Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

Hoff

macrumors regular
Original poster
Jan 24, 2018
181
29
On my MacBook Pro 2015 using Firefox I got one of those pop up ransomware type things where the siren is going off and the voice saying "Do not shut down your computer you will lose all your data." Locking everything up and trying to take my Mac hostage.

I couldn't close the windows and didn't know what to do so I shut it down anyway.
I was able to turn it on with no programs running. Then I turned off wifi, opened Firefox, closed all the tabs and deleted the Cache.
I haven't gone online with it since. I'm a little bit afraid to.

Now I want to re-format and re-install the OS (Been planning to do that anyway) just to be safe.
But first I want to back up all my data.

Is it possible a virus or similar problem would be in my files somewhere, and if I back them up it will just carry over to the new installation?


Should I scan it with something like Malwarbytes first?
Is that good enough?

(I'm not a computer tech guy and I use that word virus to describe anything malicious on my computer that you wouldn't want there)
 
On my MacBook Pro 2015 using Firefox I got one of those pop up ransomware type things where the siren is going off and the voice saying "Do not shut down your computer you will lose all your data." Locking everything up and trying to take my Mac hostage.

I couldn't close the windows and didn't know what to do so I shut it down anyway.
I was able to turn it on with no programs running. Then I turned off wifi, opened Firefox, closed all the tabs and deleted the Cache.
I haven't gone online with it since. I'm a little bit afraid to.

Now I want to re-format and re-install the OS (Been planning to do that anyway) just to be safe.
But first I want to back up all my data.

Is it possible a virus or similar problem would be in my files somewhere, and if I back them up it will just carry over to the new installation?

Should I scan it with something like Malwarbytes first?
Is that good enough?

(I'm not a computer tech guy and I use that word virus to describe anything malicious on my computer that you wouldn't want there)

Pretty sure you have no virus. Websites pop those things up to trick you. They can also prevent you from closing browser windows. I wouldn’t worry.
 
  • Like
Reactions: Hoff
Pretty sure you have no virus. Websites pop those things up to trick you. They can also prevent you from closing browser windows. I wouldn’t worry.

Ok, thank you.
Unfortunately I did also manually type in a spoof website that was texted to me claiming to be Amazon. Then Amazon said it wasn't them. So concerned about that too.

Also I had clicked on some pics online that seemed dodgy after I clicked them. Then the ransomware thing came a couple hours later.

Would it be enough to back up all my files to a jump drive, then use Malwarebytes to scan that jump drive before adding them back to the fresh OS install?

Or should I do something else to make sure it's safe?
 
Ok, thank you.
Unfortunately I did also manually type in a spoof website that was texted to me claiming to be Amazon. Then Amazon said it wasn't them. So concerned about that too.

Would it be enough to back up all my files to a jump drive, then use Malwarebytes to scan that jump drive before adding them back to the fresh OS install?

Or should I do something else to make sure it's safe?
if you are going to scan you should scan the hard drive, not a copy of it.

And when you typed in the spoofed website, those websites are not trying to install malware - they are trying to get you to enter your user name and password (for example for amazon) so they can hack your account.
 
  • Like
Reactions: Hoff and TiggrToo
On my MacBook Pro 2015 using Firefox I got one of those pop up ransomware type things where the siren is going off and the voice saying "Do not shut down your computer you will lose all your data." Locking everything up and trying to take my Mac hostage.

I couldn't close the windows and didn't know what to do so I shut it down anyway.
I was able to turn it on with no programs running. Then I turned off wifi, opened Firefox, closed all the tabs and deleted the Cache.
I haven't gone online with it since. I'm a little bit afraid to.

Now I want to re-format and re-install the OS (Been planning to do that anyway) just to be safe.
But first I want to back up all my data.

Is it possible a virus or similar problem would be in my files somewhere, and if I back them up it will just carry over to the new installation?

Should I scan it with something like Malwarbytes first?
Is that good enough?

(I'm not a computer tech guy and I use that word virus to describe anything malicious on my computer that you wouldn't want there)

If you really were hit by ransomware then you'd know.

This was an opportunist - either there to flog you some useless "protection" or steal your payment card info etc.
 
  • Like
Reactions: Hoff
And when you typed in the spoofed website, those websites are not trying to install malware - they are trying to get you to enter your user name and password (for example for amazon) so they can hack your account.

Yes. On my iPhone it took my to what looked like Amazon log in page.
On laptop it took me to a blank screen 🤷‍♂️
 
What I'm wondering is, is it safe to plug in a USB hard disk to back up my files?

All my old files are already on that external hdd, and I'd hate for a virus (or any malicious computer type thing) to also infect that.

Will the externall hdd be safe? Or how would I figure that out? Thanks
 
What I'm wondering is, is it safe to plug in a USB hard disk to back up my files?

All my old files are already on that external hdd, and I'd hate for a virus (or any malicious computer type thing) to also infect that.

Will the externall hdd be safe? Or how would I figure that out? Thanks

If you want to be sure you need to run antivirus on your main drive before you do anything.

But it sounds like you have two issues:

1) some website used javascript tricks to fool you into thinking you have a virus. You likely have no virus.

2) you fell for a phishing attack, and typed your amazon info into someone else’s fake website. That’s your real problem, because now someone can buy stuff with your amazon account, perhaps.
 
Download MalwareBytes and run it:

IMPORTANT:
Select the "home" option.
It's a FREE download

IMPORTANT:
You DO NOT NEED TO BUY A SUBSCRIPTION to run MalwareBytes.
It will run FOREVER IN FREE MODE.

When you open it, IGNORE the button to "Upgrade Now" or "Activate License".
Just click "Scan".
Again, you DO NOT have to buy the pay-for version!
 
if you are going to scan you should scan the hard drive, not a copy of it.

And when you typed in the spoofed website, those websites are not trying to install malware - they are trying to get you to enter your user name and password (for example for amazon) so they can hack your account.

Thanks - I scanned the whole hard drive.
Luckily I stopped short of entering my info. It seemed a bit phishy so I closed it.

Download MalwareBytes and run it:

IMPORTANT:
Select the "home" option.
It's a FREE download

Thanks - I ran it. No threats detected.

Phew!
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.