Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

ardour675

macrumors newbie
Original poster
Jul 25, 2012
4
0
So about a few weeks ago, I thought I had some kind of virus/trojan on my mac because my e-mail got hacked into. I called apple and they sent me to the pccareexperts.com. These people used logmein to access my computer and typed in some commands into Terminal, trying to tell me I had foreign IP addresses try to hack into my computer. Well I got really suspicious and decided to end the logmein access, but I'm afraid of what they had typed into Terminal on my mac. I haven't noticed any suspicious activity, but I'm a bit paranoid about them doing something to my computer. Would it be a good idea to do a clean install and try to re-install all of my apps. I don't have a previous back-up before this incident.
 

Steve.P.JobsFan

macrumors 65816
Jan 27, 2010
1,010
613
Columbus
So about a few weeks ago, I thought I had some kind of virus/trojan on my mac because my e-mail got hacked into. I called apple and they sent me to the pccareexperts.com. These people used logmein to access my computer and typed in some commands into Terminal, trying to tell me I had foreign IP addresses try to hack into my computer. Well I got really suspicious and decided to end the logmein access, but I'm afraid of what they had typed into Terminal on my mac. I haven't noticed any suspicious activity, but I'm a bit paranoid about them doing something to my computer. Would it be a good idea to do a clean install and try to re-install all of my apps. I don't have a previous back-up before this incident.


I'm not calling you a hypocrite or a liar, but Apple wouldn't send you to this "pccareexperts.com" that you speak of. If your email account was compromised, it'd most likely be the server that is hosting your account, not your actual computer. OS X is based on UNIX. It just can't become infected by malware that was written for Windows. Yes, the infected file can sit on your hard drive, but it can't execute. If you don't believe me, and want to believe this suspicious (IMO) story, then clean install your Mac.

But, what if they did something to the EFI of your machine? Oops! Guess it's time to buy a new Mac, then. There isn't a way to restore your EFI, as far as I know.


I'm not saying your story is fake, but it's pretty suspicious. Plus, this "pccareexperts.com" is a dead site. I know that sites that host malware are usually up for a very small amount of time, and they then die.
 

ardour675

macrumors newbie
Original poster
Jul 25, 2012
4
0
Well the apple care provider sent me to a yahoo mail representative that then sent me to the pccareexperts.net. (oops, I put .com) Would they be able to do anything to my mac that wouldn't be really noticeable?
 

GGJstudios

macrumors Westmere
May 16, 2008
44,556
950
Well the apple care provider sent me to a yahoo mail representative that then sent me to the pccareexperts.net. (oops, I put .com)
That's most likely a scam. Do NOT take advice from Yahoo or from anyone who sends you to a dodgy site. All you needed to do was change your email passwords.

Domain Name: PCCAREEXPERTS.NET

Registrant:
PC Care Experts
Harish Gopalani (supportengineerhelp@hotmail.com)
C6B/59, 2nd Floor
Line 2: (Optional)
New Delhi
Delhi,110058
IN
Tel. +91.9818092606

Creation Date: 06-Mar-2012
Expiration Date: 06-Mar-2013
Would they be able to do anything to my mac that wouldn't be really noticeable?
Yes, they could. I recommend you back up your user files, reformat your drive and do a clean install of your OS and all apps. Then move your user files back.
 

ardour675

macrumors newbie
Original poster
Jul 25, 2012
4
0
Do you mind explaining how to properly do that? Do you think if I took it to the apple store, they would be able to go into terminal and check up on my mac instead of a clean install?
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.