Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Generic User Avatar

Suspicious numbers and login items


  • Please log in to reply
4 replies to this topic

#1 cmonpclaptop

cmonpclaptop

  •  Avatar image
  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:10:53 PM

Posted 06 November 2023 - 05:19 PM

I'm just gonna get straight to the point here. I was on my macBook. I Googled something, and then I decided to press "Command + V" just to double-check that what was pasted was what I copied. Instead of showing what I expected it to show, it showed a random string of numbers. I decided to search up that string of numbers, and nothing came up. It terrified me. I immediately ran another Malwarebytes scan, nothing was detected. I didn't download any Mac apps that day. Before responding, please note that I'm on macOS Sonoma, have no unknown apps installed on my laptop, no Chrome or any browser extensions whatsoever, no Chrome apps, and I have nothing executable in my downloads folder. None of my accounts seem compromised, and I can still successfully log in. But today, as I'm writing this, I opened my laptop and coincidentally it said "New Login Items Notification" which immediately kind of freaked me out. It said the item was named "Google LLC". I Googled this, and it said that the process is legit. But now I'm kind of worried that it is an imposter login item posing as the real item. How did all this randomly happen so suddenly in the span of a few seconds? Thank you for any responses.



BC AdBot (Login to Remove)

 


#2 greg18

greg18

  •  Avatar image
  • Members
  • 1,738 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Los Angeles, CA
  • Local time:11:53 PM

Posted 06 November 2023 - 06:50 PM

Not something that is malware. It was added because you have Chrome installed.



#3 cmonpclaptop

cmonpclaptop
  • Topic Starter

  •  Avatar image
  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:10:53 PM

Posted 06 November 2023 - 08:01 PM

Not something that is malware. It was added because you have Chrome installed.

Thank you, but how would the clipboard issue be explained? This appears abnormal.



#4 greg18

greg18

  •  Avatar image
  • Members
  • 1,738 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Los Angeles, CA
  • Local time:11:53 PM

Posted 07 November 2023 - 11:27 AM

Could be a extension, who knows why. Developer options in Chrome, along with using Chrome-urls that allow you to diagnose it will help. Mac OS is very well sandboxed that you would either need to unlock all security, and enable developer, install x-code to allow the syatwm to become infected.

#5 cryptodan

cryptodan

    Bleepin Madman


  •  Avatar image
  • Members
  • 35,210 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:04:53 AM

Posted 26 December 2023 - 11:03 AM

Can you show us what you expected and what you saw?

US Navy Veteran from 2002 to 2006

Masters in Computer and Digital Forensics Expert - Stevenson University Alumni 2015

Arch Desktop - https://termbin.com/epij

Arch Laptop - https://www.termbin.com/dnwk

Ubuntu Server - https://termbin.com/zvra





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users