There's no such thing as a stupid question, but they're the easiest to answer.
JoinTour
Login
 
Tag Cloud
acer black screen blue screen boot bsod computer connection crash css dell display driver drivers email error excel explorer firefox firefox 3 game hard drive internet internet explorer itunes laptop lcd linux malware network networking nvidia outlook outlook 2003 outlook express partition printer problem ram router slow sound sprtcmd.exe trojan usb video virus vista windows windows xp wireless
Apple Macintosh
Search
Search in:
 
Advanced Search
Tech Support Guy Forums > Operating Systems > Apple Macintosh >
How do I tell if my Mac has a virus?


HELLO AND WELCOME! Before you can post your question, you'll have to register -- it's completely free! Click here to join today! We highly recommend that you print a copy of our Guide for New Members. Enjoy!

 
Thread Tools
Farmgirl22's Avatar
Computer Specs
Distinguished Member with 4,272 posts.
 
Join Date: Jun 2006
Location: In a void...
Experience: Intermediate
27-Jun-2008, 10:32 AM #1
How do I tell if my Mac has a virus?
I know, it's a weird couple of questions, so bear with me--hopefully it's nothing major...*grimace*

1) I am wondering about a virus because Firefox is acting all wonky on me--and it started when I was on the blogger website. The exact link is HERE. I don't know if it's a direct correlation or not. Sorry.

2) Part of Firefox's wonkiness was that I would click on a hyperlink in Mail (for TSG) and instead of pulling up the page, it would think for a while and then load a blank tab--sometimes I would get lucky and it would load the page, most times it wouldn't. Whenever it started to act up, I couldn't get either FF or Mail to close--I'd just get that spinning circle thingy and a couple of hours later I'd just hard reboot it (no, I didn't sit and watch it for a couple of hours, in case you were concerned! ).

I thought at first it was just FF having add-on issues, until Mail started being goofy as well...

Thanks for the help guys--I'd have posted this in security, but it seems as though most times it's just Windows they troubleshoot over there.
__________________
Creative, fun, unique, & handmade!!

"Indecision is the key to flexibility."

Love this song...no vid, just music.


No Way, No How, No McCain!! BUT, NoBama either!!
TD912's Avatar
Member with 37 posts.
 
Join Date: Jun 2008
Experience: Semi-Advanced Mac User
28-Jun-2008, 11:31 PM #2
It's most likely not a virus. I'm not saying Macs can't get them, but it is highly unlikely visiting a webpage in Firefox allowed a Mac-specific virus to install.

The beachball may mean that something else is causing the problem, anything from a bad hard-disk or RAM to a broken plug-in.

Try making a new user account, and see if anything happens in that account. Don't transfer any files to the new account, just see if the same problems happen there. If it's fine, it narrows the problem down to something in your user account. If it isn't fine, you probably have a bigger problem.

Open "Disk Utility" in /Applications/Utilities, and do a "Verify Disk" (NOT Permissions) to check if your disk is OK. If it comes back without any errors, it should be fine. Also check the "SMART Status" near the bottom of the Disk Utility window.

Open the "Console" also in /Applications/Utilities, and search the logs for anything suspicious. Usually the system.log and console.log are the most important. Note that the lines should be marked with a timestamp, so try to find something in the logs at a time you were experiencing the problem, and copy/paste the results back here.

Also, whatever you do, do NOT buy anything called "MacScan" or "Intego AV". These companies are trying to scare Mac users into purchasing worthless software by running large PR campaigns saying things basically like "Mac trojan found! Experts says Macs are not safe from viruses! Buy MacScan today and feel confident your Mac is safe!". As long as you aren't stupid and download random programs from 'bad' sites, you are fine.
__________________
  • PowerMac G4 "QuickSilver", 733MHz, Mac OS 10.4.11, 1.25GB RAM
  • PowerMac G3 "Yosemite", 450 mHz, 10.4.11, 1GB RAM
  • Pentium 4 HT "Northwood", 2.6Ghz, WinXP SP3, FIC P4-865PE Max, 1.25GB PC3200 DDR
Repairing Permissions is VOODOO!
Farmgirl22's Avatar
Computer Specs
Distinguished Member with 4,272 posts.
 
Join Date: Jun 2006
Location: In a void...
Experience: Intermediate
01-Jul-2008, 12:58 PM #3
Something that looked different from most of the "posts": From System.log.

Jun 26 09:54:27 Macintosh kernel[0]: pages 116772, wire 26505, act 9856, inact 25026, zf 10720, could discard act 21463 inact 23202

Jun 26 09:54:27 Macintosh kernel[0]: IOUSBWorkLoop::closeGate - interrupt Thread being held offEnabling XMM register save/restore and SSE/SSE2 opcodes

Jun 26 09:54:29 Macintosh kernel[0]: 11D beacon causing regdomain change to CC 840
Jun 26 09:54:29 Macintosh kernel[0]: en1: 802.11d country code set to 'US'.
Jun 26 09:54:29 Macintosh kernel[0]: en1: Supported channels 1 2 3 4 5 6 7 8 9 10 11 36 40 44 48 52 56 60 64 149 153 157 161 165
Jun 26 09:54:30 Macintosh /usr/sbin/rpc.net: messageType e0000300, arg 14063bb0\n

Jun 26 09:54:31 Macintosh launchd: Server 613b in bootstrap 1103 uid 0: "/usr/sbin/lookupd"[269]: exited abnormally: Hangup

Jun 26 09:54:31 Macintosh configd[37]: posting notification com.apple.system.config.network_change This happened twice--once before this one.

Jun 26 09:54:31 Macintosh launchd: Server 0 in bootstrap 1103 uid 0: "/usr/sbin/lookupd"[271]: exited abnormally: Hangup

Jun 26 11:17:42 Macintosh kernel[0]: 11D beacon causing regdomain change to CC 840

Jun 26 11:17:42 Macintosh kernel[0]: en1: 802.11d country code set to 'US'. This happened several times too...

Jun 26 13:14:52 Macintosh /usr/sbin/rpc.net: Set -I Callback for 6/26/2008 23:25.\n

Jun 26 13:14:52 Macintosh kernel[0]: IOUSBWorkLoop::closeGate - interrupt Thread being held offEnabling XMM register save/restore and SSE/SSE2 opcodes

Jun 26 13:26:59 localhost kernel[0]: HFS: Removed 1 orphaned unlinked files
Jun 26 13:26:59 localhost kernel[0]: Jettisoning kernel linker.
Jun 26 13:26:59 localhost kernel[0]: Resetting IOCatalogue.
Jun 26 13:26:59 localhost kernel[0]: display: family specific matching fails

Jun 26 13:26:59 localhost kernel[0]: Previous Shutdown Cause: 3
Jun 26 13:26:59 localhost kernel[0]: display: family specific matching fails

Those are all probably pretty common things, but since I've never looked at one of those logs, I have no idea what to look for.
__________________
Creative, fun, unique, & handmade!!

"Indecision is the key to flexibility."

Love this song...no vid, just music.


No Way, No How, No McCain!! BUT, NoBama either!!
Farmgirl22's Avatar
Computer Specs
Distinguished Member with 4,272 posts.
 
Join Date: Jun 2006
Location: In a void...
Experience: Intermediate
01-Jul-2008, 01:03 PM #4
I'm guessing that by "bad" you mean like porn sites??? I don't visit those, and I don't download much of anything most of the time--I do the add-ons from Mozilla once in a great while, the occasional assignment for class in PDF form, and that's pretty much it.
__________________
Creative, fun, unique, & handmade!!

"Indecision is the key to flexibility."

Love this song...no vid, just music.


No Way, No How, No McCain!! BUT, NoBama either!!
TD912's Avatar
Member with 37 posts.
 
Join Date: Jun 2008
Experience: Semi-Advanced Mac User
01-Jul-2008, 01:20 PM #5
"Bad" basically means any site that is full of malware, which I guess would include some porn sites. It could also be those "free screensaver" websites, or "download cool smilies" websites.

I'm not that great with logs, but I *think* the problem has something to do with networking, because of the "com.apple.system.config.network_change" message, as well as "Jun 26 09:54:29 Macintosh kernel[0]: en1". "en" usually means a wireless network connection.

This is just a guess, but it looks like something is wrong with your wireless connection. I'm not exactly sure what. Sorry.

Are you sure you have the latest software updates from Apple? I think there was a recent update that fixed some wireless networking problems. You can check for updates by going "Apple" menu>"Software Update...".

Seems like a few other people are having similar problems.
__________________
  • PowerMac G4 "QuickSilver", 733MHz, Mac OS 10.4.11, 1.25GB RAM
  • PowerMac G3 "Yosemite", 450 mHz, 10.4.11, 1GB RAM
  • Pentium 4 HT "Northwood", 2.6Ghz, WinXP SP3, FIC P4-865PE Max, 1.25GB PC3200 DDR
Repairing Permissions is VOODOO!
Adrianking99's Avatar
Computer Specs
Junior Member with 9 posts.
 
Join Date: Oct 2006
Experience: Intermediate
29-Jul-2008, 06:36 AM #6
Spinning circle thing...
No need to wait 2 hours and reboot. If you get the spinning beachball of irritation again, you can just quit the application in which it appears and then relaunch it. Or you can 'Force Quit' the application. It's halfway down the Apple menu (or hit Command-option-Escape). This will bring up a window showing all open applications. If, next to Firefox (or Mail, or any errant app) there is a message saying, in brackets '(not responding)' then Force Quit, and relaunch the application. By the way, do you get the same probs in Safari? Or Camino (also free)? If you do, then the problem is likely to be with your wireless network as you have already learned, or with the server at the Firefox blog site.
Remag1234's Avatar
Computer Specs
Junior Member with 22 posts.
 
Join Date: Aug 2008
Experience: Intermediate
30-Aug-2008, 06:10 PM #7
Just clicked and it opens to Jeff's Home Renovation page. It works fine.
ferrija1's Avatar
Computer Specs
Distinguished Member with 9,695 posts.
 
Join Date: Apr 2006
Location: Pittsburgh, PA
Experience: Mac Addict
30-Aug-2008, 08:04 PM #8
I wouldn't worry, Firefox has acted oddly for me many times, wrongly leading me to believe there's something seriousily wrong with my system. Try running Fx in Safe Mode for a day.
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
WELCOME TO TECH SUPPORT GUY! Are you looking for the solution to your computer problem? Join our site today to ask your question -- for free! Our site is run completely by volunteers who help people like you solve computer problems. See our Welcome Guide to get started.



Thread Tools


You Are Using:
Server ID
Advertisements do not imply our endorsement of that product or service.
All times are GMT -4. The time now is 09:14 PM.
Copyright © 1996 - 2008 TechGuy, Inc. All rights reserved.
Powered by vBulletin, Copyright © 2000 - 2008, Jelsoft Enterprises Ltd.
Search Engine Optimization by vBSEO 3.1.0
Powered by Cermak Technologies, Inc.