Finder Logged Out, Reset Wallpaper, Chrome Launched, Mounted Flash Installer on its own?

Discussion in 'macOS Sierra (10.12)' started by caoimhin, Dec 8, 2016.

  1. caoimhin macrumors member

    caoimhin

    Joined:
    May 11, 2006
    Location:
    Philadelphia
    #1
    I was in the middle of doing some housekeeping when Finder logged out on its own and prompted me to log in again. When I did, my wallpaper had been reset to the Sierra default. More curiously, three instances of the Flash installer package had been mounted to the desktop, and Chrome had launched (it is not my default browser).

    Very odd. Any idea what may have happened? I was not connected to WiFi, and was cleaning up old archived iMessage conversations when it happened.
     
  2. caoimhin thread starter macrumors member

    caoimhin

    Joined:
    May 11, 2006
    Location:
    Philadelphia
    #2
    Bump. Anyone have any clue? Very hard to find any reliable information on Mac malware, although I've seen somewhat similar issues reported with Flash installers arbitrarily appearing. Still doesn't explain the Chrome or desktop reset issues.
     
  3. fisherking macrumors 603

    fisherking

    Joined:
    Jul 16, 2010
    Location:
    ny somewhere
    #3
    try http://www.adwaremedic.com/index.php

    eject those installers; check your download folder for the .dmg files, and delete those. check in System Preferences>Users & Groups>Login Items, and delete anything that should not be there.

    anyone else with ideas?....
     
  4. caoimhin thread starter macrumors member

    caoimhin

    Joined:
    May 11, 2006
    Location:
    Philadelphia
    #4
    Thanks fisherking. Good call on Login Items. Forgot about that. Nothing suspicious there though. Just Dropbox and iTunes Helper. Hmm.
     
  5. DeltaMac macrumors 604

    DeltaMac

    Joined:
    Jul 30, 2003
    Location:
    Delaware
    #5
    Did you run the Malwarebytes app, downloaded from the link in fisherking's post?
     
  6. fisherking macrumors 603

    fisherking

    Joined:
    Jul 16, 2010
    Location:
    ny somewhere
    #6
    & did you check the downloads folder, for flashplayer installer dmgs?
     
  7. Partron22 macrumors 68000

    Partron22

    Joined:
    Apr 13, 2011
    Location:
    Yes
    #7
    I'd check that copy of Chrome carefully. Perhaps export bookmarks, delete the App and its prefs, and download a new copy from a known valid source.
     

Share This Page