PACA 0 Posted November 18, 2022 Share Posted November 18, 2022 Hi! Since 7 days ago I've been seeing this pop up notification about this HTML/Phishing.Agent.BUJ trojan thread found. It's saying it has been cleaned by deleting but it keeps popping up this message. I looked for the file in the computer and I deleted but even when I did that it didn't work. I am not exactly sure if I opened a link or what is the cause of this thread. I would like to know what can I do to delete for sure this threat from my computer. I already run a deep scan and it's saying that there are no threats. Please help! Thanks! Link to comment Share on other sites More sharing options...
Administrators Marcos 4,704 Posted November 18, 2022 Administrators Share Posted November 18, 2022 Please provide logs collected with ESET Log Collector for a start. Link to comment Share on other sites More sharing options...
PACA 0 Posted November 27, 2022 Author Share Posted November 27, 2022 Hello Marcos, I am replying to this response. Please guide me to solve the issue base on the information I am posting from the set log collector. Thanks, customer_info.zip Link to comment Share on other sites More sharing options...
Administrators Marcos 4,704 Posted November 27, 2022 Administrators Share Posted November 27, 2022 The file keeps being re-created by the application: /System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd (3512586AF44D531F2FF16C5C3E81DBB32AB93238). It appears to be related to iCloud so make sure you don't have the phishing html in your iCloud container. Link to comment Share on other sites More sharing options...
PACA 0 Posted November 28, 2022 Author Share Posted November 28, 2022 How I can recognize the phishing html and How can I eliminate that from the iCloud? Thanks! Link to comment Share on other sites More sharing options...
Administrators Marcos 4,704 Posted November 28, 2022 Administrators Share Posted November 28, 2022 I don't use iCloud so maybe somebody who use it will be able to help you. I assume that if a file is deleted locally, it should be deleted in the cloud upon the next sync. Link to comment Share on other sites More sharing options...
Recommended Posts