Do I have a Virus? Only character on my desktop is AAAAAAAAAAAAA

I think my powerbook may have a virus
i can run some programs no problem, such as firefox right now... but am unable to open files
the menu at the top of the desktop screen, doesnt display the normal
file, edit help etc.... it has
AAAAAAAAA, AAAAA, AAAA, AAAAA ETC
Likewise all the files on my computer no longer display the characters in their file names, including the hardrive. they all just display "AAAAAAAA"
another note is that all the "AAAAA"s are in boxes. its a strange character.
HELP!!!

Strengthinnumbers:
Welcome to Apple Discussions.
Your computer is definitely not acting normally. However, I doubt that it is a virus, since there are no known viruses for Mac OS X. As to what the exact problem is, I can't tell off hand.
Begin by trying Insert Installer disk and Restart, holding down the "C" key until grey Apple appears.
Go to Installer menu (Panther and earlier) or Utilities menu (Tiger) and launch Disk Utility.
Select your HDD (manufacturer ID) in the left panel.
Select First Aid in the Main panel.
(Check S.M.A.R.T Status of HDD at the bottom of right panel, and report if it says anything but Verified)
Click Repair Disk on the bottom right.
If DU reports disk does not need repairs quit DU and restart.
If DU reports errors Repair again and again until DU reports disk is repaired.
If DU reports errors it cannot repair you will need to use a utility like Tech Tool Pro or Disk Warrior
Please post back with update and/or further questions or comments.
Cheers
cornelius

Similar Messages

When i login to yahoo, my first click results in the spinning wheel. Could i have a virus Or why does it only happen when i login to yahoo?

When i login to yahoo, my first click results in the spinning wheel. Could i have a virus? Or why does it only happen when i login to yahoo?

Firefox allows to select part of a word. You can select a word with a double click and use Shift + left click to set the end of the selection, so you need to click at the end of the last word instead of in it.

My MacBook Pro keeps on randomly scrolling on webpages, putting several spaces when I don't press the spacebar and only sometimes makes a space when I press the spacebar. Why is it doing this? Do I have a virus?

I am currently struggling to write this due to my very erratic spacebar. When I press it, it only creates a space about two thirds of the time. When I don't press it, it creates spaces, often several, in the middle of words. This is incredibly annoying and time consuming when writing. If I'm on iTunes or DVD player, it means the media is constantly stopping and starting.
When I am on webpages they will often scroll straight to the bottom, and when I try to scroll back up it won't allow me to and the screen will look like it's jumping, like my instruction for it to scroll up is fighting against an external instruction forcing it down. This 'fighting' effect is also seen with the spacebar issue when it makes several spaces and I press backspace to try and delete the spaces.
I have a MacBook Pro bought in July 2012 using Mac OS X 10.7.5. I use ESET Cybersecurity, which hasn't identified any viruses. I have deleted all internet downloads that aren't from well-known websites, yet the problem persists. It has been happening on and off for about a week, during which time I have turned the computer on and off many times, though today it has been far worse than before. I am worried I have a virus, though can't seem to locate one.
Please, if you can shed any light on the situation, please do! I'm not a techy person at all, so there may be a very obvious reason and solution for this, in which case I apologise for this waste of time. Still, any help would be very very appreciated, thank you!

You are still under warranty. Call Apple Care. Make sure you get a case number as all repairs have an additional 90 days of warranty.
#1 - You have 14 days from the date of purchase to return your computer with no questions asked.
#2 - You have 90 days of FREE phone tech support.
#3 - You have the standard one year Apple warranty.
#4 - If you've purchased an AppleCare Protection Plan, your warranty last for 3 years. You can obtain AppleCare anytime up to the first year of the purchase of your computer.
Take FULL advantage of your warranty. Posting on a message board should be done as a last resort and if you are out of warranty or Apple Care has expired.

I think I have a virus - hard disk full and administrator rights gone

I think I have a virus - my hard disk is full allthough I only have about 20G of 60 used. I cant install a virus checker as I have lost my administrator rights (when I check in accounts, I am just a "standard" user. This means I cannot install any software as it will not let me run the installer program - says incorrect username / password

You may have a corrupted disk but you do not have a virus. Boot using your original system installation DVD and run Disk Utility. Repair the disk.
If you have no Administrator accounts at all, follow this procedure to create a new, temporary Administrator account from which you can fix your normal one.
Power on or restart your Mac.
At the chime or grey screen, hold ⌘ and S on your keyboard to enter single-user mode.
At the prompt, type
fsck -fy
and press Return.
This is a simple check for file system integrity and is optional. It will take a moment or two to complete. Wait for it to finish before proceeding.
Type the following exactly as written, one line at a time, each line followed by the return key. There is a single space preceding the first "slash" ( / ) character in each line:
mount -uw /
rm /var/db/.AppleSetupDone
shutdown -h now
When you restart the machine, it will take you through the entire setup and registration process all over again. When you do so, create a brand new account with Admin privileges. Give it a simple and disposable name since you will delete it later. Do not choose the option to transfer or migrate information to the Mac.
When it completes, log in under that new account, change your previous account back to Admin, and log out.
Log in using your old account, which will now have its Admin privileges restored. Delete the throwaway account you just created.

I have os 10.5.8 and safari 5.0.6 and websites are coming very strange. Do I have flashback virus? When I use firefox they come up normal. what can I do?

I guess I put all info at top, sorry. Websites are displaying strange. When I use firefox they come up normal. Do I have flashback virus? what do I do to correct problem.

Thank you both for responding . After my posting I kept digging, I now know I don't have flashback. But, as to the strange part the pdf will show. Before problem that started about 2 weeks ago. The content was spread across the web page now it's all to the left going straight down. Also each action I get a slow script message and action is only completed when I hit cancel.
file:///Users/daniellacevedojr/Desktop/What%20is%20eMusic.pdf
I hope this gives you more insight.
Thank you for your attention.

I have a number of apps on my Ipad2 that no longer have sound. I have checked setting on my ipad and the settings on the apps that have a settings and the sound and volume are ok. Do I have a virus in some apps?

I have a number of apps on my ipad2 tha no longer have sound. I have checked the ipad settings and the apps that have settings and all sound and volume are ok. Do I have a virus? Pandora sound is ok. It seems mostly to be games...angry birds, tap tap, and educational games for little ones. Any suggestions?

There aren't any viruses for iOS devices. Have you got notifications muted ? Only notifications (including games) get muted, so the iPod and Videos apps, and headphones, still get sound.
Depending on what you've got Settings > General > Use Side Switch To set to (mute or rotation lock), then you can mute notifications by the switch on the right hand side of the iPad, or via the taskbar : double-click the home button; slide from the left; and it's the icon far left; press home again to exit the taskbar. The function that isn't on the side switch is set via the taskbar instead : http://support.apple.com/kb/HT4085

There is Red Icon at the top bar and it says I have a virus and things keep popping up saying I have a virus and need to do a scan and pay for some sort of software to complete the scan, someone told me that this is a virus in. How do I get rid of it?

There is Red Icon at the top bar and it says I have a virus and things keep popping up saying I have a virus and need to do a scan and pay for some sort of software to complete the scan, someone told me that this is a virus in. How do I get rid of it?

This could well be the notorious Mac Defender - which is an annoying program that tricks you into thinking that your Mac is infected with a virus, when the only infection is Mac Defender itself.
When surfing the web never EVER click on a link that says "Free anti-virus scan" or "Scan now" - they are nearly always scams which will end up infecting your computer. Although Macs are resistant to viruses, they're not resistant to user stupidity.
If you Google "Mac defender" then you'll find plenty of sites with instructions on how to remove this minor nuisance. Take this as a warning that you need to be more careful in your surfing habits.
Bob

Unknown User Error Message, Do I have a Virus?

Today I checked my AOL email and had over 40 messages in my inbox all within a very short time frame. I recognize most of the email addresses that came back with the Unknown User messages. I did not send any emails out and there is no record in my sent box that says that I send those emails. Could I have a Virus? I always thought mac computers don't get viruses. I am concern that I have one and if I do what should I do. I did change my password to my email after it happen. Here is a copy of one of the email error messages that I got. For the protection of my friends email and mine I changed it in this copy of the email. Friends email- [email protected], My email- [email protected]. I also got one additional email that was sent to me, from me that I never sent. Again no email in my sent box and of course I did not click on the link that was in that email. I will also post that email but will change only my email. Please do not click on the link since I am thinking it might be a virus but I wanted to include it, hoping it will help. Thank you in advance for your help.
ERROR MESSAGE:
* ATTENTION *
Your e-mail is being returned to you because there was a problem with its
delivery. The address which was undeliverable is listed in the section
labeled: "----- The following addresses had permanent fatal errors -----".
The reason your mail is being returned to you is listed in the section
labeled: "----- Transcript of Session Follows -----".
The line beginning with "<<<" describes the specific reason your e-mail could
not be delivered. The next line contains a second error message which is a
general translation for other e-mail servers.
Please direct further questions regarding this message to the e-mail
administrator or Postmaster at that destination.
--AOL Postmaster
----- The following addresses had permanent fatal errors -----
<[email protected]>
(reason: 550 5.0.0 <[email protected]>... User unknown)
----- Transcript of session follows -----
... while talking to mx1.webexone.com.:
DATA
<<< 550 5.0.0 <[email protected]>... User unknown
550 5.1.1 <[email protected]>... User unknown
<<< 503 5.0.0 Need RCPT (recipient)
Final-Recipient: RFC822; [email protected]
Action: failed
Status: 5.0.0
Remote-MTA: DNS; mx1.webexone.com
Diagnostic-Code: SMTP; 550 5.0.0 <[email protected]>... User unknown
Last-Attempt-Date: Thu, 7 Oct 2010 18:27:52 -0400
Return-Path: <[email protected]>
Received: from imo-ma04.mx.aol.com (imo-ma04.mx.aol.com [64.12.78.139])
by imr-da06.mx.aol.com (8.14.1/8.14.1) with ESMTP id o97MRjkm008439
for <[email protected]>; Thu, 7 Oct 2010 18:27:45 -0400
Received: from [email protected]
by imo-ma04.mx.aol.com (mailoutv42.9.) id z.ee2.72ae6c8 (43849)
for <[email protected]>; Thu, 7 Oct 2010 18:27:41 -0400 (EDT)
Received: from smtprly-mc01.mx.aol.com (smtprly-mc01.mx.aol.com [64.12.95.97]) by cia-dc04.mx.aol.com (v129.4) with ESMTP id MAILCIADC046-d3c94cae49563c4; Thu, 07 Oct 2010 18:27:37 -0400
Received: from webmail-d010 (webmail-d010.sim.aol.com [205.188.181.34]) by smtprly-mc01.mx.aol.com (v129.4) with ESMTP id MAILSMTPRLYMC013-d3c94cae49563c4; Thu, 07 Oct 2010 18:27:34 -0400
To: [email protected]
Content-Transfer-Encoding: quoted-printable
Subject:
Date: Thu, 07 Oct 2010 18:27:34 -0400
X-MB-Message-Source: WebUI
X-AOL-IP: 41.215.217.83
X-MB-Message-Type: User
MIME-Version: 1.0
From: [email protected]
Content-Type: text/plain; charset="us-ascii"; format=flowed
X-Mailer: AOL Webmail 32761-PHONE
Received: from 41.215.217.83 by webmail-d010.sysops.aol.com (205.188.181.34) with HTTP (WebMailUI); Thu, 07 Oct 2010 18:27:34 -0400
Message-Id: <[email protected]>
X-Spam-Flag:NO
X-AOL-SENDER: [email protected]
The email that I got that was from me, to me. Again do not open the link, I would feel horrible if caused anyones computer harm, again I also changed my email address for the posting.
hi! Jen!http://made-of.fr/to.php Best regards, ,[email protected]

The emails are almost certainly coming from someone else's computer, not from your account. This will be definite if you can't see any of these emails in any of your "sent mail" folders and only are finding out about it by mail bouncing back or someone telling you that they've received such an email from your email address.
This type of infection, which exclusively infests Windows systems, uses a technique known as "spoofing," (mentioned by the other posters) by which the virus or worm randomly selects an email address it finds on an infected computer. The virus/worm uses this address as the "From" address when it performs its mass-mailing routine rather than using the real email address of the user of the infected system. If your address happens to be the one randomly chosen, then anyone receiving one of these emails sees your email address as the apparent sender. In addition, if any messages bounce back (either because the address is no longer valid or the mail server finds the virus and rejects the message), you get hit with the bounce rather than the actual (unknowing) sender, even though the messages didn't come from your system and may be from addresses you've never heard of.
Here's an example; Jane is using a computer infected with a Windows email virus or worm. Jane is either not using an antivirus program or does not have current virus definitions. When the virus/worm activates and runs, it randomly searches the Windows address book and finds the email address of Bill. The worm inserts Bill's email address into the "From" portion of an infected message, which it then sends to Janet. Janet then contacts Bill and complains that he sent her an infected message. When Bill scans his computer, the virus checker does not find anything, because his computer is not infected.
There's nothing you can do if, as appears to be the case, the emails aren't coming from you. All you can do is notify all your friends and colleagues who have Windows systems and who would know your email address and get them to update their antivirus protection.
Regards.

How do I know if I have a virus on my iMac?

Today when I was browsing in safari, some ads popped up, and I thought maybe that could be a sign I got a virus. sorry for my ignorance about all these virus stuff
So, how can I know if a have a virus?
im using an iMac mid-2011, os x yosemite

1. This procedure is a diagnostic test. It changes nothing, for better or worse, and therefore will not, in itself, solve the problem. But with the aid of the test results, the solution may take a few minutes, instead of hours or days.
Don't be put off by the complexity of these instructions. The process is much less complicated than the description. You do harder tasks with the computer all the time.
2. If you don't already have a current backup, back up all data before doing anything else. The backup is necessary on general principle, not because of anything in the test procedure. Backup is always a must, and when you're having any kind of trouble with the computer, you may be at higher than usual risk of losing data, whether you follow these instructions or not.
There are ways to back up a computer that isn't fully functional. Ask if you need guidance.
3. Below are instructions to run a UNIX shell script, a type of program. As I wrote above, it changes nothing. It doesn't send or receive any data on the network. All it does is to generate a human-readable report on the state of the computer. That report goes nowhere unless you choose to share it. If you prefer, you can act on it yourself without disclosing the contents to me or anyone else.
You should be wondering whether you can believe me, and whether it's safe to run a program at the behest of a stranger. In general, no, it's not safe and I don't encourage it.
In this case, however, there are a couple of ways for you to decide whether the program is safe without having to trust me. First, you can read it. Unlike an application that you download and click to run, it's transparent, so anyone with the necessary skill can verify what it does.
You may not be able to understand the script yourself. But variations of the script have been posted on this website thousands of times over a period of years. The site is hosted by Apple, which does not allow it to be used to distribute harmful software. Any one of the millions of registered users could have read the script and raised the alarm if it was harmful. Then I would not be here now and you would not be reading this message.
Nevertheless, if you can't satisfy yourself that these instructions are safe, don't follow them. Ask for other options.
4. Here's a summary of what you need to do, if you choose to proceed:
☞ Copy a line of text in this window to the Clipboard.
☞ Paste into the window of another application.
☞ Wait for the test to run. It usually takes a few minutes.
☞ Paste the results, which will have been copied automatically, back into a reply on this page.
The sequence is: copy, paste, wait, paste again. You don't need to copy a second time. Details follow.
5. You may have started the computer in "safe" mode. Preferably, these steps should be taken in “normal” mode, under the conditions in which the problem is reproduced. If the system is now in safe mode and works well enough in normal mode to run the test, restart as usual. If you can only test in safe mode, do that.
6. If you have more than one user, and the one affected by the problem is not an administrator, then please run the test twice: once while logged in as the affected user, and once as an administrator. The results may be different. The user that is created automatically on a new computer when you start it for the first time is an administrator. If you can't log in as an administrator, test as the affected user. Most personal Macs have only one user, and in that case this section doesn’t apply. Don't log in as root.
7. The script is a single long line, all of which must be selected. You can accomplish this easily by triple-clicking anywhere in the line. The whole line will highlight, though you may not see all of it in the browser window, and you can then copy it. If you try to select the line by dragging across the part you can see, you won't get all of it.
Triple-click anywhere in the line of text below on this page to select it:
PATH=/usr/bin:/bin:/usr/sbin:/sbin:/usr/libexec;clear;cd;p=(Software Hardware Memory Diagnostics Power FireWire Thunderbolt USB Fonts SerialATA 4 1000 25 5120 KiB/s 1024 85 \\b%% 20480 1 MB/s 25000 ports ' com.clark.\* \*dropbox \*genieo\* \*GoogleDr\* \*k.AutoCAD\* \*k.Maya\* vidinst\* ' DYLD_INSERT_LIBRARIES\ DYLD_LIBRARY_PATH -86 "` route -n get default|awk '/e:/{print $2}' `" 25 N\\/A down up 102400 25600 recvfrom sendto CFBundleIdentifier 25 25 25 1000 MB ' com.adobe.fpsaud com.apple.AirPortBaseStationAgent com.apple.installer.osmessagetracing ' ' 1274181950 464843899 1233118628 ' 51 5120 files );N5=${#p[@]};p[N5]=` networksetup -listnetworkserviceorder|awk ' NR>1 { sub(/^$[0-9]+$ /,"");n=$0;getline;} $NF=="'${p[26]}')" { sub(/.$/,"",$NF);print n;exit;} ' `;f=('\n%s: %s\n' '\n%s\n\n%s\n' '\nRAM details\n%s\n' %s\ %s '%s\n-\t%s\n' );S0() { echo ' { q=$NF+0;$NF="";u=$(NF-1);$(NF-1)="";gsub(/^ +| +$/,"");if(q>='${p[$1]}') printf("%s (UID %s) is using %s '${p[$2]}'",$0,u,q);} ';};s=(' s/[0-9A-Za-z._]+@[0-9A-Za-z.]+\.[0-9A-Za-z]{2,4}/EMAIL/g;/\/Shared/!s/(\/Users\/)[^ /]+/\1USER/g;s/[-0-9A-Fa-f]{22,}/UUID/g;' ' s/^ +//;/de: S|[nst]:/p;' ' {sub(/^ +/,"")};/er:/;/y:/&&$2<'${p[10]} ' 1s/://;3,6d;/[my].+:/d;s/^ {4}//;H;${ g;s/\n$//;/s: [^EO]|x([^08]|02[^F]|8[^0])/p;} ' ' 5h;6{ H;g;/P/!p;} ' ' ($1~/^Cy/&&$3>'${p[11]}')||($1~/^Cond/&&$2!~/^N/) ' ' /:$/{ N;/:.+:/d;s/ *://;b0'$'\n'' };/^ *(V.+ [0N]|Man).+ /{ s/ 0x.... //;s/[()]//g;s/(.+: )(.+)/ (\2)/;H;};$b0'$'\n'' d;:0'$'\n'' x;s/\n\n//;/Apple[ ,]|Genesy|Intel|SMSC/d;s/\n.*//;/\)$/p;' ' s/^.*C/C/;H;${ g;/No th|pms/!p;} ' '/= [^GO]/p' '{$1=""};1' ' /Of/!{ s/^.+is |\.//g;p;} ' ' $0&&!/ / { n++;print;} END { split("'"${p[41]}"'",b);for(i in b) print b[i];if(n<10) print "com.apple.";} ' ' $3~/[0-9]:[0-9]{2}$/ { gsub(/:[0-9:a-f]{14}/,"");} { print|"tail -n'${p[12]}'";} ' ' NR==2&&$4<='${p[13]}' { print $4;} ' ' END { $2/=256;if($2>='${p[15]}') print int($2) } ' ' NR!=13{next};{sub(/[+-]$/,"",$NF)};'"`S0 21 22`" 'NR!=2{next}'"`S0 37 17`" ' NR!=5||$8!~/[RW]/{next};{ $(NF-1)=$1;$NF=int($NF/10000000);for(i=1;i<=3;i++){$i="";$(NF-1-i)="";};};'"`S0 19 20`" 's:^:/:p' '/\.kext\/(Contents\/)?Info\.plist$/p' 's/^.{52}(.+) <.+/\1/p' ' /Launch[AD].+\.plist$/ { n++;print;} END { split("'"${p[41]}"'",b);for(i in b) print b[i]".plist";if(n<200) print "/System/";} ' '/\.xpc\/(Contents\/)?Info\.plist$/p' ' NR>1&&!/0x|\.[0-9]+$|com\.apple\.launchctl\.(Aqua|Background|System)$/ { print $3;} ' ' /\.(framew|lproj)|\):/d;/plist:|:.+(Mach|scrip)/s/:[^:]+//p ' '/^root$/p' ' !/\/Contents\/.+\/Contents|Applic|Autom|Frameworks/&&/Lib.+\/Info.plist$/ { n++;print;} END { if(n<1100) print "/System/";} ' '/^\/usr\/lib\/.+dylib$/p' ' /Temp|emac/{next};/(etc|Preferences|Launch[AD].+)\// { sub(".(/private)?","");n++;print;} END { split("'"${p[41]}"'",b);split("'"${p[42]}"'",c);for(i in b) print b[i]".plist\t"c[i];if(n<500) print "Launch";} ' ' /\/(Contents\/.+\/Contents|Frameworks)\/|\.wdgt\/.+\.([bw]|plu)/d;p;' 's/\/(Contents\/)?Info.plist$//;p' ' { gsub("^| |\n","\\|\\|kMDItem'${p[35]}'=");sub("^...."," ") };1 ' p '{print $3"\t"$1}' 's/\'$'\t''.+//p' 's/1/On/p' '/Prox.+: [^0]/p' '$2>'${p[43]}'{$2=$2-1;print}' ' BEGIN { i="'${p[26]}'";M1='${p[16]}';M2='${p[18]}';M3='${p[31]}';M4='${p[32]}';} !/^A/{next};/%/ { getline;if($5<M1) a="user "$2"%, system "$4"%";} /disk0/&&$4>M2 { b=$3" ops/s, "$4" blocks/s";} $2==i { if(c) { d=$3+$4+$5+$6;next;};if($4>M3||$6>M4) c=int($4/1024)" in, "int($6/1024)" out";} END { if(a) print "CPU: "a;if(b) print "I/O: "b;if(c) print "Net: "c" (KiB/s)";if(d) print "Net errors: "d" packets/s";} ' ' /r\[0\] /&&$NF!~/^1(0|72\.(1[6-9]|2[0-9]|3[0-1])|92\.168)\./ { print $NF;exit;} ' ' !/^T/ { printf "(static)";exit;} ' '/apsd|BKAg|OpenD/!s/:.+//p' ' (/k:/&&$3!~/(255\.){3}0/ )||(/v6:/&&$2!~/A/ ) ' ' $1~"lR"&&$2<='${p[25]}';$1~"li"&&$3!~"wpa2";' ' BEGIN { FS=":";p="uniq -c|sed -E '"'s/ +\$[0-9]+\$\$.+\$/\\\2 x\\\1/;s/x1$//'"'";} { n=split($3,a,".");sub(/_2[01].+/,"",$3);print $2" "$3" "a[n]$1|p;b=b$1;} END { close(p);if(b) print("\n\t* Code injection");} ' ' NR!=4{next} {$NF/=10240} '"`S0 27 14`" ' END { if($3~/[0-9]/)print$3;} ' ' BEGIN { L='${p[36]}';} !/^[[:space:]]*(#.*)?$/ { l++;if(l<=L) f=f"\n "$0;} END { F=FILENAME;if(!F) exit;if(!f) f="\n [N/A]";"file -b "F|getline T;if(T!~/^(AS.+ (En.+ )?text$|(Bo|PO).+ sh.+ text ex)/) F=F" ("T")";printf("\nContents of %s\n%s\n",F,f);if(l>L) printf("\n ...and %s more line(s)\n",l-L);} ' ' s/^ ?n...://p;s/^ ?p...:/-'$'\t''/p;' 's/0/Off/p' ' END{print NR} ' ' /id: N|te: Y/{i++} END{print i} ' ' / / { print "'"${p[28]}"'";exit;};1;' '/ en/!s/\.//p' ' NR!=13{next};{sub(/[+-M]$/,"",$NF)};'"`S0 39 40`" ' $10~/\(L/&&$9!~"localhost" { sub(/.+:/,"",$9);print $1": "$9;} ' '/^ +r/s/.+"(.+)".+/\1/p' 's/(.+\.wdgt)\/(Contents\/)?Info\.plist$/\1/p' 's/^.+\/(.+)\.wdgt$/\1/p' ' /l: /{ /DVD/d;s/.+: //;b0'$'\n'' };/s: /{ /V/d;s/^ */- /;H;};$b0'$'\n'' d;:0'$'\n'' x;/APPLE [^:]+$/d;p;' ' /^find: /d;p;' "`S0 44 45`" ' BEGIN{FS="= "} /Path/{print $2} ' ' /^ *$/d;s/^ */ /;' '/\./p' '/\.appex\/Contents\/Info\.plist$/p' );c1=(system_profiler pmset\ -g nvram fdesetup find syslog df vm_stat sar ps sudo\ crontab sudo\ iotop top pkgutil 'PlistBuddy 2>&1 -c "Print' whoami cksum kextstat launchctl sudo\ launchctl crontab 'sudo defaults read' stat lsbom mdfind ' for i in ${p[24]};do ${c1[18]} ${c2[27]} $i;done;' defaults\ read scutil sudo\ dtrace sudo\ profiles sed\ -En awk /S*/*/P*/*/*/C*/*/airport networksetup mdutil sudo\ lsof test osascript\ -e );c2=(com.apple.loginwindow\ LoginHook '" /L*/P*/loginw*' "'tell app \"System Events\" to get properties of login items'|tr , \\\n" 'L*/Ca*/com.ap*.Saf*/E*/* -d 1 -name In*t -exec '"${c1[14]}"' :CFBundleDisplayName" {} \;|sort|uniq' '~ $TMPDIR.. $ -flags +sappnd,schg,uappnd,uchg -o ! -user $UID -o ! -perm -600 $' '.??* -path .Trash -prune -o -type d -name *.app -print -prune' :${p[35]}\" :Label\" '{/,}L*/{Con,Pref}* -type f ! -size 0 -name *.plist -exec plutil -s {} \;' "-f'%N: %l' Desktop L*/Keyc*" therm sysload boot-args status " -F '\$Time \$Message' -k Sender kernel -k Message Req 'bad |Beac|caug|corru|dead[^bl]|FAIL|fail|GPU |hfs: Ru|inval|jnl:|last value [1-9]|n Cause: -|NVDA$|pagin|proc: t|Roamed|rror|ssert|Thrott|tim(ed? ?|ing )o|WARN' -k Message Rne 'Goog|ksadm|SMC:|suhel| VALI|ver-r|xpma' -o -k Sender fseventsd -k Message Req 'SL' " '-du -n DEV -n EDEV 1 10' 'acrx -o comm,ruid,%cpu' '-t1 10 1' '-f -pfc /var/db/r*/com.apple.*.{BS,Bas,Es,J,OSXU,Rem,up}*.bom' '{/,}L*/Lo*/Diag* -type f -regex .\*[cght] ! -name .?\* ! -name \*ag \( -exec grep -lq "^Thread c" {} \; -exec printf \* \; -o -true $ -execdir stat -f:%Sc:%N -t%F {} \;|sort -t: -k2 |tail -n'${p[38]} '/S*/*/Ca*/*xpc* >&- ||echo No' '-L /{S*/,}L*/StartupItems -type f -exec file {} +' '-L /S*/L*/{C*/Sec*A,Ex}* {/,}L*/{A*d,Ca*/*/Ex,Co{mpon,reM},Ex,In{p,ter},iTu*/*P,Keyb,Mail/B,Pr*P,Qu*T,Scripti,Sec,Servi,Spo,Widg}* -path \\*s/Resources -prune -o -type f -name Info.plist' '/usr/lib -type f -name *.dylib' `awk "${s[31]}"<<<${p[23]}` "/e*/{auto,{cron,fs}tab,hosts,{[lp],sy}*.conf,mach_i*/*,pam.d/*,ssh{,d}_config,*.local} {,/usr/local}/etc/periodic/*/* /L*/P*{,/*}/com.a*.{Bo,sec*.ap}*t {/S*/,/,}L*/Lau*/*t .launchd.conf" list getenv /Library/Preferences/com.apple.alf\ globalstate --proxy '-n get default' -I --dns -getdnsservers\ "${p[N5]}" -getinfo\ "${p[N5]}" -P -m\ / '' -n1 '-R -l1 -n1 -o prt -stats command,uid,prt' '--regexp --only-files --files com.apple.pkg.*|sort|uniq' -kl -l -s\ / '-R -l1 -n1 -o mem -stats command,uid,mem' '+c0 -i4TCP:0-1023' com.apple.dashboard\ layer-gadgets '-d /L*/Mana*/$USER&&echo On' '-app Safari WebKitDNSPrefetchingEnabled' "+c0 -l|awk '{print(\$1,\$3)}'|sort|uniq -c|sort -n|tail -1|awk '{print(\$2,\$3,\$1)}'" 'L*/P*/com.ap*.p*.ext*.*.*t -exec '"${c1[14]}"' :displayOrder" {} \;' );N1=${#c2[@]};for j in {0..9};do c2[N1+j]=SP${p[j]}DataType;done;N2=${#c2[@]};for j in 0 1;do c2[N2+j]="-n ' syscall::'${p[33+j]}':return { @out[execname,uid]=sum(arg0) } tick-10sec { trunc(@out,1);exit(0);} '";done;l=(Restricted\ files Hidden\ apps 'Elapsed time (s)' POST Battery safariexts Bad\ plists 'High file counts' User Heat System\ load boot\ args FileVault Diagnostic\ reports Log 'Free space (MiB)' 'Swap (MiB)' Activity 'CPU per process' Login\ hook 'I/O per process' Mach\ ports kexts Daemons Agents XPC\ cache Startup\ items Admin\ access Root\ access Bundles dylibs Apps Font\ issues Inserted\ dylibs Firewall Proxies DNS TCP/IP Wi-Fi Profiles Root\ crontab User\ crontab 'Global login items' 'User login items' Spotlight Memory Listeners Widgets Parental\ Controls Prefetching SATA Descriptors appexes );N3=${#l[@]};for i in 0 1 2;do l[N3+i]=${p[5+i]};done;N4=${#l[@]};for j in 0 1;do l[N4+j]="Current ${p[29+j]}stream data";done;A0() { id -G|grep -qw 80;v[1]=$?;((v[1]==0))&&sudo true;v[2]=$?;v[3]=`date +%s`;clear >&-;date '+Start time: %T %D%n';};for i in 0 1;do eval ' A'$((1+i))'() { v=` eval "${c1[$1]} ${c2[$2]}"|'${c1[30+i]}' "${s[$3]}" `;[[ "$v" ]];};A'$((3+i))'() { v=` while read i;do [[ "$i" ]]&&eval "${c1[$1]} ${c2[$2]}" \"$i\"|'${c1[30+i]}' "${s[$3]}";done<<<"${v[$4]}" `;[[ "$v" ]];};A'$((5+i))'() { v=` while read i;do '${c1[30+i]}' "${s[$1]}" "$i";done<<<"${v[$2]}" `;[[ "$v" ]];};';done;A7(){ v=$((`date +%s`-v[3]));};B2(){ v[$1]="$v";};for i in 0 1;do eval ' B'$i'() { v=;((v['$((i+1))']==0))||{ v=No;false;};};B'$((3+i))'() { v[$2]=`'${c1[30+i]}' "${s[$3]}"<<<"${v[$1]}"`;} ';done;B5(){ v[$1]="${v[$1]}"$'\n'"${v[$2]}";};B6() { v=` paste -d: <(printf "${v[$1]}") <(printf "${v[$2]}")|awk -F: ' {printf("'"${f[$3]}"'",$1,$2)} ' `;};B7(){ v=`grep -Fv "${v[$1]}"<<<"$v"`;};C0() { [[ "$v" ]]&&sed -E "$s"<<<"$v";};C1() { [[ "$v" ]]&&printf "${f[$1]}" "${l[$2]}" "$v"|sed -E "$s";};C2() { v=`echo $v`;[[ "$v" != 0 ]]&&C1 0 $1;};C3() { v=`sed -E "${s[63]}"<<<"$v"`&&C1 1 $1;};for i in 1 2;do for j in 0 2 3;do eval D$i$j'(){ A'$i' $1 $2 $3; C'$j' $4;};';done;done;{ A0;D20 0 $((N1+1)) 2;D10 0 $N1 1;B0;C2 27;B0&&! B1&&C2 28;D12 15 37 25 8;A1 0 $((N1+2)) 3;C0;D13 0 $((N1+3)) 4 3;D23 0 $((N1+4)) 5 4;D13 0 $((N1+9)) 59 50;for i in 0 1 2;do D13 0 $((N1+5+i)) 6 $((N3+i));done;D13 1 10 7 9;D13 1 11 8 10;D22 2 12 9 11;D12 3 13 10 12;D23 4 19 44 13;D23 5 14 12 14;D22 6 36 13 15;D22 7 37 14 16;D23 8 15 38 17;D22 9 16 16 18;B1&&{ D22 35 49 61 51;D22 11 17 17 20;for i in 0 1;do D22 28 $((N2+i)) 45 $((N4+i));done;};D22 12 44 54 45;D22 12 39 15 21;A1 13 40 18;B2 4;B3 4 0 19;A3 14 6 32 0;B4 0 5 11;A1 17 41 20;B7 5;C3 22;B4 4 6 21;A3 14 7 32 6;B4 0 7 11;B3 4 0 22;A3 14 6 32 0;B4 0 8 11;B5 7 8;B1&&{ A2 19 26 23;B7 7;C3 23;};A2 18 26 23;B7 7;C3 24;D13 4 21 24 26;B4 4 12 26;B3 4 13 27;A1 4 22 29;B7 12;B2 14;A4 14 6 52 14;B2 15;B6 14 15 4;B3 0 0 30;C3 29;A1 4 23 27;B7 13;C3 30;B3 4 0 65;A3 14 6 32 0;B4 0 16 11;A1 4 50 64;B7 16;C3 52;D13 24 24 32 31;D13 25 37 32 33;A2 23 18 28;B2 16;A2 16 25 33;B7 16;B3 0 0 34;B2 21;A6 47 21&&C0;B1&&{ D13 21 0 32 19;D13 10 42 32 40;D22 29 35 46 39;};D23 14 1 62 42;D12 34 43 53 44;D12 22 20 32 25;D22 0 $((N1+8)) 51 32;D13 4 8 41 6;D12 26 28 35 34;D13 27 29 36 35;A2 27 32 39&&{ B2 19;A2 33 33 40;B2 20;B6 19 20 3;};C2 36;D23 33 34 42 37;B1&&D23 35 45 55 46;D23 32 31 43 38;D12 36 47 32 48;D13 20 42 32 41;D13 37 2 48 43;D13 4 5 32 1;D13 4 3 60 5;D12 26 48 49 49;B3 4 22 57;A1 26 46 56;B7 22;B3 0 0 58;C3 47;D22 4 4 50 0;D23 22 9 37 7;A7;C2 2;} 2>/dev/null|pbcopy;exit 2>&-
Copy the selected text to the Clipboard by pressing the key combination command-C.
8. Launch the built-in Terminal application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.
Click anywhere in the Terminal window and paste by pressing command-V. The text you pasted should vanish immediately. If it doesn't, press the return key.
9. If you see an error message in the Terminal window such as "Syntax error" or "Event not found," enter
exec bash
and press return. Then paste the script again.
10. If you're logged in as an administrator, you'll be prompted for your login password. Nothing will be displayed when you type it. You will not see the usual dots in place of typed characters. Make sure caps lock is off. Type carefully and then press return. You may get a one-time warning to be careful. If you make three failed attempts to enter the password, the test will run anyway, but it will produce less information. In most cases, the difference is not important. If you don't know the password, or if you prefer not to enter it, press the key combination control-C or just press return three times at the password prompt. Again, the script will still run.
If you're not logged in as an administrator, you won't be prompted for a password. The test will still run. It just won't do anything that requires administrator privileges.
11. The test may take a few minutes to run, depending on how many files you have and the speed of the computer. A computer that's abnormally slow may take longer to run the test. While it's running, there will be nothing in the Terminal window and no indication of progress. Wait for the line
[Process completed]
to appear. If you don't see it within half an hour or so, the test probably won't complete in a reasonable time. In that case, close the Terminal window and report what happened. No harm will be done.
12. When the test is complete, quit Terminal. The results will have been copied to the Clipboard automatically. They are not shown in the Terminal window. Please don't copy anything from there. All you have to do is start a reply to this comment and then paste by pressing command-V again.
At the top of the results, there will be a line that begins with the words "Start time." If you don't see that, but instead see a mass of gibberish, you didn't wait for the "Process completed" message to appear in the Terminal window. Please wait for it and try again.
If any private information, such as your name or email address, appears in the results, anonymize it before posting. Usually that won't be necessary.
13. When you post the results, you might see an error message on the web page: "You have included content in your post that is not permitted," or "You are not authorized to post." That's a bug in the forum software. Please post the test results on Pastebin, then post a link here to the page you created.
14. This is a public forum, and others may give you advice based on the results of the test. They speak only for themselves, and I don't necessarily agree with them.
Copyright © 2014 by Linc Davis. As the sole author of this work, I reserve all rights to it except as provided in the Use Agreement for the Apple Support Communities website ("ASC"). Readers of ASC may copy it for their own personal use. Neither the whole nor any part may be redistributed.

I don't know what is going on with my mac. (10.9.5) Do I have a virus? What to do?

I accidentally clicked a link and downloaded something I did not mean to. I put in my administrators password and it downloaded. Now every time I click on Safari, instead of google as my home page like normal, it redirects me to this "Only Search" site which has a lot of ads and looks like a very shady evil twin of google. Also whenever I click a link, an ad pops up in another tab. I have pop ups blocked in my settings, I have also tried multiple times to change my home page back to google. But each time it changes itself back to the "Only Search" site. Computer is also being very slow and laggy. Do I have a virus or trojan? If so what do I do about it?

Click here and follow the instructions, or if you'd rather use removal software, download and run Adware Medic. The second link is a direct download; if it gives you an error message, see this page.
(116746)

What can I do if I think I have a virus?

QuestionWhat can I do if I think I have a virus?
AnswerSkip this and contact a professional
If you'd like to skip this guide and contact a professional, CLICK HERE.
There are a few steps you can take if you think you have a virus.
Use anti-virus software
One of the first things you should do is scan your computer with anti-virus software. Many Toshiba computers come with software for this purpose. You may choose to use an alternative, but you should only have one anti-virus program installed at a time.
Run your anti-virus program and ensure it's fully updated. Once it's updated, preform a full scan of your computer.
Disconnect accessories
If that doesn't help, you should disconnect any accessories connected to your computer. It's possible that the symptoms that you think are due to a virus could be due to an accessory.
Uninstall new software
An error with a new program might be causing problems that you think are being caused by a virus. To check this, uninstall any new programs that you installed near the time your computer's symptoms first appeared.
Perform system restore
If none of the previous suggestions helped, you might consider performing a system restore. This will return your computer's system files to a previous state. System settings will revert, and programs installed since the restore point was created might need to be reinstalled. Your documents shouldn't be changed.
For more information on performing a system restore, see one of the following articles:
How To: Understanding System Restore, Refresh, Reset, and, Recovery options in Windows 8 + Video
How To: Perform a system restore in Windows 7
Contact a professional or perform a system reset
Lastly, you might want to return your computer to factory default conditions. This is sometimes called a system reset or a system recovery. Note that this will remove all of your software and data that you added including applications, documents, photos, etc.
If you don't want to reset your computer and you'd like to contact a professional, CLICK HERE.
If you do want to proceed with a system reset, the system reset will remove the virus. For more information, see the following article:
How To: Understanding System Restore, Refresh, Reset, and, Recovery options in Windows 8 + Video

Some processes are critical, but many can be interrupted without any problem.
You can monitor your ongoing processes by going to Applications/Utiltities/Activity Monitor; pay particular attention to Disk Activity and Network. To interrupt a process, highlight the process, and tap "Quit Processes." This will interrupt or stop the runaway process.

OK to have separate virus progams in Mac and in Windows?

I am advised to have virus protection in the Windows XP program I have just installed in Parallels. I already have McAfee Virus Scan on my Mac. Is it okay to load in the McAfee Virus Scan software for Windows into Windows? I saw a warning about having two virus programs operating on the same computer, and just want to make sure this will not be a problem. Thanks

Hi Barbara,
Since the Windows version of McAffe Scan will only scan inside your Parallels Windows and not the OSX side, it is safe to do what you do/have.
Besides quite a lot are using two or more Virus Scanner with their Windows as long as only one is running as 'On-Access Scanner' and the others are used as 'On-Demand Scanner'.
Regards
Stefan

I think I have a virus on my mac, how do I get rid of it?

For the last few weeks, my mac has been working very slowly. I heard it might have a virus. Does anyone know how to find out if you do have a virus and how to get rid of one on a mac?

There are no OS X viruses. If your computer is running slow it's not because of a virus. You might see the following:
Kappy's Personal Suggestions for OS X Maintenance
For disk repairs use Disk Utility. For situations DU cannot handle the best third-party utilities are: Disk Warrior; DW only fixes problems with the disk directory, but most disk problems are caused by directory corruption; Disk Warrior 4.x is now Intel Mac compatible. Drive Genius provides additional tools not found in Disk Warrior. Versions 1.5.1 and later are Intel Mac compatible.
OS X performs certain maintenance functions that are scheduled to occur on a daily, weekly, or monthly period. The maintenance scripts run in the early AM only if the computer is turned on 24/7 (no sleep.) If this isn't the case, then an excellent solution is to download and install a shareware utility such as Macaroni, JAW PseudoAnacron, or Anacron that will automate the maintenance activity regardless of whether the computer is turned off or asleep. Dependence upon third-party utilities to run the periodic maintenance scripts was significantly reduced since Tiger. These utilities have limited or no functionality with Snow Leopard or Lion and should not be installed.
OS X automatically defragments files less than 20 MBs in size, so unless you have a disk full of very large files there's little need for defragmenting the hard drive. As for virus protection there are few if any such animals affecting OS X. You can protect the computer easily using the freeware Open Source virus protection software ClamXAV. Personally I would avoid most commercial anti-virus software because of their potential for causing problems. For more about malware see Macintosh Virus Guide.
I would also recommend downloading a utility such as TinkerTool System, OnyX 2.4.3, or Cocktail 5.1.1 that you can use for periodic maintenance such as removing old log files and archives, clearing caches, etc.
For emergency repairs install the freeware utility Applejack. If you cannot start up in OS X, you may be able to start in single-user mode from which you can run Applejack to do a whole set of repair and maintenance routines from the command line. Note that AppleJack 1.5 is required for Leopard. AppleJack 1.6 is compatible with Snow Leopard. There is no confirmation that this version also works with Lion.
When you install any new system software or updates be sure to repair the hard drive and permissions beforehand. I also recommend booting into safe mode before doing system software updates.
Get an external Firewire drive at least equal in size to the internal hard drive and make (and maintain) a bootable clone/backup. You can make a bootable clone using the Restore option of Disk Utility. You can also make and maintain clones with good backup software. My personal recommendations are (order is not significant):
Carbon Copy Cloner
Data Backup
Deja Vu
SuperDuper!
SyncTwoFolders
Synk Pro
Synk Standard
Tri-Backup
Visit The XLab FAQs and read the FAQs on maintenance, optimization, virus protection, and backup and restore.
Additional suggestions will be found in Mac Maintenance Quick Assist.
Referenced software can be found at CNet Downloads or MacUpdate.
Be sure you have an adequate amount of RAM installed for the number of applications you run concurrently. Be sure you leave a minimum of 10% of the hard drive's capacity as free space.

Does my iPhone 4 have a virus?

While I was brousing the internet using the google crome app on my iphone 4 a message window opened that said one of the website I recently vidited infected me with a virus and to press ok to remove it (this window looked like a apple notification). After I pressed ok because it was the only way to get out that, I saw another tab had oppened saying that I had a virus. I forget the name but I do remember it started with a "t". This page asked me to download something to remove the virus and protect my phone from future viruses. Do I actually have a virus or was this a scam? I am running iOS 6.0.1

Its a complete scam. There are no know viruses for iPhones at this time.
Additionally downloading something over Safari is a clear indication its a scam as you can only download and install applications from the App Store and nowhere else, and Apple screens all Apps submitted to the store before allowing them to be published.
Currently there are no Anti virus Apps either because due to the nature of the operating system, all they can do is scan emails on demand. That is you have to manually initiate the scanning process because Apps cannot access the general phone file system to scan nor can they access the files from other Apps.

Can't I have a virus????

Hi everyone,
I just got this new MacBookPro and I'm trying to get use to it.
But I'm having this problem with the password required to install softwares.
Sometimes when the password window come up, the keyboard doesn't type the exactly letter. I mean, I choose "u", and I get "g". This only happens when this password is required. When I'm working all day long on a different kinds of sotwares I never get this problem.
Can I have a virus or something??
I'm also working with Parallels Desktop (with Windows XP) where I got to delete it a couple times because of virus. So, is it possible that I got a virus from the windows????
Thank you for any advice.
Viv

Can I have a virus or something??
Well, you probably already read from the others that you don't have to worry about a virus for the Mac side of things.
I'm also working with Parallels Desktop (with Windows
XP) where I got to delete it a couple times because
of virus. So, is it possible that I got a virus from
the windows????
Now..., on the other hand, the Windows environment (-itself-) can be susceptible to those Windows viruses. It won't spread over into the Mac side of things, though. It may mess up your Windows environment that you're working in. But your Macintosh computer will be working okay.
I do have an Anti-Virus program. It's call VirusBarrier from Intego. And it runs in the background (if I want to run it that way) all the time. Well, I've had it running for close to a year and have never heard one single "peep" out of it, for anything. Today was the first time it squawked at me.
Apparently there was some web page that had a file that it wanted to download and it was an infected file. However, it was for Windows. VirusBarrier still gives a warning, even if it has nothing to do with the Macintosh.
The item in question was -- "W32.DNSChanger.Gen". It's something that apparently can cause your computer to redirect to a fake web page for some financial institution that you have, so that it can take the information and steal whatever, from it. But, as I said, in this case, it was something that worked on the Windows side.
By the way, Intego also has a product where it will protect both the Windows and the Macintosh sides. You might check that out, if you're concerned.
iBook G4 1.42 GHz & iMac G4 Flat Panel 800 MHz Mac OS X (10.4.8)

Do I have a Virus? Only character on my desktop is AAAAAAAAAAAAA

Similar Messages

Maybe you are looking for