Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 3 replies
  • Answers 1 answer
  • Subscribers 9 subscribers
  • Views 19488 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

'Mughthesec' at '/Users/_____/Downloads/.com.google.Chrome.UqYVCf'

katlinbr

I can't seem to locate and remove Alert: 'Mughthesec' at '/Users/_____/Downloads/.com.google.Chrome.UqYVCf' Anyone have success with this one?



This thread was automatically locked due to age.
Parents
  • 0

    From my understanding of Mughthesec it is usually hidden as an adobe flash player download that looks legitimate. I would suggest uninstalling all adobe products from the system and reinstalling them from the manufacturers website.

    It spreads under the file name player.dmg and will install the flash but also fraudulent programs called "advanced mac cleaner" and two safari extensions called "safe finder" and "booking.com"

    Try removing those programs and extensions completely from your computer.

    Hope that helps.

    Unfortunately with Mugthesec it allows the attacker to drop as many secondary payloads as they want... so sometimes a full system reinstall is recommended if it cant be located. Hope it doesnt come to that. Good luck.

    objective-see.com/.../blog_0x20.html

Reply
  • 0

    From my understanding of Mughthesec it is usually hidden as an adobe flash player download that looks legitimate. I would suggest uninstalling all adobe products from the system and reinstalling them from the manufacturers website.

    It spreads under the file name player.dmg and will install the flash but also fraudulent programs called "advanced mac cleaner" and two safari extensions called "safe finder" and "booking.com"

    Try removing those programs and extensions completely from your computer.

    Hope that helps.

    Unfortunately with Mugthesec it allows the attacker to drop as many secondary payloads as they want... so sometimes a full system reinstall is recommended if it cant be located. Hope it doesnt come to that. Good luck.

    objective-see.com/.../blog_0x20.html

Children
No Data
Unfiltered HTML