My Vivaldi has a virus
-
@vincej1
This has nothing to do with the browser.
You can catch a virus with all browsers.If the virus is fairly new, the AV programme may not find it.
It may also be a "fun virus" that only sends notifications, but it may also be more.
Do not use the device for other things until you have cleared it up! -
@ingolftopf I downloaded "ScanGuard" is is allegedly voted the best antivirus scanner for MacOs and it found nothing. Still, I removed and cleaned a bunch of files.
-
@vincej1 said in My Vivaldi has a virus:
or some dark web site.
With Vivaldi you can't get into the 'Dark Net'.
For that you need the browser 'Tor'.
There are also very good sites there, that's what it's for.
But you have to be much more careful there, it's teeming with viruses, even for Apple.
I wouldn't recommend it to you at the moment. -
How will I know if my Mac is truly clean?
-
@vincej1 said in My Vivaldi has a virus:
Still, I removed and cleaned a bunch of files.
Do you know anything about it?
Please be careful! -
@vincej1
How long did the scan take? -
Do I know anything about "ScanGuard"?? - Nope.
-
@vincej1
Suggest that you do not change anything in the files at first. -
@vincej1 It sounds like the site might have registered a service worker. Generally more of an annoyance than an infection, but you should still remove it. Go to
vivaldi://serviceworker-internals
and look for the offending entry and hit theUnregister
button.Also check
chrome://settings/content/notifications
to remove any entries for sites that might have been accidentally added to theAllowed
list.
Note: The entry
chrome-extension://mpognobbkildjkofajifpdfhcoklimli/
on the service worker page is an internal part of Vivaldi and can't be unregistered. -
@vincej1 said in My Vivaldi has a virus:
How will I know if my Mac is truly clean?
At first you don't know yet!
Please act accordingly.
So only test, write here (
) and do nothing else, not even "change" or "clean up" anything.
-
@nomadic Many thanks., Did as you asked and found nothing suspicious .
-
@vincej1
Small consolation,
you can now use a signature.
For comments, description of your equipment and whatever else you like.
You now have enough.
-
@nomadic
Thanks for the tip.
Saved. -
@vincej1 The notifications are labeled as coming from Vivaldi, right?
You can safely hit the
Unregister
button on all of the service workers. Sites that need them will reregister them the next time you visit them. Although, I would skip any that start withchrome-extension://
as those are the background scripts for your extensions.The notifications could also be coming from a bad extension. Did you recently add any new extensions?
-
@vincej1
How long did the scan take? -
@vincej1
Please find a second "Deep Scan" for Apple. -
@vincej1
I would be even more sceptical. -
@vincej1
Anyone who has gone to the trouble of writing a virus for Apple may have other tricks built in.Was there anything conspicuous about the page or the MP3 in retrospect?
-
@vincej1
A good 'deep scan' will take quite a while, depending on how much is on your computer. -
@ingolftopf I turned notifications back on and got 6 notifications from this url with a great big long string on the end of it.:
https://app2.mackeeperaff.com/
It looks like a legit website, but hundreds of other people have complained about the same thing.