Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

My mini caught a bug or virus, the ended up with loginrescueme.com. So I did all I knew how to clean up my mini and keep her safe. Then this morning, I saw that in my System Preferences, Startup Disk, I now have an option of "Network Startup" that is

My mini caught a bug or virus, the ended up with loginrescueme.com. So I did all I knew how to clean up my mini and keep her safe. Then this morning, I saw that in my System Preferences, Startup Disk, I now have an option of "Network Startup" that was not there last night and I don't know how to get rid of it. I want to get rid of whatever brought the "loginrescueme.com." in the first place. In system preferences, I have no sharing of any kind, and nothing marked at startup or spotlight. Any help is GREATLY appreciated.

Mac mini, Mac OS X (10.6.8)

Posted on Nov 30, 2014 4:29 AM

Reply
9 replies

Nov 30, 2014 4:40 AM in response to gwennoack

You're going to need to be more specific about what exactly is going on. Malware cannot install itself on your Mac, and the "logmeinrescue.com" site (assuming that's the one you meant... loginrescueme.com does not exist) is a legit site associated with the LogMeIn remote access software.


Did you see an alert pop up telling you that you have a virus, and prompting you to call a number, where someone directed you to a site where you downloaded LogMeIn and used it to give them remote access to your Mac? If so, you have been scammed, and your Mac should now be considered compromised. You will need to erase the hard drive, reinstall your apps from scratch and restore only documents (ie, no settings, apps, etc) from a backup.


If something different happened, please explain what that was.

Nov 30, 2014 5:18 AM in response to gwennoack

Logmein Rescue is one of the modules available from Logmein for specialised usages (there's a conference module etc). It's legitimate but whoever was on the other end of it was most likely not.


If a 3rd party logged into your Mac consider it entirely compromised, in addition to Thomas's advice you should change any and all credit cards, bank accounts, purchase accounts etc, anything that is on your Mac that can be used to steal from you.

Nov 30, 2014 2:41 PM in response to Csound1

Csound, I have turned off and disconnected power from my mini and when I strip and reload my hard- drive, I will have my internet disconnected. I seriously doubt that I had anything about banking or finances on the system outside of bookmarked on Safari.... No Quicken or anything like that, just homework and photos. So do you still think I need to change all my stuff?

Nov 30, 2014 5:43 PM in response to gwennoack

So, just to be clear, you got a pop-up and called the number, and they directed you to install LogMeIn and then gained control of your Mac through that? If that's the case, your Mac cannot be considered safe to use. The people at that number are scammers, and may very well have done things to your Mac that no anti-virus software would ever detect and that a Mac security expert would be hard-pressed to find. (Keep in mind that the average Mac tech is quite far from being a security expert.)


Thus, you will need to erase the hard drive and reinstall everything from scratch. This must be done properly, as restoring the wrong things could restore something malicious.


For instructions on how to do this properly, see:


How to reinstall Mac OS X from scratch


(Fair disclosure: I may receive compensation from links to my sites, TheSafeMac.com and AdwareMedic.com, in the form of buttons allowing for donations. Donations are not required to use my site or software.)

Dec 30, 2014 12:36 PM in response to thomas_r.

Thanks for your help Thomas. I didn't use my mini hardly at all since your last response, and when I did, I didn't have internet access turned on.


Today I did a fresh install of Snow Leopard. Have you any tips on to why it will not go to sleep, or stay asleep? I set my preferences for sleep at 1 min and DO NOT have the wake for wi-fi checked. I have checked the pmset -g in terminal and it says disksleep 10, whereas the displaysleep is 1 as it should be.


When I try to sleep from pushing the power button, it goes to sleep for 1/2 a second and wakes. I have not installed anything--- the only thing on the mac is the Snow Leopard.


Also, when I look at the start-up disk in system preferences, I get 2 choices, the regular hard disk and a "network start-up?" and it has a "?" mark on it. Should that be there? Can I delete this "network start-up" thingy"?


THANK YOU for all of your help in this matter 🙂 I sincerely appreciate it.


Happy New Year,

Gwen

My mini caught a bug or virus, the ended up with loginrescueme.com. So I did all I knew how to clean up my mini and keep her safe. Then this morning, I saw that in my System Preferences, Startup Disk, I now have an option of "Network Startup" that is

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.