Need to reinstall osx due to possible virus/trojan infection

Hi guys,
I sometimes use my personal macbook in work, however ive been asked to remove it and reinstall osx as the computer centre have detected "some very nasty virus" of unknown name or origin. So i have a basic question if i reinstall osx using the disks will i have to completely delte and replace everything to get rid of the virus (am i safe to save my documents and programs to an external and drag them back after). Also ive read that clamav which i had downloaded some time ago is no use for protecting against trojans any suggestions of software which can?
thanks for your time
Conor

Do an Archive & Install installation, saving user and network settings. That should remove the said "unknown, nasty viurs", which I sincerely doubt has anything to do with your machine, but might be tagged to some Microsloth app macro. Details in http://support.apple.com/kb/HT1545

Similar Messages

I have had to replace the HDD and need to reinstall OSX.

I have had to replace the HDD and need to reinstall OSX but cannot find disc that came with the unit, does anyone know where I can get them from or download if possible?
James

[email protected] wrote:
Just how do you do an internet recovery on a system that has a blank HDD with no operating system that the unit cannot boot from????
If your Mac came preinstalled with Lion or Mountain Lion after you install your new blank HDD, restart the Mac while pressing/holding the COMMAND+OPTION+R keys until you see a spinning globe. Make sure you have an Internet connection (WiFi or Ethernet). This will boot into Apple's Recovery HD servers and present you with the OS X Utilities Menu. From there you can select Disk Utility to format your new HDD and then reinstall Mac OS X for the OS that was preinstalled.
Internet Recovery doesn't care if you have an unformated HDD because it boots over the Internet to Apple's servers, not your HDD.

Keyboard and lightning of my macbook doesnt work, neither does the usb keyboard work. I need to reinstall osx as its showing the folder with a questionmark. Any suggestions?

I've got a Macbook Pro 13" early 2011. The keyboard and its lightning doesnt work, neither isnt working anymore. I need to reinstall osx as its showing the folder with a questionmark. An USB keyboard doesnt work either.. Any suggestions?

Restart.
Try this. I know you said "keyboard is not working.
Reset SMC. http://support.apple.com/kb/HT3964
Choose the method for:
"Resetting SMC on portables with a battery you should not remove on your own".
If this does not help, contact Apple.
Best.

Do I need to reinstall OSX?

I had been using iChat on a daily basis with no problems for the last year, then about a month ago, it refused to connect. The icon would bounce in the dock for a long time and the little spinning beachball icon would appear, and nothing would happen. Sometimes it'd just crash, but I'd usually have to force quit. I tried reinstalling it from the file in the library folder, but it kept giving me an error message as soon as it would get to the last part of the install. I suspect the only way to get it working again is to reinstall OSX, is this the case, or is there something else I could try? Any suggestions would be appreciated - I'm sick of the blah interface of AOL instant messenger!
Thanks.

First of all, you can't "reinstall it from the file in the library folder". If you're referring to the iChat.pkg in /Library/Receipts, that isn't going to help you.
I would suggest isolating the iChat.app launch/connect issue to your particular user account first by creating a test user in System Preferences > Accounts. Once you've created that, you can login and test. If it doesn't work there, that confirms you will likely need to reinstall iChat, which is incidentally only available by reinstall of OS X.

Wondering waht to do if i need to reinstall osx but

I am curious what my next action should be if i need a new copy of the restore disk for my Macbook and also my Powerbook G4 (800MHz) machines. I need to reinstall the operating system because my brother is in Iraq @ war and i cannot get in contact with him to get my admin passwords at all. I cant update any of my software at all without these pw's and i really need to either find a way to retrieve the pw's or reinstlal osx.
Im also having a problem with the camera built into my Macbook, for some reason im getting just a blank green screen when i attempt to take a snapshot. Would this be from not being able to update my software because of the pw issue?
Thanks alot and if anyone needs feel free to email me @ [email protected] if your able to help
Thanks again,
Mykel

Call Apple (800-275-2273). Let them walk you through getting the password thing fixed.
The other problem is not related to PW

Cannot log into any GUI modes and need to reinstall OSX

Hi all,
I've been having issues with my iMac 27" i7 desktop which I purchased back in 2011 with OSX Lion.
I recently updated to OSX Mavericks and have some issues which I am trying to resolve.
I have been working through troubleshooting with the Apple Support team as it is still covered by the extended warranty that I purchased with the system. Unfortunately it appears that we have come to the end of their technical support capabilities and I have no resolution.   Here is a quick breakdown of the situation:
While doing some gaming in a Bootcamp copy of Windows 7 the computer froze and displayed a green screen with vertical lines and was unresponsive.
Rebooted the machine into OSX Mavericks (upgraded about a month ago from Lion) and after the Apple symbol and loading wheel, when the machine went to display my desktop it froze with a completely white screen.
Tried to reboot back into Windows 7 and when it went to display the desktop it went to a grey screen with vertical lines.
Called the Apple Support line who advised me how to log into Safe Mode.   This worked ok and then I rebooted into OSX properly and my desktop displayed albeit running very slow.
Backed up my data and then while doing some web browsing the computer locked up and went to a blank screen.
Called the Apple Support line who took me into Recovery Mode and got me to Verify the Disk and Verify Disk Permissions. Also advised me to run Apple Hardware Test.
Ran Apple Hardware Test and it said that there are "no problems"
Booted back into OSX which worked ok but still very slow.
During a data transfer the computer locked up with a black screen and the rainbow spinning wheel and was unresponsive.
After a few attempts I was able to log back in and complete my backup of crucial files.
Yesterday I went to boot the computer and it again gets to point after the Apple symbol and loading wheel where it would display my desktop and goes to blank screen. Apple Support advised that the next step for testing purposes is to format the HDD and reinstall OSX.
No matter whether I am trying to boot into OSX, Safe Mode, Recovery Partition or Internet Recovery (I have tried all numerous times) whenever it gets to a point where the GUI would be displayed the machine locks up and I get a blank white screen. I logged into Single-User Mode and ran a file system check which came up ok and I have run AHT again which came up ok as well, however considering that it doesn't matter where I boot to the same error occurs I believe that the issue is probably hardware related rather than software. I have also followed the instructions to clear the PVRAM
I have booted to OSX using Verbose mode and noticed that there are a number of SMC errors and other messages indicating that there may be some software issues, so I am trying to troubleshoot those before I take the machine to the Authorised Apple Repair Centre
I have created an OSX Mavericks Boot USB but that comes up with a white screen as well if I boot to it.
I'm not sure if it will help, but I can select my recovery partition (OSX Base System) during boot and load into single user mode there.   I'm curious whether (and how) to run diskutils from there to verify disk and permissions for my primary partition (lets call it "Lion"). Then erase the disk and reinstall OSX from my boot USB.

You have to start the miniSAP instance before you can log in to it.
On your desk top there should be an icon 'start SAP WA1' start that, and leave the DOS window running until you are finished.
If you get messages in the DOS window saying processes died check that MS loopback is running.
MattG.

Need to reinstall OSX - What I need to export to keep my iPhone registered?

Hi all,
I have to reinstall my macbook pro with OS X (bad install of the latest patch 10.5.4...). I looking for any info to correctly move my iTunes Library on the reinstalled OS.
I am wondering if I need something special as I have registered my iPhone with that iTunes ?
Cheers,
Ben.

but to do so I need to reinstall Itunes, but before that I can do that, I need to change my path to my Itunes which I can't find anywhere.
What's the precise text of that error message, please? (There's a few different ones I can think of that you might be getting.)

I need to reinstall osx on my mac but with different apple id ?

hey,
i need to resinstall osx on my macbook but with a different apple id than the one which i used to install mountain lion is there any way i can do it ?

Welcome to Apple Support Communities
Unless you purchased OS X Mountain Lion with that Apple ID, you can't. You have to use the Apple ID used to purchase OS X Mountain Lion, or you won't be able to install Mac OS X

Chkrootkit - Possible LKM Trojan infection

Sorry to be a bother but I have a quick question. I installed Blackbuntu in Virtualbox to play with and happened to notice an unusual connection to a remote server from the VM. After shutting it down I had a usual bout of paranoia, so I ran chkrootkit... it came back with a result saying I had several hidden processes and a potential LKM Trojan along with the usual
The tty of the following user process(es) were not found
in /var/run/utmp !
! RUID PID TTY CMD
! jon 9854 tty3 /usr/bin/X -nolisten tcp :0 -auth /tmp/serverauth.ymiB45cvJk
result. I restarted X and have run the program repeatedly. I have not recived that warning again. An NMap gives the usual results and rkhunter comes back fine aside from the common Arch false-postives.
Based on some Googling it seems likely that the warning was caused by a short-lived process running then and there as it where. Has anyone experienced this? Should I be worried or is it just a false alarm?
(Note: I do not run SSH, Apache or anything of that ilk.)
Thanks,
Jon
Edit:
Another site recommended running chkrootkit ps lkm which gave me an infected result then a clean one immediately after.
jon@Set ~]$ sudo chkrootkit ps lkm
ROOTDIR is `/'
Checking `ps'... not infected
Checking `lkm'... You have 4 process hidden for readdir command
You have 4 process hidden for ps command
chkproc: Warning: Possible LKM Trojan installed
chkdirs: nothing detected
[jon@Set ~]$ sudo chkrootkit ps lkm
ROOTDIR is `/'
Checking `ps'... not infected
Checking `lkm'... chkproc: nothing detected
chkdirs: nothing detected
Last edited by jon.wulf (2011-03-16 01:10:48)

This is because you're running BlackBuntu I would assume that's the problem considering BlackBuntu has trojans and such on it.

Need to reinstall OSX - Saving actual project is it enough ?

Hi all,
I have to reinstall my OSX. I would like to know if saving my actual projects files on a external drive is enough ? Theses projects are made with photos from iPhoto library. Does the project file includes all needed files to build the video ?
Cheers,
Ben.

Reinstalling the operating system shouldn't affect your Home folder within the /Users directory, and so it shouldn't affect your Movies or Pictures folders, either.
Your movie projects should be completely unaffected. Mine are never affected by an OS upgrade.
..HOWEVER; it's prudent to finish editing a movie before applying an upgrade to iMovie, QuickTime or the underlying OS, just in case an alteration to any of these may change the way that iMovie - or the Mac - handles your video project.
So wait till you've finished doing all the editing on your current project, then upgrade. The finished project should be unaffected.

Need to reinstall OSX, but original discs are 3 years old

I have a Powerbook 1.33GHz PowerPC G4 and it's running OS X 10.4.8, but I need to clean it up and pass it on to my daughter. I just got a MacBook intel laptop
It's been so long since I did an install, I can't remember if I use the original discs I got with the Powerbook and then update all the way to 10.4.8 or what?
That seems like a long way around it - did I buy update Panther discs at some point and should I use those? I think I did - can't look right now cuz I'm at the office and not home -
I want to delete me as the user and make it her and just reinstall the system, so someone help me remember what to do!!! I don't want to lose any settings or applications, though - but I do want to wipe out some prefs/library junk for apps that I've taken off.
What's the best way to go?
17" Powerbook Mac OS X (10.4.6)

You can create a new user account for your daughter and make that account an admin account. Set up that account for the automatic login, then log into the new account. Now delete your account. Open the Sharing preference and change the Computer name to one of her choosing. When she logs into the account she can then change the password you created for her to one of her choosing.
If you need to preserve certain application support you can back that up before deleting your account, then later restore the information into her account. The following details where most of this is located:
<font "size=+1">Folders You Can Move to Your new Mac
From the Home folder copy the contents of Documents, Movies, Music, Pictures, and Sites.
In your /Home/Library/ folder:
/Home/Library/Application Support/AddressBook (copy the whole folder)
/Home/Library/Application Support/iCal (copy the whole folder)
Also in /Home/Library/Application Support (copy whatever else you need including folders for any third-party applications)
/Home/Library/Keychains (copy the whole folder)
/Home/Library/Mail (copy the whole folder)
/Home/Library/Preferences/com.apple.mail.plist (* This is a very important file which contains all email account settings and general mail preferences.)
/Home/Library/Preferences/ copy any preferences needed for third-party applications
/Home /Library/iTunes (copy the whole folder)
/Home /Library/Safari (copy the whole folder)
If you want cookies:
/Home/Library/Cookies/Cookies.plist
/Home/Library/Application Support/WebFoundation/HTTPCookies.plist
For Entourage users:
Entourage is in /Home/Documents/Microsoft User Data
Also in /Home/Library/Preferences/Microsoft
Credit goes to another forum user for this information.
Why reward points?(Quoted from Discussions Terms of Use.)
The reward system helps to increase community participation. When a community member gives you (or another member) a reward for providing helpful advice or a solution to their question, your accumulated points will increase your status level within the community.
Members may reward you with 5 points if they deem that your reply is helpful and 10 points if you post a solution to their issue. Likewise, when you mark a reply as Helpful or Solved in your own created topic, you will be awarding the respondent with the same point values.

Possible virus/trojan in S drive?

Just got my T400 for 2 weeks and happened to install FilSecLab antivirus/trojan to scan computer. Find the following trojans in S:
Trojan.Agent.lf.br    Trojan    S:\recovery\iub\iuwork\iuwork\wreboot.exe
Trojan.Agent.lf.br    Trojan    S:\recovery\iub\iuwork\iuwork\winver.exe
Trojan.Agent.lf.br    Trojan    S:\recovery\iub\iuwork\iuwork\restore.exe
Trojan.Agent.lf.br    Trojan    S:\recovery\iub\iuwork\iuwork\admnread.exe
Trojan.Agent.lf.br    Trojan    S:\recovery\iub\iuwork\iuwork\2khwcls.exe
Heuri.Suspicious.ERNM    Heuristic Scan    S:\bootmgr>>emb-0.exe
does these files contains original on S (false positive) or my computer got true infection?
Note: OS is windows vista business 32. S is default drive, I believe, used for recovery/rescue purpose.
Thanks very much.
Message Edited by jzhu on 10-11-2008 08:45 PM

As you have found, that process is part of the system and when I checked my Activity Monitor, the data were identical to what you show in that screen shot (useful, by the way). I think you will find that has been there before, but it is one of the processes we don't really notice.
As for viruses: no. Nothing. Not yet. And we have been saying that for a few years now. A couple of trojans if you visit naughty sites or download some illicit software. So no real worry, there, jamesliu.
The "you require admin priviligese. . ." may be something else. You could try a repair of the Keychain (in Keychain Access) and a restart.

Aymenios virus trojan infection how to do ?

Hello,
I have my mac mini (mac os 10.6.8) infected by a trojan (aymenios tunisian hacker) which appears in safari.
What can I do to clean my computer ?
Thank you for your help.

Quit Safari (by force if necessary.) Relaunch it by holding down the shift key and clicking its icon in the Dock. That will stop the page from reloading automatically. Select Safari ▹ Preferences ▹ Privacy ▹ Remove all website data to get rid of any cookies or other data left by the server. Open your Downloads folder and delete anything you don't recognize.

Reinstalling OSX affects SSD?

I recently got a brand new 2012 MacBook Air and have needed to reinstall OSX 3 times due to my experimentation with boot camp , accidentally running out if batteries while installing something , and some other issues but nothing related to the hardware or anyone's fault but my own.
Anyway I've been using Internet recovery to re install ML and I know SSD's have a finite lifespan. Have I negativity affected my SSD by multiple is reinstalls?

Yeah yeah, all the many electrons needing to run in and out again, that'll leave deep, deep traces in the silicon carpets...
The OS recently installed from scratch, a few files accidentally dropped into the wrong folder and needed to be moved again, all those many typos I need to correct while I'm writing this... due to my carelessness, the life expectancy of my SSD did now probably drop in free fall from 51 years to 50.999998 years, not to mention the video I could have lived without watching. Ouch. I shall correct my alarm in Calendars for that "SSD about to die" date, but only this time, otherwise too much damage in my chips.
Good that I have my backups... on good old HDDs, ha. Okay, it'll take me unnecessary 1.2 minutes longer should I need to restore from them, just because I'm too greedy, but I'm saving a few hours each year thanks to the shorter wake-up time from sleep with SSD inside my laptop, hehe.
Mathematically, I'll need about 17 replacement HDDs to survive one SSD, but that way I've got something to do while avoiding using my SSD. Actually, I best use my friend's computer to backup the backups...
A truly happy MBA user, who hasn't had a single sleepless night caused by the SSD. Seriously!

Help/Question with Reinstall OSX 10.2.1 on iBook G4

First off...I just want to say that if someone can take the time to assist me I would appreciate it more than you know! Now...on to my issue:
History:
I have a iBook G4 running, I think on either 10.3 or 10.4 (I can't tell you now because it won't start up). I have the discs for 10.2.1 that came with the computer. I purchased my iBook from a roommate of mine a few years back and before selling it to me he loading 10.3 or 10.4, and I don't have those discs.
I was having an issue at start up...It would load to the point where I could see the picture I had on my desktop, and the dock would come up. Then it would stop and none of the icons on my desktop would show and neither would the menu bar at the top of the screen. When I clicked on an application in the dock, it would not load...the computer was trying (you could hear it) but it never would load it.
So, I did some online searching (using my wife's MacBook...yes, I wish we had two) and used the disk utility to verify my disc. It said the "keys were out of order". So, I clicked repair, and it said that it repaired "Book B" (at least I think that's what it said).
So, I restarted my computer, and now it comes to the gray screen with the clear spinning thing as though it is about to load. It sits there a while, and then just shuts off. So, I tried to reset the PRAM and that didn't do anything either.
Problem I now have:
I am now to the point that I am thinking I need to reinstall OSX...as said, I have the 10.2.1 discs that came with it upon purchase, but I know my roommate upgraded me to a newer version. I have lots of documents on here that I don't want to lose (and programs I don't have the discs for) and I plan to choose the "Archive and Install" and "Preserve User and Network Settings" Options.
Questions:
Is this what I should do?
and if so...
Will installing an older version than what I currently have any negative impact on the install or in me keeping my current documents and programs?

DiskWarrior is the only application that "can" fix this problem, but there is no 100% guarantee. You need to get the DW CD & boot from the CD to fix the problem.
Look at these links about DW.
http://supportdb.alsoft.com:591/FMPro?-db=alsoftsupport&-lay=main&-max=15&-forma t=AlsoftSupport-qa.html&-script=counter&-token=182&-Skip=101&-find
http://www.jimarnold.org/blog/2008/10/keys-out-of-order-on-macbook-diskwarrior-t o-the-rescue/
I assume you don't have a backup of your hard drive, or you could just erase the hard drive & copy the backup files to it. Your next investment should be to buy & use an external hard drive for backup. You can get one for about the price + of DW.
 Cheers, Tom

Need to reinstall osx due to possible virus/trojan infection

Similar Messages

Maybe you are looking for