Hi,I'm fairly certain my MacBook has been infected with a virus. I don't know a whole lot about computers, so I'm feeling a little lost....basically,, all I have is a blue screen,with no items/icons etc on my desktop,after restarting. Please help!
OS X Yosemite: If you see a blue screen at startup
You don't have a virus.
TThanks for the reply...I checked it out ,it started normally in safe mode but didn't in regular mode,so I removed startup items (there were only 3 showing up)...after that I restarted again,and now the blue screen has absolutely nothing on it and I don't know how to do anything,including restart,as even the apple menu,has disappeared.
If the machine started up normally in safe mode, that means the problem is caused by some third-party software you have installed (which is disabled by safe mode). Take note of the time, then restart your computer normally. This will probably require holding down the power key to force it to shut down. Assuming the problem repeats itself, restart the computer again, but in safe mode this time. Open the Console app (found in the Utilities folder in your Applications folder). Select all the messages in the Console that go from the present back to the time you noted for that "normal" (non-functioning) startup. Copy them, then paste them into a message here.
| 15-02-18 8:47:07 PM | com.apple.launchd[1] | *** launchd[1] has started up. *** |
| 15-02-18 8:47:11 PM | com.apple.launchd[1] | (com.apple.usbmuxd) Unknown key: POSIXSpawnType |
| 15-02-18 8:47:30 PM | com.apple.launchctl.Aqua[90] | launchctl: no plist was returned for: /Users/jess/Library/LaunchAgents/cinemapro1-2_enabler.sh |
| 15-02-18 8:47:30 PM | com.apple.launchctl.Aqua[90] | launchctl: no plist was returned for: /Users/jess/Library/LaunchAgents/cinemapro1-2_enabler.sh |
| 15-02-18 8:47:31 PM | com.apple.launchd.peruser.501[88] | (com.apple.launchctl.Aqua[90]) Job appears to have crashed: Segmentation fault |
| 15-02-18 8:47:31 PM | com.apple.ReportCrash.Root[91] | 2015-02-18 20:47:31.265 ReportCrash[91:2a03] Saved crash report for launchctl[90] version ??? (???) to /Library/Logs/DiagnosticReports/launchctl_2015-02-18-204731_localhost.crash |
| 15-02-18 8:48:14 PM | com.apple.launchd[1] | *** launchd[1] has started up. *** |
| 15-02-18 8:49:08 PM | com.apple.launchd[1] | (com.apple.usbmuxd) Unknown key: POSIXSpawnType |
| 15-02-18 8:49:43 PM | com.apple.launchd[1] | (com.apple.xprotectupdater[14]) Exited with exit code: 252 |
| 15-02-18 8:49:50 PM | com.apple.fontd[68] | FODBCheck: foRec->annexNumber != kInvalidAnnexNumber (0) |
| 15-02-18 8:49:52 PM | com.apple.WindowServer[73] | Wed Feb 18 20:49:52 unknown34159e965d4c WindowServer[73] <Error>: kCGErrorFailure: Set a breakpoint @ CGErrorBreakpoint() to catch errors as they are logged. |
| 15-02-18 8:49:53 PM | com.apple.fontd[68] | FODBCheck: foRec->annexNumber != kInvalidAnnexNumber (0) |
| 15-02-18 8:50:17 PM | com.apple.launchd.peruser.501[89] | (com.apple.ReportCrash) Falling back to default Mach exception handler. Could not find: com.apple.ReportCrash.Self |
| 15-02-18 8:50:17 PM | com.apple.launchctl.Aqua[91] | launchctl: no plist was returned for: /Users/jess/Library/LaunchAgents/cinemapro1-2_enabler.sh |
| 15-02-18 8:50:17 PM | com.apple.launchctl.Aqua[91] | launchctl: no plist was returned for: /Users/jess/Library/LaunchAgents/cinemapro1-2_enabler.sh |
| 15-02-18 8:50:19 PM | com.apple.launchd.peruser.501[89] | (com.apple.launchctl.Aqua[91]) Job appears to have crashed: Segmentation fault |
| 15-02-18 8:50:20 PM | com.apple.ReportCrash.Root[92] | 2015-02-18 20:50:20.298 ReportCrash[92:1407] Saved crash report for launchctl[91] version ??? (???) to /Library/Logs/DiagnosticReports/launchctl_2015-02-18-205020_localhost.crash |
| 15-02-18 8:50:21 PM | fontd[100] | Database content version mismatch (stored(15) != expected(14)) |
| 15-02-18 8:50:24 PM | com.apple.launchd.peruser.501[89] | (com.apple.Kerberos.renew.plist[110]) Exited with exit code: 1 |
| 15-02-18 8:50:24 PM | com.apple.launchd.peruser.501[89] | (com.apple.mrt.uiagent[109]) Exited with exit code: 255 |
| 15-02-18 8:50:37 PM | com.apple.coreservicesd[47] | ThrottleProcessIO: throttling disk i/o |
| 15-02-18 8:50:37 PM | com.apple.coreservicesd[47] | ThrottleProcessIO: throttling disk i/o |
One problem you have is that there is adware installed (the CinemaPro variant of Buca Apps adware). In safe mode, see my Adware Removal Guide for help finding and removing it. If you choose to use the AdwareMedic app recommended there, it should work equally well in safe mode. The manual removal instructions work regardless of what mode you are starting up in.
It's possible that removing the adware will not fix the main problem, in which case check back here for more advice.
Hi, I really appreciate all your detailed help! However, I tried following your directions with removing Buca App, read about locating files from paths, etc, but each time I tried to copy and paste them, it said the folder could not be located. I believe I have version 10.6...could this be the problem? (Please keep in mind that I have the most basic understanding of computers, nothing more, so all of this is feeling very foreign to me!)
Jess081 wrote:
I believe I have version 10.6...could this be the problem?
No.
At this point, I'd recommend that you make an appointment at the Genius Bar at your nearest Apple Store and take the machine in for an Apple tech to look at.
MacBook virus?? - desktop disappeared,blue screen
