MacBook Air hacked, any hope fixing it?

Kkrhea Said:

"[...]How can they not see all the extra programs that do not hide what they are being used for? I do not have one file or folder but memory is almost full. At this point I cannot even open a file.[...]"

-------

Reinstalling the macOS Anew:

If nothing resides in the drive, then erase the partition seeing if it all gets deleted. Then, create the partition. If you cannot connect to Apple's servicer, then try a different network.

Try Using a USB Bootable Installer:

Create a USB Bootable Installer for your macOS. Erase the hard drive. Then, install this macOS. Go Here: How to Create a Bootable Installer for macOS - Apple Support

Kkrhea Said:

"MacBook Air hacked, any hope fixing it?: [...]I’m the only user, so thought I was only admin, but Mac tells me I’m not authorized to change any settings. Won’t allow me to stop sharing, I’ve tried, believe me.[...]"

-------

Create a New User:

Have you tried creating a new administrator seeing if you get this error?

Kkrhea Said:

-----

Some Thoughts:

A. Knowledgeable:

“The best advice I’ve heard. [...]Thank you guys! Y’all are very knowledgeable.”

I thank you for those complements. Just thought I'd say that I am the TheLittles (is just a username on these forums - nothing plural).

B. Dimmed and Unauthorized:

"ll options are dimmed and it says I’m not authorized."

If all options are dimmed in Disk Utility, then the drive may be unmounted, in which cases you’d click the Mount button. If it reads Unmount, then you should Unmount the drive and then Mount the drive.

C. Windows Installed:

“[...]From what I’m seeing it looks like windows has been installed??? Is that possible? And Bootcamp. Do you think I’m in over my head?[...]”

Please Provide a Photo for me: No. I do not think you at over your head🙂. Please take a photo of your what you are seeing on your screen for me. And then attach it as a reply to this reply.

D. ”Not Authorized”:

"[...]All options are dimmed and it says I’m not authorized.[...]"

If there are items on there then that is a whole different story, and you should not erase the drive, but rather try and recover these. So, which is the case?: (A) Is the drive empty? Or (B) are there items on the drive?

E. Erasing the Damaging:

“[...]If I erased it all would it damage anything?[...]”

Yes: Erasing the drive will damage everything, in that all will be deleted. Perhaps I may have misread you. Your above reply, it reads: “I do not have one file or folder”. So, if nothing is on your drive, then there is nothing to worry about.

Kkrhea Said:

"[...]I meant I do not have any personal files, pics, work files, etc. Nothing I would care if I erased it. I have several disks utilities. I’m worried I may erase the wrong disk[...]”

———-

Some Photos would Help:

There is only one Disk Utility on a single computer. If there are several disks, then there would be several physical hard drives. So, you may be getting the word “Disk” mistaken for “Volume”. So, please provide a photo of what you see when you boot into Recovery Mode and a photo of what you see when you open Disk Utility.

You would attach the photos as their own replies to this thread by clicking on the icon that looks like two mountains and the sun (first item-in from the right). Important: If there is personal info (names, etc. in the photo, then cover it using the Photos app.

I am eager to see this.

Thanks.

Kkrhea Said:

"My MacBook has several hard drives. The first time I took it to be repaired when I got it back it had two hard drives. They are even displayed on the (?) screen. One is called untitled & untitled 2 ."

-------

Viewing your Internal Drives:

1. Go to: Applications
2. Select: Utilities
3. Select: Disk Utility
4. View: Left Side
5. View your Hard Drives (On the lefthand-side of the window).

If you see more than one drive, then there is more than one internal drive. So, see if you can view how many drives you have.

Screenshot:

Kkrhea Said:

"Now it’s saying I’ve exceeded my responses in red on this site"

-------

Making Another Reply:

If you cannot reply, then make another post, and I'll keep an eye out for it. Place three asterisks infront of the post, so I can easily recognize it. Your post will be seen here: https://discussions.apple.com/profile/Kkrhea/subscriptions

Kkrhea Said:

"[...]Within 2 days, I’m just going to say it, the Hacker, had taken over my old Apple ID, and phone number and was pretending to be me.[...]"

-------

You are welcome.



Based on everthing you said, there are things to do from here:

What to Do:

A. View your Devices:

Go here, and see if an unrecognizable device is seen under your Apple Account: Check your Apple ID Device List to See where you're Signed in - Apple Support

B. Modify your Credentials:

Being assumedly hacked, modify your credentials, starting with a new password. If their device is shown, then they have access to all of your information.

• Modify: your login credentials (Using Both a New eMail and a New Password for each and all sites)
• Associate: a different method of payment to your account
• Enable: Two-Factor Authentication for Apple ID and for all other accounts that have such an applicable option

C. Contact Apple Support:

Explain to Apple what has occurred, and see what they have to gay on purchases.

• Contact Us - Choose Locations
• U.S.A. (800)MY-APPLE
• Proceed from there as necessary

Note: Phone calls are taking a bit to go through at the moment, due to lots of calls. With the Coronavirus Pandemic, many are at home at the moment, with much time on their hands to contact Apple. So, just stay on the line, and you will get through :)

D. Contact your Financial Institution:

With purchases not being what they should be, contact you bank, and have them secure it - Perhaps a new PIN, even.

E. About these Forums:

Please note that these are user-to-user forums. We are not Apple; we are just everyday Apple users like yourself. So, please contact Apple, by all means.