I think my iMac is infected and could really use some help

Crysalice wrote:

I refused to do it even though they kept telling me how badly infected my computer was and dropped the price a couple times. I started feeling very scammed at that point and politely (about 20 times) asked him to remove himself. Finally, he gave up.

If you have ever used a credit card to pay a bill online the details are on your Mac.

There is no quick way to undo this intrusion.

Post the whole page, including the address please, it has been omited from your picture.

Here is the address from the page I went to:

Which is the address you stated.

And we are off topic.

Do you want to make your Mac safe again or not, if you do start a new post, now that you marked your own post as the solution you can expect less help.

If you do not care about security then I'll wish you a good day.

http://www.computerlivehelp.co/

So it's not .com, thanks

It's a very similar setup to the scam company I referred to earlier, LogMeIn drives the chat system and can do a remote installation simply, without alarming the user. (In the case I was involved with the act of agreeing to a 'scan' installed the remote system and generated a popup requesting a 'deeper' scan) which required the admin password to be entered.

The pickpockets hand is then in place.

No apologies needed, let's just get your Mac cleaned up and secure from prying eyes.

I would like to know (for my own efforts) where you were when you started the chat that led to this, if you can remember.

Crysalice wrote:

I clicked on apple support and it came up, That's why I stupidly went along with it. I thought Apple sponsored them.

Are you sure that you were on an Apple Support page, how did you get to Apple support, from a Google search or something similar, or from an Apple site?

(The lady I referred to earlier thought she was on an Apple site but it was not, it was found from a search using Google, and it looked pretty convincing)

Noting the 'this add brought to you by macsave' in the screenshot : it may be a rogue extension or plug-in , rather than the more usual paid search result links/ads.

Yes, not sure what that is, or what it means.

Before you go, it may be helpful for others if you could look at Safari - Preferences - Extensions & report the names of any that are active.

Crysalice wrote:

Yes, that's what it appears. I was on the Apple page and clicked on support and with perfect timing, it popped up. It still pops up once in awhile, but not always right away. I'm still kicking myself. I'm going to attempt to erase and reinstall. I'm not really great with these things, took me all morning to back up so I might not be back for awhile, lol.

Then take your time and ask as many questions as you want, one of us will always be around to answer. Most of all take the time to verify that your backup is complete, every thing else can be done over if need be 🙂