My Vivaldi has a virus

vincej1

I went to a site offering the ability to download the sound file as an MP3.

Since then, every 5 mins or so I am getting 3 notifications "Removed viruses and stay safe boustahe(dot)com"

I have since deleted the mp3 file and restarted my Macbook (M1).

I have also installed and scan my Macbook with TrendMirco's "Anti Virus One" which reported no viruses.

I have also deleted the cookies relating to this website, as well as setting blocking to the max.

Nevertheless, these notifications keep coming. Ok - I have turned off Vivaldi notifications. However, I am concerned that I have a virus.

Any suggestions?

ingolftopf

Your 'macOS' certainly has a lot.
But for sure, "your Vivaldi" does not have a virus!

ingolftopf

@vincej1
But it looks to me as if you have actually, perhaps, caught a virus with the MP3.
Do not click on "boustahe(dot)com"!

Or have you already done it?

vincej1

Too late I clicked the website url, but did not not go further.

It does not affect other browsers I use include Chrome.

ingolftopf

@vincej1
There are macOS viruses and more are coming.
On some sites, viruses are more often hidden in MP3s.
Have you been on a "bad site"?

If it is a virus, you won't be able to fight it with these measures.
Choose a good anti-virus program and run it longer.
Unfortunately, I can't tell you which good AV programmes are available for macOS.
Don't click on anything until you have solved the problem.

vincej1

No - not a "bad site" in the sense of a porn site or some dark web site. I am a musician and I wanted a backing track off youtube.

ingolftopf

@vincej1 said in My Vivaldi has a virus:

Too late I clicked the website url, but did not not go further.

Bad, may or may not have been enough.

Never click on such links!

But as always, you're always smarter later.

ingolftopf

@vincej1
This has nothing to do with the browser.
You can catch a virus with all browsers.

If the virus is fairly new, the AV programme may not find it.

It may also be a "fun virus" that only sends notifications, but it may also be more.
Do not use the device for other things until you have cleared it up!

vincej1

@ingolftopf I downloaded "ScanGuard" is is allegedly voted the best antivirus scanner for MacOs and it found nothing. Still, I removed and cleaned a bunch of files.

ingolftopf

@vincej1 said in My Vivaldi has a virus:

or some dark web site.

With Vivaldi you can't get into the 'Dark Net'.
For that you need the browser 'Tor'.
There are also very good sites there, that's what it's for.
But you have to be much more careful there, it's teeming with viruses, even for Apple.
I wouldn't recommend it to you at the moment.

vincej1

How will I know if my Mac is truly clean?

ingolftopf

@vincej1 said in My Vivaldi has a virus:

Still, I removed and cleaned a bunch of files.

Do you know anything about it?
Please be careful!

ingolftopf

@vincej1
How long did the scan take?

vincej1

Do I know anything about "ScanGuard"?? - Nope.

ingolftopf

@vincej1
Suggest that you do not change anything in the files at first.

nomadic

@vincej1 It sounds like the site might have registered a service worker. Generally more of an annoyance than an infection, but you should still remove it. Go to vivaldi://serviceworker-internals and look for the offending entry and hit the Unregister button.

Also check chrome://settings/content/notifications to remove any entries for sites that might have been accidentally added to the Allowed list.

Note: The entry chrome-extension://mpognobbkildjkofajifpdfhcoklimli/ on the service worker page is an internal part of Vivaldi and can't be unregistered.

ingolftopf

@vincej1 said in My Vivaldi has a virus:

How will I know if my Mac is truly clean?

At first you don't know yet!

Please act accordingly.

So only test, write here ( ) and do nothing else, not even "change" or "clean up" anything.

vincej1

@nomadic Many thanks., Did as you asked and found nothing suspicious .

ingolftopf

@vincej1
Small consolation,
you can now use a signature.
For comments, description of your equipment and whatever else you like.
You now have enough .

ingolftopf

@nomadic
Thanks for the tip.
Saved.