Am i infected with a firmware attack ? SOS

Hello guys , i think i’m infected with a firmware attack , i couldn’t get rid of those folders after reinstall/erasing the disk multiple times , and i think the attacker had a physical access to my mac , i really need a solution.

thanks

Posted on Dec 22, 2020 6:10 PM

Similar questions

M1 MacBook hacked using dev tools and linux, windows My MacBook has been running "VANILLA" OS since August. I D\L dev tools and figured out (after 8 resets and 4 DFU's) that Linux, python, perl, js, ruby, cocoa, and many other scripts are running most of the OS running kext plugins. it is persistent and using many languages to encode MOST of the virus. There is an Active Directory and LDAPv3 servers under Directory Utility, which have me hacked with maybe MDM. All Root signing is from them. SMB servers, btw. I've seen files redirecting Apple updates to different servers, AWS, Cloudflare, as well as others. I also have a new iPhone 13 that is infiltrated and apparently 2 Samsung smart tv's, neither will update. Any help would be greatly appreciated.
1878 4
How can I confirm there is no malware on my MacBook? How can I confirm there is no additional malware on my computer? I have installed the latest version of macOS Big Sur. This version found 3 files that were suspicious and I moved them to trash? Is there anything else I need to do?? I was hacked yesterday by a malicious company that posed themselves as "Norton" Support. [Re-Titled by Moderator]
2327 12
Windows malware on Macbook Pro? Is it possible that my macbook pro is infected with windows malware? When I upload suspicious files to virustotal.com, they often link to windows malware (svchost.exe, rundll32 malware etc). I have wiped the harddisk multiple times, but strange files en folder keep comming back to my mac...also legitimate files/ applications are being maliciously modified and acces rights are modified (i don’t use an admin account for daily use) I also saw that the efi partition of my mac is in MSDOS format, is this normal? I never used windows / bootcamp on my mac.
1196 5

1 reply

babowa

Level 9

78,562 points

Dec 24, 2020 2:34 PM in response to FirmwareSOS

What is the filepath on this? Is this in the system library or the user library?

And, important: which OS version are you running?

Without the necessary info, a cursory check on my iMac shows quite a few of the same folders in the user library. They are just a normal part of the OS which also includes firmware updates to your computer. I would certainly suggest NOT to try to delete them or you will wind up with a corrupted OS and a mess.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Am i infected with a firmware attack ? SOS

Welcome to Apple Support Community

A forum where Apple customers help each other with their products. Get started with your Apple Account.

Learn more Sign up