Want to highlight a helpful answer? Upvote!

Did someone help you, or did an answer or User Tip resolve your issue? Upvote by selecting the upvote arrow. Your feedback helps others! Learn more about when to upvote >

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

I suspect my iMac has been infected by a virus/trojan/worm/spyware. How can I search the hard drive

Was browsing Google to try & find someone to design a webpage. I clicked on a link & all kinds of things flashed up on the screen saying my computer was infected & **** had been added!!!!! I immediately turned off my internet connection & shut down my iMac.


My system is slow to turn on, tasks take longer to do & everything feels sluggish.


I'm fairly new to using Apple after 25yrs of using PC/Windows and am clueless as to how to search & clean the system.


Thanks in advance for any help.

iMac (21.5-inch Mid 2011), Mac OS X (10.7.5)

Posted on May 29, 2015 7:09 PM

Reply
12 replies

May 29, 2015 7:12 PM in response to CK64

It's not a virus. It's a Web scam that only affects your browser, and only temporarily. There are several ways to recover.

1. Some of those scam pages can be dismissed very easily. Press the key combination command-W to close the tab or window. A huge box will pop up. Press the return key and both the box and the page will close. If that doesn't happen, continue.

2. Press and hold command-W. You may hear repeating alert sounds. While holding the keys, click the OK button in the popup. A different popup may appear, which you can cancel out of as usual.

3. From the Safari menu bar, select

Safari ▹ Preferences... ▹ Security

and uncheck the box marked Enable JavaScript. Leave the preferences dialog open.

Close the malicious window or tab.

Re-enable JavaScript and close the preferences dialog.

4. If the Preferences menu item is grayed out, quit Safari. Force quit if necessary. Relaunch it by holding down the shift key and clicking its icon in the Dock. None of the windows and tabs will reopen.

After closing the malicious page, from the menu bar, select

Safari Preferences... Privacy Remove All Website Data

to get rid of any cookies or other data left by the server. Open your Downloads folder and delete anything you don't recognize.

May 29, 2015 7:12 PM in response to CK64

There is no currently known malware that can download on its own. "Cleaning" programs will only make your slowness problem worse. Please download and run EtreCheck, and post its output here. You can download EtreCheck from http://etresoft.com/etrecheck. Please don't post other kinds of diagnostics reports. They're very long and rarely helpful.

May 29, 2015 7:23 PM in response to CK64

You have received some questionable advice in this thread. You posted:

My system is slow to turn on, tasks take longer to do & everything feels sluggish.

and the first reply you received is not related to that in the slightest, since you mentioned you already recovered from the pop-up. You are then told that you shouldn't download anything, which is generally a false statement, but particularly so when it comes from someone who does not understand what the problem is. You shouldn't download any anti-virus software, as it is not helpful and your problem is not related to that, but the claim made above referred to "[any] software."

May 29, 2015 7:27 PM in response to CK64

When you see a beachball cursor or the slowness is especially bad, note the exact time: hour, minute, second.

These instructions must be carried out as an administrator. If you have only one user account, you are the administrator.

Launch the Console application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

The title of the Console window should be All Messages. If it isn't, select

SYSTEM LOG QUERIES All Messages

from the log list on the left. If you don't see that list, select

View Show Log List

from the menu bar at the top of the screen.

Each message in the log begins with the date and time when it was entered. Scroll back to the time you noted above.

Select the messages entered from then until the end of the episode, or until they start to repeat, whichever comes first.

Copy the messages to the Clipboard by pressing the key combination command-C. Paste into a reply to this message by pressing command-V.

The log contains a vast amount of information, almost all of it useless for solving any particular problem. When posting a log extract, be selective. A few dozen lines are almost always more than enough.

Please don't indiscriminately dump thousands of lines from the log into this discussion.

Please don't post screenshots of log messages—post the text.

Some private information, such as your name, may appear in the log. Anonymize before posting.

When you post the log extract, you might see an error message on the web page: "You have included content in your post that is not permitted," or "The message contains invalid characters." That's a bug in the forum software. Please post the text on Pastebin, then post a link here to the page you created.

I suspect my iMac has been infected by a virus/trojan/worm/spyware. How can I search the hard drive

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.