dec 11, 2010
Messages
1,808
Reaction score
40
Points
48
Location
Chicago
Your Mac's Specs
late 2012 mini w/SSD
IF you have a bot, it will be one of those Windows PCs. You can disconnect them from the network while you try to figure it out.
 
OP
D
Joined
Jan 30, 2012
Messages
3
Reaction score
0
Points
1
Thanks for the insight guys. I've run AV searches twice on each machine with different programs and nothing turned up other than routine - and annoying -tracking cookies. Frankly, it's the method employed by Comcast that bugs me. They send people (and LOT of people are getting these e-mails) this "armageddon" e-mail about bots but don't provide any contact information other than a link to their website . . that invites you download a bunch Norton and Xfinity software. I would think that if they really thought that my machines were getting hit with viruses and bots that are jamming up their network, their tekkies would call me and walk me through it. Instead I get a "download Norton" invitation. No wonder people think these e-mails are spam.

And they are, in part. I have no doubt Comcast found something that tripwired their sensors. But it's the way they approach the solution that reeks of a marketing ploy. There are a slew of discussions on the Comcast boards on this topic.
 
Joined
Nov 28, 2007
Messages
25,564
Reaction score
486
Points
83
Location
Blue Mountains NSW Australia
Your Mac's Specs
Silver M1 iMac 512/16/8/8 macOS 11.6
Let me suggest they would not known their elbows from ... from their other end.

As suggested run ClamXAV if you feel threatened. What you found was another marketing ploy to sell Nortons Nonsense.
 

BrianLachoreVPI


Retired Staff
Joined
Feb 24, 2011
Messages
3,733
Reaction score
124
Points
63
Location
Maryland
Your Mac's Specs
March 2011 15" MBP 2.3GHz i7 Quad Core 8GB Ram | Mid 2011 27" iMac 3.4 GHz i7 16 GB RAM 2 TB HDD
Are you sure that e-mail was from Comcast? It probably was - but I know I see some very well crafted phishing e-mails these days.
 
Joined
May 14, 2009
Messages
2,052
Reaction score
136
Points
63
Location
Near Whitehorse, Yukon
Your Mac's Specs
2012 MBP i7 2.7 GHz 15" Matte - 16 GB RAM - 120 GB Intel SSD - 500 GB DataDoubler Mac OS 10.9
There is a relevant xkcd comic about ISP's and only windows support, and a Linux user trying to get his internet fixed, but I can't find it anymore :\

But I did find this :D
Our local cable company is Comcast. I was having high-speed Internet installed at my apartment, and a Comcast guy showed up. He started spouting off technical jargon about "bouncing signals" and stuff that I knew was complete nonsense, all so he could buy time to have a smoke and talk on his phone.

I was starting to get very frustrated that he'd been at my house for a couple of hours and wasn't finished with the install. I'd specifically requested that he not install any software on my computer, because I knew it was not necessary for using the Internet. My roommate, however, had not made the same request.

After some time, my roommate had to leave, and I was left to supervise the Comcast guy. I went into my roommate's bedroom to find him scratching his head as he fiddled with her Mac. He was kinda sweaty and really mad and looked up at me and asked, "What kind of computer is this??"

"It's a Mac," I said.

"What kind of Windows are you runnin' on this thing??"

I tried telling him that it did not run Windows, and he refused to believe me. He got so frustrated that he actually ended up cussing at me and comparing me to his ex wife.

He got fired.
 

cwa107


Retired Staff
Joined
Dec 20, 2006
Messages
27,042
Reaction score
812
Points
113
Location
Lake Mary, Florida
Your Mac's Specs
14" MacBook Pro M1 Pro, 16GB RAM, 1TB SSD
Although I agree that it's unlikely that your Mac is running a bot, they DO indeed exist for Mac OS X. The most prevalent one accompanied a pirated copy of iWork/iLife '09 (although I can't recall the name off the top).

Aside from getting a "second opinion" scan with a dedicated spyware tool like MalwareBytes (on the PCs), I would actually recommend doing a scan with the trialware version of MacScan, just to be on the safe side.
 
Joined
Nov 8, 2010
Messages
967
Reaction score
4
Points
18
Location
Indiana
Your Mac's Specs
Main-11" Air, iPhone 6+, iPad Mini 3, Hi-Fi Extras- Too many to count
Same thing happened to me. Change your network name and password. Try Sophos for Mac it's free or clamav.
 

Shop Amazon


Shop for your Apple, Mac, iPhone and other computer products on Amazon.
We are a participant in the Amazon Services LLC Associates Program, an affiliate program designed to provide a means for us to earn fees by linking to Amazon and affiliated sites.
Top