My MBP will not reboot with Control-R for a reinstall of OCX.

My 2012 MBP with OSX 10.10.5 has a virus (I was told in the rootkit - ??) that can't be found by my antivirius (Webroot and then tried AVG). I was told it is best to restore an earlier system, so I've tried but I cannot get past step one. I tried 1) restart, holding Control-R between the gray screen and the Apple logo. But I do not get any reinstall options after that - only a normal start-up follows, no matter how I try to time the Control-R restart.


Is this an issue with Yosemite? My "old" MacBook Pro? Me?


Suggestions?

MacBook Pro, OS X Yosemite (10.10.5)

Posted on Sep 8, 2015 6:52 AM

Reply
10 replies

Sep 8, 2015 7:31 AM in response to tomasr

if you AV is telling you that you have a virus it is most likely a false positive. AVG is reportedly a botched application for Mac and AV as a whole on the Mac is generally more trouble than it is worth at this time.

remove all traces of any AV and any "Clean my Mac" applications you may have


since you most likely do not have a virus your system does not need to be restored. Whoever told you that you do have a virus will need to back up that statement with some proof. Is your computer in a place where someone other than yourself could sit at it and install a rootkit from directly on the keyboard or over a remote session with your credentials? Have you given someone your credentials? have you knowingly installed a rootkit recently?


While I don't fully endorse it you may want to try this to get a second opinion and ONLY if you answered yes to any of the questions I asked in the paragraph above. Again this is not a piece of software I use on the mac but historically have used on Windows and have some faith in the manufacturer. To that extent I do not claim to know the full extent of how well it works on mac or if there would be further ramifications by installing it. I offer it a something to mull over and make your own decision after doing some research.

http://www.eset.com/int/support/rootkit-detector/



if the system is exhibiting signs of problematic behavior you may submit an etrecheck report to determine what the actual cause may be

http://www.etresoft.com/etrecheck


In the mean tine if a problem persists with system functionality.

reset your SMC

https://support.apple.com/en-us/HT201295

rest your PRAM

How to Reset NVRAM on your Mac - Apple Support

Sep 8, 2015 8:51 AM in response to JimmyCMPIT

Hello Jimmy -

The problem is pornographic images and ads popping up when I am using Safari, on the internet, followed by a full-screen ad for a Mac Cleaner. I found cookies for that site, and deleted the cookies. The cookies reappeared later, as did the same ads. (The sites I was visiting when this happens had absolutely nothing to do with pornographic mat'l, nor have I ever visited a pornographic mat'l site, ever.) The Mac Cleaner ad, I suspect, is a counterfeit and I have not clicked anywhere on that page - I shut down Safari to stop the intrusion.


That recurrent irritation led my friend to suspect a virus buried in a rootkit (she thought I had a PC, not a Mac). Her advice was to restore the OS back to a clean and safe date.


Can you think of why I can't get to a restore option at all, after restarting with Control-R?

Sep 8, 2015 11:23 AM in response to tomasr

Safari/Browsers - Eliminating browser redirects and advertisements


Safari/Browsers - Eliminating browser redirects and advertisements (2)

Safari – Popup takes over

Force quit Safari from the  menu and reopen with the shift key held down. If that doesn’t work, disconnect from the Internet, open Safari, and then reconnect to the Internet. See link for other suggestions.


ou can also check for malware. Manual method:


Malware – Adware removal – Apple Support


Or download this program which was written by Thomas Reed, a long time poster. The program will do the work for you which makes it easy. If you are uncertain about downloading programs, try the manual method.


Malwarebytes Anti-Malware for Mac 10.7 and later

Sep 8, 2015 11:44 AM in response to tomasr

You have a scam: quit or forcequit Safari. the restart safari while holding the Shift key. Then in Safari menu "Clear History and Website Data".

You have been infected with adware: download AdwareMedic and run it: http://www.adwaremedic.com/index.php

You must uninstall all AntiVirus apps; they don't remove the problems on the mac and interfere with the OSX.

To start in the Recovery Partition you hold CMD+R while starting (not ctl+R).

Lex

Sep 8, 2015 12:15 PM in response to Lexiepex

Yes, I know to use and always do use Command when I should. I did use Command - R, and the machine insists on booting up as usual. I also almost always say "Control" when I mean Command, to my wife's continuing confusion. I'm sorry. A habit, maybe, from PC days.


The rest of your suggestions, and the others from the others, I need to study...


Thank you, so far...

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

My MBP will not reboot with Control-R for a reinstall of OCX.

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.