Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Fake Tech support

I'm ashamed to say that I think I may have fell for a fake tech support line today in which I gave them access to my computer for a few minutes. I'm running Norton Anti-Virus to check for threats and I don't see any new files in my download folder or in my applications. Is there any other way that I can check to see if anything malicious was installed on my computer? Should I completely wipe my mac clean and restore it from a backup that I performed earlier in the day? I'm not sure if I'm being paranoid of if this is essential.

MacBook Pro, OS X Mavericks (10.9.1)

Posted on Jan 22, 2014 6:19 PM

Reply
6 replies

Jan 22, 2014 6:29 PM in response to LincolnColorado

You're right to be paranoid.


Did you initiate the call or did the support folks call you? What was the name of the company? Did you have to provide your passwords at any point?


I've only ever let one company - Parallels - have access to my computer for troubleshooting. I don't make a habit of it.


There is one company that I've heard of that provides that type of 'support' and they have a sneaky way of grabbing your attention when you Google something such as "Mac Microsoft office trouble."


And last, did they charge you anything?


Clinton

Jan 22, 2014 6:34 PM in response to clintonfrombirmingham

I contacted them after googling "gmail technical support." The number was 1-888-334-5804. I'm not sure what the company name is, but their number pops up all over the place when you google it. I was just in a hurry and thought I was talking to google technical support. Totally stupid of me and I should have known better. When he asked to take control I wasn't suspicious since I initiated the call, but after thinking about it I realized that anybody can get their number posted on a google search. I've recently had two other known and trusted IT companies help me with issues by using the same method of taking over my computer, so I wasn't even thinking anything unusual. I did not pay him anything, but he did offer to solve my problem for $250. That was an immediate red flag that it wasn't legit and I disconnected from him and immediately began a virus scan.

Jan 22, 2014 6:45 PM in response to clintonfrombirmingham

OK, next question, what's the best way to wipe the mac clean and reinstall? I just did a back up today with Time Machine, should I do it from there? Or should I follow these instructions? http://support.apple.com/kb/PH14243

I've never had to do this before.

Also, this is the first I've heard of a Norton problem. What antivirus works best with Mac? Kind of ***** I just bought Norton for two of my macs in the last couple of weeks.

Thanks for the help.

Jan 22, 2014 7:03 PM in response to LincolnColorado

Restore from a backup created prior to granting remote access to your Mac. Boot OS X Recovery, and select "Restore from Time Machine Backup":


User uploaded file


Each backup is time stamped as shown:


User uploaded file


That will ensure whatever the tech support scam artists may have installed will be gone.


Uninstall Norton. It is capable of nothing beneficial and is only likely to cause problems. Not being victimized by fraudulent tech support such as you described begins and ends with your own common sense, a responsibility that cannot be delegated to any product.


... What antivirus works best with Mac?



OS X already includes everything it needs to protect itself from viruses and malware. Keep it updated with software updates from Apple.


A much better question is "how should I protect my Mac":


  • Never install any product that claims to "speed up", "clean up", "optimize", or "accelerate" your Mac. Without exception, they will do the opposite.
  • Never install pirated or "cracked" software, software obtained from dubious websites, or other questionable sources. Illegally obtained software is almost certain to contain malware.
  • Don’t supply your password in response to a popup window requesting it, unless you know what it is and the reason your credentials are required.
  • Don’t open email attachments from email addresses that you do not recognize, or click links contained in an email:
    • Most of these are scams that direct you to fraudulent sites that attempt to convince you to disclose personal information.
    • Such "phishing" attempts are the 21st century equivalent of a social exploit that has existed since the dawn of civilization. Don’t fall for it.
    • Apple will never ask you to reveal personal information in an email. If you receive an unexpected email from Apple saying your account will be closed unless you take immediate action, just ignore it. If your iTunes or App Store account becomes disabled for valid reasons, you will know when you try to buy something or log in to this support site, and are unable to.
  • Don’t install browser extensions unless you understand their purpose. Go to the Safari menu > Preferences > Extensions. If you see any extensions that you do not recognize or understand, simply click the Uninstall button and they will be gone.
  • Don’t install Java unless you are certain that you need it:
    • Java, a non-Apple product, is a potential vector for malware. If you are required to use Java, be mindful of that possibility.
    • Disable Java in Safari > Preferences > Security.
    • Despite its name JavaScript is unrelated to Java. No malware can infect your Mac through JavaScript. It’s OK to leave it enabled.
  • Block browser popups: Safari menu > Preferences > Security > and check "Block popup windows":
    • Popup windows are useful and required for some websites, but popups have devolved to become a common means to deliver targeted advertising that you probably do not want.
    • Popups themselves cannot infect your Mac, but many contain resource-hungry code that will slow down Internet browsing.
    • If you ever see a popup indicating it detected registry errors, that your Mac is infected with some ick, or that you won some prize, it is 100% fraudulent. Ignore it.
  • Ignore hyperventilating popular media outlets that thrive by promoting fear and discord with entertainment products arrogantly presented as "news". Learn what real threats actually exist and how to arm yourself against them:
    • The most serious threat to your data security is phishing. To date, most of these attempts have been pathetic and are easily recognized, but that is likely to change in the future as criminals become more clever.
    • OS X viruses do not exist, but intentionally malicious or poorly written code, created by either nefarious or inept individuals, is nothing new.
    • Never install something without first knowing what it is, what it does, how it works, and how to get rid of it when you don’t want it any more.
    • If you elect to use "anti-virus" software, familiarize yourself with its limitations and potential to cause adverse effects, and apply the principle immediately preceding this one.
    • Most such utilities will only slow down and destabilize your Mac while they look for viruses that do not exist, conveying no benefit whatsoever - other than to make you "feel good" about security, when you should actually be exercising sound judgment, derived from accurate knowledge, based on verifiable facts.
  • Do install updates from Apple as they become available. No one knows more about Macs and how to protect them than the company that builds them.


Summary: Use common sense and caution when you use your Mac, just like you would in any social context. There is no product, utility, or magic talisman that can protect you from all the evils of mankind.

Fake Tech support

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.