I had Kaspersky Anti-Virus on my MacBook Pro for a while and removed it. But I still see in my activity. It uses a lot CPU and keeps my fans running. How can I remove it entirely? thanks!

You might want to try AppRemover

Again, as per the preceding discussion, that's not reliable. Kaspersky provides an uninstaller, which will remove everything. Use that.

Softwater,

Last night I downloaded Kaspersky Anti-Virus on my IMAC. (10.6.8) Recently, a virus was found by Avira

called HTML/Framer.pyvcdz. I believe I picked it up via Email. However, when I tracked it back, I found an email that is dated 2013 sept from a company called Investing. I do not have the full name because I deleted it.

What is odd and this is why I tried to find another program, the virius keeps being found by Avira! I have deleted all the locations, and when I try to find the file with the viruis, I can not locate it on my computer.

Is this a false positive?

However, back to this download, which turned out to be a download from ****! From their website, there is a trial verison of the program for free. After the download, I could not load the program because there was no key available. Then it just gets worse. My computer would not respond. I could not get on the internet to download a program to uninstall their anti viruis progarm! I could not click on any programs or files. My mouse failed. My keyboard failed. How can this company get away with this?

For me, I have a IPAD for a backup. good thing too. I was able to go online and find your instructions on how to remove Kaspersky, and I did, and upon reboot, my computer was fine! I was not sure what to do if your instructions did not work. An OS reinstall? A new computer?

Thanks again.

Well, that is special, that is if you can get online after downloading their program. For me, I could not not use my computer. Please read my post. I used my Ipad to get online and followed this instructions and just like that, problem solved.

Glad to have helped.

Regarding the "virus" that kept popping up, I'd be inclined to forget about it. These kinds of software tend to "find" things to scare people into buying them. It may be in a quarantined folder that an ordinary search won't find if the AV software moved it. It was probably originally in Mail Downloads. You could try using EasyFind (See my post on the previous page) and be sure to include hidden and invisible files if you really want to find it.

As to the wider use of AV s/w, I've never known anyone have any problems with a Mac that would have been prevented by using such software, but the number of people who have been adversely affected by running it just keeps on growing.

You will hear the old argument that such software stops you spreading Windows viruses to others through email. I'm not persuaded that this is a reality, and nor am I sure why mac users should be burning up their own RAM, CPU time and disk life running AV software to protect Microsoft users who aren't protecting themselves.

Interesting. A good marketing tactic. I downloaded ClamXAV as suggested. Scan did not find any issues. I launched Avira and once again, a security issue. Is the so called infected file being reinstalled after a reboot? How do I remove the file so it will not return? I tried following some step by step advice, but not luck. I would like to remove this issue because I do not want ignore a real threat, even though there appears not to be anything to worry about.

Locations:

Library/Mail/Mailboxes/Deleted Messages (Gmail).mbox/Messages/575591.emlx

/Users/johnmarceaux/Library/Mail/IMAP-aerodarts@imap.gmail.com/[Gmail]/Trash.imapmbox/Messages/574666.emlx

It seems that Mail is re-downloading that from your Gmail account.

First quit Mail.

Next, open your web browser and go to Gmail site and log in.

Click on 'Deleted Messages' in the Gmail interface sidebar, select all and hit the 'Trash' can. You may have several pages that you need to do this for.

Once you moved them all to the Bin, then click on the Bin in the sidebar and choose 'Empty Bin now'.

Search for the items at the locations you listed above on your computer and delete them.

After that's all done, restart Mail, and choose 'Mailbox > Rebuild' in the menu bar at the top.

In addition to what softwater has told you, check the All Mail folder of your G-mail account as even deleted message usually remain there and may show back up on your Mac.

And all the HTML/Framer. malware discussed on the Avira web site are Windows only.

Once thanks for taking the time to share your expertise. I am working your suggestions for the gmail account. I have a lot of email stored on google's email server and I am going to clean it up.

take care,

Aerodarts

Hey,

Thanks for your input. I am working on it.

aero

I have tried the official Kaspersky uninstaller and ran it twice. I then meticulously went through my Library folder as softwater suggested. Restarted. But still, when trying to run the Avast installer, I am being told that Kaspersky is present on my system and Avast will not install.

Obviously something from Kaspersky is being left behind, but I can't find it. It really is extremely annoying when Kaspersky's own official uninstaller does not completely remove their product so that I can install another vendor's product.

Or is that by design, a la MacKeeper and their ilk?

Sterno wrote:

when trying to run the Avast installer, I am being told that Kaspersky is present on my system and Avast will not install.

If you have not rebooted since removing Kaspersky, then you need to do that before running the Avast! installer.

You should also know that although Avast! is top rated for detecting OS X malware, it is also famous for identifying key components of applications and the System as False Positives. If you choose to use Avast!, I strongly advise not allowing it to quarantine or delete anything automatically!

As I mentioned in my post, I did restart (reboot). In fact, I have run the Kaspersky uninstaller more than once and restarted more than once, but something in Kaspersky persists.

Also, thanks for the tip regarding Avast. I already have it running on two other machines, and fortunately none of those had a previous installation of Kaspersky. Haven't seen it falsely idenify any OS components as a warning or threat, but of course I would examine any recommendation for quarantine before allowing the application to do that.

Hi softwater and anyone else who is interested,

I encountered an odd occurance with my Facebook Homepage. I logged on to FB using Safari and noticed I had a message from a friend. I clicked on the message icon and nothing happened. I tried several time to open the link and nothing!

What to do? I tried Firefox and I was able to view my message. Well, I was wondering why Safari would not work and I discovered it was an extension problem! I went to preferences-extensions and behold I found Kaspersky Anti- Viruis had installed an extension. That was a first for me. I deleted it and sure enough when I went back to FB, I was able to open the link.

Do you know why Kaspersky was blocking the link on Facebook notifications and my Inbox ? Perhaps you will want to add check extensions on your checklist to eliminate kaspersky.

Did you receive the notification from Sterno?

Have you checked: Safari- preferences-extensions? I found Kaspersky Anti- Viruis had installed an extension.

I wrote softwater about what happened if you want the full story.

Good luck. I downloaded kaspersky anti-Virus and soon discovered I was unable to use my computer for anything! I was thinking, oh boy, buy a new computer or bring my IMAC to the shop....how stupid of me to download an application I do not need! I was getting a virus alert from another program I was using that was a false postive as they say.

I was able to fix my computer following softwater checklist and booting to safe mode. What a relief. I am now using my rule of no downloading. You would think Kaspersky would remove that download link I used to crash my IMAC- OS-X 10.6.8.

Aerodarts

Aerodarts wrote:

Do you know why Kaspersky was blocking the link on Facebook notifications and my Inbox ?

One of the protections provided by Kaspersky's Internet Security package is for Parental Control, so I would guess that if you still wanted to use it you would need to adjust those settings.

I've not tried any of their software since the posted a Fastback Removal Tool that bricked dozens if not hundreds of Mac's before they could get a 1.1 version built and posted. They designed the original tool using an outdated sample and skipped over a very important step.