Question about the aftermath of antivirus use and trojan virus

Hello everyone,


sorry for a lot of text, I'm no tech expert, so I'm not sure if I'm explaining it well.


I didn't know that much about Mac before and I listened to all the fear mongering about viruses and downloaded antivirus software. Three different ones actually, as I was trying what is "the best". Not that I have any idea how to tell what would be the best. I have recently learned that it is not needed for Mac and it might even be dangerous to use this type of software.


I've already deleted them all. I used Bitdefender and Avira and Norton.


I have a few questions now though, please, if someone could offer me some advice:


1) Has my MacBook been permanently damaged in anyway during the time I used these apps? Is it now more vulnerable to any malware?


I read around the forums here that it can remove some important data from the system... Is this irreplaceable and permanent even after the antivirus is removed? At the moment I'm on Sonoma 14.4.1. When a new update is available, can any missing system files be replaced again through that process? I can't go back to an old backup in Time Machine as I used some kind of antivirus since the beginning.


I don't have any issues at the moment, everything seems to be running smoothly, I'm just worried.


2) Can trojans find its way into Mac and cause damage? Can it cause data breach?


The Bitdefender app recently found 7 files that it said were trojan viruses. It removed these files. Then the next day Chrome informed that there was a data breach and my passwords got stolen or something while I was logging in to a website. Could this be related?


Was the trojan message just a false notice so that it would look like the app is doing something or did it actually really find it? Is it possible for trojan to find its way into Mac? Was the app removing it enough or will it now cause any issues?


I have no idea how trojans could end up there as apart from the antivirus software I don't usually download any third-party apps, except apps like AdBlocker, nor do I visit any "dangerous" sites such as sites with pirated content.


Hope I'm making at least a bit of sense here, lol. I'm just freaking out a bit after the trojan scare and the data breach scare and after learning that antivirus might damage the Mac.


Thank you so much for any advice!



MacBook Air 13″, macOS 10.13

Posted on May 2, 2024 11:37 AM

Reply
Question marked as Best reply

Posted on May 2, 2024 12:09 PM

I read around the forums here that it can remove some important data from the system... Is this irreplaceable and permanent even after the antivirus is removed?


That is correct. Permanently damaged... no. For example you can always completely erase the affected Mac and reconfigure it from the ground up. That is an extreme solution, but it has been absolutely required for certain "anti-virus" products I am familiar with. The good news is that I do not believe Avira, Bitdefender or Norton are among them — bad though they may be.


Vulnerable to malware... possibly. Actively using "anti-virus" products will definitely increase a Mac's threat profile. Not using them is preferable, uninstalling them (in the rare occasion their uninstallation instructions actually work) even more so.


At the moment I'm on Sonoma 14.4.1. When a new update is available, can any missing system files be replaced again through that process?


... probably, but it gets complicated. More about that later.


2) Can trojans find its way into Mac and cause damage? Can it cause data breach?


Not really. First of all a Trojan isn't a virus (there are no macOS viruses) but it's something that you have to deliberately install — like "anti-virus" junk. Anything that asks for your login credentials needs to be taken seriously, because macOS won't ask for them otherwise. There are plenty of programs that are poorly written, others that are deliberately malicious, and some that are just plain garbage that serve no beneficial purpose.


Can using any one of those hypothetical programs directly result in a "data breach". The answer depends on how you choose to define those terms. Like any information-containing appliance, a Mac contains lots of data, and much of it is likely to be personal. If data exists on a Mac it can be harvested, uploaded, correlated, stored, distributed and sold, depending on how you decide to use your Mac and what you decide to install on it.


Is that a "breach"? You decide. Plenty of people willfully install programs on their Macs specifically designed for the purpose of collecting the information on them for any conceivable purpose — though they all have the same ultimate goal: 💰. "Anti-virus" products are certainly among them.


I don't have any issues at the moment, everything seems to be running smoothly, I'm just worried.

Then don't worry. Read Effective defenses against malware and other threats - Apple Community. Hopefully it will ease your mind.



For advanced study consider using EtreCheck: How to use the Add Text Feature When Posting Large Amounts of Text, i.e. an Etrecheck Report - Apple Community contains a brief description of what it is and how to use it. At your option you can post its report in a reply to this Discussion. If any "anti-virus" remnants are present on that Mac EtreCheck will readily identify them. They may be inert, or they may still be affecting that Mac to an unknown degree.

3 replies
Question marked as Best reply

May 2, 2024 12:09 PM in response to Chiboabs

I read around the forums here that it can remove some important data from the system... Is this irreplaceable and permanent even after the antivirus is removed?


That is correct. Permanently damaged... no. For example you can always completely erase the affected Mac and reconfigure it from the ground up. That is an extreme solution, but it has been absolutely required for certain "anti-virus" products I am familiar with. The good news is that I do not believe Avira, Bitdefender or Norton are among them — bad though they may be.


Vulnerable to malware... possibly. Actively using "anti-virus" products will definitely increase a Mac's threat profile. Not using them is preferable, uninstalling them (in the rare occasion their uninstallation instructions actually work) even more so.


At the moment I'm on Sonoma 14.4.1. When a new update is available, can any missing system files be replaced again through that process?


... probably, but it gets complicated. More about that later.


2) Can trojans find its way into Mac and cause damage? Can it cause data breach?


Not really. First of all a Trojan isn't a virus (there are no macOS viruses) but it's something that you have to deliberately install — like "anti-virus" junk. Anything that asks for your login credentials needs to be taken seriously, because macOS won't ask for them otherwise. There are plenty of programs that are poorly written, others that are deliberately malicious, and some that are just plain garbage that serve no beneficial purpose.


Can using any one of those hypothetical programs directly result in a "data breach". The answer depends on how you choose to define those terms. Like any information-containing appliance, a Mac contains lots of data, and much of it is likely to be personal. If data exists on a Mac it can be harvested, uploaded, correlated, stored, distributed and sold, depending on how you decide to use your Mac and what you decide to install on it.


Is that a "breach"? You decide. Plenty of people willfully install programs on their Macs specifically designed for the purpose of collecting the information on them for any conceivable purpose — though they all have the same ultimate goal: 💰. "Anti-virus" products are certainly among them.


I don't have any issues at the moment, everything seems to be running smoothly, I'm just worried.

Then don't worry. Read Effective defenses against malware and other threats - Apple Community. Hopefully it will ease your mind.



For advanced study consider using EtreCheck: How to use the Add Text Feature When Posting Large Amounts of Text, i.e. an Etrecheck Report - Apple Community contains a brief description of what it is and how to use it. At your option you can post its report in a reply to this Discussion. If any "anti-virus" remnants are present on that Mac EtreCheck will readily identify them. They may be inert, or they may still be affecting that Mac to an unknown degree.

May 2, 2024 11:43 AM in response to Chiboabs

  1. No.
  2. Yes, theoretically. macOS has a number of security measures in place to help prevent this, but any device is vulnerable to viruses, malware, and spyware. You should practice good internet hygiene to help avoid getting infected: Protect your Mac from malware - Apple Support and Ways to avoid malware and harmful apps on Mac - Apple Support.
  3. Those warnings were probably not related. Antivirus software is also extremely likely to flag things that may appear to be viruses as infected or dangerous when sometimes they are not. False detections are common, and may even be motivated by trying to keep you subscribed to their product.


I wouldn't worry too much about it if you haven't been downloading much beyond antivirus software. If you want to do a quick scan for free, try Malwarebytes: https://malwarebytes.com. It's a really great free option, so you might consider just leaving that installed and running to help ease your nerves. :) Try to avoid downloading things outside of the macOS App Store if you can, which will help keep things secure.

Question about the aftermath of antivirus use and trojan virus

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.