
* Selet ‘All Processes’ from the dropdown menu * Open Activity Monitor which is located in /Applications/Utilities/

Next you will want to check to see if a process called “PremierOpinion” is running, to do this: If anything is reported back, you may have the spyware app installed on your Mac so you’ll want to pay special attention to what is being returned by the lsof command.Ĭheck to see if Spyware process is running: If you are worried your Mac has been infected by the OSX/OpinionSpy spyware, you can easily check to see if the port 8254 is in use by running the following command at the Terminal: If you have installed any suspect screen savers, check your Mac for this particular spyware infection by seeing if the above mentioned port is being used and to see if the spyware process is running. So what’s the best thing to do? Don’t install dubious screensavers from 7art.

The spyware runs as the root user, giving it full system permissions, and opens port 8254 on infected computers. Dubbed “OSX/OpinionSpy,” the spyware does a number of things on the users system including recording user activity and sending information to remote servers.
