My mom gave someone in India access to her computer

I woke up to a frantic phone call from my mom this morning. As far as I could put together, this was the timeline of events that she went through:
1) She was having trouble typing emails in her Yahoo mail account via Firefox. Where most of us would probably update the software, she did a search for help with this problem via Google.
2) She somehow found a phone number that was claiming to be Yahoo tech support. She called it and the person on the other line tells her she has been hacked, throwing my mother into a panic. The scammer on the other end (which I'm convinced they were) has her somehow download a file, I'm assuming via email and just GIVES THIS PERSON ACCESS TO HER COMPUTER!!!
3) The person now has remote access to the computer and is controlling her desktop. She tells her via some sort of chat window (I think, my mom was very unclear on how this information was coming to her... like I said she was panicked) that she has been hacked and needs to call some number to pay $250 to fix the problem. Of course, she would have to give this person her credit card info.
4) At this point, she calls me (I'm deeply asleep and taking in most of this information through a half-awake haze). She tells me what's going on, I find out the number she called and google it to find it goes to something called "AGILE" and another called "Techies365.com". I tell her to hang up on these people RIGHT NOW and shut down her computer and unplug it from the internet.
SO... As far as I can tell, it seems like this is one giant scam where they take advantage of clueless people like this, convince them they've been hacked and then extort them for $250.
My question is what does she need to do to make sure she uninstalls anything that these a-holes have installed on her machine? She didn't give them any passwords other than typing in her administrator password, but I don't know what else they managed to access on her computer. She unfortunately doesn't have a Time Machine backup she can restore from.

This is a well-known scam. I haven't read of any kind of malware being installed by the scammers, but there's no way to be sure that didn't happen. She should back up her data, then erase the startup volume, reinstall OS X, and restore only her user data and settings from the backup. Third-party software must be reinstalled from scratch.
Then she should change every Internet password she has and check all her financial accounts for unauthorized transactions. If she actually did give out her credit card number, the card has to be canceled immediately.

Similar Messages

  • Someone has gained access to my computer. please help

    Recently someone has gained access to my computer. The first time they interacted with me they made a chat window pop up and started to ask me questions about what i was doing on the computer. I couldn't close the window he was typing in i had to shut my computer off. The window i think said something like controller something. The second incounter was a few mins ago the person really went to town. First they was making my computer talk to me. I know the Mac can talk but it doesn't say stuff like "i like cocaine ******", "**** ", plus many more and called me the N word. This made me believe they can see through my webcam on my mac. And they where saying my username .After 10 mins of them spamming the voices back to back. They then made a Google chrome open up with like 10 tabs that played a werid video like a dude from the saw movies or something/the ring type video. So i close it then they open it again with like 30 tabs... so now i really don't  know what to do to stop this. im running snow leopard and updating is not really an option right now. I checked like my firewall cause that's one of the few things i know of and it was off the first time. But the second time the firewall was on and they still did what ever they wanted. I work from my computer and don't want to lose all my programs but i wonder if i just learn how to reset my hole computer would that stop them.i have the snow leopard disc somewhere.

    Uninstall Hamachi.
    Any third-party software that doesn't install by drag-and-drop into the Applications folder, and uninstall by drag-and-drop to the Trash, is a system modification.
    Whenever you remove system modifications, they must be removed completely, and the only way to do that is to use the uninstallation tool, if any, provided by the developers, or to follow their instructions. If the software has been incompletely removed, you may have to re-download or even reinstall it in order to finish the job.
    I never install system modifications myself, and I don't know how to uninstall them. You'll have to do your own research to find that information.
    Here are some general guidelines to get you started. Suppose you want to remove something called “BrickMyMac” (a hypothetical example.) First, consult the product's Help menu, if there is one, for instructions. Finding none there, look on the developer's website, say www.brickmyrmac.com. (That may not be the actual name of the site; if necessary, search the Web for the product name.) If you don’t find anything on the website or in your search, contact the developer. While you're waiting for a response, download BrickMyMac.dmg and open it. There may be an application in there such as “Uninstall BrickMyMac.” If not, open “BrickMyMac.pkg” and look for an Uninstall button.
    Back up all data before making any changes. You generally have to reboot in order to complete an uninstallation.
    If you can’t remove software in any other way, you’ll have to erase and install OS X. Never install any third-party software unless you're sure you know how to uninstall it; otherwise you may create problems that are very hard to solve.
    You may be advised by others to try to remove complex system modifications by hunting for files by name, or by running "utilities" that purport to remove software. I don't give such advice. Those tactics often will not work and may  make the problem worse.

  • I did your Firefox 5.0 security update and got a virus that caaused my computer to go haywire and kept jumping from page to page as if someone had remote access to my computer.

    I recently updated Firefox on my desktop to 4.0. About a week ago I got the pop up for the 5.0 security update. I went ahead and updated and within an hour my computer started switching screens and going back several pages. I closed the internet and ran my virus scan but nothing was found. I then opened my windows task and tried to look to see what other new updates or programs were installed but again the computer would not let me open the window and kept changing the screen and going back several pages. I ended up having to do a system restore to factory settings and it was still happening. I had to go in and disable the remote access option in order for my computer to function properly.

    That is a legitimate Mozilla newsletter. As it says in the email:
    You're receiving this email because you subscribed to receive email newsletters and information from Mozilla. If you do not wish to receive these newsletters, please click the Unsubscribe link below.
    Unsubscribe https://www.mozilla.org/en-US/newsletter/existing/ad9febcf-65ac-41fd-810b-798945f448f3/
    Modify your preferences https://www.mozilla.org/en-US/newsletter/existing/ad9febcf-65ac-41fd-810b-798945f448f3/ "

  • I need to speak to a person.  My bank card has been charged over $500 in fees from Itunes that I did not make.  I spoke to someone in India on 7/22 gave them permission to take over my computer and that is what he said.

    I need to speak to a person on the phone.  I talke to someone in India on 7/22 I have him total control of my computer he went into my bank account and could see all the charges.  His name was Amhit something, he said there was over $500 in charges that I did not make since over a year this has been happening.  I tried before to address this with apple but I never get a person and the amounts are always small and then on 7/22 I got a larger charge so I called and somehow got Amhit.  Amhit changed my apple password to he could get into my account but I didn't know what it was and I have not been able to do anything in itunes since 7/22 but yet today 8/1 there is a $6.39 charge on my bank card.  Something is very messed up!!!!  Amhit said he would get me a credit and call me the next day...surprise he never called.  I NEED HELP!!!!!!!!!!!!

    Most of the people on these forums, including myself, are fellow users - you're not talking to iTunes Support here.
    If you've previously contacted iTunes Support then do you have an email that you could reply to ? If not then you can contact them via this link and see what contact methods are available for you : http://www.apple.com/support/itunes/contact/ - click on Contact iTunes Store Support on the right-hand side of the page, then Purchases, Billing & Redemption

  • My iphone4s died, mom gave me her old 3gs, i had to get a new sim to fit the 3gs, how can I sync all my old contacts? I have a macbook pro, tech told me that it would sync from my icloud but it has not. Thanks!

    my iphone4s died, mom gave me her old 3gs, i had to get a new sim to fit the 3gs, how can I sync all my old contacts? I have a macbook pro, tech told me that it would sync from my icloud but it has not. Thanks!

    Syncing the 3GS is exactly the same as syncing the 4S - so just do the same as you've been doing.
    How do you normally sync contacts from your Mac to your iPhone? Via iTunes over USB/WiFi, or via iCloud?

  • I cannot access my previous computer so need soeone at Adobe to deactivate the Adobe Acrobat XI Pro Serial Number. Chat is closed again today (or at least when I'm trying to acess it. How should I be contacting someone?

    I cannot access my previous computer (as the School Technicians reformatted it before deactivating Adobe Acrobat XI Pro). What's the procedure to contact someone to help when chat is closed?

    your post here and chat are your two options.
    contact adobe support by clicking here and, when available, click 'still need help', https://helpx.adobe.com/contact.html

  • I have a new mac pro can, and was checking settings. I gave a user 'no access' who I didn't recognize, and loast all access to my computer.... Won't even reboot!  Can anyone suggest anything?

    I have a new mac pro 'can', and was checking settings. I gave a user who I didn't recognize 'no access', and lost all access to my computer immediately. Tried to change access back, but I was totally locked out (even as the admin). It won't even reboot!  I thought it might have been back when I gave Adobe access (when they had their Cloud fiasco and my machine kept crashing with Premiere). Can anyone suggest anything?
    MacPro 2013, 6-Core, 3.5 Ghz, 32 gigs of Ram, latestt update for Maverick
    Thanks!

    Reset the SMC and PRAM
    Intel-based Macs: Resetting the System Management Controller (SMC)
    About NVRAM and PRAM
    If you purchased it within 90 days yo have free telephone support from Apple
    Complimentary Support (USA)
    - Make an appointment at the Genius Bar of an Apple store.
      Apple Retail Store - Genius Bar

  • In Finder, under SHARED, I see "hpp78acc06244"... would that be my printer or could it be someone trying to access my computer remotely?

    In Finder, under SHARED, I see "hpp78acc06244"... would that be my printer or could it be someone trying to access my computer remotely?

    That would most likely be your printer.
    If your HP printer has a SD card reader built in, that is the "shared" network device.
    Select the hpp78acc06244 and it'll look something like this:

  • My mom gave me her computer and i wanted to know how to authorize the iTunes to download my apps/music

    My mom gave me her computer and i wanted to know how to authorize the iTunes to download my apps/music

    http://support.apple.com/kb/ht1420

  • I see "imac-54f9d5" under the "Shared" heading in my finder. I am not connected to any printers or other Mac devices. Is it possible that someone is remotely accessing my system? How can I figure out what this is?

    I see "imac-54f9d5" under the "Shared" heading in my finder. I am not connected to any printers or other Mac devices. Is it possible that someone is remotely accessing my system? How can I figure out what this is?

    is it your imac?
    is it your your router's name?
    are you by any chance connected to another wifi router then your own because the other one was open and not password protected?

  • HT4914 if i subscribe to iTunes match will i have access to my library on any device anywhere as long as theres a iTunes program??? (example) i'm at my mom's on her computer can i play my library by signing in with my iTunes ID

    if i have subscribe to iTunes Match do i have access to my library on any computer anywhere as long as i sign in to my iTunes account???? so if i'm at my mom's on her computer can i play all my songs in my library at her house

    HELP

  • Can back office in India access FormsCentral

    We are a school in New Zealand. Can our back office in India access FormsCentral as I see it is not listed as a country which can buy FormsCentral service

    They cannot purchase FormsCentral in India, but if you have subscribed FormsCentral in New Zealand and they can log into FormsCentral using those accounts or simply fill out forms without logging in.
    Thanks,
    Wenlan

  • So my brother got an ipad mini for Christmas and he accidentally dis activated it he doesnt know the owner and hes too afraid to tell my mom can someone help me?

    So my brother got an ipad mini for Christmas and he accidentally dis activated it he doesnt know the owner and hes too afraid to tell my mom can someone help me?

    See:
    Find My iPhone Activation Lock- Removing a device from a previous owner's account

  • If i buy a unlocked iphone 4 from the uk would it work if i give it to someone in india

    if i buy a unlocked iphone 4 from the uk would it work if i give it to someone in india to use?

    Yes. But if it ever needs service, it will have to be sent back to someone in the UK. The warranty is not international.

  • A warning popped up on my ipod touch saying someone else has accessed my account from another device

    Was I hacked? While playing my ipod touch app dragonvale a warning poppoed up that said someone else has accessed my account from another device? What do I do?

    Change your password.

Maybe you are looking for