Mac infected

[jockeyeba]

Had an alert from Firefox? computer was beeping, a number to call Apple support, so I called, I was in a panic, this is part of what they said they found but wanted a lot of money to fix it, I said I couldn't afford it & would check tomorrow. whats my best place to get help? Below is what they said:
"Rundll32 is a ip address worm that attacks Microsoft Windows, Mac OS X, and Linux platforms.
This worm originally targeted users of networking websites like Facebook, Skype, Yahoo
Messenger, and email websites such as GMail, Yahoo Mail, and AOL Mail. It also targets other
networking websites, such as MySpace, Twitter, and it can infect other devices on the same
local network. Rundll32 is software that aims to gather information about a person or
organization without their knowledge, that may send such information to another entity
without the consumer's consent, or that asserts control over a device without the
consumer's knowledge.While the term Rundll32 suggests software that monitors a user's
computing, the functions of Rundll32 can extend beyond simple monitoring. Rundll32 can collect
almost any type of data, including personal information like internet surfing habits, user
logins, and bank or credit account & tax information. It is considered as a security risk and it
should be removed from ip address."
————————————————————————————————————————————————————————
------------------------------------------------------------------
ADVANCE TROUBLE SHOOTING AND CLEANUP
ONLINE CERTIFIED TEAM (LEVEL 7)
------------------------------------------------------------------------------

Remove all illegal connections from
>Network
>Computer
>IP Address
Remove all infections from
>Network
>Computer
>Ip Address
Reinstall all stopped services
Encrypt the data
Boost computer speed
————————————————————————————————
>NSA 3600 (IP ADDRESS SECURITY)
> COMPLETE 7 LAYER OF OSI
*NETWORK SECURITY
*IP ADDRESS SECURITY
*TROJAN PROTECTION
*SPYWARE PROTECTION
*ADWARE PROTECTION
*MALWARE PROTECTION
*ONLINE BANKING SECURITY
*ONLINE SHOPPING SECURITY
*ONLINE BILL PAYMENTS SECURITY
———————————————————————————————

30 mins (online)
————————————————————————————————————————

Legal Documentation :
Customer id :
Toll Free :
———————————————————————————————————————————

————————————————————————————————————————————————


—————————————————————————————————————————

 

[honestone]

There are two programs you can use that can help. Run them in the order indicated:

1. Malwarebytes, available from here:

https://www.malwarebytes.com/

2. ClamXav, available from here:

https://www.clamxav.com/

You can use ClamXav in demo mode for 30 days, and it does a more extensive job that Malwarebytes. When you run ClamXav, you'll be offered the opportunity to scan your machine at various levels (including the name of your internal drive). Just do the scan at the "highest" level, ie, at the name of your internal drive. That will take some time, but better to be safe than sorry.

By the way, need to ask two of the standard questions:

1. Have you ever done an disk cleanup/maintenance/repairs, from a software perspective? By that I mean have you ever run any disk-related software to help with those tasks? There are some excellent products available (both free and commercial) that can help you with that.

2. This is critical: are you making backups to an external device? If you are, what software are you using for that? And is your external drive used for such backups?

 

[GPS]

There are two programs you can use that can help. Run them in the order indicated:

1. Malwarebytes, available from here:

https://www.malwarebytes.com/

2. ClamXav, available from here:

https://www.clamxav.com/

You can use ClamXav in demo mode for 30 days, and it does a more extensive job that Malwarebytes. When you run ClamXav, you'll be offered the opportunity to scan your machine at various levels (including the name of your internal drive). Just do the scan at the "highest" level, ie, at the name of your internal drive. That will take some time, but better to be safe than sorry.

By the way, need to ask two of the standard questions:

1. Have you ever done an disk cleanup/maintenance/repairs, from a software perspective? By that I mean have you ever run any disk-related software to help with those tasks? There are some excellent products available (both free and commercial) that can help you with that.

2. This is critical: are you making backups to an external device? If you are, what software are you using for that? And is your external drive used for such backups?

This is good advice -- both are good, as are Norton iAntivirus and Sophos Home -- although I'm not sure what difference the run order might make.

Also, NEVER call a number that appears on a notice like this one, especially if they ask for money. If in doubt, call Apple Technical Support and describe the problem.

 

[chrispl0]

Is this a joke?

 

[dennisfcampbell]

making a phone call can determine if the people behind this are shaking you down using scare tactics..... call and see whats up dont use the computer to contact them and use a land line ........continue with the very good treatment as suggested and contact apple if you are still at odds with the issue........
........

 

[honestone]

The best way to "combat" this is to ignore such "messages". Again, any reputable firm (Apple, Microsoft, Intuit, Shirt Pocket Software, Titanium Software, etc., etc.) would NEVER send anything like that. And given that the issue happened only when the op was on ebay just conforms that.

 

[chrispl0]

Listen to 'honestone'.. Just ignore it completely. Forget about 'ringing' them, forget about 'Norton' etc. Just ignore it.

 

[dennisfcampbell]

yes you should ignore it as relates to the running of the computer, dont know about the others but seeing where a threat is coming from, defining it and exposing how real it is will give you insights on how best to deal with future situations .......alerting, companies, web masters, administrators, fellow users to a problem is in everyones best interests
good luck