233      iPhone_iPad_Mac_apple

Time Machine Bug, Corrupt Disk or Malware?

Hi everyone, new here but in need of some help, hope I've posted in the right place.

I have a 13" Macbook Pro early 2011: Running MacOS Sierra 10.12.4

This morning I left the macbook running and the battery died and it shut off. Afterwards, I charged the battery, and after the macbook switched on, I used it usual. I have several tabs open in Safari and saved tabbed sessions in Pages and Numbers etc when I open them. This morning I believe I only had Safari running after having closed Firefox earlier. I decide to do a back up to an external hard drive via Time Machine after closing all applications.

The backup was stuck on 'Preparing back up' for an unusually long time. Last backup was last Thursday 24th August 2017 so it shouldn't take long. I stopped the back up and clicked on 'back up now' again and waited. Much quicker and the back up completed. I did another backup immiedately which was instant, then closed Time Machine and all other software before starting Safari and Dr. Cleaner

I ran the Dr. Cleaner Clean feature to clean up my RAM I believe - not the system cleaner/optimiser. When Safari opened, it opened at the homepage and none of my tabs were present. 'Open windows from last sesson' was greyed out, but open last closed tab was present - which opened the last tab I closed but not the tabs from the last session. No 'resotre previous session' etc were available. I closed and reopened  Safari and tried again, no change. I ran Dr. Cleaner (not the system cleaner/optimiser) - no change. I turned the macbook pro on and off - no change. I then restored documents from Time Machine to both earlier back ups from today and to last Thursday's - no change.

Then I opened Numbers and noticed it's previous session was also lost. Note - all my Safari history was available but the latest LastSession.plist file was missing and I presume something similar for Numbers. I held the on/off button on the Macbook to force it off. Restarted and tried all again - no change.

I wanted to see if Dr. Cleaner was messing up - so I ran it again but this time, my Documents folder was deleted. It was completely empty. I paniced and switched it off by holding the power button again. I disconnected and reconnected the external hard drive, powered up and held Command and R to restore from Time Machine back up -

After fully restoring the macbook from the external hard drive, everything seemed to work fine; my documents seemed to be back - except Safari still didn't have my previous tabs.

I ran 'first aid' in disk utility which said all was fine, then restarted holding Command + R to run disk utility and first aid again - this time it had 'updating boot support partitions as required' and then said 'operation succesful' and I clicked done.

I set up all account details and iCloud details after the restore so decided to restart but this time Safari opens my last page (which was my history page I had open to check) and a new tab which had Garagband written and a bunch of Chinese writing. I have never been to that site but noticed it was a local file:

file:///Applications/GarageBand.app/Contents/Resources/garageband.help/Con....

I took a photo on my phone and closed the macbook.

My thinking is:

A. It might be a Time Machine bug that set all of this off?

B. It might be a disk error - corrupted disk (my macbook gets pretty hot recently with the fans roaring)

C. It might be malware/virus/rootkits etc?

Any advice regarding the situation? Please and thank you.

Well, there's at least one piece of malware involved: Dr. Cleaner. For the rest, I suggest making an Etrecheck report and posting the results here.

https://etrecheck.com/

最后更新：2017-08-31 00:08:24

  上一篇： What is the passcode character limit in ios 10

  下一篇： Are instructions for using Windows PC for optic...