OSX BookMac virus unable to remove

Joined
Jun 2, 2012
Messages
3
Reaction score
0
Points
1
I have these 2 virus on my MacBook unable to remove them.
Win32:Sality-FUM [Drp] (now converted as Win32:Zhelatin-gen2)
and Win32: Patched-AFX[trj]
My Avast antivirus notice them but cannot
remove from BOOTCAMP/pagefile.sys and BOOTCAMP/Program
Files/Graugon/MPEG/ljt.exe
Bitdefender do not notice them either Sophos and iAntiVirus

I have also a WindowsXP partition on this Macbook, thanks for your reply
Regards,
Erpo
 

vansmith

Senior Member
Joined
Oct 19, 2008
Messages
19,924
Reaction score
559
Points
113
Location
Queensland
Your Mac's Specs
Mini (2014, 2018, 2020), MBA (2020), iPad Pro (2018), iPhone 13 Pro Max, Watch (S6)
Run the AV scan in Windows since the AV scanner is picking up viral content located in your BootCamp install. I'm not sure why it's picking up pagefile.sys but I'm willing to bet that this is the OS X AV program looking at it and not recognizing it.
 

dtravis7


Retired Staff
Joined
Jan 4, 2005
Messages
30,133
Reaction score
703
Points
113
Location
Modesto, Ca.
Your Mac's Specs
MacMini M-1 MacOS Monterey, iMac 2010 27"Quad I7 , MBPLate2011, iPad Pro10.5", iPhoneSE
Agreed completely with Van. Those are Windows Virus's. Use a Virus Scanner in Windows. Microsoft Security Essentials is one good one and it's free.
 
OP
E
Joined
Jun 2, 2012
Messages
3
Reaction score
0
Points
1
Win32....virus

Thanks for your replies,
I already scan the Windows XP partition with AVG and didn't trace any virus.
I am going to download the same Avast anti virus to rescan that partition.
PS: Nice pic of Albert Camus
 

cwa107


Retired Staff
Joined
Dec 20, 2006
Messages
27,042
Reaction score
812
Points
113
Location
Lake Mary, Florida
Your Mac's Specs
14" MacBook Pro M1 Pro, 16GB RAM, 1TB SSD
By the way, the reason Avast for Mac can't remove that virus is that the Boot Camp partition, where it found the two files, is read-only to OS X. If you were running a R/W driver, it would be no problem.

AVG was a good, free anti-virus back in the day. It morphed into an ad-riddled, inefficient mess several years ago, and I no longer recommend it. Avast isn't much better in my experience. With that said, dtravis7's recommendation of MSE (Microsoft Security Essentials, also free) works quite well for basic AV capabilities. It's unobtrusive, but still very effective.
 
Joined
Nov 28, 2007
Messages
25,564
Reaction score
486
Points
83
Location
Blue Mountains NSW Australia
Your Mac's Specs
Silver M1 iMac 512/16/8/8 macOS 11.6
Another vote for MSE. Download it, uninstall the rest.
 
OP
E
Joined
Jun 2, 2012
Messages
3
Reaction score
0
Points
1
Avast w/ Windows XP

After downloaded and installed Free Avast version it's looks like stuck on the update process. No overall progress ! is that the way Avast is updating ?
 
Joined
Nov 28, 2007
Messages
25,564
Reaction score
486
Points
83
Location
Blue Mountains NSW Australia
Your Mac's Specs
Silver M1 iMac 512/16/8/8 macOS 11.6
Ahh well we did try suggesting Microsoft Security Essentials. When using Windows why not use their own free software?
 

cwa107


Retired Staff
Joined
Dec 20, 2006
Messages
27,042
Reaction score
812
Points
113
Location
Lake Mary, Florida
Your Mac's Specs
14" MacBook Pro M1 Pro, 16GB RAM, 1TB SSD
After downloaded and installed Free Avast version it's looks like stuck on the update process. No overall progress ! is that the way Avast is updating ?

Avast = crap :)
 
Joined
Nov 28, 2007
Messages
25,564
Reaction score
486
Points
83
Location
Blue Mountains NSW Australia
Your Mac's Specs
Silver M1 iMac 512/16/8/8 macOS 11.6
With a capital C please!
 
Joined
Nov 8, 2010
Messages
967
Reaction score
4
Points
18
Location
Indiana
Your Mac's Specs
Main-11" Air, iPhone 6+, iPad Mini 3, Hi-Fi Extras- Too many to count
Microsoft security essentials seems to be the best AV for windows from what i have seen. Also try Malware-Bytes.
 

Shop Amazon


Shop for your Apple, Mac, iPhone and other computer products on Amazon.
We are a participant in the Amazon Services LLC Associates Program, an affiliate program designed to provide a means for us to earn fees by linking to Amazon and affiliated sites.
Top