Rocksolid Light - uk.comp.sys.mac - "My Mac Book Air is Been Hacked"!

"My Mac Book Air is Been Hacked"!

<UKUhM.19459$3C3e.13724@fx13.iad>

https://news.novabbs.org/aus+uk/article-flat.php?id=16571&group=uk.comp.sys.mac#16571

copy link Newsgroups: uk.comp.sys.mac alt.computer.workshop

Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!panix!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!peer01.iad!feed-me.highwinds-media.com!news.highwinds-media.com!fx13.iad.POSTED!not-for-mail
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0)
Gecko/20100101 Thunderbird/102.12.0
Newsgroups: uk.comp.sys.mac,alt.computer.workshop
Content-Language: en-GB
From: DavidB@nomail.afraid.org (David Brooks)
Subject: "My Mac Book Air is Been Hacked"!
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Lines: 23
Message-ID: <UKUhM.19459$3C3e.13724@fx13.iad>
X-Complaints-To: abuse@blocknews.net
NNTP-Posting-Date: Tue, 13 Jun 2023 07:18:12 UTC
Organization: blocknews - www.blocknews.net
Date: Tue, 13 Jun 2023 08:18:11 +0100
X-Received-Bytes: 1379

by: David Brooks - Tue, 13 Jun 2023 07:18 UTC

A fascinating insight into another person's on-line experience!

https://discussions.apple.com/thread/254319178

Have YOU been there and done that? (BTDT) I have!

I determined that I have this item on my iMac:-

Unsigned Files:
Launchd: /Library/LaunchDaemons/com.symantec.sharedsettings.MES.plist
Executable: /Library/Application
Support/Symantec/Silo/MES/DomainSettings/SymSharedSettingsd
Details: Exact match found in the legitimate list - probably OK
=

So, I Googled - with this result:-

https://www.google.com/search?client=safari&rls=en&q=%22com.symantec.symsharedsettings2.MES%22+site%3Adiscussions.apple.com&ie=UTF-8&oe=UTF-8

Fascinating! :-D

--
David

Re: "My Mac Book Air is Been Hacked"!

<u6981k$18ufa$1@solani.org>

copy mid

https://news.novabbs.org/aus+uk/article-flat.php?id=16572&group=uk.comp.sys.mac#16572

copy link Newsgroups: uk.comp.sys.mac

Path: i2pn2.org!i2pn.org!usenet.goja.nl.eu.org!weretis.net!feeder8.news.weretis.net!reader5.news.weretis.net!news.solani.org!.POSTED!not-for-mail
From: hugybear@gmx.ch (Joerg Lorenz)
Newsgroups: uk.comp.sys.mac
Subject: Re: "My Mac Book Air is Been Hacked"!
Date: Tue, 13 Jun 2023 10:06:12 +0200
Organization: Camembert Normand au Lait Cru
Message-ID: <u6981k$18ufa$1@solani.org>
References: <UKUhM.19459$3C3e.13724@fx13.iad>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Injection-Date: Tue, 13 Jun 2023 08:06:12 -0000 (UTC)
Injection-Info: solani.org;
logging-data="1341930"; mail-complaints-to="abuse@news.solani.org"
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0)
Gecko/20100101 Thunderbird/102.12.0
Cancel-Lock: sha1:a7ZJsJJsyXpsvLYNpcasfcMrjD4=
In-Reply-To: <UKUhM.19459$3C3e.13724@fx13.iad>
Content-Language: de-CH
X-User-ID: eJwNx8ERwDAIA7CVwhnTZByH4v1HaPUTUVH9ZLGSpqNzawVwADhvzFVrcQrX0tHs8eg/6bfzAyKLEhI=

by: Joerg Lorenz - Tue, 13 Jun 2023 08:06 UTC

Am 13.06.23 um 09:18 schrieb David Brooks:
> Unsigned Files:
> Launchd: /Library/LaunchDaemons/com.symantec.sharedsettings.MES.plist
> Executable: /Library/Application
> Support/Symantec/Silo/MES/DomainSettings/SymSharedSettingsd
> Details: Exact match found in the legitimate list - probably OK

The system is compromised.

--
Gutta cavat lapidem (Ovid)

Re: "My Mac Book Air is Been Hacked"!

<BTVhM.31122$AF%b.28125@fx12.iad>

copy mid

https://news.novabbs.org/aus+uk/article-flat.php?id=16573&group=uk.comp.sys.mac#16573

copy link Newsgroups: uk.comp.sys.mac alt.computer.workshop

Path: i2pn2.org!i2pn.org!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!peer01.iad!feed-me.highwinds-media.com!news.highwinds-media.com!fx12.iad.POSTED!not-for-mail
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0)
Gecko/20100101 Thunderbird/102.12.0
Subject: Re: "My Mac Book Air is Been Hacked"!
Content-Language: en-GB
Newsgroups: uk.comp.sys.mac,alt.computer.workshop
References: <UKUhM.19459$3C3e.13724@fx13.iad> <u6981k$18ufa$1@solani.org>
From: DavidB@nomail.afraid.org (David Brooks)
In-Reply-To: <u6981k$18ufa$1@solani.org>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Lines: 20
Message-ID: <BTVhM.31122$AF%b.28125@fx12.iad>
X-Complaints-To: abuse@blocknews.net
NNTP-Posting-Date: Tue, 13 Jun 2023 08:35:45 UTC
Organization: blocknews - www.blocknews.net
Date: Tue, 13 Jun 2023 09:35:45 +0100
X-Received-Bytes: 1302

by: David Brooks - Tue, 13 Jun 2023 08:35 UTC

On 13/06/2023 09:06, Joerg Lorenz wrote:
> Am 13.06.23 um 09:18 schrieb David Brooks:
>> Unsigned Files:
>> Launchd: /Library/LaunchDaemons/com.symantec.sharedsettings.MES.plist
>> Executable: /Library/Application
>> Support/Symantec/Silo/MES/DomainSettings/SymSharedSettingsd
>> Details: Exact match found in the legitimate list - probably OK
>
>
> The system is compromised.

*WHICH* system is compromised?

How would YOU resolve such a situation?

TIA

--
David

Re: "My Mac Book Air is Been Hacked"!

<u69ia0$3ig34$1@hunterbd.eternal-september.org>

copy mid

https://news.novabbs.org/aus+uk/article-flat.php?id=16579&group=uk.comp.sys.mac#16579

copy link Newsgroups: uk.comp.sys.mac alt.computer.workshop

Path: i2pn2.org!i2pn.org!eternal-september.org!news.eternal-september.org!hunterbd.eternal-september.org!.POSTED!not-for-mail
From: D@vid.invalid (David (BD))
Newsgroups: uk.comp.sys.mac,alt.computer.workshop
Subject: Re: "My Mac Book Air is Been Hacked"!
Date: Tue, 13 Jun 2023 12:01:20 +0100
Organization: A noiseless patient Spider
Lines: 22
Message-ID: <u69ia0$3ig34$1@hunterbd.eternal-september.org>
References: <UKUhM.19459$3C3e.13724@fx13.iad> <u6981k$18ufa$1@solani.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Tue, 13 Jun 2023 11:01:20 -0000 (UTC)
Injection-Info: hunterbd.eternal-september.org; posting-host="cb0bd74f6545cecc835a7b27ed819a74";
logging-data="3752036"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX18NKjZhF/neJiEHAE/BqETu"
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:102.0) Gecko/20100101
Thunderbird/102.11.0
Cancel-Lock: sha1:LR9oTmHxHVH2pyroAT0pR6gAuFw=
Content-Language: en-US
In-Reply-To: <u6981k$18ufa$1@solani.org>

by: David (BD) - Tue, 13 Jun 2023 11:01 UTC

I wonder if anyone else reading here agrees with you.

Anyone?

I'd welcome discussion about this!

--
Kind regards,
David

Re: "My Mac Book Air is Been Hacked"!

<u69jvb$194hd$1@solani.org>

copy mid

https://news.novabbs.org/aus+uk/article-flat.php?id=16580&group=uk.comp.sys.mac#16580

copy link Newsgroups: uk.comp.sys.mac alt.computer.workshop

Path: i2pn2.org!i2pn.org!weretis.net!feeder8.news.weretis.net!reader5.news.weretis.net!news.solani.org!.POSTED!not-for-mail
From: hugybear@gmx.ch (Joerg Lorenz)
Newsgroups: uk.comp.sys.mac,alt.computer.workshop
Subject: Re: "My Mac Book Air is Been Hacked"!
Date: Tue, 13 Jun 2023 13:29:47 +0200
Organization: Camembert Normand au Lait Cru
Message-ID: <u69jvb$194hd$1@solani.org>
References: <UKUhM.19459$3C3e.13724@fx13.iad> <u6981k$18ufa$1@solani.org>
<u69ia0$3ig34$1@hunterbd.eternal-september.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Injection-Date: Tue, 13 Jun 2023 11:29:47 -0000 (UTC)
Injection-Info: solani.org;
logging-data="1348141"; mail-complaints-to="abuse@news.solani.org"
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0)
Gecko/20100101 Thunderbird/102.12.0
Cancel-Lock: sha1:H/k4pLogcHYRoKNYPIlOdOGY5Wg=
In-Reply-To: <u69ia0$3ig34$1@hunterbd.eternal-september.org>
Content-Language: de-CH
X-User-ID: eJwFwYEBwCAIA7CXZC0VzkEm/59g4pCpN+Wij0/NRiX5Y9muapklYqUoME8B+eVtxll+I/oBCQoQSw==

by: Joerg Lorenz - Tue, 13 Jun 2023 11:29 UTC

Am 13.06.23 um 13:01 schrieb David (BD):
> On 13/06/2023 09:06, Joerg Lorenz wrote:
>> Am 13.06.23 um 09:18 schrieb David Brooks:
>>> Unsigned Files:
>>> Launchd: /Library/LaunchDaemons/com.symantec.sharedsettings.MES.plist
>>> Executable: /Library/Application
>>> Support/Symantec/Silo/MES/DomainSettings/SymSharedSettingsd
>>> Details: Exact match found in the legitimate list - probably OK
>>
>>
>> *The system is compromised*.
>
>
> I wonder if anyone else reading here agrees with you.

Symantec files on a Mac or any other computer are a malware-infection.

--
Gutta cavat lapidem (Ovid)

Re: "My Mac Book Air is Been Hacked"!

<Dl3iM.7143$mshf.463@fx46.iad>

copy mid

https://news.novabbs.org/aus+uk/article-flat.php?id=16592&group=uk.comp.sys.mac#16592

copy link Newsgroups: uk.comp.sys.mac alt.computer.workshop

Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!peer02.iad!feed-me.highwinds-media.com!news.highwinds-media.com!fx46.iad.POSTED!not-for-mail
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0)
Gecko/20100101 Thunderbird/102.12.0
Subject: Re: "My Mac Book Air is Been Hacked"!
Newsgroups: uk.comp.sys.mac,alt.computer.workshop
References: <UKUhM.19459$3C3e.13724@fx13.iad> <u6981k$18ufa$1@solani.org>
<u69ia0$3ig34$1@hunterbd.eternal-september.org> <u69jvb$194hd$1@solani.org>
Content-Language: en-GB
From: DavidB@nomail.afraid.org (David Brooks)
In-Reply-To: <u69jvb$194hd$1@solani.org>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Lines: 29
Message-ID: <Dl3iM.7143$mshf.463@fx46.iad>
X-Complaints-To: abuse@blocknews.net
NNTP-Posting-Date: Tue, 13 Jun 2023 19:22:11 UTC
Organization: blocknews - www.blocknews.net
Date: Tue, 13 Jun 2023 20:22:11 +0100
X-Received-Bytes: 1653

by: David Brooks - Tue, 13 Jun 2023 19:22 UTC

On 13/06/2023 12:29, Joerg Lorenz wrote:
> Am 13.06.23 um 13:01 schrieb David (BD):
>> On 13/06/2023 09:06, Joerg Lorenz wrote:
>>> Am 13.06.23 um 09:18 schrieb David Brooks:
>>>> Unsigned Files:
>>>> Launchd: /Library/LaunchDaemons/com.symantec.sharedsettings.MES.plist
>>>> Executable: /Library/Application
>>>> Support/Symantec/Silo/MES/DomainSettings/SymSharedSettingsd
>>>> Details: Exact match found in the legitimate list - probably OK
>>>
>>>
>>> *The system is compromised*.
>>
>>
>> I wonder if anyone else reading here agrees with you.
>
> Symantec files on a Mac or any other computer are a malware-infection.

Ha! Guess what *I* found?!!!

https://ibb.co/88bn2jF

All now gone. :-D

Thanks for helping. :-)

--
David

Re: "My Mac Book Air is Been Hacked"!

<130620231541559668%nospam@nospam.invalid>

copy mid

https://news.novabbs.org/aus+uk/article-flat.php?id=16593&group=uk.comp.sys.mac#16593

copy link Newsgroups: uk.comp.sys.mac alt.computer.workshop

Path: i2pn2.org!i2pn.org!eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: nospam@nospam.invalid (nospam)
Newsgroups: uk.comp.sys.mac,alt.computer.workshop
Subject: Re: "My Mac Book Air is Been Hacked"!
Date: Tue, 13 Jun 2023 15:41:55 -0400
Organization: A noiseless patient Spider
Lines: 7
Message-ID: <130620231541559668%nospam@nospam.invalid>
References: <UKUhM.19459$3C3e.13724@fx13.iad> <u6981k$18ufa$1@solani.org> <u69ia0$3ig34$1@hunterbd.eternal-september.org> <u69jvb$194hd$1@solani.org> <Dl3iM.7143$mshf.463@fx46.iad>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
Injection-Info: dont-email.me; posting-host="da2735ecfc1a4f8edebc5b1b12f8495a";
logging-data="3890238"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+5a5KLTDYB7ICfn00GP4VX"
User-Agent: Thoth/1.9.0 (Mac OS X)
Cancel-Lock: sha1:TALRzOK8QcHndOvto20Le8sMUO4=

by: nospam - Tue, 13 Jun 2023 19:41 UTC

In article <Dl3iM.7143$mshf.463@fx46.iad>, David Brooks
<DavidB@nomail.afraid.org> wrote:

>
> Ha! Guess what *I* found?!!!

a clue?

Re: "My Mac Book Air is Been Hacked"!

<u6br39$18lrl$1@solani.org>

copy mid

https://news.novabbs.org/aus+uk/article-flat.php?id=16596&group=uk.comp.sys.mac#16596

copy link Newsgroups: uk.comp.sys.mac alt.computer.workshop

Path: i2pn2.org!i2pn.org!weretis.net!feeder8.news.weretis.net!reader5.news.weretis.net!news.solani.org!.POSTED!not-for-mail
From: hugybear@gmx.ch (Joerg Lorenz)
Newsgroups: uk.comp.sys.mac,alt.computer.workshop
Subject: Re: "My Mac Book Air is Been Hacked"!
Date: Wed, 14 Jun 2023 09:43:37 +0200
Organization: Camembert Normand au Lait Cru
Message-ID: <u6br39$18lrl$1@solani.org>
References: <UKUhM.19459$3C3e.13724@fx13.iad> <u6981k$18ufa$1@solani.org>
<u69ia0$3ig34$1@hunterbd.eternal-september.org> <u69jvb$194hd$1@solani.org>
<Dl3iM.7143$mshf.463@fx46.iad>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Injection-Date: Wed, 14 Jun 2023 07:43:37 -0000 (UTC)
Injection-Info: solani.org;
logging-data="1333109"; mail-complaints-to="abuse@news.solani.org"
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101
Thunderbird/102.11.0
Cancel-Lock: sha1:6mlO5YPsyrzJt/PKvXOvATB4Rv0=
In-Reply-To: <Dl3iM.7143$mshf.463@fx46.iad>
X-User-ID: eJwFwQkBACAIA8BKTHk0Dg7oH8E72w5nqJurjY1wFs4WiUbOyarWWxGkc0SIl50ul8kHLPsqzRHS
Content-Language: de-CH

by: Joerg Lorenz - Wed, 14 Jun 2023 07:43 UTC

Am 13.06.23 um 21:22 schrieb David Brooks:
> On 13/06/2023 12:29, Joerg Lorenz wrote:
>> Am 13.06.23 um 13:01 schrieb David (BD):
>>> On 13/06/2023 09:06, Joerg Lorenz wrote:
>>>> Am 13.06.23 um 09:18 schrieb David Brooks:
>>>>> Unsigned Files:
>>>>> Launchd: /Library/LaunchDaemons/com.symantec.sharedsettings.MES.plist
>>>>> Executable: /Library/Application
>>>>> Support/Symantec/Silo/MES/DomainSettings/SymSharedSettingsd
>>>>> Details: Exact match found in the legitimate list - probably OK
>>>>
>>>>
>>>> *The system is compromised*.
>>>
>>>
>>> I wonder if anyone else reading here agrees with you.
>>
>> Symantec files on a Mac or any other computer are a malware-infection.
>
> Ha! Guess what *I* found?!!!
>
> https://ibb.co/88bn2jF
>
> All now gone. :-D
>
> Thanks for helping. :-)

Why do you do that? I'm stunned!

--
Gutta cavat lapidem (Ovid)

Re: "My Mac Book Air is Been Hacked"!

<r%eiM.60937$hl93.6400@fx18.iad>

copy mid

https://news.novabbs.org/aus+uk/article-flat.php?id=16597&group=uk.comp.sys.mac#16597

copy link Newsgroups: uk.comp.sys.mac alt.computer.workshop

Path: i2pn2.org!i2pn.org!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!peer01.iad!feed-me.highwinds-media.com!news.highwinds-media.com!fx18.iad.POSTED!not-for-mail
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0)
Gecko/20100101 Thunderbird/102.12.0
Subject: Re: "My Mac Book Air is Been Hacked"!
Content-Language: en-GB
Newsgroups: uk.comp.sys.mac,alt.computer.workshop
References: <UKUhM.19459$3C3e.13724@fx13.iad> <u6981k$18ufa$1@solani.org>
<u69ia0$3ig34$1@hunterbd.eternal-september.org> <u69jvb$194hd$1@solani.org>
<Dl3iM.7143$mshf.463@fx46.iad> <u6br39$18lrl$1@solani.org>
From: DavidB@nomail.afraid.org (David Brooks)
In-Reply-To: <u6br39$18lrl$1@solani.org>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Lines: 44
Message-ID: <r%eiM.60937$hl93.6400@fx18.iad>
X-Complaints-To: abuse@blocknews.net
NNTP-Posting-Date: Wed, 14 Jun 2023 08:37:43 UTC
Organization: blocknews - www.blocknews.net
Date: Wed, 14 Jun 2023 09:37:43 +0100
X-Received-Bytes: 2237

by: David Brooks - Wed, 14 Jun 2023 08:37 UTC

On 14/06/2023 08:43, Joerg Lorenz wrote:
> Am 13.06.23 um 21:22 schrieb David Brooks:
>> On 13/06/2023 12:29, Joerg Lorenz wrote:
>>> Am 13.06.23 um 13:01 schrieb David (BD):
>>>> On 13/06/2023 09:06, Joerg Lorenz wrote:
>>>>> Am 13.06.23 um 09:18 schrieb David Brooks:
>>>>>> Unsigned Files:
>>>>>> Launchd: /Library/LaunchDaemons/com.symantec.sharedsettings.MES.plist
>>>>>> Executable: /Library/Application
>>>>>> Support/Symantec/Silo/MES/DomainSettings/SymSharedSettingsd
>>>>>> Details: Exact match found in the legitimate list - probably OK
>>>>>
>>>>>
>>>>> *The system is compromised*.
>>>>
>>>>
>>>> I wonder if anyone else reading here agrees with you.
>>>
>>> Symantec files on a Mac or any other computer are a malware-infection.
>>
>> Ha! Guess what *I* found?!!!
>>
>> https://ibb.co/88bn2jF
>>
>> All now gone. :-D
>>
>> Thanks for helping. :-)
>
> Why do you do that? I'm stunned!

I was 'testing' EtreCheck, available from Etresoft Inc
https://www.etresoft.com/index.html

What showed up as 'interesting' when YOU first used it to scan /your/
Apple computer?

Perhaps you've also come across my question asked here under my Apple
ASC handle, HunterBD?

https://developer.apple.com/forums/thread/687438

--
David

Re: "My Mac Book Air is Been Hacked"!

<u6bvmc$3vond$1@dont-email.me>

copy mid

https://news.novabbs.org/aus+uk/article-flat.php?id=16598&group=uk.comp.sys.mac#16598

copy link Newsgroups: uk.comp.sys.mac alt.computer.workshop

Path: i2pn2.org!i2pn.org!eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: FTR@nomail.afraid.org (FromTheRafters)
Newsgroups: uk.comp.sys.mac,alt.computer.workshop
Subject: Re: "My Mac Book Air is Been Hacked"!
Date: Wed, 14 Jun 2023 05:02:00 -0400
Organization: Peripheral Visions
Lines: 32
Message-ID: <u6bvmc$3vond$1@dont-email.me>
References: <UKUhM.19459$3C3e.13724@fx13.iad> <u6981k$18ufa$1@solani.org> <u69ia0$3ig34$1@hunterbd.eternal-september.org> <u69jvb$194hd$1@solani.org> <Dl3iM.7143$mshf.463@fx46.iad> <u6br39$18lrl$1@solani.org>
Reply-To: erratic.howard@gmail.com
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-15"; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Wed, 14 Jun 2023 09:02:04 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="853b38e0e4f2592b26680446743b22b7";
logging-data="4186861"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX18VvtpzHHoznH4Xl0JX0em8FhBK0igXi5A="
Cancel-Lock: sha1:oICILiP3R9a75O+k6e703o75Sy0=
X-ICQ: 1701145376
X-Newsreader: MesNews/1.08.06.00-gb

by: FromTheRafters - Wed, 14 Jun 2023 09:02 UTC

Joerg Lorenz wrote on 6/14/2023 :
> Am 13.06.23 um 21:22 schrieb David Brooks:
>> On 13/06/2023 12:29, Joerg Lorenz wrote:
>>> Am 13.06.23 um 13:01 schrieb David (BD):
>>>> On 13/06/2023 09:06, Joerg Lorenz wrote:
>>>>> Am 13.06.23 um 09:18 schrieb David Brooks:
>>>>>> Unsigned Files:
>>>>>> Launchd:
>>>>>> /Library/LaunchDaemons/com.symantec.sharedsettings.MES.plist
>>>>>> Executable: /Library/Application
>>>>>> Support/Symantec/Silo/MES/DomainSettings/SymSharedSettingsd
>>>>>> Details: Exact match found in the legitimate list - probably OK
>>>>>
>>>>>
>>>>> *The system is compromised*.
>>>>
>>>>
>>>> I wonder if anyone else reading here agrees with you.
>>>
>>> Symantec files on a Mac or any other computer are a malware-infection.
>>
>> Ha! Guess what *I* found?!!!
>>
>> https://ibb.co/88bn2jF
>>
>> All now gone. :-D
>>
>> Thanks for helping. :-)
>
> Why do you do that? I'm stunned!

You lied to him and he took you seriously.

Re: "My Mac Book Air is Been Hacked"!

<_xfiM.60938$hl93.52418@fx18.iad>

copy mid

https://news.novabbs.org/aus+uk/article-flat.php?id=16599&group=uk.comp.sys.mac#16599

copy link Newsgroups: uk.comp.sys.mac alt.computer.workshop

Path: i2pn2.org!i2pn.org!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!peer02.iad!feed-me.highwinds-media.com!news.highwinds-media.com!fx18.iad.POSTED!not-for-mail
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0)
Gecko/20100101 Thunderbird/102.12.0
Subject: Re: "My Mac Book Air is Been Hacked"!
Content-Language: en-GB
Newsgroups: uk.comp.sys.mac,alt.computer.workshop
References: <UKUhM.19459$3C3e.13724@fx13.iad> <u6981k$18ufa$1@solani.org>
<u69ia0$3ig34$1@hunterbd.eternal-september.org> <u69jvb$194hd$1@solani.org>
<Dl3iM.7143$mshf.463@fx46.iad> <u6br39$18lrl$1@solani.org>
<u6bvmc$3vond$1@dont-email.me>
From: DavidB@nomail.afraid.org (David Brooks)
In-Reply-To: <u6bvmc$3vond$1@dont-email.me>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Lines: 41
Message-ID: <_xfiM.60938$hl93.52418@fx18.iad>
X-Complaints-To: abuse@blocknews.net
NNTP-Posting-Date: Wed, 14 Jun 2023 09:14:34 UTC
Organization: blocknews - www.blocknews.net
Date: Wed, 14 Jun 2023 10:14:34 +0100
X-Received-Bytes: 2149

by: David Brooks - Wed, 14 Jun 2023 09:14 UTC

On 14/06/2023 10:02, FromTheRafters wrote:
> Joerg Lorenz wrote on 6/14/2023 :
>> Am 13.06.23 um 21:22 schrieb David Brooks:
>>> On 13/06/2023 12:29, Joerg Lorenz wrote:
>>>> Am 13.06.23 um 13:01 schrieb David (BD):
>>>>> On 13/06/2023 09:06, Joerg Lorenz wrote:
>>>>>> Am 13.06.23 um 09:18 schrieb David Brooks:
>>>>>>> Unsigned Files:
>>>>>>> Launchd:
>>>>>>> /Library/LaunchDaemons/com.symantec.sharedsettings.MES.plist
>>>>>>> Executable: /Library/Application
>>>>>>> Support/Symantec/Silo/MES/DomainSettings/SymSharedSettingsd
>>>>>>> Details: Exact match found in the legitimate list - probably OK
>>>>>>
>>>>>>
>>>>>> *The system is compromised*.
>>>>>
>>>>>
>>>>> I wonder if anyone else reading here agrees with you.
>>>>
>>>> Symantec files on a Mac or any other computer are a malware-infection.
>>>
>>> Ha! Guess what *I* found?!!!
>>>
>>> https://ibb.co/88bn2jF
>>>
>>> All now gone. :-D
>>>
>>> Thanks for helping. :-)
>>
>> Why do you do that? I'm stunned!
>
> You lied to him and he took you seriously.

I'll refer you to my question posed here:-
https://developer.apple.com/forums/thread/709959

HTH

--
David

Re: "My Mac Book Air is Been Hacked"!

<u6c0no$18qe8$1@solani.org>

copy mid

https://news.novabbs.org/aus+uk/article-flat.php?id=16600&group=uk.comp.sys.mac#16600

copy link Newsgroups: uk.comp.sys.mac alt.computer.workshop

Path: i2pn2.org!i2pn.org!weretis.net!feeder8.news.weretis.net!reader5.news.weretis.net!news.solani.org!.POSTED!not-for-mail
From: hugybear@gmx.ch (Joerg Lorenz)
Newsgroups: uk.comp.sys.mac,alt.computer.workshop
Subject: Re: "My Mac Book Air is Been Hacked"!
Date: Wed, 14 Jun 2023 11:19:52 +0200
Organization: Camembert Normand au Lait Cru
Message-ID: <u6c0no$18qe8$1@solani.org>
References: <UKUhM.19459$3C3e.13724@fx13.iad> <u6981k$18ufa$1@solani.org>
<u69ia0$3ig34$1@hunterbd.eternal-september.org> <u69jvb$194hd$1@solani.org>
<Dl3iM.7143$mshf.463@fx46.iad> <u6br39$18lrl$1@solani.org>
<r%eiM.60937$hl93.6400@fx18.iad>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Injection-Date: Wed, 14 Jun 2023 09:19:52 -0000 (UTC)
Injection-Info: solani.org;
logging-data="1337800"; mail-complaints-to="abuse@news.solani.org"
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101
Thunderbird/102.11.0
Cancel-Lock: sha1:pHuPJ9j2+ZeA+n274jhMgbG142Q=
In-Reply-To: <r%eiM.60937$hl93.6400@fx18.iad>
Content-Language: de-CH, en-GB
X-User-ID: eJwFwQkRADAIAzBLfO2GHA6GfwlL4FT2CYKBxV7VsuZ7Wczw2mvVWMsSkew30Q5fndOzYfYBIJ0RWQ==

by: Joerg Lorenz - Wed, 14 Jun 2023 09:19 UTC

Am 14.06.23 um 10:37 schrieb David Brooks:
> On 14/06/2023 08:43, Joerg Lorenz wrote:
>> Am 13.06.23 um 21:22 schrieb David Brooks:
>>> On 13/06/2023 12:29, Joerg Lorenz wrote:
>>>> Am 13.06.23 um 13:01 schrieb David (BD):
>>>>> On 13/06/2023 09:06, Joerg Lorenz wrote:
>>>>>> Am 13.06.23 um 09:18 schrieb David Brooks:
>>>>>>> Unsigned Files:
>>>>>>> Launchd: /Library/LaunchDaemons/com.symantec.sharedsettings.MES.plist
>>>>>>> Executable: /Library/Application
>>>>>>> Support/Symantec/Silo/MES/DomainSettings/SymSharedSettingsd
>>>>>>> Details: Exact match found in the legitimate list - probably OK
>>>>>>
>>>>>>
>>>>>> *The system is compromised*.
>>>>>
>>>>>
>>>>> I wonder if anyone else reading here agrees with you.
>>>>
>>>> Symantec files on a Mac or any other computer are a malware-infection.
>>>
>>> Ha! Guess what *I* found?!!!
>>>
>>> https://ibb.co/88bn2jF
>>>
>>> All now gone. :-D
>>>
>>> Thanks for helping. :-)
>>
>> Why do you do that? I'm stunned!
>
> I was 'testing' EtreCheck, available from Etresoft Inc
> https://www.etresoft.com/index.html
>
> What showed up as 'interesting' when YOU first used it to scan /your/ > Apple computer?

I never install malware intentionally on my productive systems ... ;-)

> Perhaps you've also come across my question asked here under my Apple
> ASC handle, HunterBD?
>
> https://developer.apple.com/forums/thread/687438

Perhaps.

--
Gutta cavat lapidem (Ovid)

Re: "My Mac Book Air is Been Hacked"!

<u6c0so$18qe8$2@solani.org>

copy mid

https://news.novabbs.org/aus+uk/article-flat.php?id=16601&group=uk.comp.sys.mac#16601

copy link Newsgroups: uk.comp.sys.mac

Path: i2pn2.org!i2pn.org!weretis.net!feeder8.news.weretis.net!reader5.news.weretis.net!news.solani.org!.POSTED!not-for-mail
From: hugybear@gmx.ch (Joerg Lorenz)
Newsgroups: uk.comp.sys.mac
Subject: Re: "My Mac Book Air is Been Hacked"!
Date: Wed, 14 Jun 2023 11:22:32 +0200
Organization: Camembert Normand au Lait Cru
Message-ID: <u6c0so$18qe8$2@solani.org>
References: <UKUhM.19459$3C3e.13724@fx13.iad> <u6981k$18ufa$1@solani.org>
<u69ia0$3ig34$1@hunterbd.eternal-september.org> <u69jvb$194hd$1@solani.org>
<Dl3iM.7143$mshf.463@fx46.iad> <u6br39$18lrl$1@solani.org>
<u6bvmc$3vond$1@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Injection-Date: Wed, 14 Jun 2023 09:22:32 -0000 (UTC)
Injection-Info: solani.org;
logging-data="1337800"; mail-complaints-to="abuse@news.solani.org"
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101
Thunderbird/102.11.0
Cancel-Lock: sha1:A7HsewTp4vcSxMgsLACwPCJ/Qlc=
Content-Language: de-CH
In-Reply-To: <u6bvmc$3vond$1@dont-email.me>
X-User-ID: eJwFwQkRADAIAzBLA1a4yeGrfwlLYC7ecR1+QVCWqydrpLvOvqRXWi/IhoipIo2DsjcI6gdGGhI7

by: Joerg Lorenz - Wed, 14 Jun 2023 09:22 UTC

Am 14.06.23 um 11:02 schrieb FromTheRafters:
> Joerg Lorenz wrote on 6/14/2023 :
>> Am 13.06.23 um 21:22 schrieb David Brooks:
>>> On 13/06/2023 12:29, Joerg Lorenz wrote:
>>>> Am 13.06.23 um 13:01 schrieb David (BD):
>>>>> On 13/06/2023 09:06, Joerg Lorenz wrote:
>>>>>> Am 13.06.23 um 09:18 schrieb David Brooks:
>>>>>>> Unsigned Files:
>>>>>>> Launchd:
>>>>>>> /Library/LaunchDaemons/com.symantec.sharedsettings.MES.plist
>>>>>>> Executable: /Library/Application
>>>>>>> Support/Symantec/Silo/MES/DomainSettings/SymSharedSettingsd
>>>>>>> Details: Exact match found in the legitimate list - probably OK
>>>>>>
>>>>>>
>>>>>> *The system is compromised*.
>>>>>
>>>>>
>>>>> I wonder if anyone else reading here agrees with you.
>>>>
>>>> Symantec files on a Mac or any other computer are a malware-infection.
>>>
>>> Ha! Guess what *I* found?!!!
>>>
>>> https://ibb.co/88bn2jF
>>>
>>> All now gone. :-D
>>>
>>> Thanks for helping. :-)
>>
>> Why do you do that? I'm stunned!
>
> You lied to him and he took you seriously.

Where did I lie? I mean everything dead serious!
Beware: Some things are an opinion and others less so.

X-post eliminated.

--
Gutta cavat lapidem (Ovid)

Re: "My Mac Book Air is Been Hacked"!

<M4giM.73932$d1y5.10625@fx17.iad>

copy mid

https://news.novabbs.org/aus+uk/article-flat.php?id=16602&group=uk.comp.sys.mac#16602

copy link Newsgroups: uk.comp.sys.mac alt.computer.workshop

Path: i2pn2.org!i2pn.org!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!peer03.iad!feed-me.highwinds-media.com!news.highwinds-media.com!fx17.iad.POSTED!not-for-mail
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0)
Gecko/20100101 Thunderbird/102.12.0
Subject: Re: "My Mac Book Air is Been Hacked"!
Content-Language: en-GB
Newsgroups: uk.comp.sys.mac,alt.computer.workshop
References: <UKUhM.19459$3C3e.13724@fx13.iad> <u6981k$18ufa$1@solani.org>
<u69ia0$3ig34$1@hunterbd.eternal-september.org> <u69jvb$194hd$1@solani.org>
<Dl3iM.7143$mshf.463@fx46.iad> <u6br39$18lrl$1@solani.org>
<u6bvmc$3vond$1@dont-email.me> <u6c0so$18qe8$2@solani.org>
From: DavidB@nomail.afraid.org (David Brooks)
In-Reply-To: <u6c0so$18qe8$2@solani.org>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Lines: 39
Message-ID: <M4giM.73932$d1y5.10625@fx17.iad>
X-Complaints-To: abuse@blocknews.net
NNTP-Posting-Date: Wed, 14 Jun 2023 09:51:40 UTC
Organization: blocknews - www.blocknews.net
Date: Wed, 14 Jun 2023 10:51:40 +0100
X-Received-Bytes: 2260

by: David Brooks - Wed, 14 Jun 2023 09:51 UTC

On 14/06/2023 10:22, Joerg Lorenz wrote:
> Am 14.06.23 um 11:02 schrieb FromTheRafters:
>> Joerg Lorenz wrote on 6/14/2023 :
>>> Am 13.06.23 um 21:22 schrieb David Brooks:
>>>> On 13/06/2023 12:29, Joerg Lorenz wrote:
>>>>> Am 13.06.23 um 13:01 schrieb David (BD):
>>>>>> On 13/06/2023 09:06, Joerg Lorenz wrote:
>>>>>>> Am 13.06.23 um 09:18 schrieb David Brooks:
>>>>>>>> Unsigned Files:
>>>>>>>> Launchd:
>>>>>>>> /Library/LaunchDaemons/com.symantec.sharedsettings.MES.plist
>>>>>>>> Executable: /Library/Application
>>>>>>>> Support/Symantec/Silo/MES/DomainSettings/SymSharedSettingsd
>>>>>>>> Details: Exact match found in the legitimate list - probably OK
>>>>>>>
>>>>>>>
>>>>>>> *The system is compromised*.
>>>>>>
>>>>>>
>>>>>> I wonder if anyone else reading here agrees with you.
>>>>>
>>>>> Symantec files on a Mac or any other computer are a malware-infection.
>>>>
>>>> Ha! Guess what *I* found?!!!
>>>>
>>>> https://ibb.co/88bn2jF
>>>>
>>>> All now gone. :-D
>>>>
>>>> Thanks for helping. :-)
>>>
>>> Why do you do that? I'm stunned!
>>
>> You lied to him and he took you seriously.
>
> Where did I lie? I mean everything dead serious!
> Beware: Some things are an opinion and others less so.

X-post reinstated

Re: "My Mac Book Air is Been Hacked"!

<idgiM.60939$hl93.36903@fx18.iad>

copy mid

https://news.novabbs.org/aus+uk/article-flat.php?id=16603&group=uk.comp.sys.mac#16603

copy link Newsgroups: uk.comp.sys.mac alt.computer.workshop

Path: i2pn2.org!i2pn.org!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!peer03.iad!feed-me.highwinds-media.com!news.highwinds-media.com!fx18.iad.POSTED!not-for-mail
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0)
Gecko/20100101 Thunderbird/102.12.0
Subject: Re: "My Mac Book Air is Been Hacked"!
Content-Language: en-GB
Newsgroups: uk.comp.sys.mac,alt.computer.workshop
References: <UKUhM.19459$3C3e.13724@fx13.iad> <u6981k$18ufa$1@solani.org>
<u69ia0$3ig34$1@hunterbd.eternal-september.org> <u69jvb$194hd$1@solani.org>
<Dl3iM.7143$mshf.463@fx46.iad> <u6br39$18lrl$1@solani.org>
<r%eiM.60937$hl93.6400@fx18.iad> <u6c0no$18qe8$1@solani.org>
From: DavidB@nomail.afraid.org (David Brooks)
In-Reply-To: <u6c0no$18qe8$1@solani.org>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Lines: 59
Message-ID: <idgiM.60939$hl93.36903@fx18.iad>
X-Complaints-To: abuse@blocknews.net
NNTP-Posting-Date: Wed, 14 Jun 2023 10:00:46 UTC
Organization: blocknews - www.blocknews.net
Date: Wed, 14 Jun 2023 11:00:46 +0100
X-Received-Bytes: 2899

by: David Brooks - Wed, 14 Jun 2023 10:00 UTC

On 14/06/2023 10:19, Joerg Lorenz wrote:
> Am 14.06.23 um 10:37 schrieb David Brooks:
>> On 14/06/2023 08:43, Joerg Lorenz wrote:
>>> Am 13.06.23 um 21:22 schrieb David Brooks:
>>>> On 13/06/2023 12:29, Joerg Lorenz wrote:
>>>>> Am 13.06.23 um 13:01 schrieb David (BD):
>>>>>> On 13/06/2023 09:06, Joerg Lorenz wrote:
>>>>>>> Am 13.06.23 um 09:18 schrieb David Brooks:
>>>>>>>> Unsigned Files:
>>>>>>>> Launchd: /Library/LaunchDaemons/com.symantec.sharedsettings.MES.plist
>>>>>>>> Executable: /Library/Application
>>>>>>>> Support/Symantec/Silo/MES/DomainSettings/SymSharedSettingsd
>>>>>>>> Details: Exact match found in the legitimate list - probably OK
>>>>>>>
>>>>>>>
>>>>>>> *The system is compromised*.
>>>>>>
>>>>>>
>>>>>> I wonder if anyone else reading here agrees with you.
>>>>>
>>>>> Symantec files on a Mac or any other computer are a malware-infection.
>>>>
>>>> Ha! Guess what *I* found?!!!
>>>>
>>>> https://ibb.co/88bn2jF
>>>>
>>>> All now gone. :-D
>>>>
>>>> Thanks for helping. :-)
>>>
>>> Why do you do that? I'm stunned!
>>
>> I was 'testing' EtreCheck, available from Etresoft Inc
>> https://www.etresoft.com/index.html
>>
>> What showed up as 'interesting' when YOU first used it to scan /your/ > Apple computer?
>
> I never install malware intentionally on my productive systems ... ;-)

You appear to be suggesting that EtreCheck is malware. AFAICR, it
doesn't actually INSTALL itself or ask for one's Admin name and
password, a requirement before using the FREE trial of ClamXAV!

Which route is better? In your OPINION of course!

See: Step 1, here:- https://www.clamxav.com/download/

>> Perhaps you've also come across my question asked here under my Apple
>> ASC handle, HunterBD?
>>
>> https://developer.apple.com/forums/thread/687438
>
> Perhaps.

HAVE you now looked?

--
David

Re: "My Mac Book Air is Been Hacked"!

<9MhiM.28749$tol1.21440@fx09.iad>

copy mid

https://news.novabbs.org/aus+uk/article-flat.php?id=16604&group=uk.comp.sys.mac#16604

copy link Newsgroups: uk.comp.sys.mac alt.computer.workshop comp.sys.mac.system

Path: i2pn2.org!i2pn.org!news.neodome.net!feeder1.feed.usenet.farm!feed.usenet.farm!peer03.ams4!peer.am4.highwinds-media.com!peer03.iad!feed-me.highwinds-media.com!news.highwinds-media.com!fx09.iad.POSTED!not-for-mail
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0)
Gecko/20100101 Thunderbird/102.12.0
Subject: Re: "My Mac Book Air is Been Hacked"!
Content-Language: en-GB
Newsgroups: uk.comp.sys.mac,alt.computer.workshop,comp.sys.mac.system
References: <UKUhM.19459$3C3e.13724@fx13.iad> <u6981k$18ufa$1@solani.org>
<u69ia0$3ig34$1@hunterbd.eternal-september.org> <u69jvb$194hd$1@solani.org>
<Dl3iM.7143$mshf.463@fx46.iad> <u6br39$18lrl$1@solani.org>
<r%eiM.60937$hl93.6400@fx18.iad> <u6c0no$18qe8$1@solani.org>
<idgiM.60939$hl93.36903@fx18.iad>
From: DavidB@nomail.afraid.org (David Brooks)
In-Reply-To: <idgiM.60939$hl93.36903@fx18.iad>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Lines: 70
Message-ID: <9MhiM.28749$tol1.21440@fx09.iad>
X-Complaints-To: abuse@blocknews.net
NNTP-Posting-Date: Wed, 14 Jun 2023 11:46:13 UTC
Organization: blocknews - www.blocknews.net
Date: Wed, 14 Jun 2023 12:46:12 +0100
X-Received-Bytes: 3321

by: David Brooks - Wed, 14 Jun 2023 11:46 UTC

On 14/06/2023 11:00, David Brooks wrote:
> On 14/06/2023 10:19, Joerg Lorenz wrote:
>> Am 14.06.23 um 10:37 schrieb David Brooks:
>>> On 14/06/2023 08:43, Joerg Lorenz wrote:
>>>> Am 13.06.23 um 21:22 schrieb David Brooks:
>>>>> On 13/06/2023 12:29, Joerg Lorenz wrote:
>>>>>> Am 13.06.23 um 13:01 schrieb David (BD):
>>>>>>> On 13/06/2023 09:06, Joerg Lorenz wrote:
>>>>>>>> Am 13.06.23 um 09:18 schrieb David Brooks:
>>>>>>>>> Unsigned Files:
>>>>>>>>>          Launchd:
>>>>>>>>> /Library/LaunchDaemons/com.symantec.sharedsettings.MES.plist
>>>>>>>>>              Executable: /Library/Application
>>>>>>>>> Support/Symantec/Silo/MES/DomainSettings/SymSharedSettingsd
>>>>>>>>>              Details: Exact match found in the legitimate list
>>>>>>>>> - probably OK
>>>>>>>>
>>>>>>>>
>>>>>>>> *The system is compromised*.
>>>>>>>
>>>>>>>
>>>>>>> I wonder if anyone else reading here agrees with you.
>>>>>>
>>>>>> Symantec files on a Mac or any other computer are a
>>>>>> malware-infection.
>>>>>
>>>>> Ha! Guess what *I* found?!!!
>>>>>
>>>>> https://ibb.co/88bn2jF
>>>>>
>>>>> All now gone. :-D
>>>>>
>>>>> Thanks for helping. :-)
>>>>
>>>> Why do you do that? I'm stunned!
>>>
>>> I was 'testing' EtreCheck, available from Etresoft Inc
>>> https://www.etresoft.com/index.html
>>>
>>> What showed up as 'interesting' when YOU first used it to scan /your/
>>> > Apple computer?
>>
>> I never install malware intentionally on my productive systems ... ;-)
>
> You appear to be suggesting that EtreCheck is malware. AFAICR, it
> doesn't actually INSTALL itself or ask for one's Admin name and
> password, a requirement before using the FREE trial of ClamXAV!
>
> Which route is better? In your OPINION of course!
>
> See: Step 1, here:- https://www.clamxav.com/download/
>
>>> Perhaps you've also come across my question asked here under my Apple
>>> ASC handle, HunterBD?
>>>
>>> https://developer.apple.com/forums/thread/687438
>>
>> Perhaps.
>
> HAVE you now looked?

Oops! Wrong link!

https://developer.apple.com/forums/thread/709959

Sorry about that!

--
David

Re: "My Mac Book Air is Been Hacked"!

<u6ceh7$1cmi$1@dont-email.me>

copy mid

https://news.novabbs.org/aus+uk/article-flat.php?id=16605&group=uk.comp.sys.mac#16605

copy link Newsgroups: uk.comp.sys.mac alt.computer.workshop

Path: i2pn2.org!i2pn.org!eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: FTR@nomail.afraid.org (FromTheRafters)
Newsgroups: uk.comp.sys.mac,alt.computer.workshop
Subject: Re: "My Mac Book Air is Been Hacked"!
Date: Wed, 14 Jun 2023 09:15:14 -0400
Organization: Peripheral Visions
Lines: 41
Message-ID: <u6ceh7$1cmi$1@dont-email.me>
References: <UKUhM.19459$3C3e.13724@fx13.iad> <u6981k$18ufa$1@solani.org> <u69ia0$3ig34$1@hunterbd.eternal-september.org> <u69jvb$194hd$1@solani.org> <Dl3iM.7143$mshf.463@fx46.iad> <u6br39$18lrl$1@solani.org> <u6bvmc$3vond$1@dont-email.me> <_xfiM.60938$hl93.52418@fx18.iad>
Reply-To: erratic.howard@gmail.com
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-15"; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Wed, 14 Jun 2023 13:15:20 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="853b38e0e4f2592b26680446743b22b7";
logging-data="45778"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX185k5vEnm6kmpSgesiYKoyyEf1feRE/yy0="
Cancel-Lock: sha1:kcAb/YgWuV6Vt7yn5xjwC79kEqU=
X-ICQ: 1701145376
X-Newsreader: MesNews/1.08.06.00-gb

by: FromTheRafters - Wed, 14 Jun 2023 13:15 UTC

David Brooks used his keyboard to write :
> On 14/06/2023 10:02, FromTheRafters wrote:
>> Joerg Lorenz wrote on 6/14/2023 :
>>> Am 13.06.23 um 21:22 schrieb David Brooks:
>>>> On 13/06/2023 12:29, Joerg Lorenz wrote:
>>>>> Am 13.06.23 um 13:01 schrieb David (BD):
>>>>>> On 13/06/2023 09:06, Joerg Lorenz wrote:
>>>>>>> Am 13.06.23 um 09:18 schrieb David Brooks:
>>>>>>>> Unsigned Files:
>>>>>>>> Launchd:
>>>>>>>> /Library/LaunchDaemons/com.symantec.sharedsettings.MES.plist
>>>>>>>> Executable: /Library/Application
>>>>>>>> Support/Symantec/Silo/MES/DomainSettings/SymSharedSettingsd Details:
>>>>>>>> Exact match found in the legitimate list - probably OK
>>>>>>>
>>>>>>>
>>>>>>> *The system is compromised*.
>>>>>>
>>>>>>
>>>>>> I wonder if anyone else reading here agrees with you.
>>>>>
>>>>> Symantec files on a Mac or any other computer are a malware-infection.
>>>>
>>>> Ha! Guess what *I* found?!!!
>>>>
>>>> https://ibb.co/88bn2jF
>>>>
>>>> All now gone. :-D
>>>>
>>>> Thanks for helping. :-)
>>>
>>> Why do you do that? I'm stunned!
>>
>> You lied to him and he took you seriously.
>
> I'll refer you to my question posed here:-
> https://developer.apple.com/forums/thread/709959
>
> HTH

Why?

Re: "My Mac Book Air is Been Hacked"!

<u6ceva$1dv6$1@dont-email.me>

copy mid

https://news.novabbs.org/aus+uk/article-flat.php?id=16606&group=uk.comp.sys.mac#16606

copy link Newsgroups: uk.comp.sys.mac alt.computer.workshop

Path: i2pn2.org!i2pn.org!eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: FTR@nomail.afraid.org (FromTheRafters)
Newsgroups: uk.comp.sys.mac,alt.computer.workshop
Subject: Re: "My Mac Book Air is Been Hacked"!
Date: Wed, 14 Jun 2023 09:22:47 -0400
Organization: Peripheral Visions
Lines: 46
Message-ID: <u6ceva$1dv6$1@dont-email.me>
References: <UKUhM.19459$3C3e.13724@fx13.iad> <u6981k$18ufa$1@solani.org> <u69ia0$3ig34$1@hunterbd.eternal-september.org> <u69jvb$194hd$1@solani.org> <Dl3iM.7143$mshf.463@fx46.iad> <u6br39$18lrl$1@solani.org> <u6bvmc$3vond$1@dont-email.me> <u6c0so$18qe8$2@solani.org> <M4giM.73932$d1y5.10625@fx17.iad>
Reply-To: erratic.howard@gmail.com
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-15"; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Wed, 14 Jun 2023 13:22:50 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="853b38e0e4f2592b26680446743b22b7";
logging-data="47078"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX19NqNYfDPNBd4hjjisLqGw3djrOOxAe0ps="
Cancel-Lock: sha1:ZWo7HJxvWNb0F6PtZqWG7uczvPI=
X-Newsreader: MesNews/1.08.06.00-gb
X-ICQ: 1701145376

by: FromTheRafters - Wed, 14 Jun 2023 13:22 UTC

David Brooks explained :
> On 14/06/2023 10:22, Joerg Lorenz wrote:
>> Am 14.06.23 um 11:02 schrieb FromTheRafters:
>>> Joerg Lorenz wrote on 6/14/2023 :
>>>> Am 13.06.23 um 21:22 schrieb David Brooks:
>>>>> On 13/06/2023 12:29, Joerg Lorenz wrote:
>>>>>> Am 13.06.23 um 13:01 schrieb David (BD):
>>>>>>> On 13/06/2023 09:06, Joerg Lorenz wrote:
>>>>>>>> Am 13.06.23 um 09:18 schrieb David Brooks:
>>>>>>>>> Unsigned Files:
>>>>>>>>> Launchd:
>>>>>>>>> /Library/LaunchDaemons/com.symantec.sharedsettings.MES.plist
>>>>>>>>> Executable: /Library/Application
>>>>>>>>> Support/Symantec/Silo/MES/DomainSettings/SymSharedSettingsd
>>>>>>>>> Details: Exact match found in the legitimate list - probably OK
>>>>>>>>
>>>>>>>>
>>>>>>>> *The system is compromised*.
>>>>>>>
>>>>>>>
>>>>>>> I wonder if anyone else reading here agrees with you.
>>>>>>
>>>>>> Symantec files on a Mac or any other computer are a malware-infection.
>>>>>
>>>>> Ha! Guess what *I* found?!!!
>>>>>
>>>>> https://ibb.co/88bn2jF
>>>>>
>>>>> All now gone. :-D
>>>>>
>>>>> Thanks for helping. :-)
>>>>
>>>> Why do you do that? I'm stunned!
>>>
>>> You lied to him and he took you seriously.
>>
>> Where did I lie? I mean everything dead serious!
>> Beware: Some things are an opinion and others less so.
>
> X-post reinstated

That Symantec files are malware is an untruth that he knew was an
untruth when he said it.

If I am, wrong about this, then he is just stupid enough to believe
such nonsense.

Re: "My Mac Book Air is Been Hacked"!

<X7kiM.61008$hl93.3867@fx18.iad>

copy mid

https://news.novabbs.org/aus+uk/article-flat.php?id=16607&group=uk.comp.sys.mac#16607

copy link Newsgroups: uk.comp.sys.mac alt.computer.workshop

Path: i2pn2.org!i2pn.org!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!peer02.iad!feed-me.highwinds-media.com!news.highwinds-media.com!fx18.iad.POSTED!not-for-mail
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0)
Gecko/20100101 Thunderbird/102.12.0
Subject: Re: "My Mac Book Air is Been Hacked"!
Content-Language: en-GB
Newsgroups: uk.comp.sys.mac,alt.computer.workshop
References: <UKUhM.19459$3C3e.13724@fx13.iad> <u6981k$18ufa$1@solani.org>
<u69ia0$3ig34$1@hunterbd.eternal-september.org> <u69jvb$194hd$1@solani.org>
<Dl3iM.7143$mshf.463@fx46.iad> <u6br39$18lrl$1@solani.org>
<u6bvmc$3vond$1@dont-email.me> <_xfiM.60938$hl93.52418@fx18.iad>
<u6ceh7$1cmi$1@dont-email.me>
From: DavidB@nomail.afraid.org (David Brooks)
In-Reply-To: <u6ceh7$1cmi$1@dont-email.me>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Lines: 47
Message-ID: <X7kiM.61008$hl93.3867@fx18.iad>
X-Complaints-To: abuse@blocknews.net
NNTP-Posting-Date: Wed, 14 Jun 2023 14:28:07 UTC
Organization: blocknews - www.blocknews.net
Date: Wed, 14 Jun 2023 15:28:06 +0100
X-Received-Bytes: 2503

by: David Brooks - Wed, 14 Jun 2023 14:28 UTC

On 14/06/2023 14:15, FromTheRafters wrote:
> David Brooks used his keyboard to write :
>> On 14/06/2023 10:02, FromTheRafters wrote:
>>> Joerg Lorenz wrote on 6/14/2023 :
>>>> Am 13.06.23 um 21:22 schrieb David Brooks:
>>>>> On 13/06/2023 12:29, Joerg Lorenz wrote:
>>>>>> Am 13.06.23 um 13:01 schrieb David (BD):
>>>>>>> On 13/06/2023 09:06, Joerg Lorenz wrote:
>>>>>>>> Am 13.06.23 um 09:18 schrieb David Brooks:
>>>>>>>>> Unsigned Files:
>>>>>>>>> Launchd:
>>>>>>>>> /Library/LaunchDaemons/com.symantec.sharedsettings.MES.plist
>>>>>>>>> Executable: /Library/Application
>>>>>>>>> Support/Symantec/Silo/MES/DomainSettings/SymSharedSettingsd
>>>>>>>>> Details: Exact match found in the legitimate list - probably OK
>>>>>>>>
>>>>>>>>
>>>>>>>> *The system is compromised*.
>>>>>>>
>>>>>>>
>>>>>>> I wonder if anyone else reading here agrees with you.
>>>>>>
>>>>>> Symantec files on a Mac or any other computer are a
>>>>>> malware-infection.
>>>>>
>>>>> Ha! Guess what *I* found?!!!
>>>>>
>>>>> https://ibb.co/88bn2jF
>>>>>
>>>>> All now gone. :-D
>>>>>
>>>>> Thanks for helping. :-)
>>>>
>>>> Why do you do that? I'm stunned!
>>>
>>> You lied to him and he took you seriously.
>>
>> I'll refer you to my question posed here:-
>> https://developer.apple.com/forums/thread/709959
>>
>> HTH
>
> Why?

In the hope that you might comment there yourself.

You didn't - probably didn't read today's comment either.

Re: "My Mac Book Air is Been Hacked"!

<agkiM.69496$kHz5.52760@fx15.iad>

copy mid

https://news.novabbs.org/aus+uk/article-flat.php?id=16608&group=uk.comp.sys.mac#16608

copy link Newsgroups: uk.comp.sys.mac alt.computer.workshop

Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!1.us.feeder.erje.net!feeder.erje.net!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!peer02.iad!feed-me.highwinds-media.com!news.highwinds-media.com!fx15.iad.POSTED!not-for-mail
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0)
Gecko/20100101 Thunderbird/102.12.0
Subject: Re: "My Mac Book Air is Been Hacked"!
Content-Language: en-GB
Newsgroups: uk.comp.sys.mac,alt.computer.workshop
References: <UKUhM.19459$3C3e.13724@fx13.iad> <u6981k$18ufa$1@solani.org>
<u69ia0$3ig34$1@hunterbd.eternal-september.org> <u69jvb$194hd$1@solani.org>
<Dl3iM.7143$mshf.463@fx46.iad> <u6br39$18lrl$1@solani.org>
<u6bvmc$3vond$1@dont-email.me> <u6c0so$18qe8$2@solani.org>
<M4giM.73932$d1y5.10625@fx17.iad> <u6ceva$1dv6$1@dont-email.me>
From: DavidB@nomail.afraid.org (David Brooks)
In-Reply-To: <u6ceva$1dv6$1@dont-email.me>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Lines: 22
Message-ID: <agkiM.69496$kHz5.52760@fx15.iad>
X-Complaints-To: abuse@blocknews.net
NNTP-Posting-Date: Wed, 14 Jun 2023 14:36:54 UTC
Organization: blocknews - www.blocknews.net
Date: Wed, 14 Jun 2023 15:36:54 +0100
X-Received-Bytes: 1489

by: David Brooks - Wed, 14 Jun 2023 14:36 UTC

On 14/06/2023 14:22, FromTheRafters wrote:
[....]
> That Symantec files are malware is an untruth that he knew was an
> untruth when he said it.

I agree - and did know that!

> If I am wrong about this, then he is just stupid enough to believe such
> nonsense.

He's just a *Sauerkraut*!

Sour Kraut! https://en.wikipedia.org/wiki/Kraut
Still pissed that his forefathers lost two world wars!

--
David

Re: "My Mac Book Air is Been Hacked"!

<u6cqk6$1aod0$1@solani.org>

copy mid

https://news.novabbs.org/aus+uk/article-flat.php?id=16609&group=uk.comp.sys.mac#16609

copy link Newsgroups: uk.comp.sys.mac

Path: i2pn2.org!i2pn.org!weretis.net!feeder8.news.weretis.net!reader5.news.weretis.net!news.solani.org!.POSTED!not-for-mail
From: hugybear@gmx.ch (Joerg Lorenz)
Newsgroups: uk.comp.sys.mac
Subject: Re: "My Mac Book Air is Been Hacked"!
Date: Wed, 14 Jun 2023 18:41:42 +0200
Organization: Camembert Normand au Lait Cru
Message-ID: <u6cqk6$1aod0$1@solani.org>
References: <UKUhM.19459$3C3e.13724@fx13.iad> <u6981k$18ufa$1@solani.org>
<u69ia0$3ig34$1@hunterbd.eternal-september.org> <u69jvb$194hd$1@solani.org>
<Dl3iM.7143$mshf.463@fx46.iad> <u6br39$18lrl$1@solani.org>
<u6bvmc$3vond$1@dont-email.me> <u6c0so$18qe8$2@solani.org>
<M4giM.73932$d1y5.10625@fx17.iad> <u6ceva$1dv6$1@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Injection-Date: Wed, 14 Jun 2023 16:41:42 -0000 (UTC)
Injection-Info: solani.org;
logging-data="1401248"; mail-complaints-to="abuse@news.solani.org"
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0)
Gecko/20100101 Thunderbird/102.12.0
Cancel-Lock: sha1:WwZHdZ2AfkOHmj/OLv13yLSR4EA=
Content-Language: de-CH
X-User-ID: eJwNx8kRwDAIBLCWnOwRXA4DuP8SHP0k+HF9tEwdHWoj3OZUDAkjlpHCn45DTIuZePd09dIFBOYQsA==
In-Reply-To: <u6ceva$1dv6$1@dont-email.me>

by: Joerg Lorenz - Wed, 14 Jun 2023 16:41 UTC

Am 14.06.23 um 15:22 schrieb FromTheRafters:
>> X-post reinstated
>
> That Symantec files are malware is an untruth that he knew was an
> untruth when he said it.
>
> If I am, wrong about this, then he is just stupid enough to believe
> such nonsense.

Pls explain to me how Symantec files find their way on a Mac?

My Macs don't have any on them. Symantec = destroying an otherwise
functioning system.

X-post deleted.

--
Gutta cavat lapidem (Ovid)

Re: "My Mac Book Air is Been Hacked"!

<u6cqnu$1aod0$2@solani.org>

copy mid

https://news.novabbs.org/aus+uk/article-flat.php?id=16610&group=uk.comp.sys.mac#16610

copy link Newsgroups: uk.comp.sys.mac alt.computer.workshop

Path: i2pn2.org!i2pn.org!weretis.net!feeder8.news.weretis.net!reader5.news.weretis.net!news.solani.org!.POSTED!not-for-mail
From: hugybear@gmx.ch (Joerg Lorenz)
Newsgroups: uk.comp.sys.mac,alt.computer.workshop
Subject: Re: "My Mac Book Air is Been Hacked"!
Date: Wed, 14 Jun 2023 18:43:42 +0200
Organization: Camembert Normand au Lait Cru
Message-ID: <u6cqnu$1aod0$2@solani.org>
References: <UKUhM.19459$3C3e.13724@fx13.iad> <u6981k$18ufa$1@solani.org>
<u69ia0$3ig34$1@hunterbd.eternal-september.org> <u69jvb$194hd$1@solani.org>
<Dl3iM.7143$mshf.463@fx46.iad> <u6br39$18lrl$1@solani.org>
<u6bvmc$3vond$1@dont-email.me> <u6c0so$18qe8$2@solani.org>
<M4giM.73932$d1y5.10625@fx17.iad> <u6ceva$1dv6$1@dont-email.me>
<agkiM.69496$kHz5.52760@fx15.iad>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Injection-Date: Wed, 14 Jun 2023 16:43:43 -0000 (UTC)
Injection-Info: solani.org;
logging-data="1401248"; mail-complaints-to="abuse@news.solani.org"
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0)
Gecko/20100101 Thunderbird/102.12.0
Cancel-Lock: sha1:PrnjR/tTdQosCSop5ii1DHcHC2Q=
In-Reply-To: <agkiM.69496$kHz5.52760@fx15.iad>
X-User-ID: eJwNxcEBwCAIA8CVtBDUcUKQ/Uew9zlYzNDyQDga/d/YwdS4o9p1bBJXdZRzASUmRN9uVPJ7LaoSEw==
Content-Language: de-CH

by: Joerg Lorenz - Wed, 14 Jun 2023 16:43 UTC

Am 14.06.23 um 16:36 schrieb David Brooks:
> On 14/06/2023 14:22, FromTheRafters wrote:
> [....]
>> That Symantec files are malware is an untruth that he knew was an
>> untruth when he said it.
>
> I agree - and did know that!
>
>> If I am wrong about this, then he is just stupid enough to believe such
>> nonsense.
>
> He's just a *Sauerkraut*!

Bullshit: I'm a Rösti. You have no clue but we are used to that.

> Sour Kraut! https://en.wikipedia.org/wiki/Kraut
> Still pissed that his forefathers lost two world wars!

David, eat your frogpills°°° and shut up.

X-post intentionally not deleted.

--
Gutta cavat lapidem (Ovid)

Re: "My Mac Book Air is Been Hacked"!

<u6ct52$311j$1@dont-email.me>

copy mid

https://news.novabbs.org/aus+uk/article-flat.php?id=16611&group=uk.comp.sys.mac#16611

copy link Newsgroups: uk.comp.sys.mac alt.computer.workshop

Path: i2pn2.org!i2pn.org!eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: FTR@nomail.afraid.org (FromTheRafters)
Newsgroups: uk.comp.sys.mac,alt.computer.workshop
Subject: Re: "My Mac Book Air is Been Hacked"!
Date: Wed, 14 Jun 2023 13:24:46 -0400
Organization: Peripheral Visions
Lines: 49
Message-ID: <u6ct52$311j$1@dont-email.me>
References: <UKUhM.19459$3C3e.13724@fx13.iad> <u6981k$18ufa$1@solani.org> <u69ia0$3ig34$1@hunterbd.eternal-september.org> <u69jvb$194hd$1@solani.org> <Dl3iM.7143$mshf.463@fx46.iad> <u6br39$18lrl$1@solani.org> <u6bvmc$3vond$1@dont-email.me> <_xfiM.60938$hl93.52418@fx18.iad> <u6ceh7$1cmi$1@dont-email.me> <X7kiM.61008$hl93.3867@fx18.iad>
Reply-To: erratic.howard@gmail.com
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-15"; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Wed, 14 Jun 2023 17:24:50 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="853b38e0e4f2592b26680446743b22b7";
logging-data="99379"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/zlXBdh/iN8Y/OTFD9e0muI4KApll8+5Q="
Cancel-Lock: sha1:aRFpd/tG8ayqYDgElyYhqlSBayA=
X-Newsreader: MesNews/1.08.06.00-gb
X-ICQ: 1701145376

by: FromTheRafters - Wed, 14 Jun 2023 17:24 UTC

David Brooks presented the following explanation :
> On 14/06/2023 14:15, FromTheRafters wrote:
>> David Brooks used his keyboard to write :
>>> On 14/06/2023 10:02, FromTheRafters wrote:
>>>> Joerg Lorenz wrote on 6/14/2023 :
>>>>> Am 13.06.23 um 21:22 schrieb David Brooks:
>>>>>> On 13/06/2023 12:29, Joerg Lorenz wrote:
>>>>>>> Am 13.06.23 um 13:01 schrieb David (BD):
>>>>>>>> On 13/06/2023 09:06, Joerg Lorenz wrote:
>>>>>>>>> Am 13.06.23 um 09:18 schrieb David Brooks:
>>>>>>>>>> Unsigned Files:
>>>>>>>>>> Launchd:
>>>>>>>>>> /Library/LaunchDaemons/com.symantec.sharedsettings.MES.plist
>>>>>>>>>> Executable: /Library/Application
>>>>>>>>>> Support/Symantec/Silo/MES/DomainSettings/SymSharedSettingsd
>>>>>>>>>> Details: Exact match found in the legitimate list - probably OK
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> *The system is compromised*.
>>>>>>>>
>>>>>>>>
>>>>>>>> I wonder if anyone else reading here agrees with you.
>>>>>>>
>>>>>>> Symantec files on a Mac or any other computer are a malware-infection.
>>>>>>
>>>>>> Ha! Guess what *I* found?!!!
>>>>>>
>>>>>> https://ibb.co/88bn2jF
>>>>>>
>>>>>> All now gone. :-D
>>>>>>
>>>>>> Thanks for helping. :-)
>>>>>
>>>>> Why do you do that? I'm stunned!
>>>>
>>>> You lied to him and he took you seriously.
>>>
>>> I'll refer you to my question posed here:-
>>> https://developer.apple.com/forums/thread/709959
>>>
>>> HTH
>>
>> Why?
>
> In the hope that you might comment there yourself.
>
> You didn't - probably didn't read today's comment either.

I looked and saw no relevancy to accusing Symantec of writing malware.

Re: "My Mac Book Air is Been Hacked"!

<XFniM.6$Ect9.5@fx44.iad>

copy mid

https://news.novabbs.org/aus+uk/article-flat.php?id=16616&group=uk.comp.sys.mac#16616

copy link Newsgroups: uk.comp.sys.mac alt.computer.workshop

Path: i2pn2.org!i2pn.org!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!peer02.iad!feed-me.highwinds-media.com!news.highwinds-media.com!fx44.iad.POSTED!not-for-mail
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0)
Gecko/20100101 Thunderbird/102.12.0
Subject: Re: "My Mac Book Air is Been Hacked"!
Content-Language: en-GB
Newsgroups: uk.comp.sys.mac,alt.computer.workshop
References: <UKUhM.19459$3C3e.13724@fx13.iad> <u6981k$18ufa$1@solani.org>
<u69ia0$3ig34$1@hunterbd.eternal-september.org> <u69jvb$194hd$1@solani.org>
<Dl3iM.7143$mshf.463@fx46.iad> <u6br39$18lrl$1@solani.org>
<u6bvmc$3vond$1@dont-email.me> <_xfiM.60938$hl93.52418@fx18.iad>
<u6ceh7$1cmi$1@dont-email.me> <X7kiM.61008$hl93.3867@fx18.iad>
<u6ct52$311j$1@dont-email.me>
From: DavidB@nomail.afraid.org (David Brooks)
In-Reply-To: <u6ct52$311j$1@dont-email.me>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Lines: 58
Message-ID: <XFniM.6$Ect9.5@fx44.iad>
X-Complaints-To: abuse@blocknews.net
NNTP-Posting-Date: Wed, 14 Jun 2023 18:29:11 UTC
Organization: blocknews - www.blocknews.net
Date: Wed, 14 Jun 2023 19:29:11 +0100
X-Received-Bytes: 2978

by: David Brooks - Wed, 14 Jun 2023 18:29 UTC

On 14/06/2023 18:24, FromTheRafters wrote:
> David Brooks presented the following explanation :
>> On 14/06/2023 14:15, FromTheRafters wrote:
>>> David Brooks used his keyboard to write :
>>>> On 14/06/2023 10:02, FromTheRafters wrote:
>>>>> Joerg Lorenz wrote on 6/14/2023 :
>>>>>> Am 13.06.23 um 21:22 schrieb David Brooks:
>>>>>>> On 13/06/2023 12:29, Joerg Lorenz wrote:
>>>>>>>> Am 13.06.23 um 13:01 schrieb David (BD):
>>>>>>>>> On 13/06/2023 09:06, Joerg Lorenz wrote:
>>>>>>>>>> Am 13.06.23 um 09:18 schrieb David Brooks:
>>>>>>>>>>> Unsigned Files:
>>>>>>>>>>> Launchd:
>>>>>>>>>>> /Library/LaunchDaemons/com.symantec.sharedsettings.MES.plist
>>>>>>>>>>> Executable: /Library/Application
>>>>>>>>>>> Support/Symantec/Silo/MES/DomainSettings/SymSharedSettingsd
>>>>>>>>>>> Details: Exact match found in the legitimate list - probably OK
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>> *The system is compromised*.
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> I wonder if anyone else reading here agrees with you.
>>>>>>>>
>>>>>>>> Symantec files on a Mac or any other computer are a
>>>>>>>> malware-infection.
>>>>>>>
>>>>>>> Ha! Guess what *I* found?!!!
>>>>>>>
>>>>>>> https://ibb.co/88bn2jF
>>>>>>>
>>>>>>> All now gone. :-D
>>>>>>>
>>>>>>> Thanks for helping. :-)
>>>>>>
>>>>>> Why do you do that? I'm stunned!
>>>>>
>>>>> You lied to him and he took you seriously.
>>>>
>>>> I'll refer you to my question posed here:-
>>>> https://developer.apple.com/forums/thread/709959
>>>>
>>>> HTH
>>>
>>> Why?
>>
>> In the hope that you might comment there yourself.
>>
>> You didn't - probably didn't read today's comment either.
>
> I looked and saw no relevancy to accusing Symantec of writing malware.

The relevancy was to how I FOUND Symantec on my iMac!

Have you yet had the balls to run EtreCheck on your Apple MacBook Pro?

--
David

Re: "My Mac Book Air is Been Hacked"!

<ROniM.7$Ect9.5@fx44.iad>

copy mid

https://news.novabbs.org/aus+uk/article-flat.php?id=16617&group=uk.comp.sys.mac#16617

copy link Newsgroups: uk.comp.sys.mac alt.computer.workshop

Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!peer01.iad!feed-me.highwinds-media.com!news.highwinds-media.com!fx44.iad.POSTED!not-for-mail
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0)
Gecko/20100101 Thunderbird/102.12.0
Subject: Re: "My Mac Book Air is Been Hacked"!
Content-Language: en-GB
Newsgroups: uk.comp.sys.mac,alt.computer.workshop
References: <UKUhM.19459$3C3e.13724@fx13.iad> <u6981k$18ufa$1@solani.org>
<u69ia0$3ig34$1@hunterbd.eternal-september.org> <u69jvb$194hd$1@solani.org>
<Dl3iM.7143$mshf.463@fx46.iad> <u6br39$18lrl$1@solani.org>
<u6bvmc$3vond$1@dont-email.me> <_xfiM.60938$hl93.52418@fx18.iad>
<u6ceh7$1cmi$1@dont-email.me> <X7kiM.61008$hl93.3867@fx18.iad>
<u6ct52$311j$1@dont-email.me>
From: DavidB@nomail.afraid.org (David Brooks)
In-Reply-To: <u6ct52$311j$1@dont-email.me>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Lines: 59
Message-ID: <ROniM.7$Ect9.5@fx44.iad>
X-Complaints-To: abuse@blocknews.net
NNTP-Posting-Date: Wed, 14 Jun 2023 18:38:41 UTC
Organization: blocknews - www.blocknews.net
Date: Wed, 14 Jun 2023 19:38:40 +0100
X-Received-Bytes: 3011

by: David Brooks - Wed, 14 Jun 2023 18:38 UTC

You'll note that the 'update' I posted there "5 hrs ago" has been removed.
https://developer.apple.com/forums/profile/HunterBD

I'd better take a screenshot!

--
David

Do not try this at home.

aus+uk / uk.comp.sys.mac / "My Mac Book Air is Been Hacked"!

aus+uk / uk.comp.sys.mac / "My Mac Book Air is Been Hacked"!

Subject	Author
"My Mac Book Air is Been Hacked"!	David Brooks
"My Mac Book Air is Been Hacked"!	Joerg Lorenz
"My Mac Book Air is Been Hacked"!	David Brooks
"My Mac Book Air is Been Hacked"!	David (BD)
"My Mac Book Air is Been Hacked"!	Joerg Lorenz
"My Mac Book Air is Been Hacked"!	David Brooks
"My Mac Book Air is Been Hacked"!	nospam
"My Mac Book Air is Been Hacked"!	Joerg Lorenz
"My Mac Book Air is Been Hacked"!	David Brooks
"My Mac Book Air is Been Hacked"!	Joerg Lorenz
"My Mac Book Air is Been Hacked"!	David Brooks
"My Mac Book Air is Been Hacked"!	David Brooks
"My Mac Book Air is Been Hacked"!	FromTheRafters
"My Mac Book Air is Been Hacked"!	David Brooks
"My Mac Book Air is Been Hacked"!	FromTheRafters
"My Mac Book Air is Been Hacked"!	David Brooks
"My Mac Book Air is Been Hacked"!	FromTheRafters
"My Mac Book Air is Been Hacked"!	David Brooks
"My Mac Book Air is Been Hacked"!	Kelly Phillips
"My Mac Book Air is Been Hacked"!	FromTheRafters
"My Mac Book Air is Been Hacked"!	David Brooks
"My Mac Book Air is Been Hacked"!	FromTheRafters
"My Mac Book Air is Been Hacked"!	David Brooks
"My Mac Book Air is Been Hacked"!	FromTheRafters
"My Mac Book Air is Been Hacked"!	David Brooks
"My Mac Book Air is Been Hacked"!	FromTheRafters
"My Mac Book Air is Been Hacked"!	David Brooks
"My Mac Book Air is Been Hacked"!	Steve Carroll
"My Mac Book Air is Been Hacked"!	Snit
"My Mac Book Air is Been Hacked"!	Steve Carroll
"My Mac Book Air is Been Hacked"!	Snit
"My Mac Book Air is Been Hacked"!	David Brooks
"My Mac Book Air is Been Hacked"!	Steve Carroll
"My Mac Book Air is Been Hacked"!	Snit
"My Mac Book Air is Been Hacked"!	David Brooks
"My Mac Book Air is Been Hacked"!	Kelly Phillips
"My Mac Book Air is Been Hacked"!	Kelly Phillips
"My Mac Book Air is Been Hacked"!	FromTheRafters
"My Mac Book Air is Been Hacked"!	David Brooks
"My Mac Book Air is Been Hacked"!	Joerg Lorenz
"My Mac Book Air is Been Hacked"!	FromTheRafters
"My Mac Book Air is Been Hacked"!	Joerg Lorenz
"My Mac Book Air is Been Hacked"!	David Brooks
"My Mac Book Air is Been Hacked"!	FromTheRafters
"My Mac Book Air is Been Hacked"!	David Brooks
"My Mac Book Air is Been Hacked"!	Joerg Lorenz
"My Mac Book Air is Been Hacked"!	David Brooks
"My Mac Book Air is Been Hacked"!	FromTheRafters
"My Mac Book Air is Been Hacked"!	FromTheRafters
"My Mac Book Air is Been Hacked"!	David Brooks
"My Mac Book Air is Been Hacked"!	Joerg Lorenz
"My Mac Book Air is Been Hacked"!	David Brooks
"My Mac Book Air is Been Hacked"!	Kelly Phillips
"My Mac Book Air is Been Hacked"!	Joerg Lorenz
"My Mac Book Air is Been Hacked"!	David Brooks
"My Mac Book Air is Been Hacked"!	FromTheRafters
"My Mac Book Air is Been Hacked"!	David Brooks
"My Mac Book Air is Been Hacked"!	Joerg Lorenz
"My Mac Book Air is Been Hacked"!	Joerg Lorenz