Author Topic: installed a phising program meetone.gg ?  (Read 535 times)

0 Members and 1 Guest are viewing this topic.

Offline Bozer

  • Newbie
  • *
  • Posts: 5
installed a phising program meetone.gg ?
« on: May 28, 2024, 06:57:29 AM »
I fear I may have accidentally downloaded phishing software: httpx://meetone.gg/

Avast said "Threat secured - We've put sleeve in Quarantine because it was infected with malware: MacOS:Stealer-AB [Trj]."
I checked the whois of the domain, and it says "Registered on 09th April 2024".

I'm now worried that by initially opening the program, some malware has already been installed.
Avast says "all threats are gone" - what can I do to do a more thorough check?
« Last Edit: May 28, 2024, 08:41:21 AM by Lorenz5 »

Offline CraigB

  • Avast Überevangelist
  • Serious Graphoman
  • *****
  • Posts: 11249
  • No support PM's thanks
Re: installed a phising program meetone.gg ?
« Reply #1 on: May 28, 2024, 07:01:51 AM »
Please make the link unclickable as we don't want people accidentally clicking on malware links, change https to hxxps.

Posting this in the virus and worms forum board would be advisable https://forum.avast.com/index.php?board=4.0
« Last Edit: May 28, 2024, 07:07:19 AM by CraigB »

Offline Bozer

  • Newbie
  • *
  • Posts: 5
Re: installed a phising program meetone.gg ?
« Reply #2 on: May 28, 2024, 08:49:24 AM »
Thanks Craig and Jaames, I modified the link so that it is no longer workable.
I will follow your advice @Jaames.
After Avast informed me about the malware, I canceled the installation.
Another window opened up, asking me to enter a password to grant access to system preferences.
Of coz I did not touch it, but could also not close the window. Tried all sort of ways. Then did a restart and it was gone.
Now, as I did not enter the password, is there a chance that I am still sort of in the clear?
Some other ppl on forums proposed to install Malwarebytes Premium, but I believe Avast has already done what it would do, or?
Thanks for your input - helps tremendously!
« Last Edit: May 28, 2024, 08:54:11 AM by Bozer »

Offline CraigB

  • Avast Überevangelist
  • Serious Graphoman
  • *****
  • Posts: 11249
  • No support PM's thanks
Re: installed a phising program meetone.gg ?
« Reply #3 on: May 28, 2024, 08:54:39 AM »
I wouldn't be following any advice that was posted by Jaames, it was spam and has now been banned and removed

There would be no harm in running Malwarebytes, the free version is fine for a second opinion.
« Last Edit: May 28, 2024, 09:05:02 AM by CraigB »

Offline Bozer

  • Newbie
  • *
  • Posts: 5
Re: installed a phising program meetone.gg ?
« Reply #4 on: May 28, 2024, 10:47:56 AM »
Thanks Craig.
What would be the safest option for me? For example, can/should I install a fresh/clean version of MacOS? Or should I be fine after I had Avast + Malwarebytes run several times?

Offline rocksteady

  • Super Poster
  • ***
  • Posts: 1574
Re: installed a phising program meetone.gg ?
« Reply #5 on: May 28, 2024, 10:51:41 AM »
MacOS?
If you have Avast Mac product you may be better asking on Mac sub-forum here: https://forum.avast.com/index.php?board=5.0

Offline CraigB

  • Avast Überevangelist
  • Serious Graphoman
  • *****
  • Posts: 11249
  • No support PM's thanks
Re: installed a phising program meetone.gg ?
« Reply #6 on: May 28, 2024, 10:59:12 AM »
Thanks Craig.
What would be the safest option for me? For example, can/should I install a fresh/clean version of MacOS? Or should I be fine after I had Avast + Malwarebytes run several times?
To be honest I'd recommend posting your issue on the Malwarebytes forum if you suspect you are infected, there is very limited help regarding malware removal on this forum.

Offline Bozer

  • Newbie
  • *
  • Posts: 5
Re: installed a phising program meetone.gg ?
« Reply #7 on: June 07, 2024, 04:40:05 AM »
Hi Craig, I heard back from the guys at malwarebytes:
"What you downloaded is a Stealer malware disguised as an app called Meetone.App. It tries to steal your data if you enter your system password.
Since you didn't enter the password and restarted, you should be safe after deleting Meetone.App."
I am 100% positive that I did not enter my system password - since then I deleted it, and so far there is nothing abnormal to report!
Thanks again for your input!

Offline CraigB

  • Avast Überevangelist
  • Serious Graphoman
  • *****
  • Posts: 11249
  • No support PM's thanks
Re: installed a phising program meetone.gg ?
« Reply #8 on: June 07, 2024, 06:07:11 AM »
Hi Craig, I heard back from the guys at malwarebytes:
"What you downloaded is a Stealer malware disguised as an app called Meetone.App. It tries to steal your data if you enter your system password.
Since you didn't enter the password and restarted, you should be safe after deleting Meetone.App."
I am 100% positive that I did not enter my system password - since then I deleted it, and so far there is nothing abnormal to report!
Thanks again for your input!
Thanks for letting us know, I'm glad it's sorted for you now :)