Is this some kind of virus? - ehMac.ca
Facebook
Twitter
YouTube
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read


Reply
 
LinkBack Thread Tools Display Modes
Old Jun 19th, 2006, 12:10 PM   #1
Full Citizen
 
Join Date: Jun 2003
Location: Toronto
Posts: 503
Is this some kind of virus?

A few days ago I started noticing problems with OS X. For example, when I went to double-click something nothing would happen -- except for a pop-up for a menu of options. If I tried to type anything, nothing would appear. The keyboard was basically useless. So I'd reboot and it would go back to normal.

On Saturday it started happening again. This time the problem would return just a few minutes after rebooting. Eventually I had to leave for the day, and left the computer on. When I got home that night, I had quite the surprise..

In my Mail program there were now about 300 messages, and growing every minute. Most of the messages were "undeliverable" notifications. It looked like someone was ghosting my e-mail address to send out spam messages (my address was listed as the originator).

I didn't make the connection between the problems I had earlier with this e-mail problem because, Macs don't get viruses, right?

Then I called my service provider and they claimed that, from what they could tell, the spam messages were in fact coming from my computer.

Normally I used Little Snitch to guard against things like this but recently I turned it off -- only intending for a brief time -- and forgot to turn it back on. Did a program find a hole? What sort of program can do this? More importantly, how can I find it and get rid of it?
Klaatu is offline   Reply With Quote
Sponsored Links
Advertisement
 
Old Jun 19th, 2006, 12:16 PM   #2
Honourable Citizen
 
Atroz's Avatar
 
Join Date: Aug 2005
Location: Ottawa
Posts: 1,660
Hmm. Does sound like something nasty is happening. It may not be a virus though. Any chance that somebody would have had remote access to your system? E.g. Remote desktop, SSH, any other server running (e.g. Apache with a PHP hole)?

Are you behind a firewall device?
__________________
'
"Do the Right Thing. It will gratify some people and astound the rest." - Mark Twain
Atroz is offline   Reply With Quote
Old Jun 19th, 2006, 12:26 PM   #3
Assured Advertiser
Honourable Citizen
 
CanadaRAM's Avatar
 
Join Date: Jul 2005
Location: Victoria BC
Posts: 3,789
It sounds more to me like a stuck right mouse button (bringing up the contextual menu) or a software glitch that is making a stuck right click off of a left (or only) button click.

Possibly leaving the machine on with Mail open inadvertently Sent Mail or Forwarded mail automatically?

It would help if you gave us more details _ What machine, What mouse, what version of OSX, what is a sample of the mail bounce, do you have any third party mouse software or haxies installed, etc etc.
CanadaRAM is offline   Reply With Quote
Old Jun 19th, 2006, 12:34 PM   #4
Full Citizen
 
Join Date: Jun 2003
Location: Toronto
Posts: 503
Quote:
Originally Posted by CanadaRAM
It sounds more to me like a stuck right mouse button (bringing up the contextual menu) or a software glitch that is making a stuck right click off of a left (or only) button click.
I have the older Apple mouse. Single click.

Quote:
Originally Posted by CanadaRAM
Possibly leaving the machine on with Mail open inadvertently Sent Mail or Forwarded mail automatically?
Nothing in my "Sent" folder though, if that's what you mean

Quote:
Originally Posted by CanadaRAM
It would help if you gave us more details _ What machine, What mouse, what version of OSX, what is a sample of the mail bounce, do you have any third party mouse software or haxies installed, etc etc.
G4 1.25 MHZ -- last of the "wind tunnel" machines
Original single-click mouse
Mac OS 10.5
(no sample at this time as I'm at work and not at home)
No third party mouse software or haxies installed.

And, for the other question, I'll have to check my firewall settings when I get home. I just use what's available on OS X.
Klaatu is offline   Reply With Quote
Old Jun 19th, 2006, 12:59 PM   #5
Full Citizen
 
iMan's Avatar
 
Join Date: Feb 2005
Posts: 264
Quote:
Originally Posted by Klaatu
G4 1.25 MHZ -- last of the "wind tunnel" machines
Original single-click mouse
Mac OS 10.5
I wish I had OSX 10.5!
You mean 10.4 right?
iMan is offline   Reply With Quote
Old Jun 19th, 2006, 01:08 PM   #6
Assured Advertiser
Honourable Citizen
 
CanadaRAM's Avatar
 
Join Date: Jul 2005
Location: Victoria BC
Posts: 3,789
Quote:
Originally Posted by Klaatu
I have the older Apple mouse. Single click.
Optionally, stuck Control key on the keyboard then.

Can you borrow a known-good mouse and keyboard for a while?
CanadaRAM is offline   Reply With Quote
Old Jun 19th, 2006, 01:55 PM   #7
Full Citizen
 
Join Date: Jun 2003
Location: Toronto
Posts: 503
Quote:
Originally Posted by iMan
I wish I had OSX 10.5!
You mean 10.4 right?
Oops! Yeah, 10.4.6
Klaatu is offline   Reply With Quote
Old Jun 19th, 2006, 01:57 PM   #8
Full Citizen
 
Join Date: Jun 2003
Location: Toronto
Posts: 503
Quote:
Originally Posted by CanadaRAM
Optionally, stuck Control key on the keyboard then.

Can you borrow a known-good mouse and keyboard for a while?
The strange thing is, if I keep my Mail program closed, everything stays fine. That's why I'm wondering about the connection with all the spam e-mails being sent from my address.
Klaatu is offline   Reply With Quote
Old Jun 19th, 2006, 02:39 PM   #9
Full Citizen
 
Join Date: Jun 2003
Location: Toronto
Posts: 503
Ok, I'm moving this to the Troubleshooting Forum now. I think I found part of the answer I'm looking for.

I suspect what I have is a "Darwin bot" -- now I just need to figure out how to identify it, and get rid of it.
Klaatu is offline   Reply With Quote
Old Jun 19th, 2006, 04:15 PM   #10
Full Citizen
 
Join Date: Mar 2006
Posts: 137
Klaatu,

Since I updated the last Firmware I have had this problem: (and it just happened). Sometimes it's waking up from sleep (but not always), but my mouse will be dead and so will my keyboard. I unplug and then replug my mouse and it will work (plugged into my keyboard). But my keyboard will still be dead, until I replug it, then it will work again. Is that what is happening with your computer? It's friggin' frustrating.

I haven't had the mail spam problems - -

Can you give me more info on "Darwin bot"
bishopandarlo is offline   Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
How can I remove virus "worm.bagle.gen-zippwd" krs Mac, iPhone, iPad and iPod Help & Troubleshooting 16 Sep 7th, 2009 10:31 AM
What a mess.. anti Virus software wreaks havoc - false positives MacDoc Anything Mac 2 Feb 22nd, 2006 11:51 AM
Macro Virus - any issue on OS X? krs Mac, iPhone, iPad and iPod Help & Troubleshooting 3 Dec 1st, 2005 11:25 AM
Mac Virus!! Howard2k Anything Mac 8 Jun 10th, 2005 02:14 AM
Mac Virus around The Great Waka Anything Mac 6 Sep 29th, 2003 11:26 AM


All times are GMT -4. The time now is 01:43 PM.



Copyright © 1999 - 2012, ehMac.ca All rights reserved. ehMac is not affiliated with Apple Inc. Mac, iPod, iTunes, iPhone, Apple TV are trademarks of Apple Inc. Content Relevant URLs by vBSEO 3.6.0 RC 2

Tribe.ca: Urban living in Toronto!