I have a virus on my MacBook, but I couldn't find it anywhere.

I have a virus on my MacBook, but I couldn't find it anywhere. There is no information about when and where this virus was downloaded.

Posted on Nov 18, 2023 6:14 AM

Reply
Question marked as Top-ranking reply

Posted on Nov 18, 2023 11:55 AM

You will not find a file bearing that name anywhere on your Mac.


EtreCheck is likely to identify the cause. To learn how to post its report in a reply to this Discussion, please read How to use the Add Text Feature When Posting Large Amounts of Text, i.e. an Etrecheck Report - Apple Community. Actually removing the cause will require more assistance, so post that report and wait for an answer.


For some potentially helpful background information the following Discussion may be of interest to you:


A670DE6A-4EA5-4A65-B0E1-2077C9927B5E” will damage your computer. You should move it to the Trash. - Apple Community

35 replies
Question marked as Top-ranking reply

Nov 18, 2023 11:55 AM in response to kyld

You will not find a file bearing that name anywhere on your Mac.


EtreCheck is likely to identify the cause. To learn how to post its report in a reply to this Discussion, please read How to use the Add Text Feature When Posting Large Amounts of Text, i.e. an Etrecheck Report - Apple Community. Actually removing the cause will require more assistance, so post that report and wait for an answer.


For some potentially helpful background information the following Discussion may be of interest to you:


A670DE6A-4EA5-4A65-B0E1-2077C9927B5E” will damage your computer. You should move it to the Trash. - Apple Community

Dec 22, 2023 11:45 PM in response to ruquanda

ruquanda wrote:

have a virus on my MacBook, but I couldn't find it anywhere.
It suggests I contact Apple Support. No response


A message popped up and told you that you had a "virus" and to contact "Apple Support"?


You may have been lucky that you got "no response" when you called the alleged support number. Maybe the scammers were out on lunch break, or you called them "after hours" in their part of the world.


Stop unwanted Notifications - Apple Community

Recognize and avoid phishing messages, phony support calls, and other scams - Apple Support

Nov 24, 2023 7:58 AM in response to somaiya272

somaiya272 wrote:

I have the same proplem..


It appears this is some adware that was installed.

Disconnect from the network.

Launch Finder.

In Finder, press Command-Shift-Period enable viewing of hidden files. (You can press it again to shut off viewing.)

In Finder, search for and delete files with the name ryderd found anywhere on your Mac.

That should include finding and deleting at least the following two files:

/Library/LaunchDaemons/com.ryderd.plist
/Library/ryderd/ryderd

Then launch the web browsers you use, and look for and remove any remaining ryderd-related extensions there.

Restart your Mac, and allow it to reconnect to the network, and check again.

Nov 18, 2023 9:26 AM in response to kyld

Maybe this isn't a scam, but from Apple's own built-in anti-malware facility (Gatekeeper):

https://malwaretips.com/blogs/will-damage-your-computer-mac/


Gatekeeper will apparently display this dialog either

  • If a file has a signature that matches a signature on Apple's malware list. (In this case, you're almost certain to be dealing with malware)

or

  • If a file is not signed by a trusted developer. That doesn't prove that the file is malware, but it might be a program from a malware developer, or it might be a legitimate program, that, unknown to its developer, has been modified by some malicious third party to infest it with malware.


Safely open apps on your Mac - Apple Support


"Alert that the app will damage your computer or the app is damaged


  • If macOS detects that software has malicious content or its authorization has been revoked for any reason, your Mac notifies you that the app will damage your computer.
  • If macOS detects that software has been modified or damaged, your Mac notifies you that the app can't be opened. The app might be broken or corrupted, or it might have been tampered with.
  • You should move this app to the Trash and, if available, check "Report malware to Apple to protect other users.""


Nov 18, 2023 9:15 AM in response to kyld

So do you actually have a file named "ElemntStatefld" on your computer? Or are you getting pop-up messages, in the upper-right hand corner of the screen saying "ElemntStatefld wlll damage your computer"?


If the latter, those are scam pop-up notifications sent by Web sites. The danger is from clicking on them - or from doing anything that the scammers who sent them are trying to get you to do.


"ElemntStatefld will damage your computer: seems a bit abstract compared to the more usual scam messages like "Your iCloud is being hacked!" or "Your computer is infected with 69 Trojan viruses!", but if the messages show up in this form, it may be a variation on the same scam.


See this User Tip by John Galt to settle their hash:

Stop unwanted Notifications - Apple Community


Nov 19, 2023 1:04 PM in response to kyld

But I think this isn't a scam. ...


If you are unwilling or unable to follow my instructions (quoted below) at least get rid of "Bitdefender". Rule 1 of Macs is don't install junk.


John Galt wrote:

You will not find a file bearing that name anywhere on your Mac.

EtreCheck is likely to identify the cause. To learn how to post its report in a reply to this Discussion, please read How to use the Add Text Feature When Posting Large Amounts of Text, i.e. an Etrecheck Report - Apple Community. Actually removing the cause will require more assistance, so post that report and wait for an answer.

For some potentially helpful background information the following Discussion may be of interest to you:

A670DE6A-4EA5-4A65-B0E1-2077C9927B5E” will damage your computer. You should move it to the Trash. - Apple Community


Following those instructions would have revealed the presence of "Bitdefender" as well as other potential causes.

Nov 18, 2023 8:26 AM in response to John Galt

You're right, I'll explain it from the beginning.


There is a file, the name of the file is "ElemntStatefld", so it is clear that it is a fake file. A pop-up appears on my screen every 5-6 seconds and it says ""ElemntStatefld" will damage your computer." The download date is also unknown. It can't be found when I search in Finder.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

I have a virus on my MacBook, but I couldn't find it anywhere.

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.