Heismine

Q: Help! I was scammed, now what?

Last evening while online I had navigated to a site that did not look right, I attempted to leave and instantly recieved a pop-up that urgently advised me to contact a 866-500-4??? because I now had a virus. I attempted to delete and leave, but it would not let me. It also had a shrill audio warning. So I called and then downloaded two items (teamviewer.com, support.me) which allowed them to be on my computer to "fix" the problem. I became very wary as no apple insignias were on their "help," yet I watched as they flew through stuff (console, terminal, and apple info that showed the age of the hardware and that my support time had ended. Being a disabled shut-in and now quite leery, I did not pay the $99 to "fix" the problem, so he gave me what he called, a temporary fix. He then went to my firewall settings.--- After shutting things down, I re-emptied the trash, checked my firewall that it was on and then went to sleep. (Turning off the computer.)

 

I am not a computer genius. I read a similar post and the advice was to reconfigure and reinstall the OS. How do I do this? I am very concerned I now have a Trojan horse.

 

 

Please tell me what to do.

Thank you in advance for any help.

 

Rene

Mac mini, OS X El Capitan (10.11.3)

Posted on Mar 30, 2016 12:40 PM

Close

Q: Help! I was scammed, now what?

  • All replies
  • Helpful answers

  • by babowa,Helpful

    babowa babowa Mar 30, 2016 4:24 PM in response to Heismine
    Level 7 (31,910 points)
    iPad
    Mar 30, 2016 4:24 PM in response to Heismine

    You don't have a virus or a trojan horse; you didn't to begin with - nobody in the world would know what you have on your computer. Scammers use this to part you with your money.

     

    You should not only completely erase your hard drive and reinstall the OS, but you also need to call your bank(s), credit card companies, etc. as nobody could know what kind of information he was able to steal off your computer. You also need to change ALL your passwords everywhere.

     

    So, call your financial institutions first. And change your passwords everywhere.

     

    Next, backup your personal files, videos, pics, etc.

     

    Then use recovery (Command + R or Command + Option + R) right after the startup chime to connect to Apple's servers. When you see the Utilities window, choose Disk Utility to erase your hard drive. When finished, choose to reinstall OS X. That is the only method to make sure nothing of whatever they did still remains.

  • by Carolyn Samit,Helpful

    Carolyn Samit Carolyn Samit Mar 30, 2016 4:25 PM in response to Heismine
    Level 10 (120,945 points)
    Apple Music
    Mar 30, 2016 4:25 PM in response to Heismine

    It's nothing but a scam.

     

    If you run into a problem like that again, you can force quit your browser by pressing Command + Option + Esc on your keyboard.

  • by JimmyCMPIT,Solvedanswer

    JimmyCMPIT JimmyCMPIT Mar 30, 2016 1:44 PM in response to Heismine
    Level 5 (7,127 points)
    Mac OS X
    Mar 30, 2016 1:44 PM in response to Heismine

    the terminal thing is a smoke and mirrors show, they show you a bunch of network processes that the computer uses every minute of every day and stop and say "look, theres the virus" and you could be looking at a printer packet from six weeks ago.

     

    I can't say they didn't install something no one knows about but for the most part these are crooks, not computer genius either, just garden variety con artists looking to get on your computer, do their script and get money wired to them. after that they are gone so wiping your computer would erase any doubt you might have but it's a bit extreme and I don't know if you need to get that extreme

     

    team viewer for instance is not malware, its used by IT people to do their job, legitimate work, but crooks use it too because it's very simple to set up and it doesn't arise a lot of suspicion. Here are the instructions to delete it. It's a pice of software, nothing more.

    https://www.teamviewer.com/en/uninstall/

     

    I don't know support.me. was it "logMeIn"?

    that's another legit software used by crooks and it is easily removable.

    http://help.logmein.com/articles/en_US/FAQ/How-do-I-uninstall-LogMeIn-for-Mac-ma nually

     

    what you need to do now

    call you bank

     

    reset your passwords

     

    make a new admin account and make your current admin account into a standard account afterwords. delete any startup items in your old admin account that are "log me In", "team viewer" or anything else that looks suspicious.

     

    backup your computer with Time Machine either way.

     

    if they didn't have you log in as root, and install a key logger they are not "experts" just “******", and trust me you would had to go through some memorable steps to have that happen.

    Enabling and using the "root" user in OS X - Apple Support

    and that HAS to be done by someone sitting at the computer, not over a VNC remote session.

     

    likely there is one or two things you need to be concerned about but if cash was not wired that's the biggest one.

     

    for further reading

    https://malwaretips.com/blogs/remove-tech-support-scam-popups/

     

    and if you want to follow up you can post an etrecheck report

    http://etrecheck.com

    and there will be no shortage of volunteers here to look at whats running on your system and what shouldn't be there in the event something is.

     

    deep breath.

    exhale.

    that's it.

     

    <Edited by Host>

  • by Heismine,

    Heismine Heismine Mar 30, 2016 4:38 PM in response to JimmyCMPIT
    Level 1 (4 points)
    Safari
    Mar 30, 2016 4:38 PM in response to JimmyCMPIT

    Sir, I could kiss you! Thank you so much!

     

    How do you know so much about the underside?

    Your knowledge is very comforting. Very helpful. Very.

     

    God bless you as you have me.

    Rene

  • by Heismine,

    Heismine Heismine Mar 30, 2016 4:56 PM in response to Carolyn Samit
    Level 1 (4 points)
    Safari
    Mar 30, 2016 4:56 PM in response to Carolyn Samit

    Thank you Carolyn!

    Okay, so you would do nothing?

     

    I am concerned I am being monitored. So if I change passwords, they'll know the new ones. Is there a check see place online? Or am I being paranoid?

     

    Rene

  • by babowa,

    babowa babowa Mar 30, 2016 6:28 PM in response to Heismine
    Level 7 (31,910 points)
    iPad
    Mar 30, 2016 6:28 PM in response to Heismine

    There is nowhere to check if they installed something. And no, you're not being paranoid because you don't know if they did anything or not. They are crooks - so they are not to be trusted. It doesn't matter if they're computer geniuses or not - they're crooks, so I wouldn't trust anything they say or do. Hence my suggestion to erase the hard drive. That is the only way to know that you are starting with a clean slate and it is what I would do (aside from calling my banks, change passwords, etc). But of course, the decision is yours.

  • by Heismine,

    Heismine Heismine Mar 30, 2016 7:49 PM in response to babowa
    Level 1 (4 points)
    Safari
    Mar 30, 2016 7:49 PM in response to babowa

    Thank you babowa.

    I really  appreciate you taking the time to answer me twice, and yes, before I change passwords, I will erase my hard drive. (Thank you for  telling me how.) 

    Thank you again.

    Rene