Virus on my MCP?

For some time now, while using my Mac, I have been receiving annoying pop-up

windows with text on my desktop that only appear for a few moments. It doesn't happen often

but when it happens it is a real torture. They appear briefly with a whistle.


Apparently, there is no relation with any of the installed applications.

Only, by running ClamXav, I find the file "Unix.Ransomware.Evilquest-9757372-0" 

(file associated with Facetime.app), as an infected file.

Unfortunately, I could not find this infected file in the quarantine folder, even using 

the view commands hidden files [CTRL + SHIFT +.] from the system root, or the other command from a Terminal window: "defaults write com.apple.finder AppleShowAllFiles TRUE; killall Finder"

So I couldn't remove it.


Can anyone help me?

P.S.:

These are the Machine/model info on my Mac: MacBookPro8,2 with macOS High Sierra version 10.13.6

Thank you very much for any suggestion/help you can provide to me.


Massimo


[Link Edited by Moderator]

MacBook Pro 15″, macOS 10.13

Posted on May 8, 2022 8:34 AM

Reply

Similar questions

10 replies
Sort By: 

May 8, 2022 10:03 AM in response to urbam

Bob, I run the tool and obtained the report, as plain text. With the "Copy" function on it, I tried to post here but I’ve exceeded the 5000 character limit for the post. How to use the additional text feature?

Strange thing: I removed ClamXav app, but it appear as last in the report yet (no longer in the application folder).


Reply

May 8, 2022 11:28 AM in response to urbam

Delete this file & restart...


~/Library/LaunchAgents/org.ioBroker.LaunchAtLogin.plist


~ tilde indicates your home folder

Apple hid the Users' Library folders...


Method 1:

1 From the Finder, select the Go menu at top of the screen, and choose Go to Folder.

2 In the window that opens, enter ~/Library/LaunchAgents, and click Go.

Reply

May 9, 2022 10:26 PM in response to BDAqua

The problem seems solved!

I should test my Mac over a longer period but I really believe that this time, thanks to your help, the inconvenience has been overcome. If it doesn't in the future, I will ask you again for help.


Thanks a lot to everyone!

Reply

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Virus on my MCP?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.