HELP

Question

Level 1

0 points

HELP

HELLO, MY NAME IS CINDY. I HAVE A QUESTION I NEED HELP WITH. I AM 50 YRS OLD & MY DAUGHTER GIVES ME THIS APPLE MINI -MAC SAFARI I HAD NO IDEA EVEN HOW TO START THE THING AT FIRST. BUT AS TIME WENT ON I WAS LEARNING ABOUT APPLE AND THERE PRODUCTS AND LEARNING HOW TO DO SAFARI?? WELL TIME WENT ON I LOOKED AT MY COMPURTER NEW SOMETHING WAS DIFFERENT- NOT RIGHT .. COME TO FIND OUT SOMEBODY HACKED IN MY COMPURTER GOT ALL MY INFO AND THEY STOLE MY IDENITY..... THE TOOK MY FILES IMPORT ALL AND SWITCHED MAC OVER TO WINDOWS .. WHO EVER DID THIS KNOWS CODS.. I THOUGHT APPLE WAS ONE OF THE "BEST" IN SECURITY. WELL I AM ASKING SOMEBODY TO HELP ME WIPE ALL INFO OFF MY APPLE MINI -MAC SO I CAN START FRESH. I HAVE LOOKED INTO A RESTORE DISK. I JUST CANT AFFORD IT RIGHT AT THIS TIME. I DONT WANT TO TELL MY DAUGHTER WHAT HAS HAPPENED.AND SHE DIDNT SEND ME THE DISK WHEN SHE SENT ME THE COMPURTER.... I LIVE IN DALLAS TX & SHE LIVES IN VIRGINIA. SO PLEASE CAN ANY BODY HELP.. I CALLED APPLE AND THEY WONT HELP WITHOUT CASH

SO PLEASE HELP THANK YOU CINDY1023

Mac mini (Early 2009), Mac OS X (10.6.8)

Posted on May 15, 2012 12:45 AM

Reply

Answer 1

BDAqua

Level 10

238,997 points

May 15, 2012 1:01 AM in response to cindy1023

Hi Cindy,

Change any passwords ASAP... after doing the below.

Get this...

http://support.apple.com/kb/HT5247

A couple of decades on you you whipersnapper! 😉

Without the Discs you can't Restore or do much. 😟

If you call AppleCre with the Serial# handy, you can get Replacement original Discs for free or maybe $30.

Disable Java in your Browser settings, not JavaScript.

http://support.apple.com/kb/HT5241?viewlocale=en_US

http://support.google.com/chrome/bin/answer.py?hl=en-GB&answer=142064

http://support.mozilla.org/en-US/kb/How%20to%20turn%20off%20Java%20applets

Little Snitch, stops/alerts outgoing stuff...

http://www.obdev.at/products/littlesnitch/index.html

Flashback - Detect and remove the uprising Mac OS X Trojan...

http://www.mac-and-i.net/2012/04/flashback-detect-and-remove-uprising.html

In order to avoid detection, the installer will first look for the presence of some antivirus tools and other utilities that might be present on a power user's system, which according to F-Secure include the following:

/Library/Little Snitch

/Developer/Applications/Xcode.app/Contents/MacOS/Xcode

/Applications/VirusBarrier X6.app

/Applications/iAntiVirus/iAntiVirus.app

/Applications/avast!.app

/Applications/ClamXav.app

/Applications/HTTPScoop.app

/Applications/Packet Peeper.app

If these tools are found, then the malware deletes itself in an attempt to prevent detection by those who have the means and capability to do so. Many malware programs use this behavior, as was seen in others such as the Tsunami malware bot.

MadMacs0 says...

This script from F-Secure is the only one I'm currently recommending http://www.f-secure.com/weblog/archives/00002346.html

http://reviews.cnet.com/8301-13727_7-57410096-263/how-to-remove-the-flashback-ma lware-from-os-x/

http://x704.net/bbs/viewtopic.php?f=8&t=5844&p=70660#p70660

Open DNS also blocks the FlashBack thing...

http://blog.opendns.com/2012/04/09/worried-about-mac-malware-just-set-up-opendns /

Reply