My Mac has a Virus!

I'm using osx 10.8.5 and my Mac has been compromised. Every time I am on Youtube and other sites tons of strange ads pop up on the bottom and right side of the screen. Sophos scanned clean. Any suggestions?

MacBook Pro (13-inch Mid 2012), OS X Mountain Lion (10.8.5)

Posted on Mar 2, 2014 5:18 PM

Reply
74 replies

Oct 14, 2014 7:40 PM in response to jshields86

Firefox seems to be doing okay, but whenever I open Safari and Chrome they always end up opening up a separate tab, and they are sites like mackeeper, or some other annoying pop-up scam. I've tried uninstalling chrome, resetting it, and clearing all the browser history. While with Safari I tried to follow the instructions on the apple support site, of locating the activity monitor, quitting the activity, but I can't find anything that says "mackeeper" or any sort of variation of that. I don't want to just go download something and make it worse, so I'm wondering what I can do to get rid of the adware, malware, whatever it is. Thanks!

Oct 15, 2014 3:08 AM in response to dixiedog7781

dixiedog7781 wrote:


I don't want to just go download something and make it worse, so I'm wondering what I can do to get rid of the adware, malware, whatever it is. Thanks!


That's a wise precaution to take. You can try the manual removal instructions in my Adware Removal Guide. That does not require downloading anything, although the instructions for some adware may be difficult to follow. If you find that you have Genieo installed, in particular, I strongly recommend using my AdwareMedic app instead, since Genieo removal gone wrong has the potential to make your computer crash and become unable to start up again.


(Fair disclosure: I may receive compensation from links to my site and software, in the form of buttons allowing for donations. Donations are not required to use my site or software.)

Mar 17, 2015 1:19 PM in response to Linc Davis

hey I saw many of your posts b4 and all good advice. I seem to have contacted a virus or a very determined h@ck root acess has been achieved. I've done a laundry list to block. It to the point where I can't be on my MacBook pro for long until it crashes or overheats. Blocked remote, sharing, firewall etc but no joy. Seems to be coming from my LAN. Running some commands in sing use mde I saw what other other root files or funct were being ran. It's to the point where I cant delete it perm off HD even with partition secure erase,Random,zero, or del of core storage. There always 3 files and 2 folders after or the other way around. Also chroot reviels my old /. Witch I cannot delete without sys crash even from bootable drive USB. Seems when I plug in the drive it merges to the USB perm. Same story with the USB stick now. I found /dev/fd0 which is a flopy drive but I seem to have 5 or 6 that can't be deleted. Aka /dev/fd1,2,3,4,5...also corestorage remote services have been modified and cannot be repaired. Which I've deleted with no success. Upon install form recovery install logs show many errors like nsurlcache been modified unvalidated. Uknown ser from opendirectory or ??? Is always the cause of error or sening unvaladed intall requests. Any help would be appreciated. I'm the one usually just reading these posts so this is my first. I'm runnin outa options

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

My Mac has a Virus!

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.