Fixing security compromised Macbook Air

My mother got scammed and some people have taken complete control of her computer and she compromised.  They had total control and so everything could be compromised should be supposed to be compromised.  I plan to wipe the drive and reinstall the software.  I was wondering two things...

Is the recovery partition that apple put on the computer safe?

She has some JPEG files she wants.  What is the best way to transfer?  I was thinking a USB key I need to scan with Symantec antivirus.  But I've heard that usbs are dangerous?

She has a Macbook Air.  She was running Lion (10.7).  I don't know until I get my hands on it tomorrow...

Any advice would be great.  Thanks in advance.

If you know or suspect that a hostile intruder had physical access or took control of it remotely, there are a few steps you should take to ensure that your computer is safe to use.

First of all, depending on the circumstances, computer tampering can be a crime, tort or both. If there is no chance that the case will be prosecuted, then you should do nothing without consulting a lawyer or the police. The computer would be the main evidence in such a case, and you do not want to destroy this evidence.

There is no need to run any kind of software "anti-virus" or "anti-malware". If I broke into a system and wanted to leave a back door, I could do it in a way that would be undetectable by these means, and I do not claim any special skills as a pirate. You must assume that any intruder can do the same thing. For example, commercial keylogging software - which has legitimate uses as illegitimate - is recognized as malware, because it is not also a malware.

The only way you can be sure that the computer is not compromised is to cover at least the boot volume and restore it on something like the State in which it was before the attack. The simplest approach is to restore the entire system from a backup prior to the attack. Obviously, is only convenient if you know when the attack took place and it is recent, and you have such a backup. You will lose all changes made to the data, such as email, that were made after the time of the snapshot. Some of these changes can be restored from a backup later.

If you are unsure when the attack occurred, or if it was too long ago for a complete restoration be convenient, then you should erase and install OS X. If you have not already at least two backups complete and independent of all data, then you must go first. A backup is not enough to be sure.

When restarting after the installation, you will be prompted to go through the initial setup process for a new computer. It's when you transfer data a backup in the installation wizard.

Select only users in the Setup Wizard dialog box - not Applications, and other files and folders or computer & Network Settings. Don't transfer the guest account, if it has been activated.

Reinstall the third-party software from original or fresh downloads - not from a backup, that could be contaminated.

Unless you have been the target of an incredibly sophisticated attack, this procedure will leave you with a clean system. If you have reason to believe that you have been the target of a sophisticated attack, then you need expert help.

The above fact, change all Internet passwords and check all of the financial accounts of the unauthorized transactions. This, after the system is blocked, not before.

Tags: Notebooks

Similar Questions

  • Compromised security fixing Macbook Air running Lion.

    My mother got scammed and some people have taken complete control of his computer remotely.  While she didn't give them his information of the Bank, they had total control and therefore no matter what on the computer that could be compromised should be supposed to be compromised.  I plan to wipe the drive and reinstall the software.  I was wondering two things...

    Is the recovery partition that put on the computer somewhere safe to reinstall it from Apple?

    She's not all backups.  She has some JPEG files she wants.  What is the best way to transfer?  I was thinking a USB key I need to scan with Symantec antivirus.  But I've heard that usbs are dangerous?

    She has a Macbook Air.  She was running Lion (10.7).  I don't know until I get my hands on it tomorrow...

    Any advice would be great.  Thanks in advance.

    Nothing on this box is entirely safe to be safe - even the backups can be suspect.

    See re - install or try surgery? for a recent discussion of the present.

    Your own USB drives are very likely very well.  Yes, there are ways that USB drives you pick up in a parking lot or in trade shows can cause problems, but this isn't the case here.  Buy the disc, erase and format it in HFS + on your Mac and allows to transfer what is important.

    I would probably do a full backup of the entire system on an external drive, on the off chance that there is something else that may be necessary.

    FWIW, anti-virus and anti-malware tools are not known to be particularly robust or reliable products, are not intended to detect backdoors, some have a history of having backdoors and security bugs in packages and are not designed to defend against what is happening in a growing number of people; against scams and phishing attacks, as has happened here.

  • MacBook Air very slowly. How to fix.

    Hello.. I want to know why my Mac Book Air running slow? Already clear partition and install again. Any app or software installed. All new OS does X no DATA. But very slow. What is the problem?

    My camera; MacBook Air > CPU = Intel Core 2 Duo > 2 GB 1067 Mhz DDR3 1.86Ghz > SSD 256Go > OS X worm 10.8...

    Thanks for any info. I'm really confused how to fix it.

    Download and view a report of Etrecheck:

    http://www.etresoft.com/etrecheck

    Ciao.

  • I use photoshop elements 12 on Macbook air and the screen freezes when I try to use the tools. Then I have to force quit if I lose my job. someone knows how to fix this?

    I use photoshop elements 12 on Macbook air and the screen freezes when I try to use the tools. Then I have to force quit if I lose my job. someone knows how to fix this?

    What version of Mac OS X are you using? If the Yosemite, you will need to upgrade to 10.10.1 or higher version.

    In any case, start by going in the editor preferences > general, click this button and the restart of the Editor:

  • I need help to fix the sound on my macbook air

    Well well... my macbook air will start of the carillon, but when I try to listen to something on my macbook air... it won't play it... and when I go to system preferences... There only headphones! ... idk what else to do!

    1. connect and remove the headphones.

    If you see the red light in the headphone port, plug the headphones

    in and out of time port 5 or 6 to swing the microphone inside.

    Audio output can be blocked using digital technology.

    2 reset the PRAM.   http://support.Apple.com/kb/PH18761

    3 reset the SMC.

    Choose the method for "on Mac Laptops with non-removable battery.

    https://support.Apple.com/en-us/HT201295

  • Fan noisy and slow speed for the Macbook Air with 10.11.4

    I hope you can help me.

    I upgraded 10.11.4 on my Macbook Air a couple of days. It is a model of 2013 Mid, 1.7 Ghz Core i7, 8 GB of RAM.

    I don't know exactly what my last update was - but was El Capitan any.

    I tried LANDAU and SMC resets.

    Previously, she has chugged along fine. The fan was quiet most of the time - only hit on when I used Lightroom.

    Now, the fan kicks on regularly, most of the time actually. And it's MUCH slower. Very lag sometimes when you type in Wordpress, for example. And lightroom is much slower. Also, when I use FaceTime, video often turns itself on and off--with a message informing me that it will resume when the computer cools down. Yet the back of the computer does feel not hot at all.

    I tried page of Chrome in Safari. Doesn't seem to help much.

    I am currently traveling to the Peru and did not my hard drive with my last backup, Time Machine, by hand, so as I understand it, I can't go back to a previous update.

    The Kernal task often seems to have a very high CPU %: 250 or.

    Right now, I'm trying to download the Combo, I read that this can sometimes fix glitches.

    Any help is greatly appreciated!

    The kernel uses excessive CPU cycles. Here are a few possible causes for the State. Some may not apply to you.

    FileVault

    Please, open the security and privacy pane in system preferences and click the FileVault tab. If there is an indication that the encryption or decryption is in progress, wait (possibly several hours) so he can finish and see if there is an improvement.

    Limitation of the

    When he does readings of high temperature in the material, or a MacBook battery low voltage readings, the kernel can try to compensate by interrupting the processor to slow them down and reduce energy consumption. This condition may be due to:

    ☞ an accumulation of dust on the logic board

    High ambient temperature ☞

    ☞ a defective battery or worn in a laptop

    ☞ the malfunction of a cooling fan, temperature probe, a probe or some other component voltage internal

    Note that if the problem is caused by a sensor, there can be no real overheating or undervoltage.

    If the computer is portable, try with and without the power adapter connected. If pigs kernel_task processor only on current alternative, load is causing the machine to heat up. This behavior may be normal for some models, but it can also be an indication of a hardware failure.

    Apple diagnostics or the Apple Hardware Test, although not very reliable, is sometimes able to detect a fault. For more in-depth material test, an appointment of 'Genius' to an Apple Store, or go to an other authorized service provider.

    If all goes well with the material, then everything that you can do to improve the cooling can help.

    Software installed

    The software installed by the user which includes a device driver or other kernel code can thrash of the kernel. This category includes virtualization, such as Parallels and VMware software, as well as products 'anti-virus' more commercial. Some system monitoring applications, like "iStat", may also contribute to the problem. You can test this possibility to completely disable or remove the software according to the instructions of the developer or start in safe mode. However, it should be noted that the deactivation of a modification of the system without removing or test in safe mode is not as easy as you think.

    Corrupt NVRAM or MSC data

    Sometimes, the problem is cleared up by resetting NVRAM memory or MSC.

    External display

    Connect an external display to some models of MacBook Pro while the lid is open can cause this problem. If necessary, use the external clamshell modescreen.

    Other devices

    Disconnect devices wired everything except those needed at startup and remove all the expansion cards of third parties (if your model.) If the problem is resolved, reconnecting devices one by one by one until you identify the culprit.

  • MacBook air from startup mode course

    I'm new here. I don't know if I posted on the appropriate thread. I have a Macbook air 13 ", mid-2011, core i5, 256 Gig. I strongly suspect that he collected a bit of moisture because of the weather. Now, he is always in secure boot mode. If this is not the time, no technical fault cause this? It has never been opened before or fixed? Can I have a work around for this problem? It blocks my work. I am an Appleholic and do not want to switch to any brand. I can't take on an Apple AUTHORIZED for control because we don't have these shops in the Zimbabwe. We have only read about them online that they exist. The nearest such store shall make me buy a $1,000 ticket abroad (not to mention hotel reservations and repair costs).

    Need your help

    If this isn't the humidity, can it be a technical foul? I strongly guess that's moisture because of the weather.

  • Broken space on MacBook Air

    I have a MacBook Air, I tried to clean below the space bar. I think I broke it because when I put back it together it is incredibly hard to push and I need to move so he could push. How can I fix? I just need to get a new keyboard?

    Make an appointment at the Genius Bar in Apple for the service. If you need a Apple Store - find a store - Apple.

  • OS El Capitan on Macbook Air is blocked even on reboot

    Hello, I have a Macbook Air El Capitan that hung, several open applications and is still clinging even to reboot. The mouse does not work, so I can't even close individual applications to try to identify the culprit. Open applications are email, Firefox, calendar, Messages, Kindle, Bluetooth keyboard configuration (unintentionally open). Someone knows how to fix? Force Quit doesn't shut it down just recharged and breaks down until I can close apps correctly. Thank you!

    Hello there DivotGirl,

    Looks like you turn on your computer and it responds immediately. I begin by starting in safe mode to delete some system-level caches and perform a disk check and repair if necessary:

    Try safe mode if your Mac does not end commissioning

    You should get it all together. Thank you for using communities of Apple Support, let us know how it goes.

  • MacBook Air shutdown correctly

    I have a Macbook Air (13 inch, early 2015) race Sierra.

    When I shut down my computer it powers not normally turned off. I click on "Stop" in the Apple menu. The screen goes black but the backlight remains lit and lighting under the keyboard. It stays like that for more than 20 minutes before apparently power off.

    The only way I can get to close normally, if I hold the power for 10 seconds. But this isn't the normal way and it comes up with a message the next time that I boot saying that it was not shut down properly.

    I upgraded to El Capitan in Sierra during the last day, but it made no difference. The problem is ongoing for about 2 weeks. I've owned the laptop since new about 1 year ago and it has worked flawlessly until now.

    The problem occurs regardless of whether the computer is powered or battery-operated. I have not modified the computer or used new material, given that the problem occurred.

    Any help would be appreciated

    OK so I managed to solve this problem, based on useful information in another thread (macOS Sierra presents a serious problem that must be treated quickly)

    The problem is that if you have MySQL running on startup, Sierra cannot stop, probably because he is unable to stop MySQL or processes that are running.

    The way to fix this is to go to preferences > MySQL. Uncheck the option that runs MySQL to start automatically. You can also manually stop the process in your current session, but when I tried my Macbook froze.

    Restart your Mac. Next time you stop, it should work normally.

    It seems to be a serious problem between Sierra and MySQL here. You should not stop/start MySQL manually; and it will be extremely painful for developers like me who use MySQL on a daily basis. Apple - and if necessary Oracle - should work on dealing with this together.

  • Fan runs almost always since the installation of Sierra and MacBook Air running Mac OS.

    Hello

    Since upgrading to Mac OS Sierra last night on my MacBook Air (2013, i7, 8gbRAM), fans work almost always, even when I use Safari.  Previously, the fans would go only when I was playing a game, or video edition.  The basis of my Macbook Air is also much more hot he was under El Capitan - once again, just when you use Safari.  As a result, my battery life is horrible - dropped from 100% to 23% in a little over an hour.  Once again, under El Capitan, if I was just using internet, use of an hour would see the maximum of 10 to 15% of decline in battery.

    I turned off my Macbook Air and it turned on again after fifteen minutes, but in 10-15 minutes, fans revived upward and the base (and the top of the keyboard) heated again.  No uncomfortable levels, but certainly noticeable levels.

    Just to remind - I use Safari only when this happens.  Moreover, since the beginning of this question five minutes ago, the % of battery has dropped from 29 percent to 22 percent and the fans are still whirring like the dickens.

    No idea why this is happening?

    Hello, take a look at this maybe of http://www.macworld.co.uk/feature/mac/fix-overheating-macbook-3592266/ article it will help.

  • MacBook air does not start - symbol of circle/slash

    Hello! I hope someone can help...

    MacBook Air 13.3 model "2013 will not start. It froze and when restarting, this symbol was presented to the screen:

    I searched the web and followed all these instructions, including disk etc. target mode, nothing works:

    http://www.Macworld.co.UK/how-to/Mac/10-steps-take-when-your-Mac-wont-start-up-o r-turn-on-3423817.

    When I ran the file system consistency check, I received the following message appears on the screen:

    I then ran into Recovery Mode disk utility and the SSD was OK, so I couldn't fix it:

    Then, I ran Apple Diagnostics and received this message:

    According to codes of reference diagnostic Apple, PPM002 is a problem with modules of memory onboard:

    Apple Diagnostics: Codes - Apple Support reference

    I then used DiskWarrior 5. Sometimes I could get it to rebuild the directory, and allowed me to access the SSD and copy the directory of the user, so I recorded all the data. Sometimes I could not rebuild, and here I got this message:

    I also tried to reinstall OS X from OS X Internet Recovery, but he did not finish the process. He stops and says that it cannot continue. The Installer log has this as the last entry:

    Sep 19 22:46:14 MacBook Air Viewer [509]:-[SFLListItem synthesizeMissingPropertyValues] was not being updated to bookmark for element (null) [EA0E40C9-D4E9-44EC-B18B-97870E1F573F] - URL: file: / / / var/root/Downloads/with error error Domain = NSCocoaErrorDomain Code = 260 "the file could not be opened because it does not exist."

    My last chance is to restore time M

    It would seem, therefore, that the DDI is OK, but the edge welded RAM is corrupt.

    What can I do? The MBA is lost? Is there anything I can do to get it working?

    Hey, DK Deadhead!

    Thank you for reaching out by Apple Support communities. I understand from your post that your MacBook Air will not start. Instead, you receive a forbidden sign. I rely on my Mac every day, so I definitely want to make sure that yours is supported!

    Looks like you did also troubleshooting problems - thanks for that and for the display of screenshots! According to the results posted from the Apple Diagnostic, your MacBook votre MacBook Air Air requires a repair for the battery and memory on-board quantity. You can get this service in several ways:

    First of all, we invite you to contact the Apple support directly implement the service here: contact Apple support

    We also invite you to take the MacBook Air in an Apple Retail Store or Apple authorized service provider. The following link will provide you with locations and contact information, and you also allow to define reservations: Apple - find

    For more information on the repair service, you can consult the following site: Mac laptop Service Answer Center

    Have a wonderful day!

  • COKE ON MACBOOK AIR

    HELPPPPP. I spilled coke on my macbook air and immediately handed and dry. Then I took out the keys cleaned with alcohol and water and cleaned as much as I could and put it on a fan at night now its don't turn only not on helppppppp. HOW MUCH WILL THIS COST. I'm only 12! It's really bad, and I need answers NOW. HOW TO FIX IT.

    I think that you can't fix it by yourself. You would better make Genius Bar appointment and tell them about coke spilled on the MacBook Air.

    They will tell you any cost to fix.

  • Hi, I bought a new Apple MacBook Air yesterday of FNAC in Geneva, and when I got it home I couldn't go beyond the black bar. In the end, I got a white circle with a slash and a black screen. Please tell us what to do. Thank you.

    Hi, I bought a new Apple MacBook Air yesterday of FNAC in Geneva, and when I got it home I couldn't go beyond the black bar. In the end, I got a white circle with a slash and a black screen. Please tell us what to do. Thank you.

    Bring her back. It's new, it's at the shop for sorting or replace it, not you to try to fix it.

  • MacBook air, lack of available disk space

    I have a 2015 macbook air, 128 GB version. yesterday, I got about 50 GB of available space, today I noticed, it was reduced to a mere 14 GB. I have not downloaded anything significant. Looking at my storage, all the missing space is classified as 'other '. How can I recover my memory or see where provenance?

    It is possible that the figures are false. So, if re-indexing can fix it: https://support.apple.com/en-us/HT201716

    The following persons also have the information that can help:

    OS x: what is 'other' space about this Mac? -Apple Support

    What is 'Other' and what I can do about it?

Maybe you are looking for

  • What happened to Browser.tabs.loadonNewTab?

    When I open a new tab (with ctrl-t) I want to open it on my homepage. There used to be a parameter, Browser.tabs.loadonNewTab, with which I could configure this behavior. It seems to have disappeared. I don't see anything likely in Browser.tabs. Has

  • Music no appearing is not on the music of Apple on Apple TV

    I have the new 4th gen Apple TV and I have an interesting/annoying problem occur.  Some songs/albums are not added to the section 'My music' music Apple tabs.  For example, I added the album Thr33 Ringz of Tpain to my music, but when I go to my music

  • Re: important updates

    I tried to install ie8 that it does not work for me. I tried to hide it, but it keeps forcing on me for resettlement.

  • Problems to open Internet Explorer, and other sites.

    My pc is using Windows XP 32-bit.  It seems that my pc has been composed.  I can not open IE or AOL.  Microsoft fixit gives me an error message.  The only way for me to use internet or AOL is to use Mozilla Firefox.  When I try to use the cam, the pc

  • I have a Pavilion notebook dv7-1175nr with a Blu - ray palyer player who does not play movies.

    Initially, it came with Vista and a Blu - ray player. He recently had a facility fresh retail of Windows 7 Pro and all the drivers & software freshly downloaded and installed on the HP site. Since the Blu - ray drive upgrade is not play movies.