Skip navigation

I think I have a virus - hard disk full and administrator rights gone

2405 Views 8 Replies Latest reply: May 6, 2012 2:24 PM by John Galt RSS
KDCS iBook Calculating status...
Currently Being Moderated
May 5, 2012 4:12 PM

I think I have a virus - my hard disk is full allthough I only have about 20G of 60 used. I cant install a virus checker as I have lost my administrator rights (when I check in accounts, I am just a "standard" user. This means I cannot install any software as it will not let me run the installer program - says incorrect username / password

iBook G4, Mac OS X (10.4.11)
  • John Galt Level 7 Level 7 (33,010 points)

    You may have a corrupted disk but you do not have a virus. Boot using your original system installation DVD and run Disk Utility. Repair the disk.

    If you have no Administrator accounts at all, follow this procedure to create a new, temporary Administrator account from which you can fix your normal one.

     

    • Power on or restart your Mac.
    • At the chime or grey screen, hold and S on your keyboard to enter single-user mode.
    • At the prompt, type

     

    fsck -fy

     

    and press Return.

     

    This is a simple check for file system integrity and is optional. It will take a moment or two to complete. Wait for it to finish before proceeding.

     

    • Type the following exactly as written, one line at a time, each line followed by the return key. There is a single space preceding the first "slash" ( / ) character in each line:

     

    mount -uw /

    rm /var/db/.AppleSetupDone

    shutdown -h now

     

    When you restart the machine, it will take you through the entire setup and registration process all over again. When you do so, create a brand new account with Admin privileges. Give it a simple and disposable name since you will delete it later. Do not choose the option to transfer or migrate information to the Mac.

     

    When it completes, log in under that new account, change your previous account back to Admin, and log out.

     

    Log in using your old account, which will now have its Admin privileges restored. Delete the throwaway account you just created.

    MacBooks  iMacs  iPods  AirPorts, Mac OS X (10.7.3),  27 years Apple!
  • Ronda Wilson Level 8 Level 8 (40,555 points)

    When you create the new user account, you have to choose to give it administrative privileges (make it an Admin account).

     

    Here is Michael Conniff's User Tip on this problem:

     

    https://discussions.apple.com/docs/DOC-1902

  • John Galt Level 7 Level 7 (33,010 points)

    Hi, Keith,

     

    To boot from the installation DVD, first shut down the computer. Then, start the computer and immediately insert the DVD. Hold the C key as soon as the DVD is drawn in. The computer will then load the operating system from the DVD and not the internal hard disk. If you hear a lot of optical drive activity and it is taking a long time to start then it is proceeding normally.

     

    Disk Utility will not show the Combo drive until there is a disc inserted.

     

    If you followed the "new user" technique above, no choice to administer the account is provided. It should have created a new Administrator user by default.


    Do you have an Open Firmware password set?

  • John Galt Level 7 Level 7 (33,010 points)

    OK, now that you can boot from the installation DVD let's restore your Admin privileges.

     

    Start up from the Tiger installation DVD. When you get to the "Welcome to the Mac OS X Installer" screen, choose "Reset Password" from the Utilities menu. Follow this procedure (from Mac OS X 10.5: Administrator user changes to standard and applies equally well to OS X 10.4.11):

     

    1. Select your startup disk (usually this is called Macintosh HD)
    2. From the dropdown menu "Select a user of this volume..." select "System Administrator (root)"
    3. Enter a password in the fields that appear and click Save. Remember the password.
    4. Quit Reset Password.
    5. Quit Installer: select your startup disk which ought to be "Mac OS X, 10.4.11 on Macintosh HD" and click Restart.
    6. When the login window appears, select "Other..." and log in as the root user using the password that was created above. 
      • Note: If Mac OS X automatically logs in, choose Log Out (name) from the Apple menu to get to the login window.
    7. Go to System Preferences > Accounts, select your normal account, and check the box "Allow user to administer this computer".
    8. Quit System Preferences.
    9. From the Apple menu, choose Log Out root....
    10. Log in under your normal account.

     

    Your account should now have administrator access.

     

    Lastly, use Directory Utility to disable the root user via Directory Utility's Edit menu. You may need to click the lock icon first.

     

    If you get stuck on any of the above steps let me know which one.

    MacBooks  iMacs  iPods  AirPorts, Mac OS X (10.7.3),  27 years Apple!
  • John Galt Level 7 Level 7 (33,010 points)

    That's bizarre, but not unexpected since the earlier technique should have worked.

     

    I agree something is corrupted, unfortunately I do not know what else to do other than to reinstall Tiger. It won't erase your data, but I strongly recommend backing up your system to an external drive to be certain. The only concern is your free hard disk capacity, but that is not to be believed given the potential corruption.

     

    Don't install a virus checker. Such utilities will only cause the very problems you are experiencing.

Actions

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • This solved my question - 10 points
  • This helped me - 5 points
This site contains user submitted content, comments and opinions and is for informational purposes only. Apple disclaims any and all liability for the acts, omissions and conduct of any third parties in connection with or related to your use of the site. All postings and use of the content on this site are subject to the Apple Support Communities Terms of Use.