5 Replies Latest reply: Oct 22, 2006 8:57 AM by Bernard Knight
crash89 Level 1 (110 points)
Once upon a time I had Clam Anti Virus. I decided I didn't want it and removed it. I also used Spotlight to remove any files used by it. Now, every Sunday morning, it tries to run and I have to manually quit the process. It seems to get stuck in a loop and drives both CPUs to 100%. Does anyone know where I might find the last remaining files? Thanks!

G5 Dual 2.0, MacBook 2Ghz White, MacBook Black and Mini, Mac OS X (10.4.8), SuSE Linux 10.1 Server
  • Kappy Level 10 (265,961 points)
    Download the ClamXAV disk image. Mount the image on your Desktop. Use the REMOVE clamxav.engine command.

    If this doesn't work then there are still vestiges of the installation you haven't found. Spotlight does not search a lot of areas on the hard drive by default. I'd recommend downloading Easy Find (www.versiontracker.com) and use it to search. You should also check your Login Items for any ClamXAV component that may have been installed in the list and remove it. Check /Library/StartupItems/ for a ClamXAV startup item.
  • Bernard Knight Level 2 (235 points)
    As far as I can tell from my installation, you can find the main binaries in /usr/local/clamXav/ . I imagine after you've done what Kappy has advised, you could double check to see that that folder has been removed.

    (Normally the /usr/ folder is invisible, but if you type "/usr" (without quotes) into the Go To Folder menu item of the Finder's Go menu, you will be taken there.)
  • crash89 Level 1 (110 points)
    I had removed it using the Clam AV Disk Image before... I did not know about the /usr folder (I should have having used Linux for a while). XclamAV was there and I removed it. We'll see how things go next week, but this seems to have gotten it. Thanks for such quick replies!!
  • Kappy Level 10 (265,961 points)
    The usr folder isn't invisible. If you are using the Terminal it's quite visible. Oddly enough there is a difference (at least in Unix) between "invisible" and "hidden."
  • Bernard Knight Level 2 (235 points)
    True, Kappy, but I thought it quicker & easier to explain it like that. If the user is used to the terminal s/he would probably not have bothered reading the second part of my post and would have gone there directly via the terminal.