0

My dad doesn't use a Virus checker (doesnt disable Java either and isn't running the latest OSX) and just appears to have fallen for the Apple Security malware popup (looked and sounded something like this thread https://discussions.apple.com/thread/7861498) tried to save him over the phone - did a force quit, he restarted Safari, it now had a timer, he got in a panic and clicked scan now (& I am not 100% what happened next as he hung up to do whatever he did).

I called him back and got him to switch it off and Pull the internet cable out of the back and switch off which may have partly saved him. I am expecting given the time taken it has downloaded whatever payload it may have been hiding. Have a screenshot but not sure how to post it from my phone - looked like the one in the thread.

Any idea what it is and how to remove it? Thinking about it I don't think he would have put his password in so I am thinking what it downloaded was probably just malware and unlikely to have been an App?

I live a couple of miles away so will go and try and help them tomorrow - just want to have an idea of what I am dealing with.

Thanks in advance for any advice or suggestions.

  • Is he an admin and did he type his password if/when he was prompted when the malware was installing? – Allan Jun 29 '18 at 21:54
  • Don't know to be honest. He would have admin rights. My parents share the computer. I don't think he would have been that stupid but wouldn't want to rule it out. – user8812 Jun 29 '18 at 21:57
  • If your folks' computer has TM set up, you could wipe the HD and restore from a pre-infection backup. – David Jun 29 '18 at 22:23
  • 1
    TBH most Mac male ware is not harmful just annoying. My suggest is to run a Malwarebytes scan and check safari extensions and that’s it. He most likely started an online “scan” (on Safari) that is fake and doesn’t actually scan anything, – JBis Jun 29 '18 at 22:30
  • I have seen people with 50,000+ instances of malware and non were harmful just slowed down and random pop ups. – JBis Jun 29 '18 at 22:31

You must log in to answer this question.

Browse other questions tagged .