Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

How do I get rid of a virus?

I think my MacBook may have a virus. Every 30 minutes or so, it randomly restarts out of no where and boots up saying it restarted because of a problem. I tried running Antivirus software but my mac always restarts before it can complete a test. i dont know what to do.

MacBook Pro, OS X Mountain Lion (10.8.2)

Posted on Sep 24, 2012 11:38 PM

Reply
18 replies

Sep 25, 2012 3:52 AM in response to brandon9723

If you are seeing messages in multiple languages saying that you have to restart, you are experiencing kernel panics. Kernel panics are typically caused by bad third-party kernel extensions, a badly corrupt system or bad hardware. No Mac malware should cause kernel panics, but ironically, it could be a kernel extension installed by your anti-virus software that is causing the problem. What anti-virus software is it? Try uninstalling it. (If the thought of removing it scares you, read my Mac Malware Guide.)


It could be some other third-party kernel extension, as well. Copy the following command:


kextstat | grep -v com.apple


Then open the Terminal (found in the Utilities folder in the Applications folder) and paste that command in there, then hit return. Copy the output and paste it into a message here.

Sep 25, 2012 8:29 AM in response to brandon9723

Launch the Console application in any of the following ways:


☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)


☞ In the Finder, select Go Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.


☞ Open LaunchPad. Click Utilities, then Console in the page that opens.


Select the most recent panic log under System Diagnostic Reports. Post the contents — the text, please, not a screenshot. In the interest of privacy, I suggest you edit out the “Anonymous UUID,” a long string of letters, numbers, and dashes in the header and body of the report, if it’s present (it may not be.) Please don't post shutdownStall, spin, or hang reports.

Sep 25, 2012 2:26 PM in response to thomas_r.

I was using iAntivirus from the Mac App Store but i switched to Avast last night for 30 or 40$. And when it restarts there is a screen with multiple languages saying it restarted because of a problem. Here is the output from the Terminal:


Index Refs Address Size Wired Name (Version) <Linked Against>

116 0 0xffffff7f807b6000 0x5000 0x5000 com.Cycling74.driver.Soundflower (1.5.2) <94 5 4 3>

124 0 0xffffff7f81df2000 0x6000 0x6000 com.avast.AvastFileShield (1.0.1) <5 4 1>

125 0 0xffffff7f81df8000 0x3000 0x3000 com.avast.PacketForwarder (1.3) <4 1>

129 3 0xffffff7f81dfb000 0x36000 0x36000 org.virtualbox.kext.VBoxDrv (4.1.16) <7 5 4 3 1>

130 0 0xffffff7f81e31000 0x8000 0x8000 org.virtualbox.kext.VBoxUSB (4.1.16) <129 46 33 7 5 4 3 1>

131 0 0xffffff7f81e39000 0x5000 0x5000 org.virtualbox.kext.VBoxNetFlt (4.1.16) <129 7 5 4 3 1>

132 0 0xffffff7f81e3e000 0x6000 0x6000 org.virtualbox.kext.VBoxNetAdp (4.1.16) <129 5 4 1>

new-host-3:~ brandon9723$

Sep 25, 2012 3:45 PM in response to brandon9723

Get rid of Avast. It has been implicated in problems on other users' systems and has a history of false positives where it identifies legitimate parts of the system as malware. It may be good on Windows, but not on a Mac.


Also, that Soundflower kernel extension has been in many kernel panic logs that I have seen here. I would recommend removing it.


VirtualBox should be okay, but make sure it's up-to-date (I don't know what the current version is), and if removing the other two programs doesn't help, try removing it as well. (That should not affect your virtual machines... you should be able to reinstall it later and pick up where you left off with the virtual machines.)


Be sure to use the uninstaller provided by the software, rather than just dragging the app to the trash.

Sep 25, 2012 4:28 PM in response to thomas_r.

so I deleted Avast, Virtual Box ( I didn't use it much nor do I need it anymore), and I tried to find "Soundflower" by using spotlight search and I also searched in Finder, but no results came up. Since my last crash and restart, a message came up that alowed me to show the details of the crash, (it was a long list of codes and stuff). I copied it just in case it would come in handy, would you like me to post it?

Sep 25, 2012 7:05 PM in response to brandon9723

While i Agree totally with all the info Thomas has provided (Read the Mac Malware Guide, Great article BTW Thomas), I am curious to Know whether or not you have tried booting in safe Boot yet, and whether or not the problem persists or not, reason being is that Safe boot loads only the required Kernel extentions, in which case if it is a third party kext that is causing the issue then it is likely the problem will not mannifest whilst in Safe Boot, in which case you could then start trobleshooting the Kext's (among other things), and If the problem persists (in Safe Boot) you know that it is unlikely that a third party Kext is the cause of the issue.

Also Are you getting a Kernel Pannic (grey screen with dirrerent languages telling you to restart your machine)?

or is the machine Just shutting down by itself without any Warning? (in which case it is quite possible you may have a hardware Problem)

Sep 25, 2012 7:16 PM in response to Brett@Userland

i have booted it in Safe Boot and it did not crash, however it wasn't long, maybe 15 min, before i restarted it normally due to heavy lagging. after i deleted Flowersound.kext a half hour ago, it hasn't seemed to crash yet, thankful for that! just hoping it wont happen anymore. (and my computer was shutting down and restarting with no warning, just instantly, then came up with a screen saying it shut down due to a problem in several different languages.)

How do I get rid of a virus?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.