Mac Viruses

Hi,
I have a computer services company and a client of mine has a Mac with a virus on it. I have fixed several Windows computers with the same virus but not a Mac. The virus does a scan, says your infected and gives you a number to call which when called offers to fix it for several hundred dollars. On Windows I use some very effective programs like HitmanPro, Rkill, AdwCleaner, and Autoruns, etc.
My questions are:
1) What effective but safe antivirus programs can I use on Mac?
2) Autoruns is a program from Microsoft Technet that allows you to control what starts up on a Windows PC. Is there a similar program for Macs.
I request replies from people that actually fix Macs.
Thanks
vlogg5Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

vlogg5Author Commented:
I forgot. The antiviruses' have to be free or ones I can get a trial version for.
0
Kyle SantosCustomer RelationsCommented:
I use Free Avast Antivirus on my macbook pro, perform regular virus scans, and that seems to solve my virus issues well enough.

https://www.avast.com/en-us/index
Click Go To Download.
Select Free option.
0
strungCommented:
I concur. Avast.

Safe start the Mac by holding down the shift key while booting before downloading and running Avast. This will prevent most things from auto-running.

You can kill running processes using Activity Monitor found in /Applications/Utilites.

You can see what processes are set to auto-run by pulling down the Apple Menu to System Preferences and going to Users and Groups. Then click on log-on items. (Note that unchecking the box beside a log-on item does not prevent it from loading - it merely makes it load in the background. To prevent an item from auto-starting, you have to select it, then remove it using the minus button at the bottom left.)

There may be addition startup items found in the following folders (click on the desktop to make sure you are in Finder, the pull down the Go menu to Go To Folder and copy and paste the path below into the window and hit return):

/Library/StartUpItems

/System/Library/StartUpItems

~/Library/StartUpItems

Which particular virus or trojan do you think it has?
2

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

Dave BaldwinFixer of ProblemsCommented:
I use Avast Free for my MacBook Pro also.
0
vlogg5Author Commented:
Great answer Strung
0
serialbandCommented:
Mac Virus scanners still mostly scan for Windows viruses.  I haven't found a Mac specific virus with any of those scanners yet, but I'm not a typical user that gets viruses in the first place. The Mac Scanners are good at telling me which Windows viruses exists on files that other people send me through email, so I don't pass them on to Windows users.

Your best bet is probably to check the startup items to remove the fake scanner.  You can find removal instructions when you search for the fake scanner name.

I would also check for rootkits.
https://www.rootkit.nl/software/rootkit-hunter/
http://www.chkrootkit.org/  <-- If Homebrew package manager is installed, you can just type brew install chkrootkit

Install ClamAV as a 2nd scanner.  ClamXAV is the Mac GUI wrapper to ClamAV and it's no longer free.
brew install clamav

http://brew.sh/ <-- home of HomeBrew

Here's a list of Mac Virus scanners and links to the reviews for each.  http://www.pcmag.com/article2/0,2817,2406379,00.asp

If you ever plan to pay money for a Mac virus scanner, you should go with ESET.  Mac Malware is appearing now, so your friend really should have a virus scanner.  The general population need to install one if only to reduce the transfer of viruses to Windows users.

The rootkit scanners scan for linux/unix style rootkits and don't really need to be run too often.
1
vlogg5Author Commented:
serialband
Thanks for the useful comments. I would like to have given you some points.
0
Justin BradshawOwnerCommented:
Sounds like you didn't actually get a virus. It's just adware. It might even just be a site that has code that keeps a pop up going constantly. I would force quit Safari and start it back up with a new session (say no when it asks to reopen windows). If that doesn't work, download the free tool Adware Medic.

Then, finally if both of those two things don't work, then get Avast. True viruses are still extremely rare to nonexistent on Mac. Adware is what most people get and think it's a virus.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Mac OS X

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.