HT201232: Contact Apple for support and service

Learn about Contact Apple for support and service
jonathanfromsan francisco

Q: Has anyone recieved a virus warning from safari with a number to call?

I received a virus warning from safari saying my computer had a virus and to call an 800 number for Apple Care. The company was a third party contracted by apple to provide support in this matter? I allowed the contact to access my computer to see what the problem was and apparently there had been files downloaded onto my computer that were causing problems(unable to get online). The contact said he would need to use a level 3 tech to deal with it and it would be 219.99. He checked to see if I was under warranty and I was not. Does this sound legit? It felt like they could have put the virus in themselves and then been there to remedy the problem? The company was called support buddy. Second question is the tech copied my Mac address under the hardware in network settings. Can this address be changed and what are the implications of someone having access to that address? Thank you.

MacBook Pro, Mac OS X (10.6.6)

Posted on Apr 3, 2015 7:08 AM

Close

Q: Has anyone recieved a virus warning from safari with a number to call?

  • All replies
  • Helpful answers

  • by OGELTHORPE,

    OGELTHORPE OGELTHORPE Apr 3, 2015 7:56 AM in response to jonathanfromsan francisco
    Level 9 (52,764 points)
    Mac OS X
    Apr 3, 2015 7:56 AM in response to jonathanfromsan francisco

    Sadly you have fallen for a SCAM.  Do not pay them any money.

     

    Since you let them access your Mac,

     

    YOU SHOULD ERASE YOUR HDD AND CHANGE ALL OF YOUR PASSWORDS!!!!!!!

     

    Then reinstall the OSX and user data from your backup.

     

    Ciao.

  • by OGELTHORPE,

    OGELTHORPE OGELTHORPE Apr 3, 2015 8:13 AM in response to jonathanfromsan francisco
    Level 9 (52,764 points)
    Mac OS X
    Apr 3, 2015 8:13 AM in response to jonathanfromsan francisco

    It may also be a good idea to contact your credit card companies and  your bank as well.

     

    Ciao.

  • by thomas_r.,

    thomas_r. thomas_r. Apr 3, 2015 10:31 AM in response to jonathanfromsan francisco
    Level 7 (30,944 points)
    Mac OS X
    Apr 3, 2015 10:31 AM in response to jonathanfromsan francisco

    Just responding to stress the answer that OGELTHORPE has given you... you must erase your hard drive and reinstall everything from scratch (or restore everything from a backup made prior to giving these scammers access to your computer). There is no other way to ensure that they haven't done something malicious to your computer while they had remote access. Anti-virus software will not to the trick, and many techs will "clean" your computer for you, but unless they are true security experts, they won't be able to actually do that.

  • by stevejobsfan0123,

    stevejobsfan0123 stevejobsfan0123 Apr 3, 2015 10:33 AM in response to jonathanfromsan francisco
    Level 8 (44,007 points)
    iPhone
    Apr 3, 2015 10:33 AM in response to jonathanfromsan francisco

    See: A Browser Pop-up has Taken Over Safari.

     

    (Note that I am affiliated with that site, and some pages contain ads).

  • by bluewisteriaNYC,

    bluewisteriaNYC bluewisteriaNYC Aug 26, 2015 5:28 AM in response to stevejobsfan0123
    Level 1 (0 points)
    Aug 26, 2015 5:28 AM in response to stevejobsfan0123

    This happened to my parents last night and they did not realize it was a scam, and proceeded to pay for this company to install some sort of ad blocker program on their computer, through remote access to their computer. They turned their computer off once the called ended and within an hour realized it was a scam, and called Apple support who told them to come into the store and that they would need to erase the hard drive. However, at the genius bar, they removed all the programs that were installed and did a scan for malware, etc. They were told that their computer is fine and they do not need to erase the hard drive; that because programs were removed scammers can't access the computer. I am skeptical because of the conflicting information. Unfortunately I was not there when these programs were installed on the computer so I don't know specifically what happened and what the scammer had access to. Should we trust being able to use the computer or is it possible that the scammer still has access to the computer somehow?

     

    Thanks.

  • by OGELTHORPE,

    OGELTHORPE OGELTHORPE Aug 26, 2015 5:48 AM in response to bluewisteriaNYC
    Level 9 (52,764 points)
    Mac OS X
    Aug 26, 2015 5:48 AM in response to bluewisteriaNYC

    By erasing the HDD and reinstalling the OSX and user data, you eliminate any doubt.  I personally would do that.

     

    Ciao.

  • by bluewisteriaNYC,

    bluewisteriaNYC bluewisteriaNYC Aug 26, 2015 6:12 AM in response to OGELTHORPE
    Level 1 (0 points)
    Aug 26, 2015 6:12 AM in response to OGELTHORPE

    Thank you, thats my instinct as well.

     

    However, my other concern is the remote access issue. My parents' computer is linked not via wifi, but through a hard wire connection. Since the scammer had remote access, is there any concern with the IP address - in other words, would they need to reset the IP address or should this not be a concern?

  • by OGELTHORPE,

    OGELTHORPE OGELTHORPE Aug 26, 2015 9:43 AM in response to bluewisteriaNYC
    Level 9 (52,764 points)
    Mac OS X
    Aug 26, 2015 9:43 AM in response to bluewisteriaNYC

    Those swine need the software installed in the Mac in order to gain access.  If you have erased the HDD, you have no worries.

     

    Ciao.