Malware
I'm getting a message that says:
"RunningUpdaterd" will damage your computer.
It wont go away, how do I fix this?
iMac 27″, macOS 10.15
I'm getting a message that says:
"RunningUpdaterd" will damage your computer.
It wont go away, how do I fix this?
iMac 27″, macOS 10.15
You are getting that message from Apple's built-in AV scanner, XProtect. If the message is repeatedly occurring then either you or some other component of the malware is continually redownloading and relaunching it, causing XProtect to block it and throw the dialog.
Look for a persistence agent in any one of:
~/Library/LaunchAgents
/Library/LaunchAgents
/Library/LaunchDaemons
and check cron jobs both for yourself and root user with
crontab -l
sudo crontab -l; sudo -k
The malware is likely Adload, which can get quite deep into your system.
You are getting that message from Apple's built-in AV scanner, XProtect. If the message is repeatedly occurring then either you or some other component of the malware is continually redownloading and relaunching it, causing XProtect to block it and throw the dialog.
Look for a persistence agent in any one of:
~/Library/LaunchAgents
/Library/LaunchAgents
/Library/LaunchDaemons
and check cron jobs both for yourself and root user with
crontab -l
sudo crontab -l; sudo -k
The malware is likely Adload, which can get quite deep into your system.
I would recommend getting Malwarebytes for Mac (free version) and run a scan: https://www.malwarebytes.com/mac/.
Cheers,
Jack
Getting Malwarebytes for Mac (free version) and running a scan: https://www.malwarebytes.com/mac/, will usually find the rest.
Cheers,
Jack
No, its just clear that clam hasn’t detected all the components. If you follow the link in my previous answer you’ll see there are various other places to look, including /var/root, to weed out this pest.
You can download Clamwin for OSX and use for free for like 30 days or something. Grab it and run a thorough scan.
Do you have “VidPlayer” installed?
Thanks for posting back with the results. Malwarebytes for the win! I use it for Windows systems but ClamXAV has always been my go-to for Mac malware scans.
~( ):>
Yup i am having the same issue. No vidplayer, in fact i haven't switched on my imac for almost 2 days, haven't installed any software in the last month or so (at least). any help from apple?
Imac 2017, macOS 10.17.5 with all software up to date (except upgrading to Big Sur, which i will not).
Also i have closed all my apps but still the pop up comes up.
hi you are right, it is Adload. i installed a trial of ClamXAV and after scanning it did show up a few Adload. but after i deleted them from ClamXAV, restarted the iMac, the virus message came up again...
am i doing something wrong here?
Not that I am aware of.
When I search for Vidplayer nothing comes up
Did you mean ClamXAV - Clamwin is for Windows I believe.
Correct. That’s the OS X version.
Deleted
Hi Jack,
you were right. Malwarebytes worked!
Thanks a mil!
Glad it worked! That's why almost all of us here on Apple Support Communities only recommend Malwarebytes.
Cheers,
Jack
Malware