image
image

Go Back   macosx.com > Mac Help Forums > Boot Camp & OS Virtualization on Mac

Reply
 
Thread Tools
  #1  
Old November 28th, 2007, 10:11 PM
Registered User
 
Join Date: Nov 2007
Posts: 5
Thanks: 0
Thanked 0 Times in 0 Posts
Johnny D is on a distinguished road
Exclamation Virus!

I have had a virus access my computer through something I downloaded using a internet browser in VMwareFusion! I am posting from a different computer and my ISP has told me to un-connect my infected computer from the internet. My ISP told me that the virus is using my IP address to host a fake eBay site to gather victims Visa and info and what not. How do I get rid of it!?

So far I have deleted anything to do with VMwareFusion. Un installed and everything. Im afraid to connect again and have my ISP call me saying that the site is still being hosted from my IP. How can I get rid of the virus without having to delete eveything? Install the system again perhaps?

Thanks.
Reply With Quote
  #2  
Old November 28th, 2007, 10:36 PM
Mikuro's Avatar
Crotchety UI Nitpicker
 
Join Date: Mar 2005
Posts: 2,535
Thanks: 4
Thanked 16 Times in 15 Posts
Mikuro is on a distinguished road
It sounds like you got a Windows virus, not a Mac virus (to my knowledge, no such Mac viruses exist). So what you need to do is load VMWare and run Windows anti-virus software to clean up your Windows system.

Remember that when using VMWare, Parallels or Boot Camp to run Windows on a Mac, you need to take all the same security precautions you take on normal Windows systems.

If you're really desperate, just erase your Windows system and reinstall that. You should absolute not need to reinstall Mac OS X.
__________________
Mac mini — 1.25GHz G4, 1GB RAM — OS 10.5.5

Useful programs: Privoxy, Butler, ffmpegX, VLC, Perian, Tofu, Wcalc
Reply With Quote
  #3  
Old November 29th, 2007, 01:11 AM
Registered User
 
Join Date: Nov 2007
Posts: 5
Thanks: 0
Thanked 0 Times in 0 Posts
Johnny D is on a distinguished road
ok well i un-installed VMWare so should that have fixed it? Also the virus would have saved to my mac hard drive so even though it is a windows virus its still on my mac. Cant i do some sort of anti virus check on my mac without installing VMWare again?
Reply With Quote
  #4  
Old November 29th, 2007, 02:55 AM
jbarley's Avatar
One more, for the road!
 
Join Date: Jul 2005
Location: An Island called Vancouver
Posts: 369
Thanks: 0
Thanked 2 Times in 2 Posts
jbarley will become famous soon enough
You could try this...
download and run this OS X virus scanner app, and see what it finds.

http://www.macupdate.com/info.php/id/15850/clamxav

jb.
__________________
ROFL: (Rolling on the floor laughing.) Typically used by people who are too lazy to press the rest of the keys on their keyboard needed to communicate in English.
Reply With Quote
  #5  
Old November 29th, 2007, 03:10 AM
Mikuro's Avatar
Crotchety UI Nitpicker
 
Join Date: Mar 2005
Posts: 2,535
Thanks: 4
Thanked 16 Times in 15 Posts
Mikuro is on a distinguished road
I imagine the virus is confined to the partition or disk image you had Windows installed on. Even if it got to your Mac files, it wouldn't be able to actually RUN in Mac OS X. The only danger would be spreading it to other Windows machines by transferring files. It can't hurt to run ClamXAV, though, like jbarley suggested.

In any case, I think it's safe to reconnect to the Internet at this point.
__________________
Mac mini — 1.25GHz G4, 1GB RAM — OS 10.5.5

Useful programs: Privoxy, Butler, ffmpegX, VLC, Perian, Tofu, Wcalc
Reply With Quote
  #6  
Old November 29th, 2007, 05:23 AM
fryke's Avatar
Super Moderator
 
Join Date: Sep 2000
Location: macosx.com
Posts: 13,499
Thanks: 2
Thanked 32 Times in 30 Posts
fryke has a spectacular aura aboutfryke has a spectacular aura about
... unless you're running the VMware machine again and let it connect to the net, then that fake eBay server's active again - until the problem's solved. I'd actually trash that virtual machine and set it up again. It's much easier than actually solving the problem within Windows. Did you allow the VM some sort of access to the Mac file system? Could it be it wrote files outside its confines?
__________________
macnews.net.tc is active again.
iMac 24" 2.4 GHz, 4 GB RAM, 320 GB HD. Mac OS X 10.5.6
MacBook Air 13" 1.6 GHz, 2 GB RAM, 80 GB HD. Mac OS X 10.5.6
iPhone 3G 16 GB white, AppleTV 1G 40 GB

Mac user since 1987, Apple Product Professional 2007, 2008. Apple Certified Support Professional 10.5
Reply With Quote
  #7  
Old November 29th, 2007, 06:05 PM
CJ MAC OSX IPOD's Avatar
Charlie
 
Join Date: Apr 2005
Location: Essex, England
Posts: 690
Thanks: 12
Thanked 1 Time in 1 Post
CJ MAC OSX IPOD is on a distinguished road
Try this. Boot in OSX only. Trash VMware and and all files to do with windows. then stick the windows installation disk in a shredder.
That should fix it
__________________
iMac G5 1.8Ghz 1GB Powermac G4 Quicksilver 2.0Ghz 6GB White MacBook 2.1Ghz 4GB Powermac G4 800Mhz 2GB Powermac G3 400Mhz 512MB
Reply With Quote
  #8  
Old November 29th, 2007, 09:29 PM
Registered User
 
Join Date: Nov 2007
Posts: 5
Thanks: 0
Thanked 0 Times in 0 Posts
Johnny D is on a distinguished road
Alright. thanks everyone. Ive trashed everything and am about to run that virus scanner app. It should be good now.

Thanks.
Reply With Quote
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off
Forum Jump


All times are GMT -5. The time now is 07:03 AM.


Mac Support® Version 3.7.2
Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
Search Engine Friendly URLs by vBSEO 3.1.0
Copyright 2000-2008 DigitalCrowd, Inc.