box appeared "clean your mac" then lost admin rights in some files, box appeared "clean your mac" then lost admin rights in some files

Sounds like you downloaded a trojan horse/virus.

Did you install any software lately that may make such a window appear, asking you to do that? Can you post a picture of such box?

This sounds like you may possibly have been infected with MACDefender.

Malicious software dubbed "MACDefender" (also goes under the name of MacProtector, MacGaurd, MacSecurity or MacShield) takes aim at users of the Mac OS X operating system by automatically downloading a file through JavaScript. But users must also agree to install the software, leaving the potential threat limited.

The new MACDefender malware was first noted on April 30, 2011 by users of the Apple Support Communities, and was highlighted on May 2 by antivirus company Intego. If the right settings are enabled in Apple's Safari browser, MACDefender can be downloaded to a system after a user clicks a link while searching the Internet.

"When a user clicks a link after performing a search on a search engine such as Google, this takes them to a web site whose page contains JavaScript that automatically downloads a file," Intego said. "In this case, the file downloaded is a compressed ZIP archive, which, if a specific option in a web browser is checked (Open 'safe' files after downloading in Safari, for example), will open."

More details here:

http://www.reedcorner.net/news.php/?p=138#more-138

However, users must still agree to install the malware after it downloads. After the ZIP file is extracted, users are presented with the "MACDefender Setup Installer," at which point they must agree to continue and provide an administrator password.

Because of the fact that users must agree to install the software and provide a password, Intego categorized the threat with MACDefender as "low."

Users on Apple's support forums advise killing active processes from the application using the Mac OS X Activity Monitor. MACDefender can then be deleted from the Applications folder by dragging it into the trash. There is also a 'MacDefenderKiller' uninstaller available here:

http://www.macupdate.com/app/mac/38520/macdefenderkiller

On May 24 Apple issued this Knowledge Base Article on how to avoid or remove the MacDefender malware (which has been updated several times):

http://support.apple.com/kb/HT4650

But that does not mean it is over. On May 25, MacGuard is launched:

http://www.zdnet.com/blog/bott/mac-malware-authors-release-a-new-more-dangerous- version/3385?tag=nl.e589

Further information here:

http://www.macworld.co.uk/news/index.cfm?olo=email&NewsID=3282245

Apple released Security Update 2011-003 on May 31, 2011, which adds malware detection and removal for the "MAC Defender" scam and delivers a daily update mechanism for updating subsequent malware definitions. This is for Snow Leopard only.

The security update for Mac OS X 10.6.7 is available from Software Update or the company's Downloads page. Installing the update does not require a system reboot.

http://support.apple.com/kb/DL1387

(The malware is not to be confused with MacDefender, the maker of geocaching software including GCStatistic and DTmatrix. The company noted on its site it is not affiliated with the malware.)

Trojans and other malware spreads through search engines like Google via a method known as "SEO poisoning." The sites are designed to game search engine algorithms and show up when users search for certain topics.

Now also available on Facebook!

http://www.macworld.co.uk/news/index.cfm?olo=email&NewsID=3283550

Apple are now fighting a running battle with the scareware makers:

http://www.macworld.co.uk/news/index.cfm?olo=email&NewsID=3284106