Previous 1 2 Next 18 Replies Latest reply: Sep 25, 2012 8:27 PM by Brett@Userland
brandon9723 Level 1 (0 points)

I think my MacBook may have a virus.  Every 30 minutes or so, it randomly restarts out of no where and boots up saying it restarted because of a problem. I tried running Antivirus software but my mac always restarts before it can complete a test. i dont know what to do.

MacBook Pro, OS X Mountain Lion (10.8.2)
  • identd Level 2 (355 points)

    Does the computer shutdown with no warning?

    Do you get a kernal panic (screen comes down and says to reboot?)

    Does the machine just freeze?

  • Brett@Userland Level 2 (155 points)

    Unlikely a Virus

    Does the problem persist while in safe boot Hold down shift key while booting untill apple logo appears with a progress bar)?

  • thomas_r. Level 7 (30,645 points)

    If you are seeing messages in multiple languages saying that you have to restart, you are experiencing kernel panics. Kernel panics are typically caused by bad third-party kernel extensions, a badly corrupt system or bad hardware. No Mac malware should cause kernel panics, but ironically, it could be a kernel extension installed by your anti-virus software that is causing the problem. What anti-virus software is it? Try uninstalling it. (If the thought of removing it scares you, read my Mac Malware Guide.)


    It could be some other third-party kernel extension, as well. Copy the following command:


    kextstat | grep -v


    Then open the Terminal (found in the Utilities folder in the Applications folder) and paste that command in there, then hit return. Copy the output and paste it into a message here.

  • Linc Davis Level 10 (184,645 points)

    Launch the Console application in any of the following ways:


    ☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)


    ☞ In the Finder, select Go Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.


    ☞ Open LaunchPad. Click Utilities, then Console in the page that opens.


    Select the most recent panic log under System Diagnostic Reports. Post the contents — the text, please, not a screenshot. In the interest of privacy, I suggest you edit out the “Anonymous UUID,” a long string of letters, numbers, and dashes in the header and body of the report, if it’s present (it may not be.) Please don't post shutdownStall, spin, or hang reports.

  • brandon9723 Level 1 (0 points)

    nothing shows up when I click System Diagnostic Reports. should it not be blank?

  • brandon9723 Level 1 (0 points)

    I was using iAntivirus from the Mac App Store but i switched to Avast last night for 30 or 40$. And when it restarts there is a screen with multiple languages saying it restarted because of a problem. Here is the output from the Terminal:


    Index Refs Address            Size       Wired      Name (Version) <Linked Against>

      116    0 0xffffff7f807b6000 0x5000     0x5000     com.Cycling74.driver.Soundflower (1.5.2) <94 5 4 3>

      124    0 0xffffff7f81df2000 0x6000     0x6000     com.avast.AvastFileShield (1.0.1) <5 4 1>

      125    0 0xffffff7f81df8000 0x3000     0x3000     com.avast.PacketForwarder (1.3) <4 1>

      129    3 0xffffff7f81dfb000 0x36000    0x36000    org.virtualbox.kext.VBoxDrv (4.1.16) <7 5 4 3 1>

      130    0 0xffffff7f81e31000 0x8000     0x8000     org.virtualbox.kext.VBoxUSB (4.1.16) <129 46 33 7 5 4 3 1>

      131    0 0xffffff7f81e39000 0x5000     0x5000     org.virtualbox.kext.VBoxNetFlt (4.1.16) <129 7 5 4 3 1>

      132    0 0xffffff7f81e3e000 0x6000     0x6000     org.virtualbox.kext.VBoxNetAdp (4.1.16) <129 5 4 1>

    new-host-3:~ brandon9723$

  • Linc Davis Level 10 (184,645 points)

    First, get rid of the worthless "anti-virus" software. It will only make matters worse.


    You were given a suggestion to boot in safe mode. Did you do it, and did the problem manifest itself in safe mode?

  • thomas_r. Level 7 (30,645 points)

    Get rid of Avast. It has been implicated in problems on other users' systems and has a history of false positives where it identifies legitimate parts of the system as malware. It may be good on Windows, but not on a Mac.


    Also, that Soundflower kernel extension has been in many kernel panic logs that I have seen here. I would recommend removing it.


    VirtualBox should be okay, but make sure it's up-to-date (I don't know what the current version is), and if removing the other two programs doesn't help, try removing it as well. (That should not affect your virtual machines... you should be able to reinstall it later and pick up where you left off with the virtual machines.)


    Be sure to use the uninstaller provided by the software, rather than just dragging the app to the trash.

  • brandon9723 Level 1 (0 points)

    so I deleted Avast, Virtual Box ( I didn't use it much nor do I need it anymore), and I tried to find "Soundflower" by using spotlight search and I also searched in Finder, but no results came up. Since my last crash and restart, a message came up that alowed me to show the details of the crash, (it was a long list of codes and stuff). I copied it just in case it would come in handy, would you like me to post it?

  • thomas_r. Level 7 (30,645 points)

    Look in /System/Library/Extensions. Is there a file called Soundflower.kext in there? If so, move it to the trash and restart the computer.

  • brandon9723 Level 1 (0 points)

    is that in Finder? 'cause I can't find System, Library, or extentions anywhere..

  • thomas_r. Level 7 (30,645 points)

    Choose Go To Folder from the Finder's Go menu and paste in "/System/Library/Extensions".

  • brandon9723 Level 1 (0 points)

    okay i removed it and restarted my computer

  • Brett@Userland Level 2 (155 points)

    While i Agree totally with all the info Thomas has provided (Read the Mac Malware Guide, Great article BTW Thomas), I am curious to Know whether or not you have tried booting in safe Boot yet, and whether or not the problem persists or not, reason being is that Safe boot loads only the required Kernel extentions, in which case if it is a third party kext that is causing the issue then it is likely the problem will not mannifest whilst in Safe Boot, in which case you could then start trobleshooting the Kext's (among other things), and If the problem persists (in Safe Boot) you know that it is unlikely that a third party Kext is the cause of the issue.

    Also Are you getting a Kernel Pannic (grey screen with dirrerent languages telling you to restart your machine)?

    or is the machine Just shutting down by itself without any Warning? (in which case it is quite possible you may have a hardware Problem)

Previous 1 2 Next