Problem with a Disk Image Virus or something

Hello everyone!

My name is Cecilia, Im from Argentina. First of all, sorry, because my english will be tooooooo bad, but I really need help. I looked all over Google, basically, and I can´t find a solution to my problem.

Recently I have this kind of virus, malware, or whatever, that is eating my RAM. As soon as I turn on my imac, this thing activates by itself, in form of a "installer", I can clearly see it in the Activity Monitor. 3 Installers, which basically are disk images that I can also see in Disc Utility, with ghost names like "adKrNd.dmg" and similar stuff (they always have a different name every time I turn on the computer). When I want to move to trash those .dmg, It won´t let me, saying that another application is using those files. I don't´know what to do, I downloaded an Anti Virus but it didn´t work.

Could you recommend me a good Anti Malware for free? Or maybe someone know how to stop this?


Thank you!!

iMac, OS X Mavericks (10.9.5), virus

Posted on Sep 15, 2016 12:06 PM

Reply
7 replies

Sep 15, 2016 12:13 PM in response to hatteresca

Cecillia,


Please NEVER install any antivirus, cleaning or other third party maintenance utilities on OS X. OS X is extremely secure and simply kept up-to-date will run reliably for years. In most situations, using antivirus, clearing or other similar applications will create more problems than they ever solve.


However you may have downloaded something like adware that may be creating a problem. My suggestion is to run an EtreCheckreport of your system. We can then look for obvious issues. Please click the link, download the app and run the report. Once you have the report, please copy and paste it to your reply to this post.


If you would like more info on what EtreCheck is, simply click the link and you will find a description of the app.


BTW, my wife and I spent 3 weeks in Argentina at the beginning of 2015. What a lovely country you have!

Sep 15, 2016 12:46 PM in response to hatteresca

You inadvertently installed adware. You do not need to download or install anything to fix it.


Navigate to the following folder, and post its contents in a screenshot.


~/Library/LaunchAgents


To open that folder, copy the entire line above and paste it in the Finder's Go menu > Go to Folder... field. It should look like this:



User uploaded file



Take a screenshot showing all that folder's contents, and post it in a reply. To take a screenshot read the Appendix in the following User Tip: Writing an effective Apple Support Communities question. There will be additional instructions to follow.


For a description of how this may have occurred, how to avoid it in the future, and for Apple's recommended actions read How to install adware.


Review your Gatekeeper settings: OS X : About Gatekeeper - Apple Support. Gatekeeper is designed to help prevent you from inadvertently installing garbage software.

I downloaded an Anti Virus but it didn´t work.


That is a separate problem and will require additional information. What product did you download?

Sep 19, 2016 8:17 PM in response to hatteresca

Thanks.


In the same manner as before, please navigate to the following folder, and take a screenshot:


/Library/LaunchAgents


There may be nothing in that folder, but if it contains anything please make sure the screenshot captures all its contents.

Repeat the above with the following folder:


/Library/LaunchDaemons


Please post those two screenshots in a reply.

Sep 28, 2016 4:26 PM in response to hatteresca

Thanks.


First, ensure you have a reliable backup of your Mac, in case something should go wrong with continued troubleshooting. To learn how to do that please read Use Time Machine to back up or restore your Mac - Apple Support. A backup is a fundamental prerequisite, regardless of your preferred method to uninstall adware, and would apply even if your Mac were running perfectly well.


This step is optional but will preclude any related inability to use your Mac: Restart in "Safe Mode", and log in: Try safe mode if your Mac doesn't finish starting up - Apple Support. Starting in Safe Mode takes longer than usual so let it finish.


In the first screenshot (~/Library/LaunchAgents) select the file containing the name "Javeview" and drag it to the Trash:


User uploaded file


You will be asked to authenticate. Confirm it is longer present in that folder. Empty the Trash.


Next: open Safari and select the Safari menu > Preferences... > Extensions. If you see any Extensions that you do not recognize or understand, simply click the Uninstall button and they will be gone. No Safari Extensions are required for normal operation. Then, select the General pane and review your Homepage selection. Repeat those equivalent actions for any other browser you may use.


You can then restart your Mac and use it normally.


Next: if you want to eradicate all remaining adware remnants post a screenshot of the following folder, in the same manner as you did earlier:


~/Library/Application Support


It is normal for that folder to contain many items, but anything associated with the above adware will bear identical names ("javeview" etc). You may or may not find anything with that name. If you do it can be removed if you wish, but don't remove anything if you are uncertain.


There may also be adware-associated programs in your Mac's Applications folder. Anything unwanted should be obvious to you, but again don't remove anything if you are uncertain.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Problem with a Disk Image Virus or something

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.