Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

I have a virus on my MacBook, but I couldn't find it anywhere.

I have a virus on my MacBook, but I couldn't find it anywhere. There is no information about when and where this virus was downloaded.

Posted on Nov 18, 2023 6:14 AM

Reply
Question marked as Top-ranking reply

Posted on Nov 18, 2023 8:26 AM

You're right, I'll explain it from the beginning.


There is a file, the name of the file is "ElemntStatefld", so it is clear that it is a fake file. A pop-up appears on my screen every 5-6 seconds and it says ""ElemntStatefld" will damage your computer." The download date is also unknown. It can't be found when I search in Finder.

35 replies

Jul 9, 2024 9:46 PM in response to MrHoffman

I am suddenly getting 2 popup messages: "'Mystery Tapes' will damage your computer. You should move it to the Trash' and another mentioning Skype. Like others in this discussion, when I click Move to Trash the popup goes away and the other one appears. I removed Skype from my applications - I never use it anymore anyway. But the other one (Mystery Tapes) does not show up anywhere on my MacBookPro (using Ventura 13.6.1). Help, please.


I have attached the three files. What are the next steps?

Jul 10, 2024 7:56 AM in response to EmilyGen

EmilyGen wrote:

I am suddenly getting 2 popup messages: "'Mystery Tapes' will damage your computer. You should move it to the Trash' and another mentioning Skype. Like others in this discussion, when I click Move to Trash the popup goes away and the other one appears. I removed Skype from my applications - I never use it anymore anyway. But the other one (Mystery Tapes) does not show up anywhere on my MacBookPro (using Ventura 13.6.1).


The other two directories look valid.


Since Skype is gone, the ecamm app can go, too.


Nov 24, 2023 7:58 AM in response to somaiya272

somaiya272 wrote:

I have the same proplem..


It appears this is some adware that was installed.

Disconnect from the network.

Launch Finder.

In Finder, press Command-Shift-Period enable viewing of hidden files. (You can press it again to shut off viewing.)

In Finder, search for and delete files with the name ryderd found anywhere on your Mac.

That should include finding and deleting at least the following two files:

/Library/LaunchDaemons/com.ryderd.plist
/Library/ryderd/ryderd

Then launch the web browsers you use, and look for and remove any remaining ryderd-related extensions there.

Restart your Mac, and allow it to reconnect to the network, and check again.

I have a virus on my MacBook, but I couldn't find it anywhere.

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.