Multiple Issues - Virus or HDD crash?
I have searched and attempted multiple solutions with no solution (MacBook Pro OSX 10.9.5). This is a work computer and don't want to do a clean reinstall which is most likely what IT will have me do. Clarification, I want to do a clean reinstall, but can't until I back up my files...which I can't and is part of my issue.
Problems:
Not coming out of sleep mode after closing lid
Prohibitory Sign
Inability to Log In
Can't transfer files to external HDD via USB or a Lacie Cloud Storage via ethernet cable
Can't upload some larger files to Google Drive and similar cloud storage solutions
Mal/Miner-C found
Solutions attempted (and failed):
"dot_clean"
"dot_clean -n"
Repair Disk
Verify Disk
SMART in Disk Utility and SMART Utility Passed
Avast, Avira, Sophos, ClamXav, Malware Bytes, EtreCheck - Downloaded and Run
I first noticed issues when my computer wouldn't come out of sleep mode after closing the lid. Soon after, I started getting a prohibitory/no entry sign before the login screen would come up. I thought it was just a glitch so I ignored it for a bit, but after a few times, I uninstalled a recent application and excel add-in solver table and statpro from here: http://kelley.iu.edu/albright/free_downloads.htm.
Uninstalling did not solve the issue. I went into the files and removed them manually as well.
Things started getting worse. The prohibit sign stayed longer to the point where I didn't think I would be able to log in. Once I was finally able to, it wouldn't let me log in. So I took it to IT. I don't know what they did, but they connected via ethernet cable and signed in as root. I believe they then changed some permissions or something. Anyways, they fixed that issue and said there shouldn't be any more issues logging on. True....but the prohibit sign came back. I have found the sign shows up when the battery is low or when the computer is too hot, but it could be coincidental. I have come to this conclusion because when I see it, I will charge it to full and it works. I also lift it to its back and take off the speck bottom protector.
Next issue - not logging in prompted me to make sure I backed up my info. So I started that and started getting errors. It seems that certain folders have certain capacity limitations. It will let me move over until it hits a certain level then it stops and gives an Error-36 code. Upon research, I found a "dot_clean" solution which did absolutely nothing. Found another "dot_clean -n" solution and it said it wasn't able to move it. I used Disk Utility and ran repair and verify disk. SMART disk is verified and SMART utility also passed. After repairing permissions, I got Permissions differ on "Applications/Safari.app/Contents/Resources/Safari.help/Contents/Resources/inde x.html; should be lrwxr-xr-x ; they are -rwxr-xr-x"
This was repaired
"System/Library/CoreServices/Feedback Assistant.app" ; should be drwxr-xr-x ; they are lrwxr-xr-x."
This was repaired
"Warning: SUID file "System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/MacOS/ARDAg ent" has been modified and will not be repaired"
A quick search said this can be ignored, but the repair doesn't complete.
Verify Disk Permissions gave:
Same errors as Repair Disk Permissions
I found that I could get the majority of files moved over especially documents and pictures (although I had to move many over individually). However, videos are a different story because of their size. I would get Error-50 codes during these times as well. I could get an occasional small .mp4 to move, but that's it. So I started researching more on the Error-36, possible HDD failure indicators, and even Virus/Malware/Spyware infections (since I downloaded a non verified application).
The machine has VIPRE installed on it already and nothing has come through as problematic. I downloaded Avast, Avira, Sophos, ClamXav all to no avail (to some degree - keep reading). I used Intego Backup assistant and it had 6 I/O errors. When I clicked on Reveal Destinations, Sophos popped up and notified of a Mal/miner-c infestion. I found the location was actually on my Lacie Cloud as Picture.scr. Doing some research I found that is a potential virus. I attempted to manually delete it and got a Error-8072 message then the file moved to another folder. I clicked (singled clicked) to see what it was and it disappeared. I found it again in another folder and did nothing...it disappeared again, and I can't find it now. From what I understand, picture.scr is an exe file or something and isn't supposed to be a threat to a mac, but I don't buy it. Also, I know it was on the Lacie cloud, but I moved the files that I could over to the Lacie from the Mac HDD so I don't think the Lacie is the issue. I have also downloaded and ran etrecheck app and it came back with a few red marks including one error Drive failure! This leads me to believe is it a HDD failure coming. But I have to get my files off this computer before I lose them!
Other factors to consider:
1. I am getting extra spam from what appears to be my own email address the last few days although there is nothing in my sent folder and I have changed my password from my work PC.
a. My macbook pro has not updated my new password to get into it, but I am not logging in from work since I am at home the last few days.
2. Some files that are small and should transfer fine, don't. Example - a jpeg I saved from the internet on an educational site is 17 kb and cannot transfer? I clicked on Get info and the Where From is extremely long.
3. Under Get info under Sharing and Permissions, there is my user name, then Fetching..., and everyone. Fetching doesn't change.
4. After the closing lid issues, I started getting recovered files from 2012 and 13 and now Trash has Recovered Files that can't be deleted.
5. I will be working and all the sudden the computer will freeze and you can't do anything for 15 seconds or so. The beach ball spins during this time. The computer resumes normally after a small pause.
I would love to fix this, but I think a clean install and possible HDD replacement is necessary so I just need a solution to get the rest of my files.
ANY HELP GREATLY APPRECIATED!
Mac Pro, OS X Mavericks (10.9.5), null
