Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I'm new to OS X Mountain Lion. I have installed VirusBarrier x6.

When I browsed one site, an alert came through VirusBarrier that current site did port scanning (Antivandal) remotely. I blocked that URL.

I reset Safari immediately. I removed that host from VirusBarrier immediately.

  1. Is it possible that a virus on my Mac could capture my details (netbanking password, etc)?
  2. What should I do? Do I have to reinstall OS X and install all software again?
  3. If antivirus software has captured it, do I have to worry?
share|improve this question

closed as not a real question by Indrek, techie007, Mokubai, Diogo, Sirex Sep 23 '12 at 23:38

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

2  
Have you read the manual for VirusBarrier X6? The quick start guide mentions it as a feature of the program... –  Daniel Beck Sep 23 '12 at 14:10
add comment

1 Answer

up vote 1 down vote accepted

First of all, don't panic. If you blocked that URL and don't visit it again, nothing will happen. Now, step back and read the documentation of the software you bought — at least I would carefully read it if I was worried about my security.

From the manual:

VirusBarrier X6's Antivandal watches over data entering your Mac and filters it, looking for signs of intrusion. This filtering is transparent: the only time you'll see signs of it working is if it detects suspicious data, in which case an alert displays. Otherwise, Antivandal silently monitors your Mac's network activity at all times.

With regards to port scans, VirusBarrier mentions this:

Attempts by remote computers to search your Mac's ports for vulnerabilities. You may want to leave this unchecked if your computer is functioning as a server.

This simply means that the website you visited made a server check your computer's (or rather, your router's) IP address for open ports. This, per se, is not harmful. There are even dozens of web sites dedicated to doing just that (like this one).

If you sit behind a router, or your Mac has a firewall enabled, that's nothing to worry about. If you run a production server on your machine, I'd be more worried, but even then this is no active intrusion or an attempt to get a virus onto your machine.

Is it possible that a virus on my Mac could capture my details (netbanking password, etc)?

A virus could do pretty much anything on your system, but given the situation you explained, there will most probably be no virus on your system.

What should I do? Do I have to reinstall OS X and install all software again?

No. Continue using your machine as before and maybe be a bit more concious when browsing. Don't download anything suspicious, and don't install software you don't trust.

Leave VirusBarrier running if you want. But you can trust me that hundreds of thousands of Mac users do not run such software and are still reasonably safe if they know what they're doing.

If antivirus software has captured it, do I have to worry?

There was no virus to be captured. You have nothing to worry about.

share|improve this answer
    
are you meaning that antivandal is not a virus as many site are doing like that? –  Muthu Muthu Sep 23 '12 at 14:21
    
I would urge you to read the VirusBarrier documentation. You (apparently) paid around $60 for it – I'm sure you would like to use it effectively then. AntiVandal is the name of a VirusBarrier component that protects you against malicious websites or other threats. –  slhck Sep 23 '12 at 14:23
    
sorry, i meant port scan..? –  Muthu Muthu Sep 23 '12 at 14:24
    
That is when a remote computer tries to search your computer for open ports. Ports are used to communicate with other computers, and ideally, only those you need should be open, because otherwise you'll leave your machine vulnerable to attacks. See Port Scanning - Wikipedia. But if you haven't changed anything on your machine, don't worry about it. Port scanning is not malicious by itself. Server administrators might do it to check for security holes, for example. –  slhck Sep 23 '12 at 14:26
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.