Mac virus?

Hello,


I have a Mac Book Pro 2010. Yesterday, while browsing/working with Chrome, my computer froze. I turned it off manually. This morning when I turned it on and up until now, I keep getting these boxes that say the following:


com.apple.iCloud Helper wants to use the "local items" Key Chain please type in your password or


Accounts wants to use the "local items" Key Chain. Please type in your password


Google Chrome wants to use the "local items" Key Chain. Please type in your password.


Safari wants to use the "local items" Key Chain. Please type in your password.


I try pressing cancel and the box won't go away. It cycles through each of the above boxes. I can move the boxes to the bottom of the screen, but they won't go away. I don't know what they are and I don't remember what my password if any is for these "local items."


Computer is now very slow and my Yahoo email account was hacked. I just shut it down normally, but it took a while for everything to process.


Suggestions? Is this a virus?


Thanks, Laurie


Any suggestions?

MacBook Pro (15-inch Mid 2010), OS X Yosemite (10.10.4)

Posted on Jul 14, 2016 6:56 PM

Reply
8 replies

Jul 14, 2016 7:39 PM in response to Malida1000

Please take each of the following steps that you haven't already tried, testing after each one. Back up all data before making any changes.

Step 1

Open the iCloud preference pane and uncheck the Keychain box. You'll be prompted to delete the local iCloud keychain. Confirm. Then re-check the box. Follow one of the procedures described in this support article to set up iCloud Keychain on an additional device.

Step 2

Triple-click the line below on this page to select it, then copy the text to the Clipboard by pressing the key combination command-C:

~/Library/Keychains

In the Finder, select

Go Go to Folder...

from the menu bar and paste into the box that opens by pressing command-V. You may not see what you pasted because a line break is included. Press return. A folder named "Keychains" should open. There should be a file in that folder with the name "login.keychain". If there is also a file iwith the name "login_renamed_1.keychain", then please do as follows:

☞ Rename login.keychain to "login-old.keychain".

☞ Rename login_renamed_1.keychain to "login.keychain".

You can then close the folder.

Delete the login keychain from the keychain list in Keychain Access. Choose

Delete References

when prompted, not Delete References & Files.

Select

File Add Keychain...

from the menu bar. Add back the file now named "login.keychain". If any of your needed keychain items are missing from it, also add back the file now named "login-old.keychain". I suggest you transfer any needed items from that keychain to the login keychain, then delete it. The transfers are made by drag-and-drop in Keychain Access. You'll need to enter your password for each item transferred.

Quit Keychain Access.

Step 3

If you still have problems, uncheck the Keychain box again in the iCloud preference pane and continue.

Inside the Keychains folder that you opened in Step 2 is a subfolder with a long name similar to (but not the same as) this:

421DE5CA-D745-3AC1-91B0-CE5FC0ABA128

The above is only an example; yours will have a different name of the same general form. Drag the subfolder (not the Keychains folder) to the Trash.

Restart the computer, empty the Trash, and re-enable iCloud Keychain.

Jul 17, 2016 6:03 PM in response to Malida1000

Please launch the Console application in any one of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

The title of the Console window should be All Messages. If it isn't, select

SYSTEM LOG QUERIES ▹ All Messages

from the log list on the left. If you don't see that list, select

View ▹ Show Log List

from the menu bar at the top of the screen.

Click the Clear Display icon in the toolbar. Then take an action that isn't working the way you expect. Select any lines that appear in the Console window. Copy them to the Clipboard by pressing the key combination command-C. Paste into a reply to this message by pressing command-V.

The log contains a vast amount of information, almost all of which is irrelevant to solving any particular problem. When posting a log extract, be selective. A few dozen lines are almost always more than enough.

Please don't indiscriminately dump thousands of lines from the log into this discussion.

Please don't post screenshots of log messages—post the text.

Some private information, such as your name or email address, may appear in the log. Anonymize before posting.

When you post the log extract, you might see an error message on the web page: "You have included content in your post that is not permitted," or "The message contains invalid characters." That's a bug in the forum software. Please post the text on Pastebin, then post a link here to the page you created.

If you have an account on Pastebin, please don't select Private from the Paste Exposure menu on the page, because then no one but you will be able to see it.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Mac virus?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.