The folders on my iMac had all their icons changed to look like a blue sack with a red belt around it! Is this a security issue

Last night the folders on my iMac had all their icons changed to look like a blue sack with a red belt around it! I kept the window open for a couple of minutes but they didn't change back. This morning they are all back to normal, but this was so strange. I've never seen or heard of it before.


I'm using a late-2013 27" iMac running OS Catalina 10.15.7. It doesn't update because the mac isn't supported any more, so I wouldn't have the latest security updates. I'm worried it might have been a security breach. Anyone heard of this? Please help!

iMac 27″, macOS 10.15

Posted on Aug 29, 2024 11:20 PM

Reply
15 replies

Aug 30, 2024 5:34 PM in response to tupppi

If you'd like towork on the slowness issue further...


In Disk Utility>View, select Show all Devices, highlight the top left entry.


Run Disk First Aid on all items in the left panel, from top down.


Are you running any VPN, Anti-Virus, or Cleaning apps?


We need to see what all is running, a report from this will not display any personal info...

Using EtreCheck - Apple Community


EtreCheck is a FREE simple little diagnostic tool to display the important details of your system configuration and allow you to copy that information to the Clipboard. It is meant to be used with Apple Support Communities to help people help you with your Mac. It will not display any personal info. Give it Full Disk Access.

https://www.etrecheck.com/


Give etrecheck Full Disk Access before running.


Thanks for Old Toad’s etrecheck instructions…

Slow iMac 2017 - Apple Community


Sep 3, 2024 8:08 PM in response to tupppi

I think it's imperative to check the drive out asap.


If that checks out...


To find out if it's system wide or user specific, try this...


Open System Preferences>Users & Groups, unlock the lock, click on the little plus icon, make a new admin account, log out & into the new account.


Does it work in the new account?

Sep 3, 2024 5:22 AM in response to BDAqua

Thanks for that reply, BDAqua. I've done as you suggested, and the Disk First Aid did seem to fix the immediate slowness problem, but it inevitably recurs so I also did the EtreCheck diagnostic. I'm just slightly offended that it had to mention that my late-2013 iMac is, in Apple's estimation, obsolete  :(


I did install TunnelBear years ago and thought I had removed it but found it again today. Now I’ve moved it to the bin and emptied it but can’t be sure it’s all gone. They don’t provide an uninstaller.


As for antivirus software, I installed Malwarebytes years ago and it’s the same story: thought I had deleted it but can’t be sure.


I have these questions…


1 There were unsigned files and launch daemons from known applications, none of which sound dubious but I deleted them as I don’t use them: MicroSoft, Adobe and TunnelBear .plist files. Then I ran a second EtreCheck, which is the one attached as extra text.


2 I think I read somewhere that Java is verboten and to delete anything to do with it. I saw a file called com.oracle.java.Helper-Tool.plist – should I delete that?


3 I deleted a font app using their uninstaller, but there are 8 others listed as unsigned apps, all in Library > Scripts > ColorSync. Do they need to be deleted? ColorSync is part of the OS, isn’t it?


4 I turned off File Sharing and Remote Login.


5 As for the “Minor issues” listed – Heavy RAM usage, Apps with heavy CPU usage, Heavy I/O usage, Kernel extensions present – I have no idea what these even mean, so I do need your assistance here, please!


6 I haven’t used Time Machine for maybe 5 years or so, so I doubt it would be involved in this problem.

Sep 3, 2024 7:53 PM in response to BDAqua

Thanks again. Now I'm worried! Will try Drive DX although I'm wary of installing extras at this stage; only because you recommend it.


Another thing: although I thought I had turned off Remote Login, I found later that it's still on. It hangs.


I saw a post by alb- in these forums who had the opposite problem: a hang trying to turn RL on. This user could turn RL on after reinstalling a basic Catalina without updates but it hangs with 10.15.7, my OS. Someone suggested starting in safe mode, but that didn't make any difference for me.


I've read that this can be dangerous or invite trouble. Can you suggest a solution for this?


Sep 3, 2024 11:03 PM in response to g_wolfman

Thanks for your input, g_wolfman, much appreciated.


I've done a few things today and gotten some bizarre crashes and failures. But I had Terminal open to try a few things I'd read, and eventually decided to follow Terminal's advice to change the default shell from bash, I think it was, to zsh. This means nothing to me ;) but it seems it was introduced with Catalina which I'm running. I also deleted a lot of Launch Agents and all the Skype files I could find, but I doubt that would make a huge difference. Anyway, I did a new EtreCheck and the Swap Used has gone from 1.28 GB to zero.


Would the change to Terminal explain this?



Sep 3, 2024 11:21 PM in response to BDAqua

I had a lot of problems trying to log in with the new account; thought it would totally crash and never revive. It started working hard with a whirring noise and heat coming from the disc area, which it has done occasionally in the past.


Then I changed the Terminal default shell from bash, I think it was, to zsh and deleted some files I didn't think I needed, and did a new EtreCheck; see my reply to g_wolfman, above. Now I've also run DriveDx which reported 0 issued found, overall good, overall performance good and SSD lifetime left indicator average. I'm so relieved! Report is attached. I've changed the name of my computer to xxx and hope there isn't any other personal info in there.


Please let me know if it looks alright to you, and what you recommend now, if anything. Thanks in advance for your precious time!


Sep 4, 2024 4:47 AM in response to tupppi

So, I am no expert on drives. It looks like your iMac has a Fusion drive (a SSD and a HDD logically merged to appear as one drive). The SSD is approaching end of life (36% left) but no major issues and the HDD seems fine...but I have to wonder about that whirring noise and heat from the drive area that suggests the HDD is working overtime. Could be "normal" given how the data on your system is allocated...or not.


My suggestion would be a new SSD big enough to replace everything, clone your system to it, replace the drive (or have someone do it) - and probably blow dust out of the guts of the iMac while it's open for surgery.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

The folders on my iMac had all their icons changed to look like a blue sack with a red belt around it! Is this a security issue

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.